last executing test programs: 2m19.810657691s ago: executing program 32 (id=66): r0 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x500, 0x2, 0x3234564e, 0x2, 0xfffffffe, 0x0, 0x9, 0xfeedcafe, 0x3, 0x1, 0x2, 0x7}}) 2m13.879683058s ago: executing program 33 (id=153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x4, 0x0, 0x4, 0xfffffffc, 0x3}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}, 0x1, 0x100000000000000}, 0x0) 1m57.973194232s ago: executing program 34 (id=373): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @remote, 0x0, 0x3}, 0x20) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) (async) r3 = accept4(r1, 0x0, 0x0, 0x80000) r4 = accept4$vsock_stream(r3, 0x0, 0x0, 0x80000) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) (async) r5 = geteuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) fchownat(r2, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', r5, r6, 0x100) (async) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b00000004"], 0x2b) (async) getpeername$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3eaa000000000000711041000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', r8}, 0x94) (async, rerun: 64) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) read$FUSE(r9, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r7, &(0x7f0000002700)={0x20, 0x0, r10, {0x0, 0xa}}, 0x20) 1m56.200924732s ago: executing program 35 (id=391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) recvmmsg(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000001380)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, &(0x7f00000013c0)=""/217, 0xd9}, 0x932}, {{&(0x7f00000014c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002640)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/125, 0x7d}, {&(0x7f00000025c0)=""/74, 0x4a}], 0x3, &(0x7f0000002680)=""/134, 0x86}, 0xe616}], 0x2, 0x40, &(0x7f00000027c0)={0x77359400}) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0x980903, 0x4}) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$l2tp(0x2, 0x2, 0x73) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}}, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (async) recvmmsg(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000001380)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, &(0x7f00000013c0)=""/217, 0xd9}, 0x932}, {{&(0x7f00000014c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002640)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/125, 0x7d}, {&(0x7f00000025c0)=""/74, 0x4a}], 0x3, &(0x7f0000002680)=""/134, 0x86}, 0xe616}], 0x2, 0x40, &(0x7f00000027c0)={0x77359400}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0x980903, 0x4}) (async) close(r2) (async) 1m48.172870083s ago: executing program 36 (id=474): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f00000000c0)={[{@dax_never}]}, 0x0, 0x248, &(0x7f0000000bc0)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (fail_nth: 11) 1m18.19787423s ago: executing program 6 (id=753): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000324788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m17.927471453s ago: executing program 6 (id=755): r0 = socket$inet(0x2, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f0000000600)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000080)={@ipv4={""/10, ""/2, @private}}, &(0x7f00000000c0)=0x14) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000100)) splice(r2, 0x0, r0, &(0x7f0000000280)=0x8, 0xf364, 0x1) 1m17.861808483s ago: executing program 6 (id=758): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="4606"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0xa1ffffff, 0x80, {0x0, 0x0, 0x0, 0x0, 0x400a, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004001}, 0x40000) 1m17.850242851s ago: executing program 6 (id=761): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x0, 0x4ea, &(0x7f0000000380)="$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") syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000000800)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f0000000540)=[{&(0x7f0000000980)={0x5a0, 0x40, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@generic="d0547eb1444618f9959b8b479edd0ccf48f852a9b59387415e10b01c9a3380638abff4aabd3113b1d7684eba78b56742a9bc56", @generic="a41a9d2a9d6bee171eefa38ef81980287c9e966c6531a210920334b514b0a2ff4e6b41a8a629a0d17220605573cbc572bbc86ef3a3b600d9941d22c13514e8744527cc03fecaa7697d955c395ef011e616034ff7449c7b178e44a08f23cd2eccfcea57b65068bc49349b113f3167f824d05f3f4ed483d5d7a34346a10ce237", @nested={0x4b6, 0x114, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x47}, @nested={0x483, 0x29, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @fd}, @nested={0x74, 0x34, 0x0, 0x1, [@nested={0x4, 0xeb}, @generic="ff91f209f4d76c87bed230a3f5d47819c39c188343de491de6426c44c7e0f5dbdd57041dec7ff0d2e32e8c54ef19909a6e42e8da566522223611d137c6d9d3055480017391570bc61ea9472dee8ed4ea66cf5544bfd0602a14aba72d978de2458a403786e7d9ca932c1ebdf3"]}, @nested={0x1f5, 0x140, 0x0, 0x1, [@typed={0x8, 0x156, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x66}, @nested={0x4, 0x4d}, @nested={0x4, 0xf8}, @generic="73dfc98d9cc4aad4b7d6627e5cac84492bf6cea087ae030aba87211f327005d605bab4c65d24cda846a62b1f2df79d77e3d4453df2b2226df1d1852e702a23e0dfc58797c629e857407c1d274214f6e26242a044c7e441519ced52095a325992ed4986b66510657c3ff68dda886548458009b8cdc5bed7976e7e1e30bd6055d43c41cdfbbab7845a68c82926aa4d6f8bff38ca31553ed7de1799f295d017930ccf2ddbea6504048c0205805e8e96d935ca90ea1ccec7e9dafbf575d899ceaea17d016faa1fa519490e537c1edf841252a341e52ded4a2124c3d7bd121777339b36fce67baac25bbd", @generic="ad3699d5e25706d5c28d74610e865f382fb944b38f5d0068a72880ebca88d5ab1e038efd074deec4a9894128557b00bc0e06041b544b8094262d9f6fff80f7298f00fd9a4a66adb75857c129c548f79fe02a0a298866af90ce28eaf9b84f709bcd409ae1798d954316e1b78c634a6e8a26c0579c1ef125a916a5ebe5886337280d92681afb7cf5324dcb3f19d8456bc7a40cb8ae9914ec38e9c05379ed8b2387fdca8c61eca0636660148ce3cae8b6c6756bcebb4c956db28fc06764f101378ebcf054d330fd7f99db7b580ef9636f8d3e31bf39cf0942a9aeb9e74a2db944125b1b0612768172dc4c0124c205c9fe265f", @nested={0x4, 0x100}]}, @generic="fa740a023bfbab35ed1504640f577ec6c4712bf13b92e2b820dee6894dda60714b1d3f46f2e75f06d2a45369d73dc0817dcd5f84e88af40d387289dcc27f977e49ee644a06d44305f2a676b0ac0919013ca4ecd251b9bd3cb67d05e0284f928786bb85f9e5660ccc2bfbd70a75d04e8254585723e0da8c8c4339acece6d245a0c814bfc530c5a9f6a00f84575b7e973f1fb530bc8f7298e75f7f708bf49caa30916e5a292a9ce3c16bbf1151f728", @generic="b227fb2d89fce3234606dd088961b11e8f35b17a7301b800df5340e8ee4ae7c07a8335ffebe1d44deff14a15a47a04bad8c20f6f6c917fb9abd775cfbc70db4fb7", @typed={0xc, 0x6b, 0x0, 0x0, @u64=0xa}, @nested={0xfb, 0x12, 0x0, 0x1, [@typed={0x4, 0x4e}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r0}, @generic="ee4c", @nested={0x4, 0xf9}, @typed={0x8, 0x135, 0x0, 0x0, @u32=0xf27}, @generic="2f00fe909723e646dffb584279af5fc61acbc216b6349a6d0222e486232d216552d75401a6f50e03cd56d0431d00ad2102e10744f5baf2ebed9aeb49a8e6f3d034a877973813575819e1a5cd6d8913519b5e30571e51b5ffc6329741ff295114969b11db5ade91920967fad6f63ddce416602d92d12c9e602680a343394c5766588a1c380761d250094563b6acd1013f04b91ab9b69657cd521419a610accfc3e67f0bdc32d5405c1e5d7bb21eae8223e75068e195678f9f68098d45eec42698f639b6749f386b1fde", @typed={0xc, 0x162, 0x0, 0x0, @u64=0x8f}, @nested={0x4, 0x15c}, @nested={0x4, 0x165}]}, @typed={0x14, 0x27, 0x0, 0x0, @ipv6=@mcast2}]}, @generic="d650da9bc5c4f1400ade135a6669c8af10399a945e7cd1a34dcef82be21e", @nested={0x4, 0x76}]}, @typed={0x8, 0x129, 0x0, 0x0, @pid}, @generic="513b8d2bd70bbc8a833d7919c8563019b9eaaf88bdfa", @typed={0x8, 0x99, 0x0, 0x0, @str='#%)\x00'}]}, 0x5a0}, {&(0x7f0000000840)=ANY=[@ANYBLOB="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"/314], 0x6c}, {&(0x7f0000000300)={0xb8, 0x25, 0x100, 0x70bd27, 0x25dfdbfd, "", [@typed={0xa8, 0xb, 0x0, 0x0, @binary="785c9bdfa1ab7a91e87079f2587194efa5b5b35c374e8183aaea30c199a663dcc8a667ce701ee7a77feccb30beea8e9a8e5902a0de80989b93d063847e8076fea342a2ad7efc4054910c73b99de7a9915df96ecb02a4e23c8c1a1eb24c580ae0f10c4b9bc9b7e7f9f8c84c2b29a3c7ef10903e1b554b999b5b429a14a02a6f33577df60a0f6fe649d814621f7a288c3760185ec23576f1cf6c9c10a78b8c74c30d466a90"}]}, 0xb8}, {&(0x7f00000003c0)={0x144, 0x2f, 0x800, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x1, 0x0, 0x0, @fd}, @typed={0x8, 0xbb, 0x0, 0x0, @uid}, @generic="e8d365ec5f6d779d442cfd47ef", @nested={0xed, 0xf7, 0x0, 0x1, [@nested={0x4, 0xda}, @generic="2cb55fe7db1e37d40f222db031cde6884eab0d2431136157380362d942342cc082b57f51bade258a941eb95534445eb4b007ac693cd60bb6550f5f77ff539b2e5094bf0abae8def8376e1e1ae6c6e5b11ad102d5850ee4f4becfcc16e72599ed65d4a1136f2b35e172c889a57e631be0988162ead7e96e711f5db5f271d196be613f88a033879c1f1acb56cd59a76fa6c4611ddd4547af8b397a9fac4977e21f83eef176d0c06a012f29de56b968a94be56dda85e56efde070e47c946a1a6115187200a91418eb13c4a48c17f6a2940d205c95a52536098aab36f5cb7685faea5e582b5f1b"]}, @nested={0x1c, 0x155, 0x0, 0x1, [@nested={0x4, 0x98}, @typed={0xd, 0x8c, 0x0, 0x0, @str='ip6_vti0\x00'}, @nested={0x4, 0xa8}]}, @typed={0x8, 0x11, 0x0, 0x0, @pid}]}, 0x144}], 0x4, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x20000000}, 0x40000) rt_sigqueueinfo(r3, 0x32, &(0x7f0000000100)={0x1e, 0xc, 0xfc}) fchmod(r0, 0x100) (async) fchmod(r0, 0x100) 1m17.702763078s ago: executing program 6 (id=763): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x109082, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) prlimit64(0x0, 0xf, 0x0, &(0x7f0000000180)) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x10) (async) mknodat$loop(r2, &(0x7f00000000c0)='./file0\x00', 0xc000, 0x1) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000100)={0x9, 0x2, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, 'ipvlan1\x00'}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000280), 0x218888, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m16.874690712s ago: executing