last executing test programs: 2m53.980911354s ago: executing program 32 (id=210): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe56, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) (async) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) (async) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) (async) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000200), 0x4) (async) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80, 0x0) (async) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x88000, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r7, r5, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x3) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x11a, 0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x40, 0x11, 0x0, 0x7a68, 0x0, 0x7ff, 0x0}) 2m11.685765048s ago: executing program 3 (id=407): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="724c8000000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRESOCT=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000200), r2) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_EXPECT_TIMEOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd"], 0x0) 2m11.511444282s ago: executing program 3 (id=410): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) (async) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001680)={0x0, r0}, 0x8) (async, rerun: 32) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') (rerun: 32) pread64(r5, &(0x7f0000000080)=""/59, 0x63, 0x73) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0xc, [@var={0x9, 0x0, 0x0, 0xe, 0x3, 0x2}, @fwd={0x3}, @union={0x3, 0x3, 0x0, 0x5, 0x1, 0x0, [{0x1, 0x1, 0x4}, {0xd, 0x1, 0x5}, {0x8, 0x5, 0xb7ceacd}]}, @var={0xd, 0x0, 0x0, 0xe, 0x3, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xd, 0x2}, {0x2}, {0x4, 0x2}]}, @enum64={0xa, 0x8, 0x0, 0x13, 0x1, 0xe, [{0xc, 0xfffff800, 0xffffffff}, {0xb, 0x6, 0x2}, {0x3, 0x10000}, {0x5, 0x1, 0x5}, {0x9, 0x4, 0x1}, {0xd, 0x3, 0x8}, {0xd, 0x8000, 0x8}, {0xf, 0x1, 0x8}]}, @const={0xc, 0x0, 0x0, 0xa, 0x4}, @restrict={0xf, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x61, 0x2e, 0x0, 0x2e, 0x0, 0x61, 0x2e, 0x30, 0x0, 0x5f]}}, &(0x7f0000000640)=""/4096, 0x128, 0x1000, 0x1, 0x8ab5, 0x10000, @value=r4}, 0x28) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newchain={0x44, 0x64, 0x22d, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0x8}, {0x3}, {0x7, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xffffffff}]}}, @TCA_CHAIN={0x8}]}, 0x44}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x63f, &(0x7f0000001d40)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @remote, @void, {@mpls_uc={0x8847, {[{0x2}, {0x400}, {0x81, 0x0, 0x1}], @ipv4=@esp={{0x13, 0x4, 0x2, 0x6, 0x625, 0x66, 0x0, 0x7, 0x32, 0x0, @broadcast, @rand_addr=0x64010101, {[@timestamp={0x44, 0xc, 0xff, 0x0, 0x8, [0x0, 0x3]}, @timestamp_addr={0x44, 0x24, 0x9c, 0x1, 0x7, [{@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x7}]}, @cipso={0x86, 0x6, 0x3}]}}, {0x4d2, 0xb882, @basic={0x0, 0x0, 0xbc, [@ipv4=@udp={{0x9, 0x4, 0x3, 0x4, 0x46, 0x67, 0x0, 0x9, 0x11, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0xa8, 0x3, 0x4, [{@empty, 0x2}]}, @noop, @noop]}}, {0x4e23, 0x4e20, 0x22, 0x0, @gue={{0x1, 0x1, 0x3, 0x7f, 0x0, @void}, "308bf1bab70bc7702cffc2bae6b2ba6436b6917dab3a"}}}, @ipv6=@icmpv6={0x2, 0x6, "64e703", 0x4f0, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, {[@hopopts={0x6c, 0x7, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x18, {0x2, 0x4, 0x7, 0xff4f, [0xac02, 0x10]}}, @pad1, @ra={0x5, 0x2, 0x9f49}]}, @hopopts={0x20, 0x12, '\x00', [@generic={0x4, 0x7, "126641e9e17f64"}, @calipso={0x7, 0x20, {0x2, 0x6, 0x4, 0xc, [0x4, 0x1, 0x9]}}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xa7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @calipso={0x7, 0x48, {0x1, 0x10, 0xf, 0x5, [0x40, 0x400, 0xfffffffffffff800, 0x4, 0xfffffffffffff177, 0x4, 0x9, 0x0]}}]}, @routing={0x2c, 0xc, 0x2, 0x6, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0x16}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010101}]}, @srh={0xc, 0x4, 0x4, 0x2, 0x60, 0x0, 0x7, [@mcast1, @mcast1]}, @hopopts={0x1, 0x1c, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x2f, "faa2addc8b357bc39aa43ef9ec3ff1ac1fcad7e093f7f74b8b6593ec1f45d7f34db5da1b59224a990cd9bb9aa538ab"}, @generic={0x90, 0xa1, "20d3e6ef39912d0ea806d6fca591d1d0cd55d8bb07bf80d6becec03e440e2ca6feebcce164edbbd0dd6797641b9a54bd31f8cc12849cca98026f50785e27a82e419cd36198fd428e36ab3dc9a01784b2d6a07cac3217e7e6a163c714c7d54b5532b6e934d2df569a74463e7b366722cf2b1c9c843cdf050913b25bf7b2fa9c8412bcb1103afa275ad529c462ef2543ca211927ab4fe759a0aeb88182baa862d8ad"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo]}, @routing={0x7, 0xe, 0x0, 0x7, 0x0, [@rand_addr=' \x01\x00', @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @empty, @private2, @mcast2]}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private2, @mcast2, [{0xe, 0x1f, "e0b5a318b88d8ea8436d323282b11aa22a96ecca3e6040d7b7db53f03df9e4070c72c560acf551ffbcacf70b4a92160cbf7e75ca3e22e1e6806b5a25bc5c8639bb1b6a8d6049abe6779ed42b06a829f1b51da9c53697715f51dcffda74fe3f2c6fb5107342cb821b5f088a7f9c1778f8ad58ec88bee22ac876bee74e88ef00be864f135d9e1cafd6800d428110034b0a1ed7e2cd204293a1a17ff063c4f4a0bb8e2442070c3e06818dcbd34c6164537c7187fb534b7c97968320bd52cf9401747540b05b54157c769ba127712cd1d5554979080cadca3c8a6bdeb1e8d6d6b406f7fc9acc54ab7284009ba1af583b314b03b86874609a93"}, {0x2, 0x18, "f0227a8048c0f288f24af44571abbdc2199464dcb9d52171311cad88ddee8f6841ccd0cb16022f94a75f5231135a8e576df486b5e8fdfbdb7090f63db69936fcf6b1e0e39f116cc18aae477a6d8ba0fdb0a93b14d6758dd8f95585a112440dd64f8705115b339ca96638913338cc396ca10ce73345b1b504139b507037c3923f1ced37c76e963197ea8829b442a04c3b44bfdd261eb42ef7f2d9e0ce4d20c71edb9b4d7a6f5041f5c871d43d74e188610782d667cbeee21f91f0dd220a770563494a"}, {0x2, 0x5, "97d2c94d6c548f31252f75bab3bbe7c277e4a8933725635132dbe908a471bb06494e4e471deeece3fe"}]}}}, @runt="5f8af19775949d2746f196b1dbe004843a231dc373418e7874c14e8214ae26749b0f719707a2bd39d76e8bbcfa7e16d833b6b423bdd0aebd1ed3d7b0", @runt="7895d868052123997608dfee27e0e319d04fa18333ed55626340db2558612866b9ac1e1cb9ce", @runt="4abca88af0b8ef2e1a"]}, "f2d4", 0x2}}}}}}, &(0x7f0000001d00)={0x1, 0x4, [0x245, 0xe5f, 0x2bb, 0x32c]}) (rerun: 32) 2m11.074841591s ago: executing program 33 (id=412): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @empty}]}}]}, 0x48}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0x20) (fail_nth: 1) 2m11.067201516s ago: executing program 3 (id=414): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r2, 0x401, 0x70bd25, 0x4, {{}, {}, {0x4c, 0x18, {0xb227, @media='ib\x00'}}}}, 0x68}}, 0x4000040) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001780)=""/70, 0x0, 0x9000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)={0x80000000000031c}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040)) 2m7.396915358s ago: executing program 3 (id=420): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000540000000000000070000007b1110000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001640)={0x9, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@fd={0x4, 0x2, 0x4, 0x1, 0x400, {}, {0x2, 0x0, 0x1, 0x4, 0x10, 0x0, "e27d63fd"}, 0x521, 0x4, {}, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x52, 0x1, 0x3, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x148) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}]}, 0x28}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r7 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) fgetxattr(r7, &(0x7f0000000440)=@known='user.syz\x00', &(0x7f0000000480)=""/83, 0x53) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file1/file4/file7\x00', 0x1030030, 0x0, 0x49, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r8, &(0x7f0000000800)='1', 0x1) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./sys\x00', &(0x7f0000000340), &(0x7f00000003c0), 0x4, 0x3) ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000000580)={0x8, 0x6}) 2m6.83134567s ago: executing program 3 (id=424): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) dup(r1) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) close_range(r0, 0xffffffffffffffff, 0x0) 2m6.479336147s ago: executing program 3 (id=428): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00002e1000/0x3000)=nil) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000f2b000/0x4000)=nil) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) r0 = io_uring_setup(0x5b3c, &(0x7f0000000280)={0x0, 0x5199, 0x2, 0x2, 0x3e3}) mmap$IORING_OFF_SQ_RING(0x0, 0x80000001, 0x0, 0x11, r0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001114010000000000ffff010008004a0000000000080001000000000008004b0028"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000180)={'sit0\x00', 0xffffffffffffffff}) 2m6.151880914s ago: executing program 34 (id=428): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00002e1000/0x3000)=nil) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000f2b000/0x4000)=nil) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) r0 = io_uring_setup(0x5b3c, &(0x7f0000000280)={0x0, 0x5199, 0x2, 0x2, 0x3e3}) mmap$IORING_OFF_SQ_RING(0x0, 0x80000001, 0x0, 0x11, r0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001114010000000000ffff010008004a0000000000080001000000000008004b0028"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000180)={'sit0\x00', 0xffffffffffffffff}) 1m59.369700546s ago: executing program 6 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r4 = io_uring_setup(0x53ac, &(0x7f0000000180)={0x0, 0x4c72, 0x200, 0x1, 0x125}) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1m59.051708567s ago: executing program 6 (id=474): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x3, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], &(0x7f0000000300)='syzkaller\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r2, r1, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x4, 0x0, 0x0) nanosleep(0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007d123d57d108d222609e", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b400, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000080)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r7 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, 0x0, 0x0) r8 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000040)="6d4dd448215254c1f3d4363b09fbe68b38cdb3ea8e3547a0a766cbc0f9c7675b4f811d3075d9f2c24e9859442c70621633c04cc9ba5567cedaf1395124f9be2d57d831dccf70e9f1892cd8169c2b943b", 0x50}], 0x1) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f00000005c0)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, 0x0, 0xc1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) chdir(&(0x7f00000001c0)='./bus\x00') 1m43.979647618s ago: executing program 35 (id=474): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x3, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], &(0x7f0000000300)='syzkaller\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r2, r1, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x4, 0x0, 0x0) nanosleep(0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007d123d57d108d222609e", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b400, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000080)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r7 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, 0x0, 0x0) r8 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000040)="6d4dd448215254c1f3d4363b09fbe68b38cdb3ea8e3547a0a766cbc0f9c7675b4f811d3075d9f2c24e9859442c70621633c04cc9ba5567cedaf1395124f9be2d57d831dccf70e9f1892cd8169c2b943b", 0x50}], 0x1) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f00000005c0)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, 0x0, 0xc1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) chdir(&(0x7f00000001c0)='./bus\x00') 57.097014844s ago: executing program 2 (id=878): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x300}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xb}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004090}, 0x8000054) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x810018}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)={0x318, r4, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa0d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NODE={0x200, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd7, 0x3, "d1cd997669ee88a266c2b45f5ed312b67f7db1da03d6721825c41a318eb23f44ee7a02d35656b7153bfc92894869acca0bc04147d6b585cce32196599a70f6494c2f8193b4594fdedc6356731f615d54cd06e7bdf43f361a376e0b005c34d602380fac91218003250854f0e0c0daa3902e423ef0e4c5e27462b5fc51e67ff29d9506044ce434cdbadf57bc25173f0ccf994fecbcac17177c5e47ad1a5bb3a470c596ae697adf020046c746a53853a467477d03e567115c2a37221881095108cb762e3f10805d05991cb2f8866b19815262256a"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "6cb33bf6603ef39d64e108c480ab557a27264208e8902402"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "a211a7318a98c05ad82f217efdfecbcb0b4f17626d1e947b4bd6"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf8e}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "838d241c032f0725203bc4605714c62e7eba1888a156dae3f522c441d08291"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "a1ac86bba343dd890c0ed44bf96b01b7e8015aa1e16ab91ba1c731fa216b13658f"}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}]}, 0x318}}, 0x4008050) (async) setsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000740)="5607db962c8f6acebd89cef3260a42140835655daa4585426341bca60ced8bf73555ef55404f7fa3ea037c7df01587be8c40d56ebc22a21d50dc8047e05be6f9c27a143cedc573c1ea0b8bb140c4b50f0574536a914ae981f9cf8e372d0c6328d1fde73ad71c17ec613151d846e411a614a3", 0x72) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r0, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x40000004) (async) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f00000008c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000900)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0xb830, 0x5}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000980)={0x48, 0x6, r6, 0x0, r7}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000a00)={r1}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r8, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r9, 0x600, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8811}, 0x40) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000c40)={0x18, r6, 0xa, 0x0, &(0x7f0000000b80)=[{0xffffffffffffcf98, 0x5}, {0x9, 0x3}, {0xe6}, {0xe, 0x9}, {0x800000000000, 0x2}, {0x151, 0xffffffffffffffff}, {0x1, 0x2}, {0x400, 0xed94}, {0x653, 0x30b}, {0x2, 0x8}]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000cc0)={'gre0\x00', &(0x7f0000000c80)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x1, 0x7, {{0x8, 0x4, 0x0, 0x7, 0x20, 0x66, 0x0, 0x1, 0x2f, 0x0, @remote, @loopback, {[@timestamp={0x44, 0xc, 0x36, 0x0, 0x2, [0x9, 0x4]}]}}}}}) setsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000d00)={r10, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}, 0xc) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000d40)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x7}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r3) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400402}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0x8c, r11, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xc0}, @NL80211_ATTR_IE={0x67, 0x2a, [@mesh_chsw={0x76, 0x6, {0x37, 0x5, 0x26}}, @ssid={0x0, 0x6, @default_ap_ssid}, @tim={0x5, 0x51, {0x4a, 0x6e, 0x9, "7a3734c68a3bb810810037b103e04baf1e78fc7dd6066c36844578cc6dee0481b2e6a7efc57ce4b31422d9c9a489f219e09b61e2f7f6ccecc6d2595f41789c1624ec03a00040a9acada04ab35286"}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200c000}, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001000)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000fc0), 0x2, 0x8}}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000001380)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f0000001080)={0x298, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x97}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "2ca89078d33acff7d2bb154a94fcbe4ab297524ac31fa2b0117ce9357b9e92aa199c24"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x953, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000}, 0x24004085) (async) r12 = syz_open_dev$evdev(&(0x7f00000013c0), 0xa305, 0xe901) ioctl$EVIOCSABS20(r12, 0x401845e0, &(0x7f0000001400)={0x8, 0x7ff, 0x7fffffff, 0x1, 0x75, 0x3}) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f00000015c0)={0x28, 0x1, 0x0, r6, 0x0, 0x0, 0x0, 0xc8, &(0x7f00000014c0)="7bd0a54f1fba6a7d2c44c90ccd9e23ba641a4f861c69d34fd66040b7c9df69f218f97ecef1d76251f9f04a0e2b5b0fd25d81f83b1b8776fad44dd41ff393fba3b3ebfeb97b32168782a8f2cbc27a73748d153e1ac79340eb624dc334b497be7014222448fed0bada369f02b5fea155bc01b250a24ab575855a097e09f6fac1aa175b9d84e0d20d77927a2caddbd361cb441dc0e8617a1c85b1360a8a8b9de91c94f2d3922b65d800528b840399d9866e89a61f513fc114397c46110e41d0c91bfc9fb89b22230b02"}) 56.711206337s ago: executing program 2 (id=883): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/10, 0x2}, 0x20) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(r3, &(0x7f000000dd80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000000400)=[{0x0, 0x700}, {&(0x7f0000000200)="97", 0x1}], 0x2}}], 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {0xf}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x800) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) socket$l2tp(0x2, 0x2, 0x73) (async) sendmmsg(r3, &(0x7f000000dd80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000000400)=[{0x0, 0x700}, {&(0x7f0000000200)="97", 0x1}], 0x2}}], 0x1, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {0xf}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x800) (async) 56.179358175s ago: executing program 2 (id=889): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_delete(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000780)=0x1, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0xc4, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0x10, 0xffff}}, [@TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x81ca, 0x6, 0x2, 0x7, 0x4, 0x3}}, {0xa, 0x2, [0x9de9, 0xf84c, 0x59]}}, {{0x1c, 0x1, {0x4, 0x28, 0x81, 0x9, 0x2, 0xf, 0x2, 0x1}}, {0x6, 0x2, [0x97e3]}}, {{0x1c, 0x1, {0xf, 0x9d, 0x7ff, 0x7fff, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x100, 0x8000, 0xdce, 0x6]}}, {{0x1c, 0x1, {0x0, 0xc6, 0x2, 0x6, 0x0, 0x3, 0x9, 0x3}}, {0xa, 0x2, [0xb6, 0x8, 0xfffc]}}]}]}, 0xc4}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0x3) syz_genetlink_get_family_id$devlink(0x0, r7) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x10040) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0b080045000028006700000206907864010001ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2b595dc466f00"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x0, 0x4, 0x1, 0x22, 0x0, 0x64, 0x0, 0xc, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, {[@cipso={0x86, 0x0, 0x1, [{0x7, 0x0, "8a305aaf51118c20b64ea03f3095ce"}, {0x5, 0x0, "5045760ab88601ac52"}, {0x7, 0x0, "236c1aeb635ce0f5dc1608"}, {0x2, 0x0, "98a2"}, {0x6, 0x0, "6c19ea2604eb305d97a373998b3e"}, {0x5, 0x0, "9f5ed424af"}, {0x5, 0x0, "5509cd2bb169"}]}]}}, "e9aed74518e551b826e5fb2049052da09efec84141be994b53c5942dfbf4deae366cdd852d2df25a"}}}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 55.88201147s ago: executing program 2 (id=892): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000002c0)={[{@nodioread_nolock}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@nojournal_checksum}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@journal_ioprio}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}]}, 0x0, 0x485, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1214040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x7fe81e5246626bb5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/kernel/kptr_restrict\x00', 0x1, 0x0) write(r2, 0x0, 0x0) lseek(r1, 0x101, 0x1) getdents64(r1, 0xfffffffffffffffe, 0x4a) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000000)={0x2, 0xfffffffffffffffe, 0xffffffff, 0x3, 0x2caddda0}) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) 55.605809103s ago: executing program 2 (id=897): r0 = socket$inet_udp(0x2, 0x2, 0x0) flistxattr(r0, &(0x7f0000000200)=""/4, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r3 = dup(r2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) r6 = dup3(r5, r4, 0x0) read$FUSE(r6, &(0x7f0000003240)={0x2020}, 0x2020) recvmmsg$unix(r6, &(0x7f0000000480)=[{{&(0x7f0000000280), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000300)=""/240, 0xf9}], 0x10000206, &(0x7f0000000440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)=""/60, 0x3c}], 0x1, &(0x7f0000000240)}}], 0x2, 0x2000, &(0x7f0000000500)={0x77359400}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700100004000000080000100f4df3ed0500657d", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) recvfrom$inet(r7, &(0x7f0000000040)=""/181, 0xb5, 0x40000100, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x13, 0x0, 0x2f477e94) close_range(r1, 0xffffffffffffffff, 0x0) 55.435387033s ago: executing program 2 (id=899): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary='1'}]}]}, 0x2c}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary='1'}]}]}, 0x2c}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000240)="a0904d937d13d4bab9f567dbcdc9d021acb1331a3ea37d394ffe67f0396bbedd65810ed7c3b7712342cad34e428068c26c7de8fa62c7022785836a", 0x3b, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000240)="a0904d937d13d4bab9f567dbcdc9d021acb1331a3ea37d394ffe67f0396bbedd65810ed7c3b7712342cad34e428068c26c7de8fa62c7022785836a", 0x3b, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0xffffd000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80880) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000500)={&(0x7f000097c000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/200, 0xee, 0x1, &(0x7f0000000380)=""/82, 0x63}, &(0x7f0000000540)=0x40) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e25, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="04", 0xffffff91}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) 55.269443897s ago: executing program 36 (id=899): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary='1'}]}]}, 0x2c}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary='1'}]}]}, 0x2c}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000240)="a0904d937d13d4bab9f567dbcdc9d021acb1331a3ea37d394ffe67f0396bbedd65810ed7c3b7712342cad34e428068c26c7de8fa62c7022785836a", 0x3b, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000240)="a0904d937d13d4bab9f567dbcdc9d021acb1331a3ea37d394ffe67f0396bbedd65810ed7c3b7712342cad34e428068c26c7de8fa62c7022785836a", 0x3b, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0xffffd000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80880) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000500)={&(0x7f000097c000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/200, 0xee, 0x1, &(0x7f0000000380)=""/82, 0x63}, &(0x7f0000000540)=0x40) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e25, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="04", 0xffffff91}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) 47.593841744s ago: executing program 7 (id=941): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x884) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$nfc_llcp(r3, &(0x7f0000001780)={&(0x7f0000000140)={0x27, r5, 0xffffffffffffffff, 0x6, 0x81, 0xb7, "b354a7af8e5ffa1ce651df9430734252a406fd0072ad62b78a2366383bf6ee669e6b57c3de83a6765a65d96db54363b2baf5df78696d72a09874245f86019f", 0x1a}, 0x60, &(0x7f0000001640)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="2f33f02b40f0b2e3b08c5c3f115264d11dbe1ca65b5b08ce5ce4a7ba1084e7654466a53327a032c66c6c57b090a2a03f5795b56ea4cd9126126921e903d3e239ff86424369707ad1a3c15047acbe7919eea743d465e9d51f7342eeaf5bc82ee12bc88a4bdb4525938d288c4206f1604f0a", 0x71}, {&(0x7f0000001480)="b27adbc92c1d0ece0260c0eb9d8f9a3e266fd9c70d7b5bd36040c578e7555fdaf8e6709c167c1338bb7f7b13012eaa0b703b367304c4ea1970b350e106b7894a345d1d060133f370268c6cff3fa9b5e9017546ff692d3da4a17e0e9f6492366538b63b7ac6dcf68ac97e46582fa89955c0b0fe460d3733e493ff28a6f22325389ef4dbc7a46d2f2582ac91f072db0f79a637b25266932723b43f7bacd7d46903b6a12abd12e5d92984a6bc3f64fdbe246f1f4248573bd087", 0xb8}, {&(0x7f0000001540)="d03c4423dab05fedc84fce1b1f1e5f2da34163daa21b50a9d90a9a9b7fe774b1a3ff3f54eb04388d2bab8590f5430fccda7e08d810e4a04f4b6b7278cd4f1fa898ad6ca81500db9a820e3f11f3d862f568d4989b271469c7fe5f89d3bf4932769e561414a54dc8aeec63a4c3768f8efcb2af58954fb02b5c8ca856cd6e8a0dca209ef44232beece53a988c5ccef41a3c3eb68bb5629bc7d33ef2cb2f720752c38abc6693c8bbd8347b1785a0aefec54d9425feeb7eb5e1", 