program 6 (id=776): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="6115700000000c0061136c0000000000bfa000000000000014000000ee0016055e03010000000000040500000001000069163e0000000000bf0700000000000026050700feffffffd706000040000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1m16.823237716s ago: executing program 37 (id=776): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1m5.613079644s ago: executing program 8 (id=829): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000280)=""/74, 0x204000, 0x1000, 0x80}, 0x20) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x503042, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000240)={0xfe, "ff78cd8b61163ac18e6500000000000000000000426a00002000", 0xffffffffffffffff}) set_mempolicy(0x3, &(0x7f0000000040)=0xc0000001, 0x3) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{r6, 0x206}], 0x1, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x5, 0x7fd}, 0x10) 1m5.108138558s ago: executing program 3 (id=832): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x200000000000000}, {0xffffffffffffffff, 0xfffffffffffffffe, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xa000000}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1m5.012744224s ago: executing program 3 (id=835): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0xfe80000000000000, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 1m4.669873984s ago: executing program 8 (id=836): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) syz_open_dev$video(&(0x7f0000000040), 0x5, 0x0) 1m4.668460342s ago: executing program 3 (id=837): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="27a33198ca1d86ab7f8814b68ecbe98625d64978f8e305483d", 0x19}], 0x1}, 0x80) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x11}}) 1m4.594851484s ago: executing program 8 (id=838): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x14, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r1, 0xc138fd06, &(0x7f0000000000)="040000000000000000000000380100000000000000000000000000000200"/42) 1m4.594148963s ago: executing program 3 (id=839): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f00000000c0)={[{@dax_never}]}, 0x0, 0x248, &(0x7f0000000bc0)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x1, 0x1}, 0x48) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x10, 0x0, 0x9f9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40]}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000001c0)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "b9fb3c16"}, 0x1, 0x2, {0x0}, 0x7000000}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 1m4.574975418s ago: executing program 8 (id=840): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0xfe, 0xbb8, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000020400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000d"], 0x0, 0x5a}, 0x28) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r1, 0x7000000) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000300)=""/31, 0x1f}], 0x1, 0xa, 0x203) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x2, r2, &(0x7f00000011c0), 0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$sock(r5, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="95cb57f7f9f5e9b19422fdbba16052a29a2d3be6e213bd75a97b56c7dc217216090e7c97", 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000880)="05ba8c1cfb03f631fd2d06121541e78e6718599f7482f9b4b4464ff2d795", 0x1e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) unshare(0x40400) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c8307500710001000202"], 0x7a) prctl$PR_SET_PTRACER(0x59616d61, r0) 1m3.954213126s ago: executing program 9 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000001380)=[{&(0x7f0000001200)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000500)="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", 0x1c2}], 0x1, &(0x7f0000001340)=[@dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x80}}], 0x20, 0x4000}], 0x1, 0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) close_range(r4, r2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x3f) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)={0x19c, 0x1, 0x2, 0x102, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_NAT={0x150, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8885}, 0x8040) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x3}, 0x8) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r6) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r4, r6}) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8800, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) syz_socket_connect_nvme_tcp() fgetxattr(r3, 0x0, 0x0, 0x0) 1m3.751944432s ago: executing program 3 (id=853): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f00000000c0)={[{@dax_never}]}, 0x0, 0x248, &(0x7f0000000bc0)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x1, 0x1}, 0x48) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r8, 0x0, '\x00', 0x0, r6, 0x0, 0x5}, 0x50) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x10, 0x0, 0x9f9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40]}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000001c0)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "b9fb3c16"}, 0x1, 0x2, {0x0}, 0x7000000}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 1m3.194732095s ago: executing program 8 (id=855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e1050000008906ffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m3.095014166s ago: executing program 9 (id=856): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000000514210626bd700000000000080001"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000004a40)=[{0x0}], 0x1}, 0x3}], 0x1, 0x140, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/virtual/net/bridge0/bridge/no_linklocal_learn\x00', 0x2, 0x0) read$watch_queue(r1, &(0x7f0000000080)=""/6, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000840ea73460a"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103402, 0x49) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x5, 0x80000000000004, &(0x7f0000003100)=[{&(0x7f0000000480)=""/89, 0x59}], 0x1, 0x0, 0x1, {0x0, 0x0, 0xfc, '\x00', 0x0, 0xfffffffffffffffe}}) io_uring_enter(r5, 0x708f, 0xfffffffd, 0x81, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@multicast, @multicast, @void, {@can={0xc, {{0x1, 0x1, 0x1, 0x1}, 0x8, 0x3, 0x0, 0x0, "b3b441c0e9c1963b"}}}}, &(0x7f0000000080)={0x1, 0x4, [0x7f0, 0x1b2, 0xb24, 0xc23]}) write(r4, &(0x7f0000000040)="1b000000080011aaaaaaaaaa0100", 0xe) 1m2.838615813s ago: executing program 3 (id=857): socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) ioctl(r8, 0xc0504e47, &(0x7f0000000a00)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) 1m2.801225633s ago: executing program 8 (id=858): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x14, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)=ANY=[]) socket$kcm(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r3, 0xc138fd06, &(0x7f0000000000)="040000000000000000000000380100000000000000000000000000000200"/42) 1m2.620136451s ago: executing program 38 (id=858): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x14, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)=ANY=[]) socket$kcm(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r3, 0xc138fd06, &(0x7f0000000000)="040000000000000000000000380100000000000000000000000000000200"/42) 1m2.194926214s ago: executing program 9 (id=861): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) tkill(r1, 0x12) tkill(r1, 0x12) ptrace(0x4208, r1) write(r0, &(0x7f0000000080)="3728a22ae0d9e5005f33f7bde088383edb49f2080000000000000007bee921fa5d8cbda88eb6a65b114e39b8db5feb8f83f77ba5502068f21366394f737f9c77593e3a5031", 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) r2 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='ceph\x00', 0x0, &(0x7f0000000280)="58631c917e76cf5e0ab3704729baf71eaaccaf14e8b8d0b66dfd6c2618a58c6a637f40141a4449954d44d580b7351e48261500979b", 0x35, r2) gettid() 1m2.002874752s ago: executing program 9 (id=863): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="040000000000000000000000380100000000000000000000000000000200"/42) 1m1.972612141s ago: executing program 9 (id=864): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b29090930f70e0dd038e7ff7fc6e5539b324c078b089b35383a341a0890e0878f0e1ac6e7049b073c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33330d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000010000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000f8eb36cab2fe069e1cc835406df60463c1119fcaed7afd41c796e426667ef16f991801f59b307c4c6dd909e5c2b2d6443a30ba40dbaa46d75fa83aa315546c0c6f51611976367cb6cc377316fdae2f295c12144ed2c0c65099820a3da2c6fe93460f6e5a860e0ef260898b1dda647fbc995b03a38df01b6d34eb667edb03c1e29987073b066adb003fb097c881bf6a29bcd7110e24ae41b31f7a88dd67e6d1bbc68192f6e03ea94c452950ecdd44b6fb88123bcc0f4b70da43145d1a3e9bfd0a53ea23efc0fd85f8acb8ce249096bdb2b014b729dfdfeb4148fc406514dbdc6420309f1e497799e7552acd5656"], 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f027, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000104000000000000000002000080", @ANYRES32=0x0, @ANYBLOB="00d0000000000000240012800b00010062726964676500001400028005002500010000000500260000000000"], 0x44}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 1m1.809377618s ago: executing program 9 (id=865): socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) ioctl(r7, 0xc0504e47, &(0x7f0000000a00)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) 47.59176418s ago: executing program 39 (id=857): socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) ioctl(r8, 0xc0504e47, &(0x7f0000000a00)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) 46.592604652s ago: executing program 40 (id=865): socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) ioctl(r7, 0xc0504e47, &(0x7f0000000a00)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) 39.925463985s ago: executing program 2 (id=951): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xfe8, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0xfd4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0xf1c, 0x3, 0x0, 0x0, {{0x8}, {0xef4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xeed, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xfe8}}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000140)={[{@rodir}, {@rodir}, {}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@numtail}, {@utf8no}, {@numtail}, {@fat=@tz_utc}, {@fat=@check_strict}, {@shortname_win95}, {@utf8}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp950'}}]}, 0x3, 0x27b, &(0x7f0000000200)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, 0x0, 0xffffffffffffff78) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000014c0)={'wlan0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") r9 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r9, &(0x7f0000004bc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="1400000000000000290000003e00000006000000000000002400000000000000290000003200000000000000000000000000ffff"], 0x40}}], 0x1, 0x401c040) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x58, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x4800) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x48044) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}]}, @NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x73f}]}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) 39.705110499s ago: executing program 2 (id=954): syz_emit_vhci(&(0x7f0000005f00)=ANY=[@ANYBLOB="04040aaaaaaaaa11939000c883"], 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x6b, 0x1, 0x1, 0x82}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 39.078488899s ago: executing program 2 (id=957): socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0xd, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x2000, 0x0, 0x40000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, 0x0, 0x0) recvmsg$unix(r7, 0x0, 0x80) openat$smackfs_cipso(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x2ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xae8, 0x4000, 0x40040001, 0x2ce}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r10, 0x111, 0x1, 0x6, 0x4) 38.182441976s ago: executing program 2 (id=964): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs4(&(0x7f0000000180)='/', &(0x7f00000001c0)='./file1\x00', 0x0, 0x2085008, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3115800, &(0x7f0000000200), 0x1, 0x4d1, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80}, 0xa) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r2, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) (async) connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @none, 0x15}, 0xa) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000240)=0x1, 0x4) 38.094430272s ago: executing program 2 (id=968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000002140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}]}, 0x0, 0x479, &(0x7f00000004c0)="$eJzs201vG0UfAPD/2knTtzzJ06cP0BfAUBARL0mTFugBCYFA6gUJCQ7lGNK0Kk0b1ASJVhENCJUj6icAjkh8Ak5wQcAJxBXuCKlCubRwQIvW3k2dxE4Tx67T5PeTtp3xzHrmv7uTnd1JAti2Ktk/ScTeiPg1IgZq2aUVKrX/bi3MTfy1MDeRRJq+8WdSrXdzYW6iqFrstyfPDJUiSh8ncahBuzOXr5wfn5qavJTnR2YvvDsyc/nKM+cujJ+dPDt5cezEiePHRp9/buzZtsTZn/X14AfThw+cfOv6axOnrr/9w1dZf/fm5TcX5nYs3WNww21WorL0WNZ5fMPfvrn016WTniLRLHo2i3JEZKertzr+B6IcPYtlA/HqR13tHNBRaZqmfbVk+fani8n5FNjCkuh2D4DuKG702XN8sd3lKUhX3Xip9gCUxX0r32olPVHKnuEHa89G/R1qvxIRp+b//izbYtn7FACATvgmm/883Wj+V4r76ur9J18bGoyI/0bEvoj4X0Tsj4j/R1Tr3h8RD6yz/cqy/Mr5z8+7WgpsjbL53wv52tbS+V+pqDJYznP91fh7kzPnpiaP5sdkKHr7svzoKm18+8ovnzYrq5//ZVvWfjEXzPvxR0/f0n1Oj8/2bCTmejc+jDjY0yj+ZHElIImIAxFxsIXvz47ZuSe/PNys/M7xr6INRyH9IuKJ2vmfj2XxF5LV1ydHdsbU5NGR4qpY6cefrr3erP0Nxd8G2fnf3fD6X4x/MKlfr51ZfxvXfvuk6TNNi9f/+I7kzWq6WLR9f3x29tJoxI5kfuXnY7f3LfJF/Sz+oSONx/++iH8+z/c7FBHZRfxgRDwUEQ/nfX8kIh6NiCOrxP/9y4+903r8nZXFf3pd53/9ifL5775u1n4lXy9e/fwfr6aG8k+y83+nuGqN78xzzTvY6nEDAACAe0mp+jvwSWl4MX3b/thdmpqemX3qzPR7F0/Xygajt1S86Rqoex86mr8bLvJjy/LHqu+N0zRNd1XzwxPTU51aUwfWZs+K8V8qDQ/Xyn4vL637Yld6CHTUutbR/E0XbClt+20C4J6zhvHvrg9bVMv3//n29gO4+8z/YftqNP6vRtzqQleAu8z9H7Yv4x+2L+Mfti/jH7aljfxd/2qJfSc79c1bLVHeHN1YdyJKm6IbrSVKm6MbtURfRKy18tVoc+tpml5tWNTtn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8W8AAAD//2gm5Ig=") openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getresgid(&(0x7f0000001e80), &(0x7f0000001ec0), &(0x7f0000001f00)) 37.575851336s ago: executing program 2 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000180)=@secondary) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000340)="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", 0x110, r1) 37.491225024s ago: executing program 41 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000180)=@secondary) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000340)="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", 0x110, r1) 2.778946935s ago: executing program 0 (id=1283): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) socket$packet(0x11, 0x2, 0x300) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, 0x0, 0xc000) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x4000, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x6, 0x0, @void}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x5f, 0x4f]}}, &(0x7f0000001540)=""/4096, 0x1c, 0x1000, 0xa}, 0x28) 2.46034518s ago: executing program 0 (id=1286): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e23, @remote}, 0x5, 0x0, 0x0, 0xfd00, 0x8, 0x0, 0xfd, 0x6, 0x3}) 2.406713567s ago: executing program 0 (id=1288): getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x7, @empty, 0x6}}}, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x8d, "d5f72a813053230e6881a21070346b2c5591ef0c27164020b9138668f299c93a651d9b975403c9e544ee48805bef09e7040bbb99c9c38c1cd2817d9f7001d7d31b1c603ab949ff34fb547c68c036be96024e4ba694e8c4f817764147f0dc0ebf36909e894c281b8e0f2a6032309dda6316bab65954f0057b6557a155bc57c000cb4788ccafc7feb976cb9465a8"}, &(0x7f0000000200)=0x95) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r1, 0x3}, &(0x7f0000000280)=0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @dev}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x30, &(0x7f0000000440)={@mcast2, 0x0}, &(0x7f0000000480)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@private, @broadcast, 0x0}, &(0x7f0000000500)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540)={@private, @broadcast, 0x0}, &(0x7f0000000580)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x2f, 0xec, 0x2, 0x9, 0x12, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x80, 0xff, 0x9}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000880)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x198, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x60901381d136ff0c}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x801}, 0x2000c080) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r10, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r11, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x812}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000a40)={0x0, {}, 0x0, {}, 0xaf1, 0x4, 0x20, 0x10, "b45d3459017ea6429e27a4ef1d5fce95011b50183a697f0aff04bb1875fe17e377368271f77b5ffe21190dd93f645dc7c1b6ca10f5394819ddfa010f6ca70c06", "8788b5801f0235fae7c19dc020a3ff42054931fcd6d923e3415c2ddb3d0df630", [0x4, 0x1]}) setsockopt$inet_int(r2, 0x0, 0xe, &(0x7f0000000b00)=0x8, 0x4) ioctl$DVB_DVR_DMX_EXPBUF(r2, 0xc00c6f3e, &(0x7f0000000b40)={0xd3d, 0x80000, r2}) ioctl$BTRFS_IOC_ENCODED_WRITE(r12, 0x40809440, &(0x7f0000000d40)={&(0x7f0000000d00)=[{&(0x7f0000000b80)="4c01236ca39dab28ace55f19101308", 0xf}, {&(0x7f0000000bc0)="20f758ea2aa98a8b48b7f96a22bb184f743dafc5cc8496e91966c819b359b63e219fb3fa7a7c65bcd7", 0x29}, {&(0x7f0000000c00)="275a17317e31df8bd28b08a79a7813bacea1ec8251470b3afa01a148de3582923a44a674bd3063471a2e6f70046f33e35bcb5715eabc", 0x36}, {&(0x7f0000000c40)="0450b08d4a68431b1670a116e7e60d9c5ee586244a183f66e8f850ae30e7e23eb77eda48c50e588ae1e0701bcf4f492a8a764b44e0c9dfecbed5e51ca4dd3dd80f23e886b371fe8a6521921274c84e4e4b10b78af5b3bba304d59d150e1d802b31ede0742f48235d5a63644ffb00f52d81e10069e737c5206b9d830607f8886488c5d0a24c042dd08058a75381acae94a6286fd7", 0x94}], 0x4, 0x8, 0x0, 0x5, 0x64, 0x6}) sendmsg$nl_route_sched(r2, &(0x7f0000001080)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001040)={&(0x7f0000000e00)=@deltaction={0x238, 0x31, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3dc6}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x81, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x82}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe1}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x43}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x616a}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x20040001}, 0x10) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r13, 0x84, 0x75, &(0x7f00000010c0)={r1, 0x9}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001100)={'veth0_macvtap\x00'}) r14 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r14, &(0x7f0000001140)=""/52, 0x34, 0x10000, &(0x7f0000001180)={0x2, 0x4e20, @empty}, 0x10) r15 = landlock_create_ruleset(&(0x7f00000011c0)={0x0, 0xa, 0x0, 0x10000, 0x2, 0x3}, 0x30, 0x1) landlock_restrict_self(r15, 0x15) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r13, 0x84, 0x77, &(0x7f0000001200)={r1, 0x1ff, 0x4, [0x9, 0x4, 0x8, 0x4]}, 0x10) 2.192072075s ago: executing program 5 (id=1295): ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000340)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x49}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002840), 0x0, 0x60, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000000000000000b000000000000000000000009"], 0x0, 0x3e}, 0x28) 1.569164298s ago: executing program 0 (id=1319): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0xb, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) socket$inet_tcp(0x2, 0x1, 0x0) 1.520791112s ago: executing program 0 (id=1323): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/profiling', 0x30800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) preadv(0xffffffffffffffff, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f"], 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000ea7b8fa317f661f4c43108215700008500010000009500000000000000691006000000000095000000000000000000"], &(0x7f0000000fc0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 1.52051685s ago: executing program 1 (id=1324): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) socket$packet(0x11, 0x2, 0x300) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, 0x0, 0xc000) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x4000, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x6, 0x0, @void}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}, {0x0, [0x5f, 0x4f]}}, &(0x7f0000001540)=""/4096, 0x28, 0x1000, 0xa}, 0x28) 1.423360107s ago: executing program 7 (id=1325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000097090100000002816500feff0000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.422579446s ago: executing program 1 (id=1326): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000a0204180000041800000a"], 0x50) 1.418306086s ago: executing program 7 (id=1327): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000180)=@secondary) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000340)="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", 0x110, r1) 1.358771978s ago: executing program 1 (id=1328): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000b00)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x8efd}, 0x8) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 1.358161461s ago: executing program 7 (id=1329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x601, 0x24, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x120}}, 0x0) 1.306950402s ago: executing program 5 (id=1330): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000020000000000000000") 361.335637ms ago: executing program 4 (id=1331): socket$alg(0x26, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x861}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x9e]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008}, 0x14) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @loopback, 0x2}, 0x1c) listen(r0, 0x0) listen(r1, 0xfffffffd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401010000000019000000010004000500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2000004) close(0x4) 344.449447ms ago: executing program 7 (id=1332): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x1000000, 0x0, 0x20004074}, 0x0) 343.455008ms ago: executing program 5 (id=1333): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1801030000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006c00000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) 342.534947ms ago: executing program 1 (id=1334): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2c91, 0x4) (async, rerun: 64) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x81, @mcast1, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffd}}], 0x18}, 0x4000040) (async, rerun: 64) r1 = getpid() ptrace$setopts(0x4206, r1, 0x0, 0x20003a) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x30, 0xffffffffffffffff, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x804002, 0x28}, 0x18) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) (async) r2 = socket(0xa, 0x3, 0xff) sendmsg(r2, &(0x7f0000000500)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x6, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="28000000000000002900010002000000fee9eb0478422238dc872c2227605497f6edd84400000000"], 0x28}, 0x20008810) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x250040, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) 267.052522ms ago: executing program 5 (id=1335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203051209000a004000683739ed28282ffffe"], 0xfdef) 262.850331ms ago: executing program 7 (id=1336): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r1, 0xfffffffffffffffd, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) (async, rerun: 64) syz_fuse_handle_req(r0, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x60800, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r3, 0xa64c000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0xb3d68000) 262.552845ms ago: executing program 4 (id=1337): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) socket$packet(0x11, 0x2, 0x300) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, 0x0, 0xc000) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x4000, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x6, 0x0, @void}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}, {0x0, [0x5f, 0x4f]}}, &(0x7f0000001540)=""/4096, 0x28, 0x1000, 0xa}, 0x28) 262.221497ms ago: executing program 7 (id=1338): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f00000000c0)={[{@dax_never}]}, 0x0, 0x248, &(0x7f0000000bc0)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 258.937311ms ago: executing program 1 (id=1339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100fff00000000000000200000aac000000060a01040000fc00000000000a0000010900010073797a3100000000"], 0xd4}, 0x1, 0x0, 0x0, 0x40408d4}, 0x20040040) 184.255448ms ago: executing program 4 (id=1340): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x39, 0xea5, './file0\x00'}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x100, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0xa, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xdf5a, 0xc366}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000740)={0x4, 0x500000, 0x638c, 0x100, 0x401, 0x1, 0x200, 0x7}, 0x0, 0xfffffffffffffffe, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000003240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20014054}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}], 0x20, 0xc010}}], 0x2, 0x40000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(r4, 0x0, 0xf, &(0x7f0000000140)="e9", 0x1) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x2}, 0x18) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0}, 0x800) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)={0x114, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x159, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@remote}, @typed={0xdd, 0xa1, 0x0, 0x0, @binary="d5e515c77ae89dffc1af6522084e195b2be7b1a1c40fff39b87ee99b7ccf91e1f2dee2cc6f0475606c1c193243dc39f16555923228a69a6f3e8d961f1c5726af306ba9d09141ce51aed23b5feba56d3339b3dd9ce64acae5fa66a34a772871e39bba205fe79ecd8ab9ca721f3632dbee5b85c2781f0fbe0b79d965924a5dad045567b517ba78b8389751cf02520032808f2b4ecda64013fd05f024bfece9408a4fd47c50000d05685085ca8f26d34ec25b3dd8c3537cbc1c05595943a688abd4eb082d5a51761b6b86351abdb050e29897d9bb31ce10aab924"}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40}, 0x4000800) 149.175536ms ago: executing program 4 (id=1341): ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000340)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x49}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002840), 0x0, 0x60, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000000000000000b000000000000000000000009"], 0x0, 0x3e}, 0x28) 143.148442ms ago: executing program 0 (id=1342): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140100001e0001012bbd7000fbdbdf2564010102000000000000000000000000000004d50a002b00fc02000000000000000000000000000113b40000ff34000010000a002cbd70002abd7000050000000c001500", @ANYRESHEX=r0], 0x114}, 0x1, 0x0, 0x0, 0x20}, 0x20008000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000041c000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, 0xffffffffffffffff, 0xcbfba000) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x4d, 0x1, 0x2, "08dd161a979cb0e43cb73d2d00000d0000814d0008000000000000000000005f", 0x31364d4e}) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0xe, 0x2, 0x2, "c5b93f3e76e05d46ef86c5b6360db3e4bdf4298b0e10f8279049fcfd8ff3a71a", 0x3631564e}) memfd_create(&(0x7f0000000340)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nRp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4n\x18C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xa9\xbc\x18+n\xa4N\a\xa7\x7fCNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2kh\xa7\xd5\x90#\xab\xf0\x91\x1c%A\x89]\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x98L\xecU\x8c\xeb\x83\xe2\xee\x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x906\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r', 0x0) read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) 142.26456ms ago: executing program 5 (id=1343): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, 0x0, 0x51b0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff00000000", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r2, &(0x7f00000003c0)="060000000000000500000000000000cd86dd", 0x12, 0x40015, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x5, 0x6, @remote}, 0x14) landlock_restrict_self(r0, 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 33.512397ms ago: executing program 4 (id=1344): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000002000000000000") 32.306592ms ago: executing program 1 (id=1345): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x33}}}}, [@NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xed}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0056f732d863d5c1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "18f2ba8f6be90716"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3d6476c318974cd4bcd1598f70dbe7d0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa980}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ae8e2035e9faa343706d8a20a94fc697"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7ae47ac46ae3b18487ec3bdf7a8ce3cd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b0b2dda8c2490257c5956d011f6c8206"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4454}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6361a641baff8a99fc065560a26c7965"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "73de992cbbe493ce"}]}]}, 