0xb7}, {&(0x7f0000001600)="4d97e67cdd6215ba1a65073fbfba9283f010ce8f079dde0e92a387becf8b309e382e3626a5d783110deca12256f4e7d0c070e973482446092de28e4d19", 0x3d}], 0x5, &(0x7f00000016c0)={0x90, 0x102, 0xfffffff7, "dd70edc3e01828facf726a311c8d9a57ede03ac6c12c83f89e7d5211c710f0f7de238ff71b6e30e26f65e3e6e1d6ef6a94dbb61c3eb807c5a147a8e0ea989bae346ced6eab30132c89523784edff539fd0b532a107ef66efa19678a14cfe890740f5a590da688073d6932c6b762498587e15c89952aeb4ec70"}, 0x90, 0x90}, 0x891) 47.589667065s ago: executing program 7 (id=948): r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000500)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000300)="450000280000400040063ccd7f0000027f000001303900150000000100", 0x1d, 0x0, 0x0, 0x0) 47.498184439s ago: executing program 7 (id=949): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./sys/file0\x00', 0x0) 46.268790935s ago: executing program 7 (id=953): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f00000002c0)={[{@resuid}, {@jqfmt_vfsv0}, {@minixdf}]}, 0x5, 0x50c, &(0x7f0000001640)="$eJzs3U9sG1kZAPDPdpJN2izdXRDaXSS20iKVP2qcP0KbABLiBBwqISpxAamExA0lTh3FTmmiSqRw64EDAoGEOHDnwpULPVFVQpxBXDmhVlCCVFCRBnnsSZ3ETlya2Gzm95Ncz/i5/t5z8r08v3njCSC3Ljb/KURMRsQfIuJCa3f/Ey627naf3Flq3gqRJFf/Vkif19zPnpr9v/MRsRMR4xHx1S9GfKtwOG59a3t1sVqtbLT3y4219XJ9a/vyjbXFlcpK5ebM/HsLC/PTc7MLJ9bWez/8zr0rv/ny2K+e/uDRgx/97rfNak22yzrbcZJaTR+N1zseG4mIz51GsCEotdszMeyK8D9p/vw+GBHvpvl/IUrpT7M/z061ZsBpS5Ik+U/ySq/inQQ4s4rpGLhQnIqI1naxODXVGsN/KM4Vq7V641PXa5s3l1tj5dditHj9RrUy3f6s8FqMFpr7M+n28/3ZA/tzEekY+MeliXR/aqlWXR5sVwcccP5A/v+z1Mp/ICf6/8gPnDXyH/JL/kN+yX/IL/kP+SX/Ib/kP+SX/If8kv+QX535n53I9eqQ6gIM1lF//8cGWA9goL5y5UrzlmTnvy/f2tpcrd26vFypr06tbS5NLdU21qdWarWV9JydteNer1qrrc98OjZvlxuVeqNc39q+tlbbvNm4lp7Xf60yOpBWAf14/Z37fypExM5nJtJbdPzJl6twtiVJIYZ9DjIwHKVhd0DA0Dj0B/n1Ap/xe35JGPD+1uUreveMn+9Z9PlYP/aVdn/9EvUCTk/xqMJnDwdXEWDgLr3l+B/klfl/yC/z/5Bfx4zxDQ8gB46a/4/2tfy6OjT/38PTF6sPcPqOnP8HzrTJLtf/SpLke692XLtrOiI+EBF/LI2+kl3rCzgLin8ttMf/ly58bPJg6VjhX+kcwFhEfPfnV396e7HR2JhpPv73vccbP2s/PjuM+gO97Z/hy/I0y2MAIL92n9xZym6DjPv4C61FCIfjj7TnJsfTEcy53cK+tQqFE1q7sHM3It7sFr/Qvt5568jHud3SofhvtO8LrZdI6zuSXjd9MPHf6oj/0Y74b7/0uwL5cL/Z/0x3y79imtOxl3/7+5/JE1ofnfV/2ZrrzvhZ/1fq0f+902eMb//i+90O76aLvR/fjXi7a/+bxRtPYx2M36zbpT7jP/rG1z7cqyz5Zet1usXPNLfKjbX1cn1r+/KNrBbz7y0szE/PzS6U0znqcjZTfdhn3/z9g17xm+1v69H+Px9q/0S7Tp/os/3//sjDr188Iv7H3+3++/dGen/g/U+SvTp8ss/4/5j9yzd7lTXjL/d4/4vd4kdWGjHXZ/z6T77k3GEA+D9S39peXaxWKxtdNkZ7F9mwYWPQGyMxwKDH9Rw7g+mggFPzPOmHXRMAAAAAAAAAAACgX71W/94/weXEw24jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBZ8N8AAAD//6rz1eo=") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000197ab56e"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r2 = socket(0x11, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@setlink={0x48, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x34702, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}]}, 0x48}}, 0x24044804) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000008c0)={&(0x7f00000004c0)="3c368ac80cb8fe6826809842ded834fd1b531c0707d56357d37b5826effd6c1c6c22ff98358cccaa269d3c5a4707a0aaec2c47768c29cf3d8e264b9b81b0edcf85152cfa700b89cb907525a3eb5b07688d1a84d406bfbf698b8b80185cb9aad15390eb67407d03b123060f5a88c333c9870fa0b58ca890ed9686d986842ae63d057ee839fb685d92400a7ddc4a969846863b063d63296b5a0435bd620aae8e0c2b42f1f780ec57f9a675d604627a70da1ac709b62db40c8284f46c93a4d241422b76f60a87e2f8ead6f10a7f2d5bae6b1e37f271d47b166653b49d6dbbccd64574", &(0x7f00000005c0)=""/150, &(0x7f0000000700)="e1e705b2fddfbfedcc58ad9904f17516971012de4abc309dee02a760aaa07db45457d57f1b05f79aeaba57bd7e823842cde061c4cdf01533d92bd840234064adaf1dac7dd1cbe8ab2d7ea34a0445eedb02d127fadf855973e600c6a365df476208a4b34a0f18f4c3cea66ae535c202d76ce4d64781eb31bccb61344bd894b31bae4ab287ff641f52064783d4b153fcc2af2b2d048db06f39218349dd75c6cdb2c1e74cdb404d6f667f1b5084fff1292587847c619f0adcf69cc5994e09b877ded4339ca2151d393f83ec11baf7", &(0x7f0000000800)="e48ba1bbf3fb02e23e49f0811a8115aef42e4f5f039474b2456e24942aba87fcd2e1db8b13e763bd88a6bacc378e69bb3849fec804d9e1a199efc6901283c73f2e8345d04e407f0c0471414f8e49e291d63316219ccaed862f71565d767ac031a79f15b71790d311ce774169286f3db3a138eb9d65977264c714883927f04fc03459099d3666cc87b8eb48eba9c24c5ce1ca660fca55c619178c7ba61b2e3689", 0x4, r1, 0x4}, 0x38) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x541b, 0xfffffffffffffffe) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) getdents64(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f00000002c0)={[{@resuid}, {@jqfmt_vfsv0}, {@minixdf}]}, 0x5, 0x50c, &(0x7f0000001640)="$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") (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r0, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000197ab56e"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) (async) socket(0x11, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@setlink={0x48, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x34702, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}]}, 0x48}}, 0x24044804) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000008c0)={&(0x7f00000004c0)="3c368ac80cb8fe6826809842ded834fd1b531c0707d56357d37b5826effd6c1c6c22ff98358cccaa269d3c5a4707a0aaec2c47768c29cf3d8e264b9b81b0edcf85152cfa700b89cb907525a3eb5b07688d1a84d406bfbf698b8b80185cb9aad15390eb67407d03b123060f5a88c333c9870fa0b58ca890ed9686d986842ae63d057ee839fb685d92400a7ddc4a969846863b063d63296b5a0435bd620aae8e0c2b42f1f780ec57f9a675d604627a70da1ac709b62db40c8284f46c93a4d241422b76f60a87e2f8ead6f10a7f2d5bae6b1e37f271d47b166653b49d6dbbccd64574", &(0x7f00000005c0)=""/150, &(0x7f0000000700)="e1e705b2fddfbfedcc58ad9904f17516971012de4abc309dee02a760aaa07db45457d57f1b05f79aeaba57bd7e823842cde061c4cdf01533d92bd840234064adaf1dac7dd1cbe8ab2d7ea34a0445eedb02d127fadf855973e600c6a365df476208a4b34a0f18f4c3cea66ae535c202d76ce4d64781eb31bccb61344bd894b31bae4ab287ff641f52064783d4b153fcc2af2b2d048db06f39218349dd75c6cdb2c1e74cdb404d6f667f1b5084fff1292587847c619f0adcf69cc5994e09b877ded4339ca2151d393f83ec11baf7", &(0x7f0000000800)="e48ba1bbf3fb02e23e49f0811a8115aef42e4f5f039474b2456e24942aba87fcd2e1db8b13e763bd88a6bacc378e69bb3849fec804d9e1a199efc6901283c73f2e8345d04e407f0c0471414f8e49e291d63316219ccaed862f71565d767ac031a79f15b71790d311ce774169286f3db3a138eb9d65977264c714883927f04fc03459099d3666cc87b8eb48eba9c24c5ce1ca660fca55c619178c7ba61b2e3689", 0x4, r1, 0x4}, 0x38) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x541b, 0xfffffffffffffffe) (async) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) (async) getdents64(r1, 0x0, 0x0) (async) 45.387361458s ago: executing program 7 (id=964): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0xc908}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}, @IFLA_MTU={0x8, 0x4, 0x7fe}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x82c707}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8884}, 0x0) 45.110085067s ago: executing program 7 (id=968): socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x2d39, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) (async) r3 = syz_io_uring_setup(0x2d39, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, r3, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x8) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x8) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) (async) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') fchdir(r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x12e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x240441c6) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) 44.903621421s ago: executing program 37 (id=968): socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x2d39, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) (async) r3 = syz_io_uring_setup(0x2d39, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, r3, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x8) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x8) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) (async) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') fchdir(r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x12e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x240441c6) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) 42.498390632s ago: executing program 0 (id=998): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) utimensat(r0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x30, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x2004c090}, 0xc000) accept$alg(r2, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x14, 0x1, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) fchmod(r6, 0x8) syz_io_uring_submit(r3, r4, r5, &(0x7f00000017c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000000140)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000080)}], 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) 42.27490512s ago: executing program 0 (id=1000): mmap(&(0x7f000002e000/0x3000)=nil, 0x3000, 0x3000005, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) 42.197520442s ago: executing program 0 (id=1001): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x5}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r6 = dup(r5) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc14000000478803", 0xd, 0x4, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r10, &(0x7f0000000080)=""/59, 0x63, 0x73) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x60a00, 0x4, 0x3, 0x401, 0x16, 0x8, 0xc}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000200)={r11, @in={{0x2, 0x4e23, @multicast1}}, 0x9, 0x4, 0x932, 0x3, 0x22, 0xcfc5, 0x1}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 41.961064306s ago: executing program 0 (id=1004): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10142, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) write$UHID_INPUT(r0, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0xfffffe69) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 39.775050475s ago: executing program 0 (id=1020): r0 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r2, 0xb, 0x0, @void}, 0x10) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x803, 0x2, 0xfffffffffffffddd, {0x2, 0x4e23, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r4, 0x10000, 0x1, 0xa, 0x5, {{0x12, 0x4, 0x1, 0x2, 0x48, 0x66, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@lsrr={0x83, 0x2b, 0xa9, [@private=0xa010102, @remote, @empty, @rand_addr=0x64010102, @broadcast, @multicast1, @remote, @local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x86, 0x6, "ca956e1d"}]}}}}}) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b940020000090c0016060000000000000074d67f6f9400f7d1d9bbe94fa27100a00774cf93adbb50877c98eba68ff29aa2f7617f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a15007000000000000dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd442", 0xd8}], 0x1}, 0x0) 39.042792887s ago: executing program 0 (id=1025): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r2 = dup(r1) epoll_create1(0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x9) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) socketpair(0xa, 0x80000, 0x6, &(0x7f0000000100)) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x401, 0x5, 0x5, 0x8, 0x14, "6894eb417939a140b6435b4c2eca05aac26f15"}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0xc0000000, 0xfffffffe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6d, 0xfffffffffffffb01, 0x2, 0x9e, 0x1000000000000006, 0x7}}, @TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x0, 0x1}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4040) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x8402) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) setns(0xc9, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r11, 0x0, 0x1, &(0x7f0000000000)=0xab7, 0x4) io_submit(r10, 0x1, &(0x7f0000001300)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x7, r9, 0x0}]) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000080)) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x1}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r0, r2}) 38.523769835s ago: executing program 38 (id=1025): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r2 = dup(r1) epoll_create1(0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x9) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) socketpair(0xa, 0x80000, 0x6, &(0x7f0000000100)) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x401, 0x5, 0x5, 0x8, 0x14, "6894eb417939a140b6435b4c2eca05aac26f15"}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0xc0000000, 0xfffffffe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6d, 0xfffffffffffffb01, 0x2, 0x9e, 0x1000000000000006, 0x7}}, @TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x0, 0x1}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4040) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x8402) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) setns(0xc9, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r11, 0x0, 0x1, &(0x7f0000000000)=0xab7, 0x4) io_submit(r10, 0x1, &(0x7f0000001300)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x7, r9, 0x0}]) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000080)) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x1}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r0, r2}) 21.514097913s ago: executing program 8 (id=1114): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800710, &(0x7f0000000280)={[{@noinit_itable}], [{@smackfsdef={'smackfsdef', 0x3d, 'ex\x044\x00\x9f\x190\xcd\xfa:y\xa3\x17\xfdZ\a%h\xf8\x1aw\xd8 YTu\xbb\x14\xa1\xa8\xa5H\xce\x1b\x9c\x16K\x89\xdfi\xc7\xc4\xdb\xf4\xd9\xa2o\x9e6n\xbb\x17^\x10\xb8\x1dr\xdb\x16h\xf6\xa1\xa2K\xeb{(o\x81U\xcbH\x88\x12\x01B\x91\x01\x009\xab>\xaeJ\x93\x90\xeb\'\x0f\n,\x94\xab\x977~\'\xd8\xb6>\x92,\x8e\xd3\x1a[X\xee\x15\xb2\x97\x8b3\xe30\xf8\x8b\xfe\x89\x06\xa0\xce`P\xb0u\xdd\xd4\xd0\xbb\x89\xc0\xec\xfe\xe4\xcc\x8d\xe8\x97-\xa7\xdf\x9e\xac>N\x83\x93\x94L\xb0\xd8\xc8\xbd\x1at\x81\xbc\xf9J\xa9\xd6\xab\x95\x03R\xa2\xd5\xb9Sen2M\xac7\xfa\xf6\x7f\xe0\xc0\x95\x02\xb4\xe1[\xf8\xde7\xf2/'}}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x101f42, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000300, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x129040, 0x95) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0xb}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000000)=""/97, 0x61}, {&(0x7f0000000440)=""/145, 0x91}], 0x3}, 0x32}], 0x1, 0x122, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES64, @ANYRES16, @ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x20008800) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000003c0)={0x1d, r6, 0x1, {0x2, 0x1, 0x7}, 0xfd}, 0x18) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f00000001c0), 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000001000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a0b080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a30000000004c000000060a010400000000000000000100000208000b40000000000900010073797a300000000024000480200001800700010072740000140002800800024000000003080001400000000414000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x604000, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000400)=0xfffffff9, 0x4) ioctl$sock_x25_SIOCADDRT(r9, 0x89e0, 0xfffffffffffffffe) accept4$packet(r8, 0x0, &(0x7f0000000a80), 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 20.96756756s ago: executing program 5 (id=1115): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x5, &(0x7f0000000800)={0x0, 0x18, 0x2, @thr={&(0x7f00000006c0)="fc70afd63554d460cdf42f06634f97a5de3276db6e3e9a198aaa94343f807090ef4a984a1e8697854e846c9641b0fe9dd3a70e407120a8eda7f28a04f5298d0fa4de23effb067fd2df16237e42a2fe1b6347e2d864cfd201af7d90082c65126df5c9986f8e9d6b7d521729d09a6c36fb7346fa15718973e5ce51c2a50297", &(0x7f0000000740)="d4453743f8f0e740a517bcb9a49e111fb2882d700c1375e1ebfd385949fdeb7eecdbd1edc4194be6639079e14319f60cc4fb31a313e65cc3babe3789550bb0c7e797642e1599fae74fc574b12e803ff93effecc7fafafa94322e6465aba2e9852eff4ce42f9cc5f93d6ac6be28928111895cb6cb35726345f25c5c39841089c9d9933e3529e526bbdd64526b264adf5f38ea99d5bf9a3179b884d251d8531be4"}}, &(0x7f0000000840)) prctl$PR_PAC_RESET_KEYS(0x36, 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={r2, 0x0, 0x3, 0x1}, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000880)={r2, 0x27c, 0x3, [0x8, 0x6, 0x81]}, &(0x7f00000008c0)=0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000680)=0x0) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x4000000025, 0x5, r3}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) syz_read_part_table(0x616, &(0x7f0000000000)="$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") r4 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x24002094) read(r8, &(0x7f0000000080)=""/52, 0x34) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x98, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}}}}]}]}, 0x98}}, 0x4) io_uring_enter(r4, 0x1, 0x1, 0x61, 0x0, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r10, 0x29, 0x21, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 16.731261169s ago: executing program 8 (id=1119): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private1}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x3}], 0x1c) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@noblock_validity}, {@nolazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@nouid32}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000000b00)="$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") symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r1 = openat$vimc0(0xffffffffffffff9c, 0xffffffffffffffff, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0x9, @mcast2, 0x4}, 0x1c) connect$netlink(r4, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0xfa, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6a00000000c4110000000000000000000000ffffac1414bbff0200000000000000000000000000014e1d4e20"], 0x0) sendfile(r2, r2, 0x0, 0x1000000000007) ioctl$MEMGETREGIONCOUNT(r2, 0x80044d07, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x13f, 0x9}}, 0x20) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0xb5, 0x1, 0x5}]}) socket$nl_generic(0x10, 0x3, 0x10) close_range(r6, r8, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtaction={0x48, 0x1e, 0x400, 0xfffffffd, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x20000000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000140)={0x0, 0x0, 0x103, 0x7, {0x7, 0x6, 0x5, 0x25b0}}) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$SNAPSHOT_SET_SWAP_AREA(r9, 0x400c330d, &(0x7f00000001c0)={0xfffffffffffffe20, 0x8}) 16.663155529s ago: executing program 5 (id=1120): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002b80)=""/4065, 0xfe1}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800002feb8644000c0000000c50944f1061e9b262c5e5af30069ab8b800000009000000070000000000000800000000000000000000006100"], 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x10) write(r3, &(0x7f00000004c0)='writemostly', 0xb) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) syz_clone(0x180400, &(0x7f00000003c0)="9a9e9dc7c62486162f36ded6ff36e40d777ee29c5995c94dd7c0547cc579e4692744c6218427d63718d682c5e58e9376f122706a0a2cf72aa7df524f6284e74a80a321a7be4ed48a193f22b8a2950df86443a8ae3fe938719e277deeea1b080b6c73a717b6379d47fe1b6edaa972687692409b21a52d0cb9bc85c2ab2e78b842323f16788780b69c03c7499c81a4c0da3c8af5f7cbec97e256d6b40f0dcfb5938d3ceb8a39078ce0bbe9d9dd3d66310dedf9668674240543", 0xb8, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="ab78ce3b6a19e1aa3f4a0a4036c362db51ca71f8b7523f2f07e1b541236fc9d8ec73a29e987f6b") r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x201000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x28}}, 0x0) syz_emit_ethernet(0x5ee, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffaaaaaaaa0008004503005e00000000002f907800000000e0000001248022eb0002000000007f1a100008000000000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000000000"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @sched_cls=0x37}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r8, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="30677666b8523ac11cc6a0f69c254c9c1c44d53a2532be0ddb72dd0de4c35fb4175950ab75b77e091fa23f76f97d8ed9ebe2505c8a4c99cac765194faddddde39b22f154e7f78ea9263cfd3fa52e58b140ac758248103e046336d612986b9a0820899135c30f82f3aef3975f9ebad8ad2154b176aba5e8d4715d1c7f7f29f6af6f5152ccdfb16631a6f49b63cf6258a5", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000800)=ANY=[@ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="2f0000001800000004000000", @ANYRES32=r6, @ANYBLOB="2506189e8a3c69d16afc1dc40c177ea966cfa6970ef5e8a1395680344c711a706a829aea52f58448cbcc42c8cc1fdf1b0b1f7747322e617f603c178bc655fdb5b07cadd0675de5a5b87c55afbb19798a7e3b735ead4bcb331c7fa09e5be938e692db003f18cfabc7115f5da7ec147fea74779e107c8ed1", @ANYRES64=r10], 0x20) openat(r9, &(0x7f00000005c0)='./sys\x00', 0xac040, 0x24) mq_timedsend(r9, &(0x7f0000003400)="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", 0x1000, 0x3ff, &(0x7f0000004400)={0x0, 0x3938700}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="3100000001000000", @ANYRES32=r3, @ANYBLOB="375591444bcbfa82b949f7581c75f5069f7fc69dd9f9e8ead8c96eb4960beaa58e224fe39ee923fc286381b3795ef8df0c14adcd52b9479d83c1b362ceb6ae6802dc8e4b4cfab0266085c54ebfb22fd60984b69565cb9d3936678afffcd55313b6345102e8df3354f83d1e3921f478685886d897fb4aedac45abeb8fcfd52e8e64d79aa1e9d6cab4a48de86f66509230df0938e997a07cb5d2bf19131dbff9c3f3ff20b07a9e461ce2f9ca1778e38e56c69b75b45a9c79335221277fa721cc34eddbe22f830027b0d0fc6bc44d94233667f90aea", @ANYRES32=r3, @ANYBLOB, @ANYRES64=r10], 0x20) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000300)={0x0, r7, 0x20, 0x2ee, 0x2}) 15.708440996s ago: executing program 4 (id=1123): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r3, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x38, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811000022df4605615ab8461f3f7b92ef28741ab9bd38027f11f7b3d0678f8f16400960c1a4ef9d1c059a98b52b39d802e8d9c821ad9d6352699964813910bf7daadc5f664fdbbd16139773d0806370fcdb48dac253d1ce2aa93e232ab52d50faddfe954e0e467155bc237599ae7b32aeeabe99168fbd6410c16492457235607f6f67f90a42b9fdeeec10fe2480d8a300029ffc0d05452bbf6092c2b45bd5e47ec3a14cb2aeacf92cc45d107727aebeae277b3f8fc1988a0058cc8ed570c76f", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c659900", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a801800048014000680"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a801800048014000680"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x216, &(0x7f0000001480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) 14.279229494s ago: executing program 5 (id=1125): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r2, &(0x7f0000006c00)=[{{&(0x7f0000000540), 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000ac0)=""/64, 0x40}], 0x1}}, {{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000bc0)=""/142, 0x8e}], 0x1, &(0x7f0000000cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000d80)=@abs, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000000e00)=""/141, 0x8d}, {&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/251, 0xfb}, {&(0x7f0000001fc0)=""/4096, 0x1000}], 0x4, &(0x7f0000003000)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000003080)=@abs, 0x6e, &(0x7f0000003880)=[{&(0x7f0000003100)=""/135, 0x87}, {&(0x7f00000031c0)=""/247, 0xf7}, {&(0x7f00000032c0)=""/83, 0x53}, {&(0x7f0000003340)=""/80, 0x50}, {&(0x7f00000033c0)=""/86, 0x56}, {&(0x7f0000003440)=""/255, 0xff}, {&(0x7f0000003540)=""/138, 0x8a}, {&(0x7f0000003600)=""/225, 0xe1}, {&(0x7f0000003700)=""/87, 0x57}, {&(0x7f0000003780)=""/216, 0xd8}], 0xa, &(0x7f0000003940)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000003a40)=@abs, 0x6e, &(0x7f0000006ac0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/4096, 0x1000}], 0x3, &(0x7f0000006b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x5, 0x2100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r4, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r4, 0x5) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005c0000008"], 0x4a) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x2, 0x0, 0x38, 0x8}) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 14.123187828s ago: executing program 8 (id=1126): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_dev$dri(&(0x7f0000000dc0), 0x1, 0xc0000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x2eda56782a6bcfcc}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000100)="ab", 0xfffd, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8000, 0x0, 0x2000, 0x2) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000040)={0x1, "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"}) 12.146265935s