0xe8}}, 0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5967}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x2400c054) (async) syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') (async) syz_usb_disconnect(0xffffffffffffffff) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000400)={0x4, 0x8001, {0x0}, {0xffffffffffffffff}, 0x41e76998, 0x1e}) r5 = syz_open_procfs(r3, &(0x7f0000000440)='schedstat\x00') ioctl$UBLK_U_CMD_GET_PARAMS(r5, 0x80207509, &(0x7f0000000500)={0x0, 0xffff, 0x70, &(0x7f0000000480)={0x70}}) ioctl$UBLK_U_CMD_START_DEV(r5, 0xc0207506, &(0x7f0000000580)={r6, 0xffff, 0x0, 0x0, r3}) r7 = fsmount(r5, 0x1, 0x76) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r7, 0x40106e80, &(0x7f0000000600)={0x80}) (async) read$FUSE(r7, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0xc002, &(0x7f0000002700)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}], [{@euid_gt={'euid>', r4}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, r4}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}}, 0x0, 0x0, &(0x7f0000002840)="6e505c540ba223ef3c0456fdcdbee46bce80089bc147257d38fd4fdf26abfc375802243aaf878cc4478ca66bf42d8088e27f0a5400ea834c90425c672af4d1c901c5045e6c2fa29216bd16d2ab9e8286e2b1ed91b3c7dff18668b779656f3b6e00e8edc24e67ad5accd3") syz_io_uring_setup(0xcf9, &(0x7f00000028c0)={0x0, 0x921b, 0x20, 0x1, 0x3af, 0x0, r7}, &(0x7f0000002940), &(0x7f0000002980), &(0x7f00000029c0)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000002cc0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002c80)={&(0x7f0000002ac0)={0x18c, r9, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x1d}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3ff}, {0x8, 0x0, 0x200}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_IE={0xf0, 0x2a, [@fast_bss_trans={0x37, 0xcc, {0x5, 0x5, "786cf5318bff161276af730a2e8006a7", "2a488ff3d939b0db9f3bd5ec2a6318b82d72e6922496b6e7f3556e6930d7637f", "c7581ab28ea1a4f4e89746c0f02d9decd4b2dac631cde7148b9b091b17adf247", [{0x2, 0x25, "cb572904145246d42a89a19836ce2f4e89fe958c317eb5c63303f0664e36953229d821da32"}, {0x3, 0x12, "0d682f4d3810b3af9792e5346aac4ea79157"}, {0x4, 0x15, "a1f02060a29dc83a8dd8639effc58acf01d0793161"}, {0x2, 0x17, "68808c59ec31825af5061cf2046fa841bbd21e49a2f9db"}, {0x4, 0xd, "bf83a31bd89f4cf79eab4986da"}]}}, @peer_mgmt={0x75, 0x18, {0x0, 0x4, @val, @val=0x3b, @val="634732d604742f38dcf9c8978e9a81d6"}}, @ibss={0x6, 0x2, 0x101}]}, @NL80211_ATTR_IE={0x1c, 0x2a, [@peer_mgmt={0x75, 0x16, {0x1, 0x7ff, @void, @val=0x15, @val="62f1331e0968c3e3a42b5e47a89d9d8f"}}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xd503}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x1ef}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x10000}, {0x8, 0x0, 0xffffebb0}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000002ec0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002d80)={0xe0, r9, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x5, 0x31}}}}, [@NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x7, 0x3, 0x3, 0xf]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x53}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x105}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x2, 0x0, 0x68, 0x10001]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xa3e}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xb863]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4004040}, 0x20080081) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000002f00)={'veth1_to_bond\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000032c0)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003280)={&(0x7f0000002f80)={0x2d4, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x606a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xabd6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff88ca}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffe07}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}}]}, @TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "253f7af205c79632ac53dcae0d48f6a936012b88d5f412b3e041cb52"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "6254ffed965e0383819091688a95de1fd0239196"}}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40014}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000003480)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003440)={&(0x7f0000003340)={0xe0, r9, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x1, 0x0, {0x40000000000, 0x81, 0x0, 0x0, 0x0, 0x1}, 0x300, 0xffffffff, 0x6}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) r12 = dup(r0) (async) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$EBT_SO_SET_COUNTERS(r13, 0x0, 0x81, &(0x7f0000003500)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x1, 0x0, 0x8001, 0x0, 0xffffffffffffffff], 0x7, &(0x7f00000034c0)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r12, &(0x7f00000036c0)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x1c, 0x0, 0xb, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002081}, 0x80) (async) write$UHID_INPUT(r12, &(0x7f0000003700)={0x8, {"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", 0x1000}}, 0x1006) 905.075µs ago: executing program 5 (id=1346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f00000005c0)={r5, @in6={{0xa, 0x4e22, 0x0, @empty, 0x37282be4}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000006000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r6 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r6, 0x0) openat(0xffffffffffffff9c, 0x0, 0xcc300, 0xfb) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1347): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi0\x00', 0x20800, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x30, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) kernel console output (not intermixed with test programs): 75.307325][ T7395] el0_svc+0x60/0x1d8 [ 75.307335][ T7395] el0t_64_sync_handler+0x44/0x104 [ 75.307344][ T7395] el0t_64_sync+0x198/0x19c [ 75.668367][ T4722] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.779696][ T7414] syzkaller0: entered promiscuous mode [ 75.779712][ T7414] syzkaller0: entered allmulticast mode [ 75.955885][ T7421] EXT4-fs: Ignoring removed orlov option [ 75.958795][ T7421] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.958812][ T7421] EXT4-fs (loop6): Test dummy encryption mode enabled [ 75.960388][ T7421] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec128, mo2=0002] [ 75.960433][ T7421] System zones: 0-5 [ 75.976072][ T7421] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.007305][ T5650] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.125758][ T7434] ucma_write: process 241 (syz.6.605) changed security contexts after opening file descriptor, this is not allowed. [ 76.140707][ T6890] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.148225][ T7431] 9p: Bad value for 'rfdno' [ 76.195320][ T7442] overlayfs: failed to clone lowerpath [ 76.291462][ T7455] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 76.396850][ T7475] set_capacity_and_notify: 5 callbacks suppressed [ 76.396867][ T7475] loop8: detected capacity change from 0 to 128 [ 76.416810][ T7475] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.808663][ T7498] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 76.860325][ T7505] __nla_validate_parse: 15 callbacks suppressed [ 76.860340][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.624'. [ 76.932586][ T7519] netlink: 'syz.7.627': attribute type 1 has an invalid length. [ 76.959066][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 76.982099][ T7519] netlink: 28 bytes leftover after parsing attributes in process `syz.7.627'. [ 76.982125][ T7519] bond1: entered allmulticast mode [ 76.988300][ T7519] bond1: (slave bridge2): making interface the new active one [ 76.988315][ T7519] bridge2: entered allmulticast mode [ 76.988465][ T7519] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 77.084474][ T7545] netlink: 60 bytes leftover after parsing attributes in process `syz.2.629'. [ 77.203461][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.7.630'. [ 77.261899][ T6506] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.418932][ T7572] netlink: 'syz.8.632': attribute type 11 has an invalid length. [ 77.447376][ T7585] bridge_slave_0: default FDB implementation only supports local addresses [ 77.459194][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.8.637'. [ 78.546111][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.8.650'. [ 78.649628][ T7676] loop6: detected capacity change from 0 to 256 [ 78.737429][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.8.653'. [ 78.754689][ T7678] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 79.050432][ T7684] binder: 7683:7684 tried to acquire reference to desc 0, got 1 instead [ 79.050790][ T7684] binder: 7683:7684 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 79.050801][ T7684] binder: 7684 RLIMIT_NICE not set [ 79.050812][ T7684] binder: 7684 RLIMIT_NICE not set [ 79.050904][ T7684] binder: 7683:7684 got new transaction with bad transaction stack, transaction 116 has target 7683:7684 [ 79.050922][ T7684] binder: 7683:7684 transaction call to 7683:0 failed 117/29201/-71, code 0 size 0-0 line 3312 [ 79.051102][ T26] binder: release 7683:7684 transaction 116 out, still active [ 79.051112][ T26] binder: undelivered TRANSACTION_COMPLETE [ 79.051121][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.076063][ T26] binder: release 7683:7684 transaction 116 in, still active [ 79.076081][ T26] binder: send failed reply for transaction 116, target dead [ 79.227582][ T7704] loop8: detected capacity change from 0 to 128 [ 79.232538][ T7704] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.766429][ T7732] Injecting memory failure for pfn 0x13f401 at process virtual address 0x20001000 [ 79.771376][ T7732] Memory failure: 0x13f401: Sending SIGBUS to syz.7.672:7732 due to hardware memory corruption [ 79.774174][ T7732] Memory failure: 0x13f401: recovery action for unsplit thp: Failed [ 79.862104][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.6.671'. [ 79.886067][ T7685] overlayfs: statfs failed on './file0' [ 79.910233][ T7743] netlink: 'syz.7.676': attribute type 1 has an invalid length. [ 79.913947][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.6.671'. [ 79.950875][ T7743] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 79.958398][ T7743] veth3: entered promiscuous mode [ 79.959537][ T7743] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 79.962567][ T261] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 79.969532][ T7743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.107979][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 80.376129][ T6506] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.443557][ T7769] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 80.460292][ T7368] bridge0: entered promiscuous mode [ 86.294720][ T7816] fuse: Bad value for 'fd' [ 86.588544][ T7838] __nla_validate_parse: 1 callbacks suppressed [ 86.588570][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.698'. [ 86.738310][ T7821] input: syz0 as /devices/virtual/input/input6 [ 87.153484][ T7861] loop2: detected capacity change from 0 to 512 [ 87.184184][ T7865] syzkaller0: entered promiscuous mode [ 87.184199][ T7865] syzkaller0: entered allmulticast mode [ 87.204428][ T7861] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.701: attempt to clear invalid blocks 2 len 1 [ 87.204453][ T7861] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 87.212860][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 87.212874][ C1] EXT4-fs (loop2): initial error at time 87: ext4_clear_blocks:876: inode 13 [ 87.212893][ C1] EXT4-fs (loop2): last error at time 87: ext4_clear_blocks:876: inode 13 [ 87.235078][ T7861] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 87.235157][ T7861] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.701: invalid indirect mapped block 1819239214 (level 0) [ 87.235172][ T7861] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 87.236621][ T7861] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.701: invalid indirect mapped block 1819239214 (level 1) [ 87.236647][ T7861] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 87.240917][ T7861] EXT4-fs (loop2): 1 truncate cleaned up [ 87.241370][ T7861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.195456][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.256939][ T7894] input: syz0 as /devices/virtual/input/input7 [ 88.309105][ T7899] loop9: detected capacity change from 0 to 128 [ 88.316521][ T7899] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.733680][ T7914] netlink: 'syz.8.711': attribute type 12 has an invalid length. [ 88.735381][ T7914] netlink: 'syz.8.711': attribute type 12 has an invalid length. [ 88.781322][ T7930] loop8: detected capacity change from 0 to 512 [ 88.786198][ T7930] EXT4-fs (loop8): unable to read superblock [ 88.791518][ T7930] netlink: 'syz.8.715': attribute type 83 has an invalid length. [ 88.799839][ T7933] FAULT_INJECTION: forcing a failure. [ 88.799839][ T7933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.799855][ T7933] CPU: 1 UID: 0 PID: 7933 Comm: syz.6.714 Not tainted syzkaller #0 PREEMPT [ 88.799864][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 88.799869][ T7933] Call trace: [ 88.799872][ T7933] show_stack+0x2c/0x3c (C) [ 88.799891][ T7933] __dump_stack+0x30/0x40 [ 88.799903][ T7933] dump_stack_lvl+0xd8/0x12c [ 88.799914][ T7933] dump_stack+0x1c/0x28 [ 88.799925][ T7933] should_fail_ex+0x418/0x58c [ 88.799938][ T7933] should_fail+0x14/0x24 [ 88.799950][ T7933] should_fail_usercopy+0x20/0x30 [ 88.799962][ T7933] bpf_verifier_vlog+0x3f4/0xbc0 [ 88.799975][ T7933] __btf_verifier_log+0xe8/0x13c [ 88.799983][ T7933] btf_verifier_log_member+0x524/0x718 [ 88.799991][ T7933] btf_struct_check_meta+0x394/0x5a4 [ 88.800000][ T7933] btf_parse_type_sec+0x36c/0x17a8 [ 88.800010][ T7933] btf_new_fd+0x33c/0xa50 [ 88.800021][ T7933] bpf_btf_load+0x144/0x190 [ 88.800032][ T7933] __sys_bpf+0x7f0/0x82c [ 88.800040][ T7933] __arm64_sys_bpf+0xd0/0xec [ 88.800049][ T7933] invoke_syscall+0x98/0x244 [ 88.800061][ T7933] el0_svc_common+0x19c/0x23c [ 88.800072][ T7933] do_el0_svc+0x4c/0x5c [ 88.800083][ T7933] el0_svc+0x60/0x1d8 [ 88.800095][ T7933] el0t_64_sync_handler+0x44/0x104 [ 88.800106][ T7933] el0t_64_sync+0x198/0x19c [ 88.878411][ T7939] FAULT_INJECTION: forcing a failure. [ 88.878411][ T7939] name failslab, interval 1, probability 0, space 0, times 0 [ 88.878430][ T7939] CPU: 1 UID: 0 PID: 7939 Comm: syz.6.716 Not tainted syzkaller #0 PREEMPT [ 88.878441][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 88.878447][ T7939] Call trace: [ 88.878451][ T7939] show_stack+0x2c/0x3c (C) [ 88.878469][ T7939] __dump_stack+0x30/0x40 [ 88.878479][ T7939] dump_stack_lvl+0xd8/0x12c [ 88.878489][ T7939] dump_stack+0x1c/0x28 [ 88.878504][ T7939] should_fail_ex+0x418/0x58c [ 88.878515][ T7939] should_failslab+0xc4/0x120 [ 88.878526][ T7939] __kmalloc_cache_noprof+0x94/0x5fc [ 88.878534][ T7939] rtnl_newlink+0x118/0x138c [ 88.878543][ T7939] rtnetlink_rcv_msg+0x66c/0x9bc [ 88.878550][ T7939] netlink_rcv_skb+0x238/0x414 [ 88.878559][ T7939] rtnetlink_rcv+0x28/0x38 [ 88.878566][ T7939] netlink_unicast+0x600/0x7f8 [ 88.878574][ T7939] netlink_sendmsg+0x648/0x948 [ 88.878582][ T7939] __sock_sendmsg+0xc8/0x17c [ 88.878591][ T7939] ____sys_sendmsg+0x3d0/0x6c8 [ 88.878599][ T7939] ___sys_sendmsg+0x198/0x224 [ 88.878607][ T7939] __sys_sendmsg+0x158/0x204 [ 88.878616][ T7939] __arm64_sys_sendmsg+0x88/0x9c [ 88.878624][ T7939] invoke_syscall+0x98/0x244 [ 88.878634][ T7939] el0_svc_common+0xec/0x23c [ 88.878643][ T7939] do_el0_svc+0x4c/0x5c [ 88.878652][ T7939] el0_svc+0x60/0x1d8 [ 88.878662][ T7939] el0t_64_sync_handler+0x44/0x104 [ 88.878671][ T7939] el0t_64_sync+0x198/0x19c [ 89.219273][ T6890] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.239354][ T7946] tmpfs: Bad value for 'mpol' [ 89.312027][ T7956] loop2: detected capacity change from 0 to 128 [ 89.324166][ T7952] syz_tun: entered allmulticast mode [ 89.325919][ T7951] syz_tun: left allmulticast mode [ 89.334519][ T7956] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.661298][ T7971] loop8: detected capacity change from 0 to 512 [ 89.668623][ T7971] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.687065][ T7974] FAULT_INJECTION: forcing a failure. [ 89.687065][ T7974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.687081][ T7974] CPU: 1 UID: 0 PID: 7974 Comm: syz.6.726 Not tainted syzkaller #0 PREEMPT [ 89.687090][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 89.687095][ T7974] Call trace: [ 89.687098][ T7974] show_stack+0x2c/0x3c (C) [ 89.687116][ T7974] __dump_stack+0x30/0x40 [ 89.687129][ T7974] dump_stack_lvl+0xd8/0x12c [ 89.687140][ T7974] dump_stack+0x1c/0x28 [ 89.687151][ T7974] should_fail_ex+0x418/0x58c [ 89.687164][ T7974] should_fail+0x14/0x24 [ 89.687175][ T7974] should_fail_usercopy+0x20/0x30 [ 89.687187][ T7974] bpf_verifier_vlog+0x3f4/0xbc0 [ 89.687201][ T7974] __btf_verifier_log+0xe8/0x13c [ 89.687209][ T7974] btf_verifier_log_member+0x524/0x718 [ 89.687217][ T7974] btf_struct_check_meta+0x394/0x5a4 [ 89.687226][ T7974] btf_parse_type_sec+0x36c/0x17a8 [ 89.687235][ T7974] btf_new_fd+0x33c/0xa50 [ 89.687247][ T7974] bpf_btf_load+0x144/0x190 [ 89.687258][ T7974] __sys_bpf+0x7f0/0x82c [ 89.687267][ T7974] __arm64_sys_bpf+0xd0/0xec [ 89.687275][ T7974] invoke_syscall+0x98/0x244 [ 89.687287][ T7974] el0_svc_common+0x19c/0x23c [ 89.687298][ T7974] do_el0_svc+0x4c/0x5c [ 89.687309][ T7974] el0_svc+0x60/0x1d8 [ 89.687321][ T7974] el0t_64_sync_handler+0x44/0x104 [ 89.687332][ T7974] el0t_64_sync+0x198/0x19c [ 89.718179][ T6506] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.767641][ T7982] loop6: detected capacity change from 0 to 128 [ 89.775388][ T7982] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.792051][ T7985] loop9: detected capacity change from 0 to 128 [ 89.848319][ T7985] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.344379][ T4722] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.375309][ T7994] new mount options do not match the existing superblock, will be ignored [ 90.382608][ T7994] netlink: 68 bytes leftover after parsing attributes in process `syz.7.731'. [ 90.448210][ T8000] loop2: detected capacity change from 0 to 128 [ 90.476645][ T8000] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.587674][ T8003] netlink: 'syz.7.735': attribute type 83 has an invalid length. [ 91.536720][ T5650] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.655047][ T4722] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.656399][ T6890] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.562569][ T4882] logitech-hidpp-device 0005:046D:B012.