ago: executing program 4 (id=1129): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000003000)=0x2a0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@local, @in=@remote, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x1d}, {@in6=@remote, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x0, 0xa, 0x1, 0x0, 0x58}, [@encap={0x1c, 0x4, {0x7, 0x4e26, 0x4e20, @in=@multicast2}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@local, @in=@remote, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x1d}, {@in6=@remote, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x0, 0xa, 0x1, 0x0, 0x58}, [@encap={0x1c, 0x4, {0x7, 0x4e26, 0x4e20, @in=@multicast2}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x84}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x39, 0x65]}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001400)='./file0\x00', 0x200000, &(0x7f0000000280)={[{@block_validity}, {@oldalloc}, {@barrier}, {@stripe={'stripe', 0x3d, 0x8c4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@stripe={'stripe', 0x3d, 0xea4b}}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0xff, 0x55c, &(0x7f0000000440)="$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") (async) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001400)='./file0\x00', 0x200000, &(0x7f0000000280)={[{@block_validity}, {@oldalloc}, {@barrier}, {@stripe={'stripe', 0x3d, 0x8c4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@stripe={'stripe', 0x3d, 0xea4b}}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0xff, 0x55c, &(0x7f0000000440)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat(r4, &(0x7f0000000200)='./file1\x00', 0x509441, 0x11) fallocate(r5, 0x0, 0x0, 0x8ffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r6, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) (async) pwrite64(r6, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) socket$l2tp(0x2, 0x2, 0x73) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r7, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10) (async) getpeername$l2tp(r7, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 12.097563447s ago: executing program 9 (id=1130): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x200400c0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000380)={0x18, 0x0, {0x4001, @local, 'gre0\x00'}}, 0x1e) socketpair(0x18, 0x5, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(r5, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) syz_read_part_table(0x616, &(0x7f0000000000)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) unshare(0x22020400) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000100)={0x0, 0x1, 0x80000000000036, 0xc1b2}) fcntl$lock(r6, 0x6, &(0x7f0000000140)={0x1, 0x1, 0x0, 0x8000000000000}) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r8, &(0x7f00000040c0)={0x2020}, 0x2020) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r9, 0x29, 0x21, 0x0, 0x0) 11.437598478s ago: executing program 1 (id=1131): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000430000042d25070000000c000800070000000000000036810067cf16ca765c11d3db8313bfeca2ad138fda"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x181042, 0x24) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3058009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x4012, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10) lsetxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x1) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) faccessat2(r1, &(0x7f0000001400)='\x00', 0x0, 0x1100) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x3c, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44014}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 10.975228061s ago: executing program 4 (id=1132): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x5) r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$smackfs_ipv6host(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="3078303030303030303030343030303030323a3078303030303030303030303030303931333a3078303030303030303030303030303030333a3078303030303030303030303030303030373a3078303030303030303030303030303031303a3078303030303030303030303030303030373a3078303030303030303030303030303030393a307830303030303030303030303030303034202a284025b15eb98c806873d205060000651068d8b47150ee16d82c6f9258e2b6e58d8e523d327abd6fbbc44a8c39788d7f441c9c32412519eb2cd09761ad35dad24f6726c7db7aefe8ac00"], 0xe3) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x89e0, &(0x7f00000000c0)='lapb0') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r4}) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x4000080) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x401, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x5, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x144, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x5, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x1, 0xd, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x400, 0x5, 0x1, 0x32, 0x6, 0x7, 0x8, 0xfffffff9, 0x1, 0x9, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x3, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@dellink={0x38, 0x11, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_AF_SPEC={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x60, 0x10, 0x300, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x810, 0x220}, [@IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0x9, 0x6}}]}]}, @IFLA_CARRIER={0x5, 0x21, 0xdd}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r9, r10, 0x26, 0x0, @void}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_icmp(0x2, 0x2, 0x1) 10.029264536s ago: executing program 1 (id=1133): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000340)=r0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x8201, 0x2, 0x2, 0x3}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f00000002c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00'], 0x5c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x410, &(0x7f0000000580)=ANY=[@ANYBLOB='nonumtail=0,nonumtail=0,nonumtail=0,shortname=lower,shortname=lower,utf8=1,shortname=winnt,utf8=0,check=normal,codepage=862,check=strict,iocharset=cp863,utf8=1,no\t\x00mtail=0,utf8=0,iocharset=koi8-ru,\x00'], 0x3, 0x28b, &(0x7f00000008c0)="$eJzs3UFrI2UYAOB3mqRJ9JAcPInQAT14Kq2/oFUqiAVByUE9aLEtSCcULASqYuzJX+Av8Pd4Ef/Awl532duWZdlZ0pmkSUmyZEmbsvs8l7583/vOvPPNR3uarz9+0D05PD07vvj9QTQaSaztxE5cJtGOtRj6M6b6//H0cQDgnrvM83iSF+rF0PlkRm1GZXXt1psDAG7F+N//VfcCANyNb7797svd/f29r9O0EdH9q9dJovhZzO8ex8+RxVFsRSueR+QjRfz5F/t7UU0H2vFRt9/rDCq7P/xbXn/3UcRV/Xa0oj29fjstjNX3e51avFPefyeLo6/+iVa8N73+kyn10VmPjz8c638zWvHfT3EaWRyWvQ3r/9hO08/yv5/+9v1gdFCf9Hud+iivzK7c6YsBAAAAAAAAAAAAAAAAAAAAAOCNtpmOtCfP3xke/D9nfs75QP2x83m20jTNkyL/ur4a71ejuspnBwAAAAAAAAAAAAAAAAAAgPvi7PzXk4MsO/plqcHws/6DLHt4YypeTCbXI2LOBT9tFleaca+NRRp7lud5VMrWsiRiseeqRf2q8tXJlQVXrFk8YFKN5b2CZDTSHJ/aGFvMZhHMWd6Fg0ZcBcPddXKQzHu5g6ARy99+gyAvtt/EVGVm1frNkXLbxZTk5py7r7/7Wj3nrRlTSUTURos5/zq15a7hHf0CAgAAAAAAAAAAAAAAAAAARq4/+p0yebGChgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgBa7///8CQb8snpWTVwZBNcqRFT8iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb4GXAQAA//+1wGeE") ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000280)) setxattr$system_posix_acl(&(0x7f0000000300)='./file1\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x2}, [{0x2, 0x2}, {0x2, 0x2}, {0x2, 0x4}, {0x2, 0x4}, {}, {0x2, 0x1}, {0x2, 0x6}], {0x4, 0x1}, [{0x8, 0x5}], {}, {0x20, 0x5}}, 0x64, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f00000000c0)=ANY=[@ANYBLOB="696f636861727365743d63703933322c73686f72746e616d653d6c6f7765722c757466383d312c646f733178666c6f7070792c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c726f6469722c757453383d312c696f636861727365743d85616363726f617469616e2c636f6465706167653d3933362c756e695f786c6174653d312c726f6469722c757466383d312c73686f72746e616d653d77696e6e742c757466383d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d312c00"], 0x1, 0x281, &(0x7f0000000440)="$eJzs3cFqM1UUAOAzyaRJdJEsXInwD+jC1U/rE7RIBbEgKFmoCy02BWlCoYVAVYxd+QQ+gc/jRnwBH0BxZxfiSDqTNCmTaGvaFP/v2/Ry7jm9585Mm9XcfPba8OTo9Pz48utfotVKorYbu3GVRDdqMfVtVPr5t+o4APDEXeV5/J4XmkXoYjGjsaQyrT14cwDAg5j//N90LwDA4/jwo4/f2zs42P8gy1oRw+9GvSSKn8X83nF8EYPox3Z04s+IfKYYv/PuwX6k2UQ33hiOR71J5fDTH8vfv/drxHX9TnSiW12/kxXm6sejXiNeKtffHUT//R+iE69U179VUR+9rXjz9bn+n0cnfvo8TmMQR2Vv0/pvdrLs7fz7P776ZBKd1CfjUa85yyuz6496YwAAAAAAAAAAAAAAAAAAAAAA+F97ns10F8/fmR78v2J+xflA47nzebazLMuTIv+mPo1X00g3uXcAAAAAAAAAAAAAAAAAAAB4Ks4vvjw5HAz6Z2sdTF/rr5iKvxYjzYi4/1rP/n1y0U/Uy9YGScTd1mpE87ryn5Prd9xFe9JP/yxJY323IJlF2vNTz6JYaxJpF4O5yH9evRXXg+nTdXKYRL+28oq1qh6SNQzyisevvrRq63akXe6gIrm9YvWtl+/Vc95ZMpVERGN2MRdz0lt/wo31XsNH+fcDAAAAAAAAAAAAAAAAAADMuXnpt2LycgMNAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAG3Hz//x0G47J4WU5enwzSKCMb3iIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgL8DAAD//xf6Ycw=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) read(r6, &(0x7f0000000400)=""/1000, 0x3e8) 9.437818551s ago: executing program 5 (id=1134): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='pids.current\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0x1000, 0x1}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda26}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000380), &(0x7f0000000580)=r5}, 0x20) r6 = socket(0x28, 0x5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f00000003c0)='h', &(0x7f00000004c0)=@tcp=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x702, 0xe, 0x0, &(0x7f0000000380)="eb00140000000010000000000000", 0x0, 0x3d6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000004000000040000000200", @ANYRES32=0x1], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYRESHEX=r5], &(0x7f0000005d80)='syzkaller\x00', 0x7}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) 8.91398095s ago: executing program 1 (id=1135): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind(r3, 0x0, 0x0) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffffc}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4055}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, 0x0, 0x4054) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000000)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@usrjquota}, {@grpjquota}, {@auto_da_alloc}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbe0, &(0x7f0000000bc0)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) chdir(0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r8, 0x40806685, 0x0) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 7.771410898s ago: executing program 9 (id=1136): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0x8, 0x9}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x14, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x3, 0x3, 0x3, 0x0, 0xa, 0x8, 0x50}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', r2}, 0x18) 6.977506343s ago: executing program 8 (id=1137): set_mempolicy(0x2, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x20e, 0x7fffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3818014, &(0x7f0000000000)={[{@errors_remount}, {@nodioread_nolock}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@nombcache}]}, 0x1, 0x52a, &(0x7f0000000380)="$eJzs3c9vI1cdAPDvTOJtsptiFxAqlSgVLWQrWDtpaBshBOUCp0pAuS8hcaIodhzFTtlEFaTiH0AICRAnTlyQ+AOQqh74A1ClSnBBHBAgEIItHJCATmV7rGYdO0l3EzuNPx/pxe/Nr+97Y/l53ngyE8DEeiIiXoiIqYh4OiKK+fQ0T3HYTe3l3rr7ymo7JZFlL/0jiSSf1ttWexvTEXEjX20mIr7+lYhvJcfjNvcPtlZqtepuXq606juV5v7Brc36ykZ1o7q9tLT43PLzy88uL2S5B2pnqZf5+Ze/8Npnvv3H23+7+Z12tT7/kShEXzvOU7fphc6+6Gnvo92LCDYGvfe8MO6KAABwJu1j/A9GxCc6x//FmOoczfWZGkfNAAAAgPOSfXEu/pdEZAAAAMCVlUbEXCRpOb8WYC7S9Fp+buDDcT2tNZqtT6839rbX2vMiSlFI1zdr1YX8WuFSFJJ2eTG/xrZXfqavvBQRj0TED4uznXJ5tVFbG/O5DwAAAJgUN/rG//8upp386Qb8nwAAAABweZWGFgAAAICrwpAfAAAArr7+8f9rY6oHAAAAcCG++uKL7ZT1nn+99vL+3lbj5Vtr1eZWub63Wl5t7O6UNxqNjc49++qnba/WaOx8Nrb37lRa1War0tw/uF1v7G23bm/e8whsAAAAYIQe+fjrv0si4vBzs50U+X0AAe7x53FXADhPU+OuADA293MX709dQD2A0SuMuwLA2CWnzHfxDgAAvP/Nf/T47/+95/87NwBXm9//AGDyeIo3TK6CEQBMtDQiPtDNPjRsmaG///9m6Cp9sizijeLRKc4vAgDAaM11UpKW83HAXKRpuRzxcERaikKyvlmrLuTjg98WCw+1y4udNZNTrxkGAAAAAAAAAAAAAAAAAAAAAAAAALqyLIkMAAAAuNIi0r8mnbv5R8wXn5rrPz9wLflPMf6SF3760o/urLRau4vt6f/sPMvrWkS0fpxPf+aszwIDAAAAHlhyOHRWd5yevy6OtFYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATIC37r6y2kujjPv3L0VEaVD86ZjpvM5EISKu/yuJ6SPrJRExdQ7xD1+NiEcHxU/i7SzLSnkt+uOnETF7wfFLnV0zPP6Nc4gPk+z1dv/zwqDPXxpPdF4Hf/6m8/Sghvd/aR750U4/N6j/e/jY1uoDYzz25i8rQ+O/GvHY9OD+p9f/JkPiP3lsa//Nsux4jG9+4+BgWPzsZxHzA79/kntiVVr1nUpz/+DWZn1lo7pR3V5aWnxu+fnlZ5cXKuubtWr+d2CMH3zsV2+f1P7rA+L/4ffd/vek9j81bKORd9C5/7955+6HutnCoPg3nxz4/TsTQ+Kn+XffJ/N8e/58L3/YzR/1+C/eePyk9q8N2f+nvf83T2r/EU9/7Xt/OuOiAMAINPcPtlZqteruCZmZMyzzfsz8euZSVOM9ZrLvdt+5y1Kf+820j1bfndJr1SWo2JFMNpJYP/l++3j+2KzZ4WuVRtD2sXZLAADABXj3oH/cNQEAAAAAAAAAAAAAAAAAAIDJ9R5uDDZ1v7cT6495OJ6mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACc6J0AAAD//9kA3nY=") r0 = syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000240)={[{@fat=@errors_remount}, {@numtail}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@utf8no}, {@utf8no}]}, 0x81, 0x2f8, &(0x7f0000000580)="$eJzs3T9vW1UUAPDzHNuxC8IemBAST4KBKWr7CRKhIFVkAnmABSLqSsi2KtmSpRaEk4kdiYnvwNYPwMbCwszCwIrY6IB46P2LHddpXNGkqPr9Fp+8e867f3KTWJbezWdvTkZ378/unX71W3Q6STT2Yz8eJ9GPRtROAgB4mTzOsvgzK12W2z73VbNxleMCAK7O1n//d65tSADAFfvo408+ODg6OvwwTTsRk2/mgyTK17L94F58EeMYxs3oxd8R2ZkyfvXO0WE007T+MGDejUHE5NOfI1u+Y8jrb0Uv+uv19ScKaSHeyeOi/8V80IobScRBlpQpt6MXr0dkrahuUr68f+fo8HZa1+d1+cgnixi04923v6/G/88w9qIXv3we92Mcd4tbLOu/vpWm72Xf/fVlOYNBRLKYD3aLvKXMOyAAAAAAAAAAAAAAAAAAAAAAAJ6bvfRMf/X8nPo0wL299fbmIOKPSZyU5/Iszwfaj+J8oOqEn8XK+To30zStj/GZD1rV+T7NeKMZzRc4dQAAAAAAAAAAAAAAAAAAAPjfmD14ODoeP4ppGYyHRfBjlgfdczlV08agzqyv1I/1P71qLbgRUQ9j9EPEllXPGMROPdTkiS6S5Sy6297w0QVNuxdV/RqnRSfTWSfvqmjqrizdWXI0LlrD5jiSVkSMvn32RXgrNvU1fq0IdqsFONfUjS276MdxPqrGg4ejeneNjpMoctrLHbdW1dm8SVZ2Xb25prNk6w05nGYblm5nc3JvOmtfdsOd7Rah/cqGpp+2+e50Y1NTPuNWNetq9id1TmdtMVvP+SdlTfKffs8AAAAAAAAAAAAAAAAAAACXWz70G78/0Xj6QoYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANeu+P//3fFwWgTjPIh+FZxdWQ8WVXFxpfH05N3pbEO3/WueJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+5fwMAAP//mRU4eA==") r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x7}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x640, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) socket$netlink(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000200)={0xd, 0x2, 0x0, "bc3d70dde5cabbe40f00f401bb7f00bf170000000200", 0x3136564e}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000040)=[{0x48}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000022c0)=@newtaction={0x2114, 0x30, 0x10, 0x0, 0x0, {}, [{0x2100, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @private=0xa010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x158, 0xd, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0xbc, 0x20, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x82, 0x6, "66bb6483687af3fc7c3ad8f5b5393b411a52bd9198d82fd6b4f68c1ffb4e03f567f1a6b57dc4866cc559f603c500a5f99ea0006bd1f61dd2c8b63a5acd809974eaada0ecc33730a4b17b4bbf0ec1cda4d0c9d8c08876c23e5773ca86d633da16543ec05393cd3f1b22ea6681dd7fd3d9b5ec2956f809d483cb5f7a060ec9"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_pedit={0x1e80, 0xf, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x6, 0x4, 0xffffffffffffffff, 0x1, 0x6}, 0x8, 0x7, [{0x0, 0x9, 0x2, 0x3, 0x5, 0xffffffff}, {0xffffffff, 0x5, 0x5, 0x3, 0x9}]}, [{0x4, 0x5, 0x4, 0x0, 0xffff, 0x6369}, {0xf8, 0x6, 0x0, 0x7, 0xb, 0xdb1}, {0x1, 0xfffffffb, 0x3, 0xb, 0x3, 0x4}, {0x0, 0x7, 0xffff, 0x1000, 0x1ff, 0x4}, {0x7, 0x7, 0x4, 0xfff, 0x2}, {0x10001, 0x1f1, 0x430, 0x6, 0x4, 0x8001}, {0xdf2, 0x1, 0x0, 0x5, 0x7, 0x8}, {0x4417029, 0x1, 0xd9, 0x7fffffff, 0x180, 0x8}, {0x6, 0xfffffffb, 0x9, 0x7c, 0xa6cc, 0x2}, {0x4, 0x7, 0xfffffffa, 0x10000, 0x5, 0x1}, {0x3, 0xc, 0xa06, 0x7, 0xffffff4c, 0x8}, {0x8, 0x5, 0x6c7, 0x0, 0x4, 0xb}, {0x3e0, 0x401, 0x7, 0x6, 0x3, 0xfffffffd}, {0x4, 0xf, 0x1, 0x5, 0x8, 0x4}, {0x3, 0x4, 0x0, 0x8, 0xbc, 0x1}, {0x1, 0x7ce3, 0x8, 0x8, 0x1, 0x8}, {0x0, 0x4, 0x5, 0x1c, 0x5, 0xd22c}, {0x9, 0x9, 0x7, 0x7, 0x2, 0x5}, {0x6, 0xbeb, 0x9, 0x80000000, 0x7, 0x40000000}, {0xfffffffe, 0x8, 0x9, 0x9, 0x8, 0x3}, {0x10000, 0x180000, 0xfffffff8, 0x7fff, 0x7ff, 0x8}, {0x7f, 0x400, 0x7, 0x4, 0xf, 0x4}, {0x101, 0xfffffffd, 0x6, 0x5, 0x7, 0x8001}, {0xcda, 0x4, 0x6, 0xfffffffc, 0x3, 0x8}, {0x4, 0x4, 0xfffffffd, 0x0, 0x9, 0x1ff}, {0x9, 0x8001, 0x6, 0x6, 0x0, 0x2}, {0x9, 0x3, 0xc6f4, 0xfffffff8, 0x8679, 0xffff}, {0x5, 0x1a2c, 0x2, 0xa4, 0x4, 0x6}, {0x2, 0x2, 0x8, 0x4, 0x7, 0x8}, {0xffff, 0xb, 0x9809, 0x1, 0x8, 0x10}, {0x10, 0x6d06b7bc, 0x4, 0x5222, 0x1, 0x2}, {0x1, 0x1, 0xa9, 0x884, 0xf6, 0x6}, {0x1ff, 0x3, 0x6, 0x6, 0x2, 0x10000}, {0x3, 0x400, 0x76, 0x7ff, 0x842b, 0x7ff}, {0xe00000, 0x6, 0x499, 0x40, 0x6, 0xd}, {0x1, 0x7, 0x2, 0x80, 0x431dfeb5, 0x4}, {0x10000, 0x8, 0xfffffffa, 0x81, 0x10, 0x1}, {0x80000001, 0x9, 0x81, 0x3, 0x1, 0x5}, {0x3, 0xd, 0x8, 0x5, 0x1, 0x6}, {0x7bc, 0x8, 0x7, 0x6, 0x7, 0x7}, {0xffff, 0xa932, 0x1fb, 0x5, 0x4, 0x9}, {0x5c10721a, 0x7fffffff, 0x1, 0x8b, 0xf52, 0x8001}, {0x2, 0x8, 0x78a07c1f, 0x0, 0x3, 0x57}, {0xe80, 0x1, 0x3, 0x9, 0x7ca1, 0x9}, {0x10, 0x61fa, 0x3, 0x3, 0x40, 0x2}, {0x5, 0x6, 0x800, 0x33f, 0x4, 0x6}, {0x6, 0x1, 0x8001, 0x9, 0x4, 0x2}, {0x12, 0xb, 0x8f5, 0xffff, 0x400, 0x3}, {0xe31, 0x81, 0x7fffffff, 0x42, 0x8, 0x3}, {0x9, 0x80000001, 0x2, 0x3, 0x5, 0x355}, {0x9, 0x1, 0x7, 0x3, 0x8}, {0xfffffe01, 0xfffffff9, 0x9, 0x4152aefd, 0xfffffffb, 0x8}, {0xc, 0x2, 0xbab46f3, 0x6, 0x5, 0x7fff}, {0x0, 0x9, 0x1, 0x3, 0xfffffffa, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x4be, 0x4}, {0x7, 0x4, 0x5, 0x8, 0xfffffff7}, {0x6, 0x0, 0x181, 0xab1, 0xfffffe01, 0x4998}, {0x10, 0x4c66, 0x80000000, 0x1911, 0x2, 0x9}, {0x3, 0x7, 0x4, 0x48, 0x6, 0x5}, {0xfffffeff, 0x5, 0x80, 0x2, 0xea, 0x7}, {0x100, 0x5, 0x7, 0x1ff, 0xfffffffa, 0x8}, {0x4, 0x9, 0x7, 0x0, 0x5e1fc8fe, 0xfffffffd}, {0x2, 0x3, 0x5, 0x0, 0x8, 0x9bf}, {0x9, 0x0, 0x1000, 0x6, 0x9, 0x6b2}, {0x2, 0x3, 0x2, 0x6, 0x3, 0x2}, {0x0, 0x6, 0x101, 0xc000000, 0x2, 0x2}, {0x9, 0x4, 0x1, 0x6, 0x5, 0x3}, {0x0, 0x4, 0x1, 0x2, 0x4be6ef44, 0xd32}, {0x5, 0x7fffffff, 0x9, 0xf449, 0x81, 0x8}, {0x9, 0x542, 0x7fffffff, 0xffffffff, 0x1, 0x7ff}, {0x7, 0x5389, 0x7, 0x0, 0x9, 0x3}, {0x5, 0x401, 0x6, 0x0, 0x247, 0x7}, {0x0, 0x1, 0x6, 0x86000, 0x0, 0x8}, {0x7f, 0x2, 0x9, 0x20009, 0x5, 0x3}, {0x2ca3, 0x8, 0x2, 0x6, 0x0, 0x12dc3162}, {0x8, 0xea, 0x1, 0x1c00, 0x6, 0x7}, {0x0, 0x301e, 0xca18, 0x7, 0x3, 0xe5d}, {0x9, 0x4, 0xffffffff, 0x3, 0x6}, {0x5, 0x4, 0x8, 0x1, 0x4}, {0x3, 0x4, 0x3, 0x7ff, 0x2, 0x7}, {0xff, 0xff, 0x4, 0xfffffffe, 0x95, 0x92b7}, {0xfffffffc, 0xa, 0x1, 0x8000, 0x40, 0xfffffff9}, {0x3, 0x3, 0x800, 0x2, 0x8, 0x4}, {0x6, 0xb84, 0x3, 0x40, 0xfffffff7, 0x81}, {0x7, 0x1, 0x3, 0x400, 0xfd38, 0x4bc6}, {0xffffff4d, 0x0, 0x8, 0x9, 0x80, 0x7}, {0x5, 0xfffffff8, 0x0, 0x0, 0x7fffffff, 0x80000001}, {0x24, 0x2, 0x5, 0x4, 0x8000, 0x9}, {0xf7, 0x80000001, 0x5, 0x7f, 0x764bc2dc, 0x8}, {0x5, 0xb2, 0xcb, 0x4, 0x6, 0xa0}, {0x3, 0x7f, 0xfffffffd, 0x0, 0x9, 0x2}, {0x4, 0x2, 0xff, 0x10000, 0xd, 0x5}, {0x741c, 0x6, 0x1a, 0x0, 0xa76e, 0x5}, {0x8, 0x6, 0x9, 0x8000, 0x923, 0x8001}, {0x8, 0x6, 0x60, 0x6, 0x13c, 0x6}, {0xdc, 0x52a, 0x40, 0x5, 0x7, 0x5}, {0x10001, 0x0, 0x9, 0x0, 0x1, 0xffffff91}, {0x4, 0x2, 0xce4, 0xe6, 0x7fffffff, 0x3}, {0x8, 0x43, 0x1, 0x2, 0x6, 0xd}, {0x2, 0x0, 0x400, 0x6, 0x0, 0x7}, {0x9b, 0xa4, 0xffffff62, 0x800, 0xffff, 0x9}, {0x1, 0x3, 0x5, 0x1, 0x6, 0x2}, {0x7, 0x6, 0x39480000, 0x1, 0x80000000, 0x7}, {0x80000001, 0x9, 0x1, 0xa, 0x5, 0x9}, {0x6, 0x7f, 0x5, 0x80000000, 0x3, 0x2}, {0x0, 0x1000, 0x0, 0x3, 0x6, 0x6}, {0x9, 0x6, 0xfffffff8, 0x6, 0x2, 0x401}, {0x6, 0x6, 0x5, 0x3, 0x0, 0xd}, {0x200, 0x2, 0x8, 0x4, 0x4, 0x1}, {0x0, 0x4, 0x5, 0x8e0, 0xa3c, 0x180000}, {0xb, 0x5, 0x7ff, 0x2, 0x9, 0x696}, {0x28, 0x100, 0x7, 0x4, 0x5, 0x1}, {0x7f, 0x7f, 0xfffffffe, 0x2, 0x1, 0x1325}, {0xf, 0x7fffffff, 0x7, 0x3, 0x80000000, 0x200}, {0x0, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x1000, 0x8, 0xffff, 0x6, 0x6, 0x200}, {0x1, 0xbc39, 0x1, 0x401, 0x5, 0x180}, {0x5, 0xb, 0xf4e, 0x7ff, 0x200, 0xb91}, {0x9, 0xffffffff, 0x9, 0x31e, 0x8, 0x6}, {0x30, 0x8000, 0x1000, 0x80000000, 0x6, 0x7}, {0x7ff, 0x928, 0x7fffffff, 0x2, 0x0, 0x2}, {0x6, 0x3, 0x80000001, 0x6, 0x80000001, 0x4}, {0x6, 0x8, 0x5, 0x4, 0x5, 0x400}, {0x5, 0x2, 0x1, 0x9e, 0xea5, 0x9}, {0xffff8000, 0x3, 0x5, 0xffff7094, 0x1, 0xb0}, {0x2, 0x6, 0x5, 0x3, 0x9, 0x1}, {0x3, 0x6, 0x60, 0x7, 0x8000, 0x1}, {0x1, 0x2, 0x5, 0xfffff000, 0xc643, 0x53}], [{0x5, 0x1}, {0x2, 0x1}, {}, {0x0, 0x8c9f8516b0bc351}, {0x1, 0xa709ec2e2a169a3e}, {0x3}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0xc02c4ecc9289ffb6}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x52d627f98bbc11f8}, {0x5}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4, 0x721dd96dd4464087}, {0x2}, {0x1, 0x1}, {}, {0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x0, 0xd0521f2c1d1e850e}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3}, {}, {0x7}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x4}, {}, {}, {0x3, 0x1}, {0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x2}, {}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0xc36660675133d3ba, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0xe, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {}, {}, {0x2}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x1, 0x1}, {0x0, 0x1}]}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x2114}}, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/10], 0xa) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) set_mempolicy(0x0, &(0x7f0000000140)=0x4, 0xffff) 5.840690426s ago: executing program 9 (id=1138): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtfilter={0x704, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x6d4, 0x2, [@TCA_BASIC_ACT={0x1dc, 0x3, [@m_mirred={0x10c, 0x20, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7d6, 0xc, 0xeff21ef740131d4d, 0x7, 0x9}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x101, 0x10000000, 0x7, 0x6}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffe, 0x6, 0x6, 0xfffffffd}, 0x5, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x81, 0x8, 0x0, 0x9}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6, 0x6, 0x1, 0x5}, 0x4, r2}}]}, {0x40, 0x6, "b0d35d4082d61514b30b4158351386a260f84775184508c570353b585e2140e2b0b54dde2fdf8d6aed781d06f55211cbc3c6242b1fad11ba02044681"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0xcc, 0x9, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3b6d, 0x2, 0x1, 0x4, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x3, 0xac, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1e59, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x7eb}}]}, {0x56, 0x6, "dad6f6c7947a940fe9c5d2b04dbaf32c39a31ef4e08a4654a0622ab28be882ba0477c293f8479d7103468175bac868119164059112d6b8d8cf821cc0a0b284a72e672a4da393d02a2e97290137e5b52c2a37"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x2}}, @TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xcd1, 0x7, 0x9}, {{0x2}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_BASIC_POLICE={0x5c, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x4, 0x22, 0x8, 0x80, {0x8, 0x1, 0xff66, 0x8, 0x8, 0xaad9}, {0x3, 0x0, 0xd, 0x0, 0x7, 0x6}, 0xf23d, 0x6, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0x2}}, @TCA_BASIC_POLICE={0x464, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7e}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x9, 0x7, 0x4e86, 0x9, {0x16, 0x3, 0x9d3, 0x7, 0x9, 0xfffff851}, {0x5, 0x1, 0xd, 0x4d9, 0x800, 0x5}, 0xb, 0xb0, 0x10}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x8000, 0x7f, 0xb9d, 0xe, 0x8452, 0xb, 0x8, 0xf, 0x0, 0xa9, 0x5, 0x0, 0x8, 0x6, 0x3, 0x1000, 0x47, 0x4, 0x7, 0x0, 0xa, 0x7, 0xf58c, 0x3, 0xa, 0xffffffff, 0x401, 0x0, 0x0, 0xd9, 0x7, 0xfffe0, 0x91f, 0x29f, 0x9, 0x28000, 0x7, 0x0, 0x2, 0x8602, 0x80000001, 0x3, 0x9, 0x5, 0x7, 0x9, 0x0, 0x1, 0x4, 0x3, 0x9, 0x0, 0x1, 0x3, 0x6, 0x9, 0x9f7, 0xffffffff, 0x3507178d, 0x7, 0xff, 0x5, 0x7, 0x7400000, 0x22, 0x80000001, 0x9, 0x899, 0xfff, 0x3, 0xe, 0x4, 0x8f3, 0xe, 0x1, 0x6, 0x1, 0x4, 0x7, 0x4, 0x5, 0x101, 0x3, 0xcd67, 0x4, 0xed2, 0x3, 0x4, 0x5, 0x9, 0xf, 0x6, 0x1ff, 0xa1, 0x5, 0x2, 0x6, 0x89f, 0x1ff, 0xca8, 0x10001, 0x7fffffff, 0x4, 0x3, 0x3, 0x2, 0xfffff001, 0x5, 0x10, 0xc, 0x7, 0xad09, 0x0, 0x0, 0x81, 0x3, 0x37be, 0x3, 0x5, 0x400, 0xffffffff, 0xff, 0xfffffffe, 0x6d800, 0x3, 0x4, 0x8, 0x3, 0x1, 0x9, 0x2, 0x7, 0x7, 0x8, 0x25, 0x8000, 0xb, 0x0, 0x21, 0x0, 0x80000000, 0x8e, 0x8, 0x3, 0x6, 0x3, 0x7, 0x0, 0x7, 0x3ff, 0xa, 0x7fffffff, 0x7, 0x900, 0x1, 0x3, 0x5, 0xc0000000, 0x40, 0x4, 0xfff, 0x2, 0x3, 0x80, 0x3, 0x800, 0x4, 0x4, 0xe, 0x2, 0x32e8, 0xfffffff8, 0xffffffff, 0x100, 0x2, 0x8, 0x8, 0xc388, 0x800, 0xffff, 0x3, 0x7f, 0x2, 0x5, 0x5, 0x3, 0x796, 0x2a, 0x200, 0xa2, 0x9, 0x7, 0x1, 0x0, 0x401, 0x401, 0x2, 0x2, 0x1, 0xfffffff7, 0xb3a, 0x8, 0x7f, 0x4e1d, 0xf8, 0xa, 0x63e, 0x100, 0x7f, 0x3, 0x80, 0x200000, 0xffff8001, 0x2800, 0xfd0, 0x3, 0x9, 0x1, 0x100, 0x62, 0x9fb, 0x5972, 0xded, 0x8, 0xfffff346, 0x401, 0x0, 0x9, 0x14f, 0x5, 0xe032, 0x9, 0x0, 0x100000, 0x6, 0x9, 0x3, 0xff, 0x9, 0x8, 0xa, 0x400, 0x63, 0x3ff, 0x80000001, 0x80000, 0x80000001, 0x7f, 0x6, 0x4, 0x163a, 0x0, 0x5, 0x6, 0x90]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}]}}]}, 0x704}, 0x1, 0x0, 0x0, 0x40000}, 0x24040084) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1d3603, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x7fe81e5246626bb5) lseek(r4, 0x101, 0x1) getdents64(r4, 0xfffffffffffffffe, 0x4a) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000000)) 5.243463734s ago: executing program 4 (id=1139): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10c52, &(0x7f0000000080)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@nonumtail}, {@shortname_winnt}, {@numtail}, {@rodir}, {@shortname_win95}, {@fat=@dmask={'dmask', 0x3d, 0x5}}, {@shortname_win95}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_winnt}, {@shortname_mixed}, {@uni_xlateno}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xa609, 0x8, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4f, 0x1, 0x0, 0x100000000004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x16f) 4.687278236s ago: executing program 4 (id=1140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) setresuid(0x0, 0xee00, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r4, r6, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x1019, &(0x7f0000001140)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000000000000000000000000000e1ff2d6e6ab4d321d7fe08a48313000000000000024d0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r8 = socket$inet6(0xa, 0x1, 0xfffffffc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000711241000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x8100}, @void, @eth={@broadcast, @empty, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xd}}, {0xa003, 0x880b, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}}, 0x2b) 4.628003373s ago: executing program 1 (id=1141): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x100, 0x0, 0x1, 0xb00, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_STATUS_MASK={0x8}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x26}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_NAT_DST={0x70, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x43}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x81) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') (async) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000b00)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xffffffff, @loopback, 0x81}}, 0x24) (async) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000000140)='2', 0x1}], 0x2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) (async) clock_gettime(0x6, &(0x7f00000001c0)) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd0, &(0x7f0000000340)=0x8, 0x4) ioctl$AUTOFS_IOC_FAIL(r4, 0x8001af85, 0x80000001) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) (async) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @remote}}, 0x14) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x8, 0x400, 0xd3, 0x1, 0xc, "08781b61387b56f5da29536ea878338a9f4d98"}) unshare(0x64000600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d00)={&(0x7f0000000300)="4da174c9bd07ba9ebb52498b4dc0bd4548e3ebf4be3d9e", &(0x7f0000000b40)=""/246, &(0x7f0000000c40)="1eb68cd2ed3571650354c12ea4c6067c8aba66f4de0aa88ce3d3015e9ccb89600e405059d3e8c31a1ea605746f56e8a356fe8de6012f56e0ff3d54de6b944089d34d2b6b2c8fb66bb946521f84923f45fd9ecca612956891", &(0x7f0000000cc0)="8aad312c68986814", 0x81, r1}, 0x38) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0xb, &(0x7f00000007c0)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @ldst={0x0, 0x2, 0x0, 0x9, 0x3, 0x6, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}], &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x25dfdbfc, {0x2, 0x14, 0x10, 0x0, 0xfd, 0x0, 0x0, 0x6, 0x20002200}, [@RTA_TABLE={0x8, 0xf, 0x7fe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xff, 0x8, 0x401}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) (async) fsync(r0) 4.579390661s ago: executing program 9 (id=1142): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r1, 0x6a, 0x1, 0x0, 0x20000071) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x1406, 0x925, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x8004) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r2], 0xfe33) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000240)={0x1, 'ip6_vti0\x00', {}, 0x5}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x4006041) move_pages(0x0, 0xd, &(0x7f0000000080)=[&(0x7f0000002000/0x4000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000002000/0x400000)=nil, &(0x7f0000248000/0x4000)=nil, &(0x7f00000c4000/0x1000)=nil, &(0x7f0000023000/0x1000)=nil, &(0x7f00002ce000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000ac000/0x2000)=nil, &(0x7f0000125000/0x2000)=nil], 0x0, &(0x7f0000000040), 0x0) fanotify_init(0x25, 0x141000) 4.512806583s ago: executing program 5 (id=1143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000002018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000480)={[{@noblock_validity}, {@oldalloc}, {@orlov}, {@quota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000f80)={0x16, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e24, 0xaf0931d, @remote, 0x3}}}, 0x90) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000e0ff00001400020002000000ffffffff00c9348e2f0c00000d0001007564b465326a5dbdfd30"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x148, r7, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcf46}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x451}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xecfe}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc0c8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x75e8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x798}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe7da}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) getsockopt$sock_int(r3, 0x1, 0x13, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00'}) io_uring_enter(r1, 0x1a19, 0xef57, 0x0, &(0x7f0000000240)={[0x1]}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="05000d80"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 3.922679224s ago: executing program 8 (id=1144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000980)=@ethtool_dump={0x3f, 0xfffe000, 0xd56c}}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) io_setup(0x1, &(0x7f00000003c0)) (async) io_setup(0x1, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000001840)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x0, r4, 0x0}]) (async) io_submit(r5, 0x1, &(0x7f0000001840)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x0, r4, 0x0}]) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59cf000000000100000008000000050003"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 3.543438043s ago: executing program 9 (id=1145): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002780)=ANY=[@ANYRESHEX, @ANYRES64=0x0, @ANYRESDEC, @ANYBLOB="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", @ANYBLOB="c99ec6c05a19c7365f2bcd1595a22685e848089f2f974e1e11ea70d7eecadca58ea9e8a643496537af61e613552b6e87792778c4821cc2b0abab8657c87b", @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRES8], 0x1, 0x1ee, &(0x7f0000000500)="$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") socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000000000000007000000911103000000000095"], &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefe}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_emit_vhci(0x0, 0x25) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="02c810"], 0x35) 2.844443944s ago: executing program 4 (id=1146): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) syz_read_part_table(0x616, &(0x7f0000000000)="$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") r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x21, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x733, 0x70bd28, 0x259fdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f00000028c0)=""/4096) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 2.404259991s ago: executing program 5 (id=1147): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./sys\x00', 0x3000040, &(0x7f00000001c0), 0x0, 0x5c4, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x18, 0x100) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r2, &(0x7f0000001080)="0b9ddddf", 0x4) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1db126bd7000fedbdf250b0000004c000580070001"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 2.111310761s ago: executing program 8 (id=1148): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000811601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c000b0000400600000a0000010a0000020050005000000b0100000b01601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x4, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./config\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xac}}, &(0x7f0000000000)='GPL\x00'}, 0x94) write(r2, &(0x7f0000000000)='3', 0x4e) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x5, 0x7f, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, 0x10, 0x7, 0x5, 0xc367}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f00000003c0)={'sit0\x00', r3, 0x8000, 0x700, 0x8, 0xffffffff, {{0x5, 0x4, 0x2, 0x2d, 0x14, 0x67, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @multicast1}}}}) write$khugepaged_scan(r2, &(0x7f0000000100), 0x8) 1.34873544s ago: executing program 1 (id=1149): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000780)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xcew\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\x9b\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l\xb7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\x00R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x04\x00\x00\x00\x00\x00\x00\x00\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd821\x9e\v4Q\xc6{\xa0\xf7\xcd\x82 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xcd\xefx\x0f\xf5\x85M\x14\xbb\xab1)\x8e%\xb7\x89\x17/') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff5, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0xa, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x4810) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000d4c000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%pK \x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x88080, 0x0) recvmmsg(r1, &(0x7f00000021c0)=[{{&(0x7f0000000080)=@l2tp6, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/68, 0x44}, {&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000000280)=""/107, 0x6b}], 0x4, &(0x7f0000000900)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001900)=@tipc=@id, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001980)=""/194, 0xc2}, {&(0x7f0000001a80)=""/168, 0xa8}, {&(0x7f0000001b40)=""/145, 0x91}, {&(0x7f0000001c00)=""/9, 0x9}, {&(0x7f0000001c40)=""/187, 0xbb}, {&(0x7f0000001d00)=""/176, 0xb0}], 0x6, &(0x7f0000001e40)=""/204, 0xcc}, 0x5}, {{&(0x7f0000001f40)=@ax25={{0x3, @bcast}, [@bcast, @remote, @netrom, @null, @null, @null, @rose, @default]}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001fc0)=""/18, 0x12}, {&(0x7f0000002000)=""/41, 0x29}, {&(0x7f0000002040)=""/239, 0xef}, {&(0x7f0000002140)=""/16, 0x10}], 0x4}, 0x9}], 0x3, 0x2043, &(0x7f0000002280)={0x0, 0x989680}) mremap(&(0x7f0000d4d000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 1.12549251s ago: executing program 9 (id=1150): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f0000000040)='sysv\x00', 0x1021, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000068a00800000000004000000cb2004001001000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfdf, &(0x7f0000000fc0)=""/4063, 0x40f00, 0x5}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000a40)=[{&(0x7f0000000980)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05e5dc4dda94000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d40), r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf250400000014000200ff01000000000000000000000000000114000600776c616e300000000101000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040801}, 0x400c850) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0400000004000000040000000100000000080000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t'], 0x50) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="3877cbf567074199523a179aa7d5000000", @ANYRES16=r4, @ANYBLOB="050000000000000000002e00000008000300f040dea323306d147aefe10404d8d2f99faaac7a6d669f68bc97bdada69586f53297baef4e2e28ae32b5dce922b4fc47fe21c9fc209e60793265981fa61a0873e255decdbc78048710af4b17d522dad8bfffb9133a38ddc737e4d53d65479fa4ceadc183c0ec9c70210820c9cfcab7faa24b01a15a80fb6d71", @ANYRES64=r5, @ANYBLOB="0a00340002020202020200000a00c800ffffffffffff000004002a00"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf2507000000080001002a0000001c00e70008ca3b356c7ece70283ed1166fee53ffa4fc51a188c14b5f0800178004000100040005001c00e700db6938c86f5ac339c6944816b0296c23ee1475f08a9d9c5708001780040004000a00e800080211000001000010001780040004000400060004000100280017adeb6e7f0004000100040004000400060004000300040002000400060004000400040001000a00e800ffffffffffff000020001780040002000400030004000300040002000400030004000100040002001400040077673200"/230], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x20, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r9 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, &(0x7f0000000780)={0x10, 0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r9, 0x1, 0x1, 0x1, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000300), 0x12) write$P9_RLERROR(r0, &(0x7f0000000180)=ANY=[], 0xe) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r0, 0x20, &(0x7f0000000580)={&(0x7f00000004c0)=""/127, 0x7f, 0x0, &(0x7f0000000540)=""/39, 0x27}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r0, 0x0, 0x25, 0x8, @val=@target_btf_id=r13}, 0x14) 0s ago: executing program 1 (id=1151): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4c, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @opaque="32d2564e229a75dcfa375cd3cea1"}}}}}}, 0x0) kernel console output (not intermixed with test programs): RROR: 29201 [ 147.031597][ T7523] loop7: detected capacity change from 0 to 512 [ 147.103138][ T7523] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.108149][ T7520] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 147.108189][ T7520] FAT-fs (loop2): Filesystem has been set read-only [ 147.423672][ T6850] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.453321][ T3542] bridge_slave_1: left allmulticast mode [ 147.453353][ T3542] bridge_slave_1: left promiscuous mode [ 147.453475][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.465134][ T4706] Bluetooth: hci5: command tx timeout [ 147.498190][ T3542] bridge_slave_0: left allmulticast mode [ 147.498237][ T3542] bridge_slave_0: left promiscuous mode [ 147.498328][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.703138][ T7562] loop0: detected capacity change from 0 to 256 [ 147.968334][ T7573] sctp: [Deprecated]: syz.0.560 (pid 7573) Use of int in max_burst socket option. [ 147.968334][ T7573] Use struct sctp_assoc_value instead [ 148.043357][ T7576] Injecting memory failure for pfn 0x2190ff at process virtual address 0x207d6000 [ 148.044027][ T7576] Memory failure: 0x2190ff: unhandlable page. [ 148.044050][ T7576] Memory failure: 0x2190ff: recovery action for reserved kernel page: Ignored [ 148.054317][ T7580] block nbd7: Device being setup by another task [ 148.195099][ T30] audit: type=1800 audit(148.160:382): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.0.560" name="/" dev="sockfs" ino=17376 res=0 errno=0 [ 148.216841][ T3542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.226399][ T3542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.239278][ T3542] bond0 (unregistering): Released all slaves [ 148.364975][ T7553] block nbd7: shutting down sockets [ 149.627562][ T4706] Bluetooth: hci5: command tx timeout [ 151.656449][ T3542] hsr_slave_0: left promiscuous mode [ 151.658781][ T3542] hsr_slave_1: left promiscuous mode [ 151.659135][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.659151][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.667061][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.667098][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.691059][ T3542] veth1_macvtap: left promiscuous mode [ 151.691129][ T3542] veth0_macvtap: left promiscuous mode [ 152.003690][ T4713] Bluetooth: hci5: command tx timeout [ 152.010228][ T3542] veth1_vlan: left promiscuous mode [ 152.010318][ T3542] veth0_vlan: left promiscuous mode [ 152.038645][ T7611] coredump: 79(syz.7.565): format_corename failed, aborting core [ 152.127516][ T7617] coredump: 80(syz.7.565): format_corename failed, aborting core [ 152.689840][ T7639] coredump: 81(syz.7.565): format_corename failed, aborting core [ 152.698094][ T7610] netlink: 44 bytes leftover after parsing attributes in process `syz.7.565'. [ 152.815010][ T7646] coredump: 83(syz.7.565): format_corename failed, aborting core [ 152.901768][ T7652] coredump: 85(syz.7.565): format_corename failed, aborting core [ 152.995392][ T7653] coredump: 86(syz.7.565): format_corename failed, aborting core [ 154.156340][ T4713] Bluetooth: hci4: command 0x0406 tx timeout [ 154.156437][ T4713] Bluetooth: hci3: command 0x0406 tx timeout [ 154.156488][ T4713] Bluetooth: hci1: command 0x0406 tx timeout [ 154.156516][ T4713] Bluetooth: hci5: command tx timeout [ 155.194307][ T7669] overlay: ./file0 is not a directory [ 156.148463][ T4383] block nbd0: Possible stuck request 00000000612c9ae4: control (read@0,4096B). Runtime 30 seconds [ 156.272735][ T3542] team0 (unregistering): Port device team_slave_1 removed [ 156.303236][ T3542] team0 (unregistering): Port device team_slave_0 removed [ 156.612511][ T7610] bridge_slave_0: left allmulticast mode [ 156.614045][ T7610] bridge_slave_0: left promiscuous mode [ 156.615551][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.756672][ T7468] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.761574][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.761698][ T7468] bridge_slave_0: entered allmulticast mode [ 156.772416][ T7468] bridge_slave_0: entered promiscuous mode [ 156.776868][ T7468] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.779712][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.782857][ T7468] bridge_slave_1: entered allmulticast mode [ 156.786254][ T7468] bridge_slave_1: entered promiscuous mode [ 156.794464][ T7686] loop2: detected capacity change from 0 to 4096 [ 156.799706][ T7686] ext4: Unknown parameter 'fowner>00000000000000000000' [ 156.876800][ T7468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.895433][ T7468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.902443][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.7.575'. [ 156.907293][ T7692] nbd4: detected capacity change from 0 to 32772 [ 156.942023][ T7692] loop7: detected capacity change from 0 to 512 [ 156.945395][ T7692] ext4: Unknown parameter 'o_serviced' [ 156.981690][ T4711] block nbd4: Receive control failed (result -104) [ 156.986931][ T7468] team0: Port device team_slave_0 added [ 156.996001][ T7468] team0: Port device team_slave_1 added [ 157.064026][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.066783][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.066834][ T7468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.081028][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.082744][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.082764][ T7468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.210970][ T7468] hsr_slave_0: entered promiscuous mode [ 157.319777][ T7468] hsr_slave_1: entered promiscuous mode [ 157.320043][ T7468] debugfs: 'hsr0' already exists in 'hsr' [ 157.320060][ T7468] Cannot create hsr debugfs directory [ 157.364197][ T7710] loop0: detected capacity change from 0 to 8 [ 157.364566][ T7710] squashfs: Unknown parameter 'xUOkAfMHWEm ػ~' [ 157.383931][ T7710] loop0: detected capacity change from 0 to 512 [ 157.392329][ T7710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.407308][ T7710] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.407357][ T7710] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.439879][ T7710] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4223: comm syz.0.578: Allocating blocks 41-42 which overlap fs metadata [ 157.443245][ T7710] loop0: lost filesystem error report for type 5 error -117 [ 157.447193][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 157.447224][ C0] EXT4-fs (loop0): initial error at time 157: ext4_mb_mark_diskspace_used:4223 [ 157.447259][ C0] EXT4-fs (loop0): last error at time 157: ext4_mb_mark_diskspace_used:4223 [ 157.471163][ T7710] EXT4-fs (loop0): Remounting filesystem read-only [ 157.472807][ T7710] Quota error (device loop0): write_blk: dquota write failed [ 157.479088][ T7710] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 157.482485][ T7710] Quota error (device loop0): write_blk: dquota write failed [ 157.484948][ T7710] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 157.488752][ T7710] EXT4-fs (loop0): 1 truncate cleaned up [ 157.496902][ T7710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.682437][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.844751][ T7733] fuse: Bad value for 'fd' [ 157.908451][ T7736] 9pnet_fd: p9_fd_create_unix (7736): problem connecting socket: ./file0: -111 [ 157.910917][ T7733] 9pnet_fd: p9_fd_create_unix (7733): problem connecting socket: ./file0: -111 [ 157.980750][ T7468] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 158.000814][ T7468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 158.002746][ T7468] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 158.015576][ T7468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 158.024608][ T7468] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 158.028868][ T7468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 158.032068][ T7468] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 158.036999][ T7735] loop0: detected capacity change from 0 to 1024 [ 158.042519][ T7468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 158.052981][ T7735] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 158.053013][ T7735] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 158.066025][ T7735] EXT4-fs (loop0): invalid journal inode [ 158.066093][ T7735] EXT4-fs (loop0): can't get journal size [ 158.079576][ T7735] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 158.079626][ T7735] EXT4-fs (loop0): mount failed [ 158.206559][ T7749] loop2: detected capacity change from 0 to 256 [ 158.272390][ T7468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.314732][ T7468] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.336733][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.336775][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.356546][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 158.356841][ T7753] nbd5: detected capacity change from 0 to 32772 [ 158.363609][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.363649][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.383298][ T7753] loop0: detected capacity change from 0 to 512 [ 158.389993][ T7753] ext4: Unknown parameter 'o_serviced' [ 158.409214][ T7749] sctp: [Deprecated]: syz.2.585 (pid 7749) Use of int in max_burst socket option. [ 158.409214][ T7749] Use struct sctp_assoc_value instead [ 158.441718][ T7753] loop0: detected capacity change from 0 to 512 [ 158.462593][ T7753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.562457][ T4711] block nbd5: Receive control failed (result -104) [ 158.592283][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.789116][ T7767] fuse: fd is not a fuse device [ 159.032026][ T4396] 8021q: adding VLAN 0 to HW filter on device eth13 [ 159.205184][ T7468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.621670][ T7468] veth0_vlan: entered promiscuous mode [ 159.642227][ T7468] veth1_vlan: entered promiscuous mode [ 159.647855][ T7816] No control pipe specified [ 159.697104][ T7468] veth0_macvtap: entered promiscuous mode [ 159.716479][ T7468] veth1_macvtap: entered promiscuous mode [ 159.730120][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.755312][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.800053][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.800216][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.818123][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.818295][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.913149][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.913172][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.954764][ T1423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.954791][ T1423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.398835][ T4396] 8021q: adding VLAN 0 to HW filter on device eth12 [ 161.264046][ T7873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.294373][ T7875] No control pipe specified [ 161.319326][ T7878] tmpfs: Unknown parameter '/dev/net/tun' [ 161.321507][ T7878] FAULT_INJECTION: forcing a failure. [ 161.321507][ T7878] name failslab, interval 1, probability 0, space 0, times 0 [ 161.321542][ T7878] CPU: 0 UID: 0 PID: 7878 Comm: syz.2.608 Not tainted syzkaller #0 PREEMPT [ 161.321557][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 161.321565][ T7878] Call trace: [ 161.321568][ T7878] show_stack+0x2c/0x3c (C) [ 161.321589][ T7878] __dump_stack+0x30/0x40 [ 161.321604][ T7878] dump_stack_lvl+0xd8/0x12c [ 161.321615][ T7878] dump_stack+0x1c/0x28 [ 161.321624][ T7878] should_fail_ex+0x41c/0x590 [ 161.321635][ T7878] should_failslab+0xc4/0x120 [ 161.321646][ T7878] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 161.321658][ T7878] proc_alloc_inode+0x2c/0xb8 [ 161.321668][ T7878] alloc_inode+0x68/0x198 [ 161.321678][ T7878] new_inode+0x20/0x50 [ 161.321686][ T7878] proc_pid_make_inode+0x30/0x148 [ 161.321693][ T7878] proc_pident_instantiate+0x70/0x268 [ 161.321701][ T7878] proc_pident_lookup+0x208/0x260 [ 161.321708][ T7878] proc_tid_base_lookup+0x34/0x44 [ 161.321716][ T7878] lookup_open+0x6a8/0x1180 [ 161.321724][ T7878] path_openat+0x50c/0x18f4 [ 161.321732][ T7878] do_file_open+0x1c8/0x2e8 [ 161.321741][ T7878] do_sys_openat2+0x114/0x1e8 [ 161.321750][ T7878] do_sys_open+0xb0/0xe0 [ 161.321759][ T7878] __arm64_sys_openat+0xa8/0xc4 [ 161.321769][ T7878] invoke_syscall+0x98/0x244 [ 161.321779][ T7878] el0_svc_common+0xec/0x23c [ 161.321789][ T7878] do_el0_svc+0x4c/0x5c [ 161.321798][ T7878] el0_svc+0x64/0x260 [ 161.321808][ T7878] el0t_64_sync_handler+0x44/0x104 [ 161.321816][ T7878] el0t_64_sync+0x198/0x19c [ 161.350986][ T7873] autofs: Unknown parameter 'netdevsim0' [ 161.447342][ T7883] netlink: 48 bytes leftover after parsing attributes in process `syz.8.605'. [ 161.552858][ T7894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.609'. [ 161.616673][ T7888] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.616731][ T7888] EXT4-fs (loop0): Test dummy encryption mode enabled [ 161.623232][ T4396] 8021q: adding VLAN 0 to HW filter on device eth14 [ 161.624781][ T7888] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 161.624835][ T7888] System zones: 0-5 [ 161.639889][ T7888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.139054][ T7924] sctp: [Deprecated]: syz.8.614 (pid 7924) Use of int in max_burst socket option. [ 162.139054][ T7924] Use struct sctp_assoc_value instead [ 162.267968][ T7932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.268215][ T7932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.371329][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.533077][ T7938] set_capacity_and_notify: 2 callbacks suppressed [ 162.539801][ T7938] loop8: detected capacity change from 0 to 8192 [ 162.545381][ T7944] loop0: detected capacity change from 0 to 128 [ 162.545772][ T7944] EXT4-fs: Ignoring removed i_version option [ 162.556951][ T7944] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.849358][ T4396] 8021q: adding VLAN 0 to HW filter on device eth15 [ 162.921000][ T4712] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.949965][ T7954] No control pipe specified [ 163.112320][ T7964] loop8: detected capacity change from 0 to 512 [ 163.141197][ T7964] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.274476][ T7964] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #15: comm syz.8.624: corrupted xattr block 33: invalid header [ 163.277730][ T7964] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #15: comm syz.8.624: corrupted xattr block 33: invalid header [ 163.280911][ T7964] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #15: comm syz.8.624: corrupted xattr block 33: invalid header [ 163.553037][ T7468] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.733656][ T7981] sctp: [Deprecated]: syz.8.627 (pid 7981) Use of int in max_burst socket option. [ 163.733656][ T7981] Use struct sctp_assoc_value instead [ 164.084074][ T7989] netlink: 'syz.1.629': attribute type 10 has an invalid length. [ 164.114819][ T7989] syz_tun: entered promiscuous mode [ 164.131519][ T7989] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 164.153123][ T54] bond0: (slave bond_slave_0): interface is now down [ 164.153167][ T54] bond0: (slave bond_slave_1): interface is now down [ 164.153185][ T54] bond0: (slave syz_tun): interface is now down [ 164.154694][ T54] bond0: now running without any active interface! [ 164.192586][ T7997] loop8: detected capacity change from 0 to 128 [ 164.206471][ T7997] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.226404][ T7997] fscrypt (loop8, inode 12): Can't use IV_INO_LBLK_64 policy on filesystem 'loop8' because it doesn't have stable inode numbers [ 164.444764][ T7468] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.570084][ T8013] fuse: Bad value for 'user_id' [ 164.570111][ T8013] fuse: Bad value for 'user_id' [ 164.721853][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.7.635'. [ 164.776128][ T8024] team0: Port device team_slave_0 removed [ 164.789585][ T8026] tmpfs: Unknown parameter '/dev/net/tun' [ 164.795663][ T8026] FAULT_INJECTION: forcing a failure. [ 164.795663][ T8026] name failslab, interval 1, probability 0, space 0, times 0 [ 164.795701][ T8026] CPU: 0 UID: 0 PID: 8026 Comm: syz.0.636 Not tainted syzkaller #0 PREEMPT [ 164.795716][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 164.795722][ T8026] Call trace: [ 164.795725][ T8026] show_stack+0x2c/0x3c (C) [ 164.795749][ T8026] __dump_stack+0x30/0x40 [ 164.795765][ T8026] dump_stack_lvl+0xd8/0x12c [ 164.795777][ T8026] dump_stack+0x1c/0x28 [ 164.795789][ T8026] should_fail_ex+0x41c/0x590 [ 164.795802][ T8026] should_failslab+0xc4/0x120 [ 164.795816][ T8026] __kmalloc_cache_noprof+0x94/0x5fc [ 164.795826][ T8026] autofs_init_fs_context+0x124/0x4c8 [ 164.795837][ T8026] alloc_fs_context+0x7d8/0xba4 [ 164.795847][ T8026] fs_context_for_mount+0x34/0x44 [ 164.795857][ T8026] do_new_mount+0x158/0x538 [ 164.795869][ T8026] path_mount+0x5f0/0xa88 [ 164.795880][ T8026] do_mount+0xe8/0x148 [ 164.795890][ T8026] __arm64_sys_mount+0x33c/0x388 [ 164.795902][ T8026] invoke_syscall+0x98/0x244 [ 164.795915][ T8026] el0_svc_common+0xec/0x23c [ 164.795927][ T8026] do_el0_svc+0x4c/0x5c [ 164.795938][ T8026] el0_svc+0x64/0x260 [ 164.795950][ T8026] el0t_64_sync_handler+0x44/0x104 [ 164.795961][ T8026] el0t_64_sync+0x198/0x19c [ 164.870526][ T8031] sctp: [Deprecated]: syz.8.638 (pid 8031) Use of int in max_burst socket option. [ 164.870526][ T8031] Use struct sctp_assoc_value instead [ 165.373689][ T8053] netlink: 76 bytes leftover after parsing attributes in process `syz.1.642'. [ 165.448845][ T8055] loop2: detected capacity change from 0 to 512 [ 165.468585][ T8055] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 65535 [ 165.557109][ T8055] loop2: detected capacity change from 0 to 4096 [ 165.607827][ T8055] EXT4-fs (loop2): Test dummy encryption mode enabled [ 165.625759][ T8055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.655986][ T8070] loop0: detected capacity change from 0 to 512 [ 165.662320][ T8070] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 165.672505][ T8055] EXT4-fs error (device loop2): __ext4_new_inode:1083: comm syz.2.643: reserved inode found cleared - inode=18 [ 165.678580][ T8070] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.647: bg 0: block 384: padding at end of block bitmap is not set [ 165.682679][ T8070] loop0: lost filesystem error report for type 5 error -117 [ 165.687198][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 165.687232][ C0] EXT4-fs (loop0): initial error at time 165: ext4_validate_block_bitmap:445 [ 165.687262][ C0] EXT4-fs (loop0): last error at time 165: ext4_validate_block_bitmap:445 [ 165.700752][ T8070] EXT4-fs (loop0): Remounting filesystem read-only [ 165.701118][ T8070] EXT4-fs (loop0): 1 truncate cleaned up [ 165.701610][ T8070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.736647][ T8082] loop8: detected capacity change from 0 to 1024 [ 165.760287][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.771998][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.787929][ T8082] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 165.871848][ T8091] loop0: detected capacity change from 0 to 512 [ 165.875065][ T8082] EXT4-fs error (device loop8): ext4_free_blocks:6719: comm syz.8.646: Freeing blocks not in datazone - block = 0, count = 16 [ 165.910179][ T8091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.027303][ T8100] sctp: [Deprecated]: syz.7.651 (pid 8100) Use of int in max_burst socket option. [ 166.027303][ T8100] Use struct sctp_assoc_value instead [ 166.273260][ T8112] loop2: detected capacity change from 0 to 512 [ 166.276458][ T8112] EXT4-fs: Ignoring removed oldalloc option [ 166.295844][ T8112] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.654: bad orphan inode 32 [ 166.295878][ T8112] loop2: lost filesystem error report for type 5 error -117 [ 166.298302][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 166.298316][ C0] EXT4-fs (loop2): initial error at time 166: ext4_orphan_get:1429 [ 166.298332][ C0] EXT4-fs (loop2): last error at time 166: ext4_orphan_get:1429 [ 166.305681][ T8112] ext4_test_bit(bit=31, block=4) = 0 [ 166.305741][ T8112] EXT4-fs (loop2): 1 truncate cleaned up [ 166.338543][ T8112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.356689][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.404462][ T8113] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 166.409460][ T8113] EXT4-fs (loop7): 1 truncate cleaned up [ 166.410923][ T8112] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.654: bg 0: block 5: invalid block bitmap [ 166.429764][ T8113] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.448283][ T7468] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 166.461177][ T8125] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 166.486223][ T8120] overlayfs: failed to resolve './cgroup': -2 [ 166.491436][ T8112] overlayfs: failed to resolve './cgroup': -2 [ 166.574932][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.592517][ T6850] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.703887][ T8142] netlink: 108 bytes leftover after parsing attributes in process `syz.1.659'. [ 166.732714][ T8138] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 166.871001][ T8137] syz.2.661: attempt to access beyond end of device [ 166.871001][ T8137] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 166.874547][ T8137] Buffer I/O error on dev loop2, logical block 57847, async page read [ 166.881071][ T8137] syz.2.661: attempt to access beyond end of device [ 166.881071][ T8137] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 166.884711][ T8137] Buffer I/O error on dev loop2, logical block 57847, async page read [ 166.886820][ T8137] syz.2.661: attempt to access beyond end of device [ 166.886820][ T8137] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 166.902111][ T8137] Buffer I/O error on dev loop2, logical block 57847, async page read [ 166.902228][ T8137] syz.2.661: attempt to access beyond end of device [ 166.902228][ T8137] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 166.902249][ T8137] Buffer I/O error on dev loop2, logical block 57847, async page read [ 166.902293][ T8137] syz.2.661: attempt to access beyond end of device [ 166.902293][ T8137] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 166.902313][ T8137] Buffer I/O error on dev loop2, logical block 57847, async page read [ 166.902340][ T8137] syz.2.661: attempt to access beyond end of device [ 166.902340][ T8137] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 166.902357][ T8137] Buffer I/O error on dev loop2, logical block 57847, async page read [ 166.902381][ T8137] syz.2.661: attempt to access beyond end of device [ 166.902381][ T8137] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 166.902397][ T8137] Buffer I/O error on dev loop2, logical block 57847, async page read [ 166.902433][ T8137] syz.2.661: attempt to access beyond end of device [ 166.902433][ T8137] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 166.902451][ T8137] Buffer I/O error on dev loop2, logical block 57847, async page read [ 166.902473][ T8137] syz.2.661: attempt to access beyond end of device [ 166.902473][ T8137] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 166.902487][ T8137] Buffer I/O error on dev loop2, logical block 57847, async page read [ 166.902508][ T8137] syz.2.661: attempt to access beyond end of device [ 166.902508][ T8137] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 166.902522][ T8137] Buffer I/O error on dev loop2, logical block 57847, async page read [ 166.978345][ T8155] sctp: [Deprecated]: syz.1.664 (pid 8155) Use of int in max_burst socket option. [ 166.978345][ T8155] Use struct sctp_assoc_value instead [ 167.179010][ T8165] coredump: 1(syz.7.665): format_corename failed, aborting core [ 167.206937][ T8169] coredump: 1(syz.7.665): format_corename failed, aborting core [ 167.475208][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'. [ 168.034165][ T8168] 9pnet_fd: p9_fd_create_tcp (8168): problem connecting socket to 127.0.0.1 [ 168.181227][ T8222] sctp: [Deprecated]: syz.0.676 (pid 8222) Use of int in max_burst socket option. [ 168.181227][ T8222] Use struct sctp_assoc_value instead [ 168.404132][ T8232] set_capacity_and_notify: 3 callbacks suppressed [ 168.404170][ T8232] loop8: detected capacity change from 0 to 2048 [ 168.496303][ T8232] loop8: p2 < > p4 [ 168.499767][ T8232] loop8: p4 size 8192 extends beyond EOD, truncated [ 168.806151][ T6805] udevd[6805]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 168.820543][ T7540] udevd[7540]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 168.984449][ T8265] sctp: [Deprecated]: syz.0.689 (pid 8265) Use of int in max_burst socket option. [ 168.984449][ T8265] Use struct sctp_assoc_value instead [ 169.146443][ T8275] loop0: detected capacity change from 0 to 256 [ 169.313017][ T8283] nvmet: adding nsid 1 to subsystem testsubsys [ 169.356441][ T8283] tipc: Started in network mode [ 169.356479][ T8283] tipc: Node identity 2640be3c2e32, cluster identity 4711 [ 169.356627][ T8283] tipc: Enabled bearer , priority 0 [ 169.369669][ T8283] syzkaller0: entered promiscuous mode [ 169.369696][ T8283] syzkaller0: entered allmulticast mode [ 169.466737][ T8300] loop2: detected capacity change from 0 to 128 [ 169.490902][ T8283] tipc: Resetting bearer [ 169.502511][ T8292] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 169.505426][ T8292] FAT-fs (loop2): Filesystem has been set read-only [ 169.514852][ T8279] tipc: Resetting bearer [ 169.560885][ T8279] tipc: Disabling bearer [ 169.874730][ T4711] Bluetooth: hci5: unexpected event 0x16 length: 1 < 6 [ 169.912200][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 169.912236][ T8316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.699'. [ 170.063439][ T8330] loop7: detected capacity change from 0 to 512 [ 170.094288][ T8330] EXT4-fs error (device loop7): __ext4_iget:5592: inode #11: block 1: comm syz.7.704: invalid block [ 170.100498][ T4383] block nbd1: Possible stuck request 000000002e0221bf: control (read@0,4096B). Runtime 30 seconds [ 170.103183][ T8330] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 170.104675][ T8330] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.704: couldn't read orphan inode 11 (err -117) [ 170.109676][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 170.109690][ C0] EXT4-fs (loop7): initial error at time 170: __ext4_iget:5592: inode 11: block 1 [ 170.109713][ C0] EXT4-fs (loop7): last error at time 170: __ext4_iget:5592: inode 11: block 1 [ 170.109779][ T8330] loop7: lost filesystem error report for type 5 error -117 [ 170.110892][ T8330] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.199167][ T8336] loop0: detected capacity change from 0 to 4096 [ 170.322537][ T6850] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.372611][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.707'. [ 170.438968][ T8353] loop7: detected capacity change from 0 to 512 [ 170.444972][ T8353] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.462395][ T8353] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 170.477263][ T8350] netlink: 'syz.0.710': attribute type 10 has an invalid length. [ 170.486024][ T8353] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 170.486175][ T8353] EXT4-fs (loop7): orphan cleanup on readonly fs [ 170.490693][ T8353] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:487: comm syz.7.708: Invalid block bitmap block 0 in block_group 0 [ 170.490735][ T8353] loop7: lost filesystem error report for type 5 error -117 [ 170.497201][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 170.497232][ C0] EXT4-fs (loop7): last error at time 170: ext4_read_block_bitmap_nowait:487 [ 170.502531][ T8353] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:487: comm syz.7.708: Invalid block bitmap block 0 in block_group 0 [ 170.505451][ T8353] loop7: lost filesystem error report for type 5 error -117 [ 170.507151][ T8353] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:487: comm syz.7.708: Invalid block bitmap block 0 in block_group 0 [ 170.511931][ T8353] loop7: lost filesystem error report for type 5 error -117 [ 170.517620][ T8353] Quota error (device loop7): write_blk: dquota write failed [ 170.517672][ T8353] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 170.517690][ T8353] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.708: Failed to acquire dquot type 1 [ 170.517719][ T8353] loop7: lost filesystem error report for type 5 error -28 [ 170.528395][ T8353] EXT4-fs (loop7): 1 orphan inode deleted [ 170.537076][ T1423] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-5 [ 170.537123][ T1423] EXT4-fs error (device loop7): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 1 [ 170.537141][ T1423] loop7: lost filesystem error report for type 5 error -117 [ 170.553448][ T8353] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.597101][ T8350] team0 (unregistering): Port device team_slave_0 removed [ 170.620469][ T8350] team0 (unregistering): Port device team_slave_1 removed [ 170.690262][ T8362] loop8: detected capacity change from 0 to 128 [ 170.699176][ T8353] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.708: deleted inode referenced: 12 [ 170.811144][ T6850] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.306971][ T8402] netlink: 180 bytes leftover after parsing attributes in process `syz.7.718'. [ 171.460328][ T8398] loop2: detected capacity change from 0 to 1024 [ 171.474109][ T8398] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 171.484245][ T8398] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 171.484800][ T8398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.578347][ T8398] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 171.633611][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.852670][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.720'. [ 171.893720][ T8415] 9p: Bad value for 'rfdno' [ 172.077578][ T4383] block nbd2: Possible stuck request 000000009b02411c: control (read@0,4096B). Runtime 30 seconds [ 172.324573][ T8389] Soft offlining pfn 0x11a873 at process virtual address 0x20000000 [ 172.337618][ T8445] loop7: detected capacity change from 0 to 128 [ 172.346235][ T8389] Soft offlining pfn 0x13a537 at process virtual address 0x20001000 [ 172.381885][ T8389] Soft offlining pfn 0x1392c8 at process virtual address 0x20002000 [ 172.390549][ T8446] Soft offlining pfn 0x1399a3 at process virtual address 0x20000000 [ 172.394793][ T8446] Soft offlining pfn 0x133cca at process virtual address 0x20001000 [ 172.400188][ T8446] Soft offlining pfn 0x122a4e at process virtual address 0x20002000 [ 172.487875][ T8448] netlink: 'syz.0.730': attribute type 5 has an invalid length. [ 172.623077][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 172.648819][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 172.656575][ T8453] netlink: 'syz.1.732': attribute type 1 has an invalid length. [ 172.662308][ T8453] netlink: 'syz.1.732': attribute type 2 has an invalid length. [ 172.722574][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.8.733'. [ 172.857474][ T8465] IPVS: set_ctl: invalid protocol: 58 172.30.1.1:20000 [ 172.895247][ T8466] openvswitch: netlink: Actions may not be safe on all matching packets [ 173.062966][ T8474] loop0: detected capacity change from 0 to 4096 [ 173.091110][ T8474] EXT4-fs (loop0): bs(8192) > ps(4096) unsupported for encrypt [ 173.277803][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 173.303364][ T8490] ext4: Unknown parameter 'o_serviced' [ 173.319881][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.7.747'. [ 173.419152][ T4711] block nbd6: Receive control failed (result -104) [ 173.459168][ T8503] netlink: 'syz.1.750': attribute type 29 has an invalid length. [ 173.459216][ T8503] netlink: 'syz.1.750': attribute type 25 has an invalid length. [ 173.591715][ T8520] set_capacity_and_notify: 2 callbacks suppressed [ 173.591770][ T8520] loop8: detected capacity change from 0 to 256 [ 173.761530][ T8532] loop0: detected capacity change from 0 to 1024 [ 173.762017][ T8532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.773792][ T8532] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 173.980323][ T8532] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 173.980379][ T8532] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e1a8, mo2=0000] [ 173.980431][ T8532] System zones: 0-1, 3-12 [ 173.980593][ T8532] EXT4-fs (loop0): orphan cleanup on readonly fs [ 173.996842][ T8532] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.757: Invalid inode table block 0 in block_group 0 [ 173.996882][ T8532] loop0: lost filesystem error report for type 5 error -117 [ 173.997276][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 173.997297][ C0] EXT4-fs (loop0): initial error at time 173: __ext4_get_inode_loc:4916 [ 173.997318][ C0] EXT4-fs (loop0): last error at time 173: __ext4_get_inode_loc:4916 [ 174.013449][ T8532] EXT4-fs (loop0): Remounting filesystem read-only [ 174.013507][ T8532] Quota error (device loop0): write_blk: dquota write failed [ 174.013553][ T8532] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 174.013650][ T8532] EXT4-fs (loop0): 1 truncate cleaned up [ 174.021391][ T8532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.166825][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.521443][ T8554] loop0: detected capacity change from 0 to 1024 [ 174.539998][ T8554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.984911][ T8592] tmpfs: Unknown parameter '/dev/net/tun' [ 174.996224][ T8592] FAULT_INJECTION: forcing a failure. [ 174.996224][ T8592] name failslab, interval 1, probability 0, space 0, times 0 [ 174.996267][ T8592] CPU: 0 UID: 0 PID: 8592 Comm: syz.8.772 Not tainted syzkaller #0 PREEMPT [ 174.996283][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 174.996290][ T8592] Call trace: [ 174.996295][ T8592] show_stack+0x2c/0x3c (C) [ 174.996315][ T8592] __dump_stack+0x30/0x40 [ 174.996330][ T8592] dump_stack_lvl+0xd8/0x12c [ 174.996341][ T8592] dump_stack+0x1c/0x28 [ 174.996352][ T8592] should_fail_ex+0x41c/0x590 [ 174.996365][ T8592] should_failslab+0xc4/0x120 [ 174.996378][ T8592] __kmalloc_cache_noprof+0x94/0x5fc [ 174.996387][ T8592] autofs_init_fs_context+0x124/0x4c8 [ 174.996396][ T8592] alloc_fs_context+0x7d8/0xba4 [ 174.996406][ T8592] fs_context_for_mount+0x34/0x44 [ 174.996414][ T8592] do_new_mount+0x158/0x538 [ 174.996425][ T8592] path_mount+0x5f0/0xa88 [ 174.996435][ T8592] do_mount+0xe8/0x148 [ 174.996445][ T8592] __arm64_sys_mount+0x33c/0x388 [ 174.996456][ T8592] invoke_syscall+0x98/0x244 [ 174.996468][ T8592] el0_svc_common+0xec/0x23c [ 174.996479][ T8592] do_el0_svc+0x4c/0x5c [ 174.996490][ T8592] el0_svc+0x64/0x260 [ 174.996501][ T8592] el0t_64_sync_handler+0x44/0x104 [ 174.996510][ T8592] el0t_64_sync+0x198/0x19c [ 175.093782][ T8589] overlayfs: statfs failed on './file0' [ 175.184061][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.198426][ T8596] __nla_validate_parse: 4 callbacks suppressed [ 175.199763][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.7.773'. [ 175.202349][ T8596] nbd7: detected capacity change from 0 to 32772 [ 175.233322][ T8596] loop7: detected capacity change from 0 to 512 [ 175.236468][ T8596] ext4: Unknown parameter 'o_serviced' [ 175.285231][ T4711] block nbd7: Receive control failed (result -104) [ 175.401907][ T8610] loop0: detected capacity change from 0 to 8 [ 175.586429][ T8610] ip6gretap1: entered allmulticast mode [ 175.593751][ T8610] batman_adv: batadv0: Adding interface: ip6gretap1 [ 175.603679][ T8610] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.603746][ T8610] batman_adv: batadv0: Interface activated: ip6gretap1 [ 175.895482][ T8627] x_tables: duplicate underflow at hook 2 [ 175.913064][ T8626] loop7: detected capacity change from 0 to 1024 [ 175.924073][ T8626] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 175.924142][ T8626] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 175.936448][ T8626] JBD2: no valid journal superblock found [ 175.953375][ T8626] EXT4-fs (loop7): Could not load journal inode [ 176.361508][ T8641] FAULT_INJECTION: forcing a failure. [ 176.361508][ T8641] name failslab, interval 1, probability 0, space 0, times 0 [ 176.361542][ T8641] CPU: 0 UID: 0 PID: 8641 Comm: syz.2.784 Not tainted syzkaller #0 PREEMPT [ 176.361559][ T8641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 176.361566][ T8641] Call trace: [ 176.361570][ T8641] show_stack+0x2c/0x3c (C) [ 176.361593][ T8641] __dump_stack+0x30/0x40 [ 176.361606][ T8641] dump_stack_lvl+0xd8/0x12c [ 176.361618][ T8641] dump_stack+0x1c/0x28 [ 176.361629][ T8641] should_fail_ex+0x41c/0x590 [ 176.361642][ T8641] should_failslab+0xc4/0x120 [ 176.361655][ T8641] __kmalloc_noprof+0x108/0x6c8 [ 176.361663][ T8641] iovec_from_user+0x88/0x138 [ 176.361672][ T8641] __import_iovec+0xd8/0x574 [ 176.361679][ T8641] import_iovec+0x88/0xa4 [ 176.361687][ T8641] vfs_readv+0x174/0x520 [ 176.361695][ T8641] do_readv+0x134/0x2a8 [ 176.361703][ T8641] __arm64_sys_readv+0x88/0x9c [ 176.361715][ T8641] invoke_syscall+0x98/0x244 [ 176.361727][ T8641] el0_svc_common+0xec/0x23c [ 176.361739][ T8641] do_el0_svc+0x4c/0x5c [ 176.361750][ T8641] el0_svc+0x64/0x260 [ 176.361761][ T8641] el0t_64_sync_handler+0x44/0x104 [ 176.361771][ T8641] el0t_64_sync+0x198/0x19c [ 176.518059][ T8650] No control pipe specified [ 176.519930][ T4383] block nbd3: Possible stuck request 0000000064c2cf71: control (read@0,2048B). Runtime 30 seconds [ 176.519976][ T4383] block nbd3: Possible stuck request 00000000eec9dfcb: control (read@2048,2048B). Runtime 30 seconds [ 176.942768][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.7.789'. [ 176.943048][ T8666] nbd8: detected capacity change from 0 to 32772 [ 176.977086][ T8666] loop7: detected capacity change from 0 to 512 [ 176.990789][ T8666] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.044464][ T4711] block nbd8: Receive control failed (result -104) [ 177.074030][ T6850] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.190213][ T8679] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 177.195358][ T54] IPVS: starting estimator thread 0... [ 177.279210][ T8680] IPVS: using max 45 ests per chain, 108000 per kthread [ 177.341921][ T8685] netlink: 80 bytes leftover after parsing attributes in process `syz.2.792'. [ 178.142687][ T8722] loop7: detected capacity change from 0 to 128 [ 178.162622][ T8722] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.289477][ T8722] netlink: 'syz.7.805': attribute type 2 has an invalid length. [ 178.480309][ T6850] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.594577][ T8743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.626879][ T8743] FAULT_INJECTION: forcing a failure. [ 178.626879][ T8743] name failslab, interval 1, probability 0, space 0, times 0 [ 178.626915][ T8743] CPU: 0 UID: 0 PID: 8743 Comm: syz.2.809 Tainted: G L syzkaller #0 PREEMPT [ 178.626936][ T8743] Tainted: [L]=SOFTLOCKUP [ 178.626941][ T8743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 178.626949][ T8743] Call trace: [ 178.626952][ T8743] show_stack+0x2c/0x3c (C) [ 178.626971][ T8743] __dump_stack+0x30/0x40 [ 178.626983][ T8743] dump_stack_lvl+0xd8/0x12c [ 178.626993][ T8743] dump_stack+0x1c/0x28 [ 178.627002][ T8743] should_fail_ex+0x41c/0x590 [ 178.627013][ T8743] should_failslab+0xc4/0x120 [ 178.627024][ T8743] kmem_cache_alloc_noprof+0x94/0x5d4 [ 178.627035][ T8743] security_inode_alloc+0x40/0x304 [ 178.627044][ T8743] inode_init_always_gfp+0x704/0xbac [ 178.627053][ T8743] alloc_inode+0x9c/0x198 [ 178.627062][ T8743] iget_locked+0xd8/0x37c [ 178.627071][ T8743] __ext4_iget+0x1e8/0x2eb0 [ 178.627080][ T8743] ext4_lookup+0x224/0x5f0 [ 178.627088][ T8743] lookup_one_qstr_excl+0xe8/0x200 [ 178.627098][ T8743] __start_dirop+0xb8/0xf4 [ 178.627106][ T8743] filename_create+0x194/0x2b0 [ 178.627115][ T8743] filename_mknodat+0x184/0x5a0 [ 178.627123][ T8743] __arm64_sys_mknodat+0xc0/0xe8 [ 178.627132][ T8743] invoke_syscall+0x98/0x244 [ 178.627142][ T8743] el0_svc_common+0xec/0x23c [ 178.627151][ T8743] do_el0_svc+0x4c/0x5c [ 178.627160][ T8743] el0_svc+0x64/0x260 [ 178.627170][ T8743] el0t_64_sync_handler+0x44/0x104 [ 178.627179][ T8743] el0t_64_sync+0x198/0x19c [ 178.916707][ T4718] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 178.945695][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.210479][ T4711] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 179.213190][ T4711] CPU: 0 UID: 0 PID: 4711 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT [ 179.213212][ T4711] Tainted: [L]=SOFTLOCKUP [ 179.213216][ T4711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 179.213226][ T4711] Workqueue: hci2 hci_rx_work [ 179.213245][ T4711] Call trace: [ 179.213248][ T4711] show_stack+0x2c/0x3c (C) [ 179.213269][ T4711] __dump_stack+0x30/0x40 [ 179.213281][ T4711] dump_stack_lvl+0xd8/0x12c [ 179.213293][ T4711] dump_stack+0x1c/0x28 [ 179.213304][ T4711] sysfs_warn_dup+0x9c/0xb8 [ 179.213317][ T4711] sysfs_create_dir_ns+0x190/0x1f4 [ 179.213329][ T4711] kobject_add_internal+0x290/0x6f0 [ 179.213341][ T4711] kobject_add_varg+0x9c/0xe8 [ 179.213352][ T4711] kobject_add+0x110/0x1c8 [ 179.213363][ T4711] device_add+0x394/0x9e0 [ 179.213372][ T4711] hci_conn_add_sysfs+0xbc/0x1e8 [ 179.213381][ T4711] le_conn_complete_evt+0xc84/0x122c [ 179.213393][ T4711] hci_le_conn_complete_evt+0x114/0x3d8 [ 179.213404][ T4711] hci_le_meta_evt+0x2b0/0x46c [ 179.213412][ T4711] hci_event_packet+0x4c0/0x9c8 [ 179.213425][ T4711] hci_rx_work+0x2f4/0xd78 [ 179.213434][ T4711] process_scheduled_works+0x91c/0x1250 [ 179.213445][ T4711] worker_thread+0x798/0xbd0 [ 179.213455][ T4711] kthread+0x304/0x3d4 [ 179.213464][ T4711] ret_from_fork+0x10/0x20 [ 179.213492][ T4711] kobject: kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 179.213508][ T4711] Bluetooth: hci2: failed to register connection device [ 179.266450][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 179.453973][ T8781] netlink: 'syz.7.817': attribute type 2 has an invalid length. [ 179.454035][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.7.817'. [ 179.486001][ T8781] set_capacity_and_notify: 1 callbacks suppressed [ 179.488975][ T8781] loop7: detected capacity change from 0 to 512 [ 179.505455][ T8781] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 179.509066][ T8781] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 179.513298][ T8781] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.817: Corrupt directory, running e2fsck is recommended [ 179.521083][ T8781] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 179.523084][ T8781] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.817: corrupted in-inode xattr: e_name out of bounds [ 179.527262][ T8781] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 179.529540][ T8781] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.817: couldn't read orphan inode 15 (err -117) [ 179.529599][ T8781] loop7: lost filesystem error report for type 5 error -117 [ 179.540296][ T8781] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.720007][ T8791] Injecting memory failure for pfn 0x2190ff at process virtual address 0x20ffd000 [ 179.720730][ T8791] Memory failure: 0x2190ff: Sending SIGBUS to syz.2.818:8791 due to hardware memory corruption [ 179.737326][ T8791] Memory failure: 0x2190ff: recovery action for already poisoned page: Failed [ 179.753028][ T8790] sctp: [Deprecated]: syz.0.819 (pid 8790) Use of int in max_burst socket option. [ 179.753028][ T8790] Use struct sctp_assoc_value instead [ 179.871905][ T8795] loop0: detected capacity change from 0 to 256 [ 179.884113][ T8795] vfat: Unknown parameter 'hsR[tail' [ 179.934923][ T6850] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.965128][ T8795] netdevsim netdevsim0: Direct firmware load for T)`)YFnA@T<3ڂ$rcnHwC" -8/ failed with error -2 [ 179.965179][ T8795] netdevsim netdevsim0: Falling back to sysfs fallback for: T)`)YFnA@T<3ڂ$rcnHwC" -8/ [ 180.034665][ T8786] loop2: detected capacity change from 0 to 512 [ 180.052255][ T8786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.190615][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.281584][ T8820] loop2: detected capacity change from 0 to 128 [ 180.298490][ T8820] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 180.300478][ T8820] FAT-fs (loop2): Filesystem has been set read-only [ 180.360187][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.7.825'. [ 180.399491][ T8826] loop2: detected capacity change from 0 to 512 [ 180.402523][ T8826] vfat: Unknown parameter 'shortne' [ 180.782753][ T8831] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 180.784958][ T8831] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 180.784967][ T8831] PKCS7: Unsupported data type 106 [ 180.792234][ T8799] netdevsim netdevsim0: Direct firmware load for T)`)YFnA@T<3ڂ$rcnHwC" -8/ failed with error -2 [ 180.792266][ T8799] netdevsim netdevsim0: Falling back to sysfs fallback for: T)`)YFnA@T<3ڂ$rcnHwC" -8/ [ 180.942249][ T8836] tmpfs: Unknown parameter 'fuse' [ 180.946122][ T8836] autofs: Unknown parameter 'fuse' [ 181.081380][ T8841] loop8: detected capacity change from 0 to 1024 [ 181.085279][ T8841] EXT4-fs: Ignoring removed orlov option [ 181.087034][ T8841] EXT4-fs: Ignoring removed bh option [ 181.090060][ T8841] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 181.099801][ T8841] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 181.102175][ T8841] overlayfs: missing 'lowerdir' [ 181.257467][ T4708] Bluetooth: hci2: command 0x2016 tx timeout [ 183.302442][ T4708] Bluetooth: hci2: command 0x2016 tx timeout [ 184.768299][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 184.821619][ T8872] loop2: detected capacity change from 0 to 512 [ 184.827281][ T8873] overlayfs: failed to resolve './file0': -2 [ 184.844496][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 184.855957][ T8872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.885291][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 184.895624][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 184.905767][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 184.930457][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 184.964705][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 184.983740][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 184.986332][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 185.084256][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.264118][ T8900] fuse: Unknown parameter 'fX' [ 185.266818][ T8900] fuse: Bad value for 'user_id' [ 185.270060][ T8900] fuse: Bad value for 'user_id' [ 185.297136][ T8900] No control pipe specified [ 185.360693][ T8908] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 185.364960][ T8904] loop7: detected capacity change from 0 to 256 [ 185.388973][ T8867] __nla_validate_parse: 34 callbacks suppressed [ 185.389016][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 185.411375][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 185.428256][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 185.435316][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 185.444005][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 185.446911][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 185.454578][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 185.461241][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 185.472487][ T8867] netlink: 400 bytes leftover after parsing attributes in process `syz.8.838'. [ 185.727752][ T8921] loop8: detected capacity change from 0 to 128 [ 186.632648][ T8897] loop0: detected capacity change from 0 to 8192 [ 186.646605][ T8897] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.627555][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.630895][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.634762][ T11] block nbd4: Possible stuck request 0000000007c7c0c4: control (read@0,4096B). Runtime 30 seconds [ 187.637410][ T4383] block nbd0: Possible stuck request 00000000612c9ae4: control (read@0,4096B). Runtime 60 seconds [ 188.659731][ T4383] block nbd5: Possible stuck request 00000000fa2731e8: control (read@0,4096B). Runtime 30 seconds [ 189.005838][ T8930] loop2: detected capacity change from 0 to 1024 [ 189.020307][ T8930] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 189.037094][ T8930] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.852: lblock 2 mapped to illegal pblock 2 (length 1) [ 189.037129][ T8930] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 189.037202][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 189.037224][ C0] EXT4-fs (loop2): initial error at time 189: ext4_map_blocks:790: inode 3: block 2 [ 189.037266][ C0] EXT4-fs (loop2): last error at time 189: ext4_map_blocks:790: inode 3: block 2 [ 189.051559][ T8930] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 189.051604][ T8930] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.852: lblock 0 mapped to illegal pblock 48 (length 1) [ 189.051657][ T8930] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 189.056694][ T8930] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 189.056725][ T8930] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.852: Failed to acquire dquot type 0 [ 189.056771][ T8930] loop2: lost filesystem error report for type 5 error -117 [ 189.065806][ T8930] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 189.065835][ T8930] loop2: lost filesystem error report for type 5 error -117 [ 189.070322][ T8930] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.852: mark_inode_dirty error [ 189.070381][ T8930] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 189.075186][ T8930] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 189.075278][ T8930] EXT4-fs (loop2): 1 orphan inode deleted [ 189.075836][ T8930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.084294][ T54] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 189.084324][ T54] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 189.089989][ T54] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 189.093875][ T54] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 0 [ 189.093910][ T54] loop2: lost filesystem error report for type 5 error -117 [ 189.148752][ T8930] veth3: entered promiscuous mode [ 189.149883][ T8930] veth3: entered allmulticast mode [ 189.246439][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.265537][ T4718] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 189.265572][ T4718] loop2: lost filesystem error report for type 5 error -117 [ 189.277893][ T4718] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 189.277939][ T4718] loop2: lost filesystem error report for type 5 error -117 [ 189.291448][ T4718] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 189.291490][ T4718] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 189.295607][ T4718] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 189.295669][ T4718] loop2: lost filesystem error report for type 5 error -117 [ 189.708029][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.861'. [ 189.862061][ T8975] evm: overlay not supported [ 189.950367][ T8974] netlink: 'syz.7.865': attribute type 2 has an invalid length. [ 189.952144][ T8974] netlink: 'syz.7.865': attribute type 1 has an invalid length. [ 189.983359][ T8978] FAULT_INJECTION: forcing a failure. [ 189.983359][ T8978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.983407][ T8978] CPU: 0 UID: 0 PID: 8978 Comm: syz.8.866 Tainted: G L syzkaller #0 PREEMPT [ 189.983426][ T8978] Tainted: [L]=SOFTLOCKUP [ 189.983430][ T8978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 189.983436][ T8978] Call trace: [ 189.983440][ T8978] show_stack+0x2c/0x3c (C) [ 189.983459][ T8978] __dump_stack+0x30/0x40 [ 189.983470][ T8978] dump_stack_lvl+0xd8/0x12c [ 189.983479][ T8978] dump_stack+0x1c/0x28 [ 189.983489][ T8978] should_fail_ex+0x41c/0x590 [ 189.983500][ T8978] should_fail+0x14/0x24 [ 189.983512][ T8978] should_fail_usercopy+0x20/0x30 [ 189.983522][ T8978] _copy_from_iter+0x188/0x1064 [ 189.983533][ T8978] netlink_sendmsg+0x570/0x948 [ 189.983543][ T8978] __sock_sendmsg+0xc8/0x17c [ 189.983552][ T8978] ____sys_sendmsg+0x3f8/0x6c8 [ 189.983560][ T8978] ___sys_sendmsg+0x198/0x224 [ 189.983568][ T8978] __sys_sendmmsg+0x204/0x580 [ 189.983576][ T8978] __arm64_sys_sendmmsg+0xac/0xc8 [ 189.983585][ T8978] invoke_syscall+0x98/0x244 [ 189.983595][ T8978] el0_svc_common+0xec/0x23c [ 189.983604][ T8978] do_el0_svc+0x4c/0x5c [ 189.983614][ T8978] el0_svc+0x64/0x260 [ 189.983623][ T8978] el0t_64_sync_handler+0x44/0x104 [ 189.983632][ T8978] el0t_64_sync+0x198/0x19c [ 190.183638][ T8981] netlink: 'syz.7.867': attribute type 1 has an invalid length. [ 190.381852][ T8981] netlink: 'syz.7.867': attribute type 10 has an invalid length. [ 190.382040][ T8981] dummy0: entered promiscuous mode [ 190.426045][ T8981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.426268][ T8981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.474714][ T8981] loop7: detected capacity change from 0 to 512 [ 190.481636][ T9002] loop0: detected capacity change from 0 to 128 [ 190.483507][ T8981] EXT4-fs: Ignoring removed nobh option [ 190.493446][ T8981] ext4: Bad value for 'auto_da_alloc' [ 190.654980][ T9012] 9p: Bad value for 'rfdno' [ 190.655152][ T9012] 9p: Bad value for 'rfdno' [ 190.655261][ T9012] 9p: Bad value for 'rfdno' [ 190.655374][ T9012] 9p: Bad value for 'rfdno' [ 190.655476][ T9012] 9p: Bad value for 'rfdno' [ 190.655571][ T9012] 9p: Bad value for 'rfdno' [ 190.670242][ T9012] 9p: Bad value for 'rfdno' [ 190.674805][ T9012] 9p: Bad value for 'rfdno' [ 190.680852][ T9012] 9p: Bad value for 'rfdno' [ 191.467526][ T9057] __nla_validate_parse: 7 callbacks suppressed [ 191.467567][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 191.467664][ T9057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.519305][ T9057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.596488][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 191.933365][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.8.887'. [ 191.937036][ T9083] nbd9: detected capacity change from 0 to 32772 [ 191.951355][ T9083] loop8: detected capacity change from 0 to 512 [ 191.969514][ T9083] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.076969][ T4711] block nbd9: Receive control failed (result -104) [ 192.139146][ T7468] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.277015][ T9102] loop2: detected capacity change from 0 to 512 [ 192.282829][ T9102] EXT4-fs: Invalid want_extra_isize 2 [ 193.009736][ T4708] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.013717][ T4708] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.017047][ T4708] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.025345][ T4708] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.028261][ T4708] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.260359][ T9153] loop7: detected capacity change from 0 to 512 [ 193.285650][ T9153] Quota error (device loop7): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 193.285707][ T9153] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 193.285751][ T9153] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.905: Failed to acquire dquot type 1 [ 193.285772][ T9153] loop7: lost filesystem error report for type 5 error -117 [ 193.287799][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 193.287813][ C0] EXT4-fs (loop7): last error at time 193: ext4_acquire_dquot:7069 [ 193.310740][ T9153] EXT4-fs (loop7): 1 truncate cleaned up [ 193.311290][ T9153] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.316749][ T9156] tipc: Enabling of bearer rejected, failed to enable media [ 193.359209][ T9153] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 193.359255][ T9153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.361459][ T9153] EXT4-fs (loop7): changing journal_checksum during remount not supported; ignoring [ 193.369156][ T9153] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 193.414707][ T6850] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.447785][ T9163] tipc: Enabling of bearer rejected, failed to enable media [ 195.304185][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 195.613102][ T4708] Bluetooth: hci0: command tx timeout [ 197.130748][ T9185] bond1: Unable to set down delay as MII monitoring is disabled [ 197.134363][ T9185] bond1 (unregistering): Released all slaves [ 197.198218][ T9204] loop0: detected capacity change from 0 to 256 [ 197.463059][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.463148][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.463268][ T9139] bridge_slave_0: entered allmulticast mode [ 197.469215][ T9139] bridge_slave_0: entered promiscuous mode [ 197.473184][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.476224][ T9139] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.481282][ T9139] bridge_slave_1: entered allmulticast mode [ 197.487575][ T9139] bridge_slave_1: entered promiscuous mode [ 197.532149][ T9139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.545312][ T9139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.612899][ T9139] team0: Port device team_slave_0 added [ 197.613762][ T9139] team0: Port device team_slave_1 added [ 197.621953][ T4708] Bluetooth: hci0: command tx timeout [ 197.787719][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.789332][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.795453][ T9139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.798735][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.809113][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.815491][ T9139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.900783][ T9139] hsr_slave_0: entered promiscuous mode [ 197.905468][ T9139] hsr_slave_1: entered promiscuous mode [ 197.907871][ T9139] debugfs: 'hsr0' already exists in 'hsr' [ 197.909540][ T9139] Cannot create hsr debugfs directory [ 198.156489][ T9139] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 198.167532][ T9139] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.169699][ T9139] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 198.174581][ T9247] loop8: detected capacity change from 0 to 256 [ 198.191494][ T9139] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.194281][ T9139] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 198.203850][ T9139] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.206987][ T9139] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 198.213915][ T9139] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.220443][ T9247] bio_check_eod: 5544 callbacks suppressed [ 198.220471][ T9247] syz.8.927: attempt to access beyond end of device [ 198.220471][ T9247] loop8: rw=2049, sector=1768, nr_sectors = 52 limit=256 [ 198.266338][ T9246] syz.8.927: attempt to access beyond end of device [ 198.266338][ T9246] loop8: rw=2049, sector=1816, nr_sectors = 16 limit=256 [ 198.272582][ T9246] syz.8.927: attempt to access beyond end of device [ 198.272582][ T9246] loop8: rw=2049, sector=1864, nr_sectors = 32 limit=256 [ 198.282487][ T9246] syz.8.927: attempt to access beyond end of device [ 198.282487][ T9246] loop8: rw=2049, sector=1928, nr_sectors = 36 limit=256 [ 198.323735][ T9256] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1 [ 198.323779][ T9256] Unsupported pkey algo: 106 [ 198.436771][ T9139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.474268][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'. [ 198.575964][ T9139] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.586707][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.586762][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.592437][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.592481][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.865599][ T9273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.931'. [ 198.989000][ T9256] loop7: detected capacity change from 0 to 512 [ 199.029192][ T9256] EXT4-fs (loop7): 1 truncate cleaned up [ 199.029731][ T9256] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.455652][ T9291] loop8: detected capacity change from 0 to 512 [ 199.465926][ T9291] EXT4-fs (loop8): Test dummy encryption mode enabled [ 199.478126][ T9291] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.936: inode has both inline data and extents flags [ 199.481017][ T9291] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 199.482560][ T9291] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.936: couldn't read orphan inode 15 (err -117) [ 199.482592][ T9291] loop8: lost filesystem error report for type 5 error -117 [ 199.488384][ C0] EXT4-fs (loop8): error count since last fsck: 2 [ 199.488398][ C0] EXT4-fs (loop8): initial error at time 204: ext4_orphan_get:1403: inode 15 [ 199.488415][ C0] EXT4-fs (loop8): last error at time 204: ext4_orphan_get:1408 [ 199.497893][ T9291] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.521456][ T9139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.645960][ T7468] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.699499][ T4708] Bluetooth: hci0: command tx timeout [ 199.872192][ T9282] EXT4-fs error (device loop7): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 199.915864][ T9139] veth0_vlan: entered promiscuous mode [ 199.998611][ T9307] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 200.001591][ T9307] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 200.011819][ T6850] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.044049][ T9139] veth1_vlan: entered promiscuous mode [ 200.115265][ T9139] veth0_macvtap: entered promiscuous mode [ 200.122338][ T9139] veth1_macvtap: entered promiscuous mode [ 200.136489][ T9317] Bluetooth: MGMT ver 1.23 [ 200.137064][ T9317] Bluetooth: hci0: unsupported parameter 5161 [ 200.137094][ T9317] Bluetooth: hci0: unsupported parameter 8192 [ 200.137106][ T9317] Bluetooth: hci0: unsupported parameter 5161 [ 200.137117][ T9317] Bluetooth: hci0: unsupported parameter 8192 [ 200.155458][ T9316] netlink: 'syz.7.941': attribute type 1 has an invalid length. [ 200.177770][ T4383] block nbd1: Possible stuck request 000000002e0221bf: control (read@0,4096B). Runtime 60 seconds [ 200.205239][ T9316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.231274][ T9139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.246374][ T9316] macvlan2: entered promiscuous mode [ 200.249126][ T9316] macvlan2: entered allmulticast mode [ 200.253736][ T9316] bond1: entered promiscuous mode [ 200.256328][ T9316] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 200.260528][ T9316] bond1: left promiscuous mode [ 200.271694][ T9139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.338269][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.338496][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.338547][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.338574][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.400158][ T3632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.400199][ T3632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.441889][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.443875][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.542719][ T9337] loop0: detected capacity change from 0 to 1024 [ 200.546548][ T9337] EXT4-fs: Ignoring removed nobh option [ 200.549108][ T9337] EXT4-fs: Ignoring removed bh option [ 200.552640][ T9337] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 200.563636][ T9337] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 200.563686][ T9337] System zones: 0-1, 3-12 [ 200.566636][ T9337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.666336][ T9340] FAULT_INJECTION: forcing a failure. [ 201.666336][ T9340] name failslab, interval 1, probability 0, space 0, times 0 [ 201.666381][ T9340] CPU: 0 UID: 0 PID: 9340 Comm: syz.9.900 Tainted: G L syzkaller #0 PREEMPT [ 201.666401][ T9340] Tainted: [L]=SOFTLOCKUP [ 201.666408][ T9340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 201.666415][ T9340] Call trace: [ 201.666418][ T9340] show_stack+0x2c/0x3c (C) [ 201.666441][ T9340] __dump_stack+0x30/0x40 [ 201.666454][ T9340] dump_stack_lvl+0xd8/0x12c [ 201.666466][ T9340] dump_stack+0x1c/0x28 [ 201.666478][ T9340] should_fail_ex+0x41c/0x590 [ 201.666491][ T9340] should_failslab+0xc4/0x120 [ 201.666504][ T9340] kmem_cache_alloc_node_noprof+0x98/0x604 [ 201.666518][ T9340] alloc_io_context+0x34/0x250 [ 201.666529][ T9340] set_task_ioprio+0x44c/0x580 [ 201.666539][ T9340] __arm64_sys_ioprio_set+0x4cc/0x920 [ 201.666553][ T9340] invoke_syscall+0x98/0x244 [ 201.666565][ T9340] el0_svc_common+0xec/0x23c [ 201.666577][ T9340] do_el0_svc+0x4c/0x5c [ 201.666588][ T9340] el0_svc+0x64/0x260 [ 201.666599][ T9340] el0t_64_sync_handler+0x44/0x104 [ 201.666609][ T9340] el0t_64_sync+0x198/0x19c [ 201.777764][ T4708] Bluetooth: hci0: command tx timeout [ 201.810427][ T9350] netlink: 36 bytes leftover after parsing attributes in process `syz.8.950'. [ 201.844442][ T9337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.946'. [ 201.854998][ T9355] loop9: detected capacity change from 0 to 1024 [ 201.867776][ T9355] EXT4-fs: Ignoring removed nobh option [ 201.867839][ T9355] EXT4-fs: Ignoring removed bh option [ 201.881386][ T9355] EXT4-fs (loop9): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 201.899183][ T9358] loop7: detected capacity change from 0 to 512 [ 201.909262][ T9355] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 201.909325][ T9355] System zones: 0-1, 3-12 [ 201.909978][ T9355] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.927376][ T9358] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 201.939444][ T9358] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.978473][ T4712] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /208/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 201.993777][ T4712] EXT4-fs (loop0): Remounting filesystem read-only [ 202.038582][ T9139] EXT4-fs error (device loop9): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 202.043631][ T9139] EXT4-fs (loop9): Remounting filesystem read-only [ 202.058185][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.061066][ T9139] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.097940][ T4383] block nbd2: Possible stuck request 000000009b02411c: control (read@0,4096B). Runtime 60 seconds [ 202.137635][ T9372] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 202.159763][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.9.957'. [ 202.239356][ T9372] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 202.516275][ T9390] FAULT_INJECTION: forcing a failure. [ 202.516275][ T9390] name failslab, interval 1, probability 0, space 0, times 0 [ 202.516311][ T9390] CPU: 0 UID: 0 PID: 9390 Comm: syz.8.960 Tainted: G L syzkaller #0 PREEMPT [ 202.516328][ T9390] Tainted: [L]=SOFTLOCKUP [ 202.516332][ T9390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 202.516338][ T9390] Call trace: [ 202.516341][ T9390] show_stack+0x2c/0x3c (C) [ 202.516359][ T9390] __dump_stack+0x30/0x40 [ 202.516372][ T9390] dump_stack_lvl+0xd8/0x12c [ 202.516383][ T9390] dump_stack+0x1c/0x28 [ 202.516394][ T9390] should_fail_ex+0x41c/0x590 [ 202.516407][ T9390] should_failslab+0xc4/0x120 [ 202.516420][ T9390] kmem_cache_alloc_noprof+0x94/0x5d4 [ 202.516433][ T9390] mas_alloc_nodes+0x234/0x2d8 [ 202.516447][ T9390] mas_preallocate+0x43c/0x6e8 [ 202.516455][ T9390] __split_vma+0x298/0x83c [ 202.516467][ T9390] vms_gather_munmap_vmas+0x3d0/0x101c [ 202.516478][ T9390] mmap_region+0x720/0x1c30 [ 202.516489][ T9390] do_mmap+0xb88/0x1104 [ 202.516497][ T9390] vm_mmap_pgoff+0x298/0x46c [ 202.516506][ T9390] ksys_mmap_pgoff+0xd0/0x5b4 [ 202.516514][ T9390] __arm64_sys_mmap+0x110/0x12c [ 202.516526][ T9390] invoke_syscall+0x98/0x244 [ 202.516538][ T9390] el0_svc_common+0xec/0x23c [ 202.516549][ T9390] do_el0_svc+0x4c/0x5c [ 202.516561][ T9390] el0_svc+0x64/0x260 [ 202.516570][ T9390] el0t_64_sync_handler+0x44/0x104 [ 202.516580][ T9390] el0t_64_sync+0x198/0x19c [ 202.648927][ T6850] VFS: Lookup of '' in ext4 loop7 would have caused loop [ 202.651594][ T6850] VFS: Lookup of '' in ext4 loop7 would have caused loop [ 202.847060][ T9402] bond0: entered promiscuous mode [ 202.850164][ T9402] bond_slave_0: entered promiscuous mode [ 202.852278][ T9402] bond_slave_1: entered promiscuous mode [ 202.858342][ T9402] batadv0: entered promiscuous mode [ 202.866684][ T9402] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 202.877637][ T9402] netlink: 'syz.9.966': attribute type 10 has an invalid length. [ 202.882774][ T9402] syz_tun: entered promiscuous mode [ 202.899528][ T9402] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 202.931874][ T6850] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.161487][ T9412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.967'. [ 203.164300][ T9412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.967'. [ 203.170868][ T9412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.967'. [ 203.173205][ T9412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.967'. [ 203.175738][ T9412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.967'. [ 203.405734][ T4711] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.419571][ T4711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.422185][ T4711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.425234][ T4711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.425649][ T4711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.469246][ T9429] loop8: detected capacity change from 0 to 512 [ 203.477622][ T9429] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 203.480612][ T9429] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 203.480783][ T9429] EXT4-fs error (device loop8): ext4_get_journal_inode:5927: inode #2: comm syz.8.975: iget: special inode unallocated [ 203.480818][ T9429] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 203.487195][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 203.487226][ C0] EXT4-fs (loop8): initial error at time 208: ext4_get_journal_inode:5927: inode 2 [ 203.487273][ C0] EXT4-fs (loop8): last error at time 208: ext4_get_journal_inode:5927: inode 2 [ 203.501141][ T9429] EXT4-fs (loop8): no journal found [ 203.511071][ T9412] __nla_validate_parse: 54 callbacks suppressed [ 203.511111][ T9412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.967'. [ 203.515191][ T9412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.967'. [ 203.521848][ T9412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.967'. [ 203.531838][ T9412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.967'. [ 204.231828][ T4383] block nbd6: Possible stuck request 00000000df12b331: control (read@0,4096B). Runtime 30 seconds [ 204.475313][ T9453] pimreg: entered allmulticast mode [ 204.476384][ T9453] pimreg: left allmulticast mode [ 204.706534][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.9.983'. [ 204.716752][ T9462] tap0: tun_chr_ioctl cmd 1074025677 [ 204.716823][ T9462] tap0: linktype set to 259 [ 204.722446][ T9458] fuse: Bad value for 'user_id' [ 204.722489][ T9458] fuse: Bad value for 'user_id' [ 205.012138][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 205.068189][ T9425] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.070835][ T9425] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.070986][ T9425] bridge_slave_0: entered allmulticast mode [ 205.071494][ T9425] bridge_slave_0: entered promiscuous mode [ 205.084353][ T9425] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.086862][ T9425] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.086952][ T9425] bridge_slave_1: entered allmulticast mode [ 205.095268][ T9425] bridge_slave_1: entered promiscuous mode [ 205.179264][ T9425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.189187][ T9425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.214648][ T9425] team0: Port device team_slave_0 added [ 205.228991][ T9425] team0: Port device team_slave_1 added [ 205.270813][ T9425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.272488][ T9425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.282608][ T9425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.298119][ T9425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.298147][ T9425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.298174][ T9425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.311747][ T4383] block nbd7: Possible stuck request 00000000e935e178: control (read@0,4096B). Runtime 30 seconds [ 205.381173][ T9425] hsr_slave_0: entered promiscuous mode [ 205.399605][ T9425] hsr_slave_1: entered promiscuous mode [ 205.406053][ T9425] debugfs: 'hsr0' already exists in 'hsr' [ 205.407600][ T9425] Cannot create hsr debugfs directory [ 205.459288][ T4711] Bluetooth: hci2: command tx timeout [ 205.462054][ T9493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.492016][ T9491] overlay: ./file0 is not a directory [ 205.525735][ T9495] loop9: detected capacity change from 0 to 4096 [ 205.538050][ T9495] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 205.538076][ T9495] EXT4-fs (loop9): Test dummy encryption mode enabled [ 205.538100][ T9495] EXT4-fs (loop9): first meta block group too large: 184549376 (group descriptor block count 1) [ 205.692942][ T9507] loop9: detected capacity change from 0 to 4096 [ 205.979786][ T9527] overlay: Bad value for 'upperdir' [ 206.984174][ T4383] block nbd3: Possible stuck request 0000000064c2cf71: control (read@0,2048B). Runtime 60 seconds [ 206.986378][ T4383] block nbd3: Possible stuck request 00000000eec9dfcb: control (read@2048,2048B). Runtime 60 seconds [ 207.032567][ T9536] loop0: detected capacity change from 0 to 512 [ 207.110106][ T9538] loop9: detected capacity change from 0 to 512 [ 207.112484][ T9536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.146270][ T9538] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 207.157540][ T9538] EXT4-fs (loop9): 1 truncate cleaned up [ 207.158304][ T9538] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.164479][ T9425] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.198314][ T9425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 207.200292][ T9425] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.219656][ T4383] block nbd8: Possible stuck request 00000000ed8743e7: control (read@0,4096B). Runtime 30 seconds [ 207.223836][ T9425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 207.233638][ T9425] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 207.243068][ T9425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 207.245065][ T9425] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.255163][ T9425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 207.269676][ T9549] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 207.269705][ T9549] CPU: 0 UID: 0 PID: 9549 Comm: syz.0.1004 Tainted: G L syzkaller #0 PREEMPT [ 207.269726][ T9549] Tainted: [L]=SOFTLOCKUP [ 207.269730][ T9549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 207.269738][ T9549] Call trace: [ 207.269741][ T9549] show_stack+0x2c/0x3c (C) [ 207.269762][ T9549] __dump_stack+0x30/0x40 [ 207.269776][ T9549] dump_stack_lvl+0xd8/0x12c [ 207.269788][ T9549] dump_stack+0x1c/0x28 [ 207.269799][ T9549] sysfs_warn_dup+0x9c/0xb8 [ 207.269813][ T9549] sysfs_create_dir_ns+0x190/0x1f4 [ 207.269825][ T9549] kobject_add_internal+0x290/0x6f0 [ 207.269839][ T9549] kobject_add_varg+0x9c/0xe8 [ 207.269850][ T9549] kobject_add+0x110/0x1c8 [ 207.269860][ T9549] device_add+0x394/0x9e0 [ 207.269870][ T9549] device_register+0x28/0x38 [ 207.269878][ T9549] tty_register_device_attr+0x31c/0x5e8 [ 207.269888][ T9549] tty_register_device+0x3c/0x50 [ 207.269897][ T9549] gsm_activate_mux+0xdc/0x284 [ 207.269908][ T9549] gsmld_ioctl+0xea8/0x1414 [ 207.269917][ T9549] tty_ioctl+0x8a8/0xcb0 [ 207.269925][ T9549] __arm64_sys_ioctl+0x154/0x1cc [ 207.269939][ T9549] invoke_syscall+0x98/0x244 [ 207.269951][ T9549] el0_svc_common+0xec/0x23c [ 207.269962][ T9549] do_el0_svc+0x4c/0x5c [ 207.269973][ T9549] el0_svc+0x64/0x260 [ 207.269983][ T9549] el0t_64_sync_handler+0x44/0x104 [ 207.269993][ T9549] el0t_64_sync+0x198/0x19c [ 207.270030][ T9549] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 207.320396][ T9556] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 207.494571][ T9425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.526520][ T9425] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.542839][ T4711] Bluetooth: hci2: command tx timeout [ 207.545864][ T9139] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.555247][ T3632] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.555292][ T3632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.555875][ T3632] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.555904][ T3632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.760404][ T9580] tipc: New replicast peer: 255.255.255.255 [ 207.760711][ T9580] tipc: Enabled bearer , priority 10 [ 208.074837][ T9592] netlink: 'syz.8.1015': attribute type 1 has an invalid length. [ 208.275168][ T4712] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 208.287117][ T4712] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 208.298697][ T4712] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 208.304967][ T4712] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 208.312961][ T4712] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 208.316692][ T4712] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 208.322748][ T4712] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 208.325537][ T4712] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 208.395187][ T4712] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 208.398784][ T4712] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 208.445498][ T9425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.511931][ T9604] loop9: detected capacity change from 0 to 4096 [ 208.546046][ T9604] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.620326][ T9139] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.877944][ T4715] tipc: Node number set to 141737532 [ 208.954937][ T7842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.020332][ T9638] loop9: detected capacity change from 0 to 128 [ 209.043117][ T9425] veth0_vlan: entered promiscuous mode [ 209.069242][ T9638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 209.069290][ T9638] System zones: 1-3, 19-19, 35-36 [ 209.077167][ T9638] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 209.155045][ T9425] veth1_vlan: entered promiscuous mode [ 209.245906][ T9425] veth0_macvtap: entered promiscuous mode [ 209.277864][ T9425] veth1_macvtap: entered promiscuous mode [ 209.281783][ T9425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.330030][ T9425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.497431][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.499404][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.501495][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.503551][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.576674][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.576703][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.617689][ T4711] Bluetooth: hci2: command tx timeout [ 209.666808][ T9664] loop8: detected capacity change from 0 to 256 [ 209.702715][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.702742][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.926211][ T4708] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.934255][ T4708] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.936868][ T4708] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.940851][ T4708] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.944408][ T4708] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.146996][ T9688] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 210.310935][ T9698] loop4: detected capacity change from 0 to 1024 [ 210.315554][ T9698] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 210.330604][ T9698] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 210.330657][ T9698] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 210.330741][ T9698] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 210.340290][ T9698] EXT4-fs error (device loop4): ext4_get_journal_inode:5927: inode #17: comm syz.4.1033: iget: bad i_size value: 4398046511204 [ 210.340361][ T9698] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 210.347198][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 210.347232][ C0] EXT4-fs (loop4): initial error at time 215: ext4_get_journal_inode:5927: inode 17 [ 210.347267][ C0] EXT4-fs (loop4): last error at time 215: ext4_get_journal_inode:5927: inode 17 [ 210.359037][ T9698] EXT4-fs (loop4): no journal found [ 210.376358][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.376582][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.011301][ T10] Process accounting resumed [ 211.127903][ T9674] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.130262][ T9674] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.133044][ T9674] bridge_slave_0: entered allmulticast mode [ 211.142476][ T9674] bridge_slave_0: entered promiscuous mode [ 211.148521][ T9674] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.153017][ T9674] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.153135][ T9674] bridge_slave_1: entered allmulticast mode [ 211.160687][ T9674] bridge_slave_1: entered promiscuous mode [ 211.252103][ T9139] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.265901][ T9674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.287658][ T9674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.329441][ T9740] No such timeout policy "syz1" [ 211.354225][ T9674] team0: Port device team_slave_0 added [ 211.363038][ T9674] team0: Port device team_slave_1 added [ 211.382935][ T9744] FAULT_INJECTION: forcing a failure. [ 211.382935][ T9744] name failslab, interval 1, probability 0, space 0, times 0 [ 211.382968][ T9744] CPU: 0 UID: 0 PID: 9744 Comm: syz.9.1041 Tainted: G L syzkaller #0 PREEMPT [ 211.382984][ T9744] Tainted: [L]=SOFTLOCKUP [ 211.382988][ T9744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 211.382994][ T9744] Call trace: [ 211.382997][ T9744] show_stack+0x2c/0x3c (C) [ 211.383023][ T9744] __dump_stack+0x30/0x40 [ 211.383036][ T9744] dump_stack_lvl+0xd8/0x12c [ 211.383047][ T9744] dump_stack+0x1c/0x28 [ 211.383056][ T9744] should_fail_ex+0x41c/0x590 [ 211.383067][ T9744] should_failslab+0xc4/0x120 [ 211.383078][ T9744] kmem_cache_alloc_node_noprof+0x98/0x604 [ 211.383090][ T9744] __alloc_skb+0x1f0/0x610 [ 211.383099][ T9744] alloc_skb_with_frags+0xb8/0x690 [ 211.383110][ T9744] sock_alloc_send_pskb+0x740/0x850 [ 211.383120][ T9744] raw_send_hdrinc+0x218/0x10f8 [ 211.383132][ T9744] raw_sendmsg+0xf0c/0x148c [ 211.383142][ T9744] inet_sendmsg+0xb4/0xd8 [ 211.383150][ T9744] __sock_sendmsg+0xc8/0x17c [ 211.383157][ T9744] __sys_sendto+0x250/0x328 [ 211.383165][ T9744] __arm64_sys_sendto+0xec/0x10c [ 211.383173][ T9744] invoke_syscall+0x98/0x244 [ 211.383183][ T9744] el0_svc_common+0xec/0x23c [ 211.383193][ T9744] do_el0_svc+0x4c/0x5c [ 211.383202][ T9744] el0_svc+0x64/0x260 [ 211.383212][ T9744] el0t_64_sync_handler+0x44/0x104 [ 211.383226][ T9744] el0t_64_sync+0x198/0x19c [ 211.501324][ T9674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.501367][ T9674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.501400][ T9674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.514407][ T9674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.516913][ T9674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.522543][ T9674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.712767][ T4711] Bluetooth: hci2: command tx timeout [ 211.762810][ T9674] hsr_slave_0: entered promiscuous mode [ 211.763245][ T9674] hsr_slave_1: entered promiscuous mode [ 211.763495][ T9674] debugfs: 'hsr0' already exists in 'hsr' [ 211.763512][ T9674] Cannot create hsr debugfs directory [ 212.143953][ T4711] Bluetooth: hci3: command tx timeout [ 212.266041][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1049'. [ 212.372705][ T9772] loop9: detected capacity change from 0 to 128 [ 212.382381][ T9772] vfat: Unknown parameter 'dos1xf<loppy' [ 212.493671][ T9787] loop4: detected capacity change from 0 to 1024 [ 212.519374][ T9787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.702624][ T30] audit: type=1326 audit(217.662:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1054" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac3792a8 code=0x7ffc0000 [ 212.708320][ T30] audit: type=1326 audit(217.672:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1054" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac3792a8 code=0x7ffc0000 [ 212.752224][ T30] audit: type=1326 audit(217.712:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1054" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac3792a8 code=0x7ffc0000 [ 212.752271][ T30] audit: type=1326 audit(217.712:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1054" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac3792a8 code=0x7ffc0000 [ 212.774617][ T30] audit: type=1326 audit(217.732:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1054" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=76 compat=0 ip=0xffffac3792a8 code=0x7ffc0000 [ 212.774660][ T30] audit: type=1326 audit(217.732:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1054" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac3792a8 code=0x7ffc0000 [ 212.774691][ T30] audit: type=1326 audit(217.732:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1054" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac3792a8 code=0x7ffc0000 [ 212.791305][ T9787] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 212.793628][ T30] audit: type=1326 audit(217.762:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1054" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac3792a8 code=0x7ffc0000 [ 212.793685][ T30] audit: type=1326 audit(217.762:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1054" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac3792a8 code=0x7ffc0000 [ 212.807547][ T30] audit: type=1326 audit(217.772:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1054" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffac3792a8 code=0x7ffc0000 [ 212.864531][ T9801] xt_cluster: you have exceeded the maximum number of cluster nodes (128 > 32) [ 212.867016][ T9806] netlink: 'syz.8.1055': attribute type 2 has an invalid length. [ 212.903989][ T9425] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.125624][ T4711] Bluetooth: hci3: command tx timeout [ 215.168254][ T9814] 8021q: VLANs not supported on wg0 [ 216.599674][ T9836] loop8: detected capacity change from 0 to 512 [ 216.616148][ T9836] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 216.798523][ T9674] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.816132][ T9674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.819828][ T9674] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.837508][ T9674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.848635][ T9849] netlink: 'syz.1.1064': attribute type 10 has an invalid length. [ 216.860766][ T9674] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.874315][ T9674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.925353][ T9849] team0 (unregistering): Port device team_slave_0 removed [ 217.019985][ T9849] team0 (unregistering): Port device team_slave_1 removed [ 217.045680][ T9674] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.072695][ T9674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.078906][ T9852] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 217.082272][ T9852] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 217.137670][ T4711] Bluetooth: hci3: command tx timeout [ 217.278749][ T9868] netlink: 'syz.4.1066': attribute type 13 has an invalid length. [ 217.286471][ T9868] gretap0: refused to change device tx_queue_len [ 217.290434][ T9868] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 217.392641][ T9674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.408996][ T9873] overlayfs: failed to clone upperpath [ 217.421028][ T9674] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.455843][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.455896][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.469414][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.469456][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.100198][ T11] block nbd0: Possible stuck request 00000000612c9ae4: control (read@0,4096B). Runtime 90 seconds [ 218.102762][ T4383] block nbd4: Possible stuck request 0000000007c7c0c4: control (read@0,4096B). Runtime 60 seconds [ 218.319515][ T9674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.719146][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1077'. [ 218.745926][ T4383] block nbd5: Possible stuck request 00000000fa2731e8: control (read@0,4096B). Runtime 60 seconds [ 218.774427][ T9941] loop4: detected capacity change from 0 to 128 [ 218.823672][ T9941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.825701][ T9941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.898813][ T9674] veth0_vlan: entered promiscuous mode [ 218.919276][ T9674] veth1_vlan: entered promiscuous mode [ 218.956870][ T9674] veth0_macvtap: entered promiscuous mode [ 218.968376][ T9674] veth1_macvtap: entered promiscuous mode [ 218.986906][ T9674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.019105][ T9674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.038850][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.038982][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.039070][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.039093][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.174093][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.174116][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.218054][ T4711] Bluetooth: hci3: command tx timeout [ 219.230675][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.230700][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.239229][ T9966] netlink: 'syz.9.1081': attribute type 1 has an invalid length. [ 219.268888][ T9966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.320265][ T9966] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1081'. [ 219.325020][ T9966] bond1: entered promiscuous mode [ 219.327102][ T9966] bond1: entered allmulticast mode [ 219.404412][ T9966] bond1: (slave dummy0): making interface the new active one [ 219.408181][ T9966] dummy0: entered promiscuous mode [ 219.411120][ T9966] dummy0: entered allmulticast mode [ 219.425439][ T9966] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 219.684454][ T9984] bridge_slave_0: left allmulticast mode [ 219.690734][ T9984] bridge_slave_0: left promiscuous mode [ 219.692771][ T9984] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.721450][ T9984] bridge_slave_1: left allmulticast mode [ 219.721482][ T9984] bridge_slave_1: left promiscuous mode [ 219.721623][ T9984] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.760522][ T9984] bond0: (slave bond_slave_0): Releasing backup interface [ 219.874993][ T9984] bond0: (slave bond_slave_1): Releasing backup interface [ 220.047001][ T9984] team0: Port device team_slave_0 removed [ 220.084013][ T9984] team0: Port device team_slave_1 removed [ 220.091739][ T9984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.094984][ T9984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.109356][ T9984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.113209][ T9984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.119673][ T9984] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 220.271207][ T9981] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.518485][ T9981] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.629439][ T9981] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.711199][T10016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1089'. [ 220.851164][ T9981] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.121006][ T54] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.121091][ T54] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.135725][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.147280][ T54] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.489139][T10061] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 221.618560][T10060] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 221.619870][T10060] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 222.081819][T10072] null_blk: nullb1: using native zone append [ 222.266841][T10072] null_blk: disk nullb1 created [ 222.589063][ T4383] block nbd9: Possible stuck request 0000000049c9ea5a: control (read@0,2048B). Runtime 30 seconds [ 222.589201][ T4383] block nbd9: Possible stuck request 0000000052178532: control (read@2048,2048B). Runtime 30 seconds [ 224.891316][T10105] loop9: detected capacity change from 0 to 512 [ 224.943392][T10105] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 225.017453][T10105] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 225.017646][T10105] System zones: 0-2, 18-18, 34-34 [ 225.027053][T10109] loop5: detected capacity change from 0 to 128 [ 225.037768][T10105] EXT4-fs error (device loop9): ext4_orphan_get:1429: comm syz.9.1106: bad orphan inode 15 [ 225.037944][T10105] loop9: lost filesystem error report for type 5 error -117 [ 225.041140][T10105] ext4_test_bit(bit=14, block=18) = 1 [ 225.041319][T10105] is_bad_inode(inode)=0 [ 225.041446][T10105] NEXT_ORPHAN(inode)=2264924160 [ 225.041555][T10105] max_ino=32 [ 225.041656][T10105] i_nlink=0 [ 225.047209][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 225.047225][ C0] EXT4-fs (loop9): initial error at time 230: ext4_orphan_get:1429 [ 225.047240][ C0] EXT4-fs (loop9): last error at time 230: ext4_orphan_get:1429 [ 225.088754][T10105] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2933: inode #15: comm syz.9.1106: corrupted xattr block 19: e_value out of bounds [ 225.091601][T10105] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 225.122890][T10109] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.142545][T10105] EXT4-fs warning (device loop9): ext4_evict_inode:288: xattr delete (err -117) [ 225.143253][T10105] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.157003][T10118] loop8: detected capacity change from 0 to 256 [ 225.578194][ T9139] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.804945][T10112] vlan2: entered promiscuous mode [ 225.805111][T10112] bridge0: entered promiscuous mode [ 225.964128][ T9674] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.099532][T10129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.099936][T10129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.118651][T10134] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1112'. [ 227.379777][T10153] loop8: detected capacity change from 0 to 512 [ 227.411531][T10153] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.1114: inode has both inline data and extents flags [ 227.413996][T10153] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 227.417208][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 227.417238][ C0] EXT4-fs (loop8): initial error at time 232: ext4_orphan_get:1403: inode 15 [ 227.417270][ C0] EXT4-fs (loop8): last error at time 232: ext4_orphan_get:1403: inode 15 [ 227.424001][T10153] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.1114: couldn't read orphan inode 15 (err -117) [ 227.427481][T10153] loop8: lost filesystem error report for type 5 error -117 [ 227.441015][T10153] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.275749][ T4383] block nbd1: Possible stuck request 000000002e0221bf: control (read@0,4096B). Runtime 90 seconds [ 230.567382][T10165] loop4: detected capacity change from 0 to 512 [ 231.341945][T10165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.369873][ T7468] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.190464][ T4383] block nbd2: Possible stuck request 000000009b02411c: control (read@0,4096B). Runtime 90 seconds [ 232.195292][ T4708] Bluetooth: hci0: command 0x0406 tx timeout [ 232.375678][ T9425] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.854892][T10200] coredump: 25(syz.5.1120): format_corename failed, aborting core [ 233.033965][ T30] kauditd_printk_skb: 167 callbacks suppressed [ 233.034136][ T30] audit: type=1326 audit(237.992:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10182 comm="syz.8.1119" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d792a8 code=0x0 [ 233.956958][T10208] loop4: detected capacity change from 0 to 8 [ 234.568829][T10208] SQUASHFS error: Unable to read inode 0xa7 [ 234.779429][ T4383] block nbd6: Possible stuck request 00000000df12b331: control (read@0,4096B). Runtime 60 seconds [ 234.821245][T10218] overlayfs: failed to clone upperpath [ 234.872652][T10221] overlayfs: failed to clone upperpath [ 235.390342][ T4383] block nbd7: Possible stuck request 00000000e935e178: control (read@0,4096B). Runtime 60 seconds [ 235.910297][T10230] loop5: detected capacity change from 0 to 512 [ 236.090329][T10230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.232193][T10246] tmpfs: Group quota block hardlimit too large. [ 236.744757][T10249] loop4: detected capacity change from 0 to 1024 [ 237.029081][T10257] overlayfs: failed to clone upperpath [ 237.677020][ T4383] block nbd3: Possible stuck request 0000000064c2cf71: control (read@0,2048B). Runtime 90 seconds [ 237.677203][ T4383] block nbd3: Possible stuck request 00000000eec9dfcb: control (read@2048,2048B). Runtime 90 seconds [ 237.690401][ T11] block nbd8: Possible stuck request 00000000ed8743e7: control (read@0,4096B). Runtime 60 seconds [ 238.465170][T10265] netlink: 'syz.4.1132': attribute type 1 has an invalid length. [ 239.275549][ T9674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.551060][T10265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.165716][T10285] loop8: detected capacity change from 0 to 512 [ 242.202594][T10285] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 242.276560][T10285] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 242.276829][T10285] EXT4-fs (loop8): orphan cleanup on readonly fs [ 242.299764][T10285] Quota error (device loop8): do_check_range: Getting block 196613 out of range 1-5 [ 242.300005][T10285] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 242.300149][T10285] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.1137: Failed to acquire dquot type 1 [ 242.300274][T10285] loop8: lost filesystem error report for type 5 error -117 [ 242.307820][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 242.307839][ C0] EXT4-fs (loop8): initial error at time 247: ext4_acquire_dquot:7069 [ 242.307852][ C0] EXT4-fs (loop8): last error at time 247: ext4_acquire_dquot:7069 [ 242.332177][T10285] EXT4-fs (loop8): Remounting filesystem read-only [ 242.336991][T10285] EXT4-fs (loop8): 1 truncate cleaned up [ 242.495647][ T54] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 242.495802][ T54] Quota error (device loop8): write_blk: dquota write failed [ 242.495924][ T54] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries [ 242.496031][ T54] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 242.496138][ T54] Quota error (device loop8): write_blk: dquota write failed [ 242.496252][ T54] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list [ 242.496377][ T54] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 242.496485][ T54] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 242.508113][T10285] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.968647][T10281] FAULT_INJECTION: forcing a failure. [ 242.968647][T10281] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 242.968784][T10281] CPU: 0 UID: 0 PID: 10281 Comm: syz.5.1134 Tainted: G L syzkaller #0 PREEMPT [ 242.968801][T10281] Tainted: [L]=SOFTLOCKUP [ 242.968804][T10281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 242.968811][T10281] Call trace: [ 242.968814][T10281] show_stack+0x2c/0x3c (C) [ 242.968834][T10281] __dump_stack+0x30/0x40 [ 242.968847][T10281] dump_stack_lvl+0xd8/0x12c [ 242.968859][T10281] dump_stack+0x1c/0x28 [ 242.968870][T10281] should_fail_ex+0x41c/0x590 [ 242.968883][T10281] should_fail_alloc_page+0xec/0x10c [ 242.968897][T10281] prepare_alloc_pages+0x194/0x484 [ 242.968906][T10281] __alloc_frozen_pages_noprof+0x180/0x648 [ 242.968915][T10281] alloc_pages_mpol+0x1fc/0x3d0 [ 242.968924][T10281] alloc_frozen_pages_noprof+0xc4/0x10c [ 242.968933][T10281] alloc_pages_noprof+0x30/0x148 [ 242.968943][T10281] get_free_pages_noprof+0x1c/0xbc [ 242.968951][T10281] __kasan_populate_vmalloc+0x48/0x1d0 [ 242.968962][T10281] alloc_vmap_area+0xdf4/0x13e8 [ 242.968972][T10281] __get_vm_area_node+0x210/0x32c [ 242.968981][T10281] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 242.968991][T10281] __vmalloc_node_noprof+0xec/0x14c [ 242.969001][T10281] __vmalloc_noprof+0x64/0x8c [ 242.969010][T10281] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 242.969021][T10281] bpf_prog_alloc+0x48/0x110 [ 242.969030][T10281] bpf_prog_load+0x5e0/0x1554 [ 242.969040][T10281] __sys_bpf+0x7d4/0x82c [ 242.969049][T10281] __arm64_sys_bpf+0xd0/0xec [ 242.969058][T10281] invoke_syscall+0x98/0x244 [ 242.969070][T10281] el0_svc_common+0xec/0x23c [ 242.969081][T10281] do_el0_svc+0x4c/0x5c [ 242.969093][T10281] el0_svc+0x64/0x260 [ 242.969103][T10281] el0t_64_sync_handler+0x44/0x104 [ 242.969113][T10281] el0t_64_sync+0x198/0x19c [ 242.969254][T10281] syz.5.1134: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 242.969775][T10281] CPU: 0 UID: 0 PID: 10281 Comm: syz.5.1134 Tainted: G L syzkaller #0 PREEMPT [ 242.969787][T10281] Tainted: [L]=SOFTLOCKUP [ 242.969790][T10281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 242.969795][T10281] Call trace: [ 242.969797][T10281] show_stack+0x2c/0x3c (C) [ 242.969809][T10281] __dump_stack+0x30/0x40 [ 242.969821][T10281] dump_stack_lvl+0xd8/0x12c [ 242.969832][T10281] dump_stack+0x1c/0x28 [ 242.969843][T10281] warn_alloc+0x1c4/0x1d8 [ 242.969856][T10281] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 242.969865][T10281] __vmalloc_node_noprof+0xec/0x14c [ 242.969875][T10281] __vmalloc_noprof+0x64/0x8c [ 242.969884][T10281] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 242.969893][T10281] bpf_prog_alloc+0x48/0x110 [ 242.969902][T10281] bpf_prog_load+0x5e0/0x1554 [ 242.969912][T10281] __sys_bpf+0x7d4/0x82c [ 242.969921][T10281] __arm64_sys_bpf+0xd0/0xec [ 242.969929][T10281] invoke_syscall+0x98/0x244 [ 242.969941][T10281] el0_svc_common+0xec/0x23c [ 242.969952][T10281] do_el0_svc+0x4c/0x5c [ 242.969963][T10281] el0_svc+0x64/0x260 [ 242.969972][T10281] el0t_64_sync_handler+0x44/0x104 [ 242.969982][T10281] el0t_64_sync+0x198/0x19c [ 242.970087][T10281] Mem-Info: [ 242.970188][T10281] active_anon:5880 inactive_anon:9950 isolated_anon:0 [ 242.970188][T10281] active_file:2963 inactive_file:14445 isolated_file:0 [ 242.970188][T10281] unevictable:768 dirty:159 writeback:0 [ 242.970188][T10281] slab_reclaimable:9952 slab_unreclaimable:104569 [ 242.970188][T10281] mapped:32557 shmem:9754 pagetables:1559 [ 242.970188][T10281] sec_pagetables:0 bounce:0 [ 242.970188][T10281] kernel_misc_reclaimable:0 [ 242.970188][T10281] free:1452429 free_pcp:5443 free_cma:7616 [ 242.970310][T10281] Node 0 active_anon:23520kB inactive_anon:39800kB active_file:11852kB inactive_file:57780kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:130228kB dirty:636kB writeback:0kB shmem:39016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11776kB pagetables:6236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 242.970429][T10281] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 242.970640][T10281] lowmem_reserve[]: 0 0 3650 3650 3650 [ 242.971321][T10281] Node 0 Normal free:2731828kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23520kB inactive_anon:39800kB active_file:11852kB inactive_file:57780kB unevictable:3072kB writepending:636kB zspages:0kB present:5242880kB managed:3738144kB mlocked:0kB bounce:0kB free_pcp:21772kB local_pcp:21772kB free_cma:0kB [ 242.971536][T10281] lowmem_reserve[]: 0 0 0 0 0 [ 242.972222][T10281] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 242.973984][T10281] Node 0 Normal: 2*4kB (UM) 396*8kB (M) 272*16kB (UM) 20*32kB (UM) 7*64kB (UME) 49*128kB (UM) 25*256kB (UME) 10*512kB (UME) 6*1024kB (UME) 2*2048kB (ME) 658*4096kB (M) = 2731816kB [ 242.995934][T10281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.995942][T10281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 242.995949][T10281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 242.995956][T10281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 242.995964][T10281] 27184 total pagecache pages [ 242.995967][T10281] 0 pages in swap cache [ 242.995971][T10281] Free swap = 124996kB [ 242.995975][T10281] Total swap = 124996kB [ 242.995978][T10281] 2097152 pages RAM [ 242.995982][T10281] 0 pages HighMem/MovableOnly [ 242.995985][T10281] 392568 pages reserved [ 242.995989][T10281] 8192 pages cma reserved [ 242.995992][T10281] 14 pages hwpoisoned [ 243.238081][T10302] loop4: detected capacity change from 0 to 256 [ 243.238673][T10302] vfat: Unknown parameter 'nnonumtail' [ 243.899369][T10311] netlink: 'syz.9.1142': attribute type 15 has an invalid length. [ 243.899498][T10311] netlink: 11706 bytes leftover after parsing attributes in process `syz.9.1142'. [ 244.152913][ T7468] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.179326][T10318] loop5: detected capacity change from 0 to 1024 [ 244.185393][T10318] EXT4-fs: Ignoring removed oldalloc option [ 244.194471][T10318] EXT4-fs: Ignoring removed orlov option [ 244.285624][T10318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.762185][T10329] EXT4-fs error (device loop5): ext4_readdir:280: inode #12: block 80: comm syz.5.1143: path /: bad entry in directory: directory entry overrun - offset=296, inode=0, rec_len=1024, size=1024 fake=0 [ 245.050753][T10334] loop9: detected capacity change from 0 to 8 [ 245.051589][T10334] squashfs: Unknown parameter '0xffffffffffffffff' [ 245.661245][ T9674] EXT4-fs error (device loop5): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /10/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 245.675482][ T9674] EXT4-fs error (device loop5): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /10/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 245.869858][ T9674] EXT4-fs error (device loop5): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 245.919318][ T4711] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 245.987437][ T9674] EXT4-fs error (device loop5): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /10/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 246.056513][ T9674] EXT4-fs error (device loop5): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 246.095578][ T9674] EXT4-fs error (device loop5): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /10/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 246.218828][ T9674] EXT4-fs error (device loop5): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 246.229621][ T9674] EXT4-fs error (device loop5): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /10/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 246.388229][ T9674] EXT4-fs error (device loop5): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 248.883267][ T4383] block nbd4: Possible stuck request 0000000007c7c0c4: control (read@0,4096B). Runtime 90 seconds [ 248.899823][ T11] block nbd0: Possible stuck request 00000000612c9ae4: control (read@0,4096B). Runtime 120 seconds [ 249.018434][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.029308][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.042252][ T4383] block nbd5: Possible stuck request 00000000fa2731e8: control (read@0,4096B). Runtime 90 seconds [ 251.701001][T10326] EXT4-fs error: 33 callbacks suppressed [ 251.713005][T10326] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 253.157853][T10356] block nbd9: Possible stuck request 0000000049c9ea5a: control (read@0,2048B). Runtime 60 seconds [ 253.167227][T10356] block nbd9: Possible stuck request 0000000052178532: control (read@2048,2048B). Runtime 60 seconds [ 258.687197][ C0] sched: DL replenish lagged too much [ 261.288593][T10356] block nbd1: Possible stuck request 000000002e0221bf: control (read@0,4096B). Runtime 120 seconds [ 262.812489][T10356] block nbd2: Possible stuck request 000000009b02411c: control (read@0,4096B). Runtime 120 seconds [ 267.809326][T10356] block nbd6: Possible stuck request 00000000df12b331: control (read@0,4096B). Runtime 90 seconds [ 271.708460][ T4711] Bluetooth: hci5: command 0x0406 tx timeout [ 301.939411][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 34s! [ 301.939497][ C0] Showing busy workqueues and worker pools: [ 301.939506][ C0] workqueue events: flags=0x100 [ 301.939556][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=27 refcnt=28 [ 301.939578][ C0] pending: psi_avgs_work, 10*nsim_dev_hwstats_traffic_work, vmstat_shepherd, 3*psi_avgs_work, 9*ovs_dp_masks_rebalance, switchdev_deferred_process_work, 2*rht_deferred_worker [ 301.939659][ C0] workqueue events_long: flags=0x100 [ 301.939668][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 301.939685][ C0] pending: 2*br_multicast_gc_work