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 92.628641][ T8025] fido_id[8025]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.748251][ T8037] loop8: detected capacity change from 0 to 512 [ 92.756546][ T8039] loop2: detected capacity change from 0 to 256 [ 92.756991][ T8037] EXT4-fs: Ignoring removed i_version option [ 92.771374][ T8037] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.815279][ T8041] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 92.826721][ T8046] overlayfs: failed to clone upperpath [ 92.844976][ T8037] EXT4-fs error (device loop8): ext4_lookup:1787: inode #12: comm syz.8.742: iget: bad i_size value: 2533274857506816 [ 92.858052][ T8037] EXT4-fs (loop8): Remounting filesystem read-only [ 92.871069][ T8050] loop9: detected capacity change from 0 to 512 [ 92.872813][ T8050] EXT4-fs (loop9): unable to read superblock [ 92.880913][ T8050] netlink: 'syz.9.748': attribute type 83 has an invalid length. [ 92.981778][ T1028] kernel write not supported for file /input/mice (pid: 1028 comm: kworker/0:2) [ 93.278160][ T8075] netlink: 'syz.6.758': attribute type 1 has an invalid length. [ 93.287199][ T8075] netlink: 28 bytes leftover after parsing attributes in process `syz.6.758'. [ 93.287219][ T8075] bond1: entered allmulticast mode [ 93.297694][ T8075] bond1: (slave bridge3): making interface the new active one [ 93.297708][ T8075] bridge3: entered allmulticast mode [ 93.297913][ T8075] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 93.327551][ T8082] loop6: detected capacity change from 0 to 512 [ 93.355647][ T8082] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 93.355755][ T8082] EXT4-fs (loop6): orphan cleanup on readonly fs [ 93.357289][ T8082] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 93.357328][ T8082] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 93.357339][ T8082] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.761: Failed to acquire dquot type 1 [ 93.357350][ T8082] loop6: lost filesystem error report for type 5 error -5 [ 93.358025][ T8082] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.761: bg 0: block 40: padding at end of block bitmap is not set [ 93.358043][ T8082] loop6: lost filesystem error report for type 5 error -117 [ 93.358207][ T8082] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 93.358215][ T8082] loop6: lost filesystem error report for type 5 error -117 [ 93.358439][ T8082] EXT4-fs warning (device loop6): ext4_evict_inode:196: inode #16: comm syz.6.761: data will be lost [ 93.358524][ T8082] EXT4-fs (loop6): 1 truncate cleaned up [ 93.362854][ C1] EXT4-fs (loop6): error count since last fsck: 3 [ 93.362872][ C1] EXT4-fs (loop6): initial error at time 93: ext4_acquire_dquot:7069 [ 93.362886][ C1] EXT4-fs (loop6): last error at time 93: ext4_mb_clear_bb:6680 [ 93.363597][ T8082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.659914][ T6506] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.727417][ T6692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.737922][ T8092] syzkaller0: entered promiscuous mode [ 93.737934][ T8092] syzkaller0: entered allmulticast mode [ 94.156759][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.9.769'. [ 94.357527][ T3255] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.375272][ T8132] netlink: 40 bytes leftover after parsing attributes in process `syz.8.780'. [ 94.382195][ T4720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.383751][ T4720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.384863][ T4720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.390524][ T4720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.390865][ T4720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.738944][ T3255] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.744957][ T8143] xt_TCPMSS: Only works on TCP SYN packets [ 94.801903][ T3255] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.872017][ T8151] ip_tables: iptables: counters copy to user failed while replacing table [ 94.877333][ T8151] bridge_slave_0: default FDB implementation only supports local addresses [ 94.891676][ T3255] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.939676][ T8133] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.939751][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.939884][ T8133] bridge_slave_0: entered allmulticast mode [ 94.940300][ T8133] bridge_slave_0: entered promiscuous mode [ 94.947069][ T8133] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.947120][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.947169][ T8133] bridge_slave_1: entered allmulticast mode [ 94.947739][ T8133] bridge_slave_1: entered promiscuous mode [ 94.964022][ T8133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.965110][ T8133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.976895][ T8133] team0: Port device team_slave_0 added [ 94.977684][ T8133] team0: Port device team_slave_1 added [ 94.986897][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.986905][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.986919][ T8133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.987597][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.987604][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.987616][ T8133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.008785][ T8133] hsr_slave_0: entered promiscuous mode [ 95.009063][ T8133] hsr_slave_1: entered promiscuous mode [ 95.009246][ T8133] debugfs: 'hsr0' already exists in 'hsr' [ 95.009257][ T8133] Cannot create hsr debugfs directory [ 95.084703][ T3255] bridge_slave_1: left allmulticast mode [ 95.084723][ T3255] bridge_slave_1: left promiscuous mode [ 95.084805][ T3255] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.091379][ T3255] bridge_slave_0: left allmulticast mode [ 95.091394][ T3255] bridge_slave_0: left promiscuous mode [ 95.091465][ T3255] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.209071][ T8182] ubi0: attaching mtd0 [ 95.212324][ T8182] ubi0: scanning is finished [ 95.212334][ T8182] ubi0: empty MTD device detected [ 95.237975][ T3255] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 95.237992][ T3255] bridge3 (unregistering): left allmulticast mode [ 95.259322][ T3255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.261929][ T8188] netlink: 60 bytes leftover after parsing attributes in process `syz.9.784'. [ 95.274088][ T3255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.275954][ T3255] bond0 (unregistering): Released all slaves [ 95.278219][ T3255] bond1 (unregistering): Released all slaves [ 95.355602][ T4401] 8021q: adding VLAN 0 to HW filter on device eth16 [ 95.355687][ T8191] netlink: 60 bytes leftover after parsing attributes in process `syz.9.784'. [ 95.373193][ T8182] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 95.373213][ T8182] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 95.373224][ T8182] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 95.373231][ T8182] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 95.373238][ T8182] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 95.373245][ T8182] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 95.373251][ T8182] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2282604559 [ 95.373259][ T8182] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 95.373301][ T8192] ubi0: background thread "ubi_bgt0d" started, PID 8192 [ 95.889988][ T4401] 8021q: adding VLAN 0 to HW filter on device eth17 [ 95.932414][ T8237] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20000 [ 96.078496][ T3255] hsr_slave_0: left promiscuous mode [ 96.078779][ T3255] hsr_slave_1: left promiscuous mode [ 96.079052][ T3255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.079064][ T3255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.079380][ T3255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.079390][ T3255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.082233][ T3255] veth1_macvtap: left promiscuous mode [ 96.082258][ T3255] veth0_macvtap: left promiscuous mode [ 96.082310][ T3255] veth1_vlan: left promiscuous mode [ 96.082341][ T3255] veth0_vlan: left promiscuous mode [ 96.278168][ T3255] team0 (unregistering): Port device team_slave_1 removed [ 96.288050][ T3255] team0 (unregistering): Port device team_slave_0 removed [ 96.406090][ T4720] Bluetooth: hci1: command tx timeout [ 96.579196][ T3255] IPVS: stop unused estimator thread 0... [ 96.720080][ T8133] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.721098][ T8133] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.721467][ T8133] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.722313][ T8133] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.722753][ T8133] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.735568][ T8133] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.735858][ T8133] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.736824][ T8133] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.765077][ T8133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.769607][ T8133] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.771452][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.771473][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.785573][ T3255] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.785598][ T3255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.483911][ T4720] Bluetooth: hci1: command tx timeout [ 100.562866][ T4720] Bluetooth: hci1: command tx timeout [ 101.233742][ T8273] loop8: detected capacity change from 0 to 128 [ 101.258335][ T8273] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.273441][ T8283] Bluetooth: MGMT ver 1.23 [ 101.861640][ T4401] 8021q: adding VLAN 0 to HW filter on device eth18 [ 101.884691][ T8283] FAULT_INJECTION: forcing a failure. [ 101.884691][ T8283] name failslab, interval 1, probability 0, space 0, times 0 [ 101.884712][ T8283] CPU: 1 UID: 0 PID: 8283 Comm: syz.9.804 Not tainted syzkaller #0 PREEMPT [ 101.884724][ T8283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.884730][ T8283] Call trace: [ 101.884733][ T8283] show_stack+0x2c/0x3c (C) [ 101.884754][ T8283] __dump_stack+0x30/0x40 [ 101.884766][ T8283] dump_stack_lvl+0xd8/0x12c [ 101.884778][ T8283] dump_stack+0x1c/0x28 [ 101.884789][ T8283] should_fail_ex+0x418/0x58c [ 101.884802][ T8283] should_failslab+0xc4/0x120 [ 101.884815][ T8283] __kmalloc_cache_noprof+0x94/0x5fc [ 101.884824][ T8283] ucma_open+0x60/0x174 [ 101.884834][ T8283] misc_open+0x2dc/0x338 [ 101.884847][ T8283] chrdev_open+0x398/0x3e8 [ 101.884858][ T8283] do_dentry_open+0x5c4/0xfbc [ 101.884869][ T8283] vfs_open+0x44/0x2dc [ 101.884879][ T8283] path_openat+0x1084/0x18f0 [ 101.884889][ T8283] do_file_open+0x1c8/0x2e8 [ 101.884899][ T8283] do_sys_openat2+0x114/0x1e8 [ 101.884910][ T8283] do_sys_open+0xb0/0xe0 [ 101.884921][ T8283] __arm64_sys_openat+0xa8/0xc4 [ 101.884932][ T8283] invoke_syscall+0x98/0x244 [ 101.884944][ T8283] el0_svc_common+0xec/0x23c [ 101.884955][ T8283] do_el0_svc+0x4c/0x5c [ 101.884967][ T8283] el0_svc+0x60/0x1d8 [ 101.884978][ T8283] el0t_64_sync_handler+0x44/0x104 [ 101.884989][ T8283] el0t_64_sync+0x198/0x19c [ 101.944200][ T8302] binder: 8301:8302 got transaction to invalid handle, 1 [ 101.944217][ T8302] binder: 8301:8302 cannot find target node [ 101.944231][ T8302] binder: 8301:8302 transaction call to 0:0 failed 121/29201/-22, code 0 size 0-0 line 3252 [ 101.944257][ T8302] binder: 8301:8302 ioctl c0306201 200004c0 returned -14 [ 101.944562][ T8302] binder: 8301:8302 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 101.944576][ T8302] binder: 8302 RLIMIT_NICE not set [ 101.992182][ T8133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.001870][ T8313] binder: 8301:8313 got transaction to invalid handle, 3 [ 102.001888][ T8313] binder: 8301:8313 cannot find target node [ 102.001903][ T8313] binder: 8301:8313 transaction call to 0:0 failed 122/29201/-22, code 0 size 0-0 line 3252 [ 102.025691][ T8133] veth0_vlan: entered promiscuous mode [ 102.029090][ T8133] veth1_vlan: entered promiscuous mode [ 102.040907][ T8133] veth0_macvtap: entered promiscuous mode [ 102.050551][ T8133] veth1_macvtap: entered promiscuous mode [ 102.395334][ T6506] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.398662][ T8133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.414641][ T8133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.464764][ T6477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.464781][ T6477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.476827][ T1456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.476839][ T1456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.485376][ T4401] 8021q: adding VLAN 0 to HW filter on device eth19 [ 102.496817][ T6477] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.497305][ T6477] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.497330][ T6477] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.497351][ T6477] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.576881][ T8329] smc: removing ib device syz2 [ 102.632335][ T8345] loop3: detected capacity change from 0 to 128 [ 102.642093][ T8345] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.655988][ T4720] Bluetooth: hci1: command tx timeout [ 103.069586][ T1028] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.086086][ T7366] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.137791][ T8354] tipc: Started in network mode [ 103.137809][ T8354] tipc: Node identity 4, cluster identity 4711 [ 103.137818][ T8354] tipc: Node number set to 4 [ 103.149444][ T8354] tipc: Enabled bearer , priority 0 [ 103.364653][ T8375] loop9: detected capacity change from 0 to 128 [ 103.371705][ T8375] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.531421][ T8133] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.430648][ T6890] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.481300][ T8419] netlink: 12 bytes leftover after parsing attributes in process `syz.9.823'. [ 104.570607][ T8422] loop9: detected capacity change from 0 to 128 [ 104.572652][ T8424] loop8: detected capacity change from 0 to 512 [ 104.604491][ T8422] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.705826][ T8428] loop8: detected capacity change from 0 to 512 [ 104.710083][ T8428] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.825: bad orphan inode 15 [ 104.710102][ T8428] loop8: lost filesystem error report for type 5 error -117 [ 104.710189][ T8428] ext4_test_bit(bit=14, block=5) = 0 [ 104.710634][ T8428] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.021750][ T8428] EXT4-fs error (device loop8): ext4_lookup:1787: inode #15: comm syz.8.825: inode has both inline data and extents flags [ 105.027186][ T8428] EXT4-fs error (device loop8): __ext4_new_inode:1083: comm syz.8.825: reserved inode found cleared - inode=1 [ 105.032270][ T8428] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 105.051383][ T8434] tipc: Enabling of bearer rejected, already enabled [ 105.115000][ T8440] netlink: 'syz.7.827': attribute type 83 has an invalid length. [ 105.520802][ T6890] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.549077][ T6506] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.542504][ T8500] loop3: detected capacity change from 0 to 128 [ 106.556318][ T8500] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.604454][ T8505] loop8: detected capacity change from 0 to 4096 [ 106.636142][ T8505] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.084885][ T8528] syzkaller0: entered promiscuous mode [ 107.084902][ T8528] syzkaller0: entered allmulticast mode [ 107.151847][ T8537] vlan3: entered promiscuous mode [ 107.151916][ T8537] vlan3: entered allmulticast mode [ 107.151923][ T8537] bridge0: entered allmulticast mode [ 107.238879][ T8547] syzkaller0: entered promiscuous mode [ 107.238897][ T8547] syzkaller0: entered allmulticast mode [ 107.420684][ T8133] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.442619][ T8570] loop3: detected capacity change from 0 to 128 [ 107.449818][ T8570] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.975357][ T6506] EXT4-fs error (device loop8): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /77/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 107.977419][ T6506] EXT4-fs error (device loop8): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 107.977675][ T6506] EXT4-fs warning (device loop8): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 107.977825][ T6506] EXT4-fs error (device loop8): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /77/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 107.978044][ T6506] EXT4-fs error (device loop8): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 107.979204][ T6506] EXT4-fs warning (device loop8): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 107.979435][ T6506] EXT4-fs error (device loop8): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /77/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 107.979683][ T6506] EXT4-fs error (device loop8): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 107.979819][ T6506] EXT4-fs warning (device loop8): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 107.979918][ T6506] EXT4-fs error (device loop8): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /77/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 107.980184][ T6506] EXT4-fs error (device loop8): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 107.980411][ T6506] EXT4-fs warning (device loop8): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 107.980536][ T6506] EXT4-fs error (device loop8): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /77/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 107.980855][ T6506] EXT4-fs error (device loop8): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 107.980983][ T6506] EXT4-fs warning (device loop8): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 107.981581][ T6506] EXT4-fs warning (device loop8): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 107.981985][ T6506] EXT4-fs warning (device loop8): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 107.982555][ T6506] EXT4-fs warning (device loop8): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 107.989583][ T6506] EXT4-fs warning (device loop8): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 107.995742][ T6506] EXT4-fs warning (device loop8): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 108.074283][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.9.856'. [ 108.139566][ T8605] loop9: detected capacity change from 0 to 512 [ 108.149396][ T8605] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 108.154965][ T8605] EXT4-fs (loop9): 1 truncate cleaned up [ 108.155422][ T8605] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.267055][ T8515] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.333557][ T8133] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.397571][ T6477] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.532342][ T6477] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.807378][ T6477] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.839328][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.840684][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.841234][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.841559][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.841763][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.867393][ T6477] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.883908][ T8631] syzkaller0: entered promiscuous mode [ 108.883926][ T8631] syzkaller0: entered allmulticast mode [ 108.980411][ T6890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.196572][ T8673] loop2: detected capacity change from 0 to 256 [ 109.211642][ T8673] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.212429][ T6477] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 109.285244][ T6477] bond0 (unregistering): Released all slaves [ 109.287806][ T6477] bond1 (unregistering): Released all slaves [ 109.297296][ T8679] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 109.297313][ T8679] FAT-fs (loop2): Filesystem has been set read-only [ 109.297601][ T8679] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 109.297624][ T8679] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 109.301891][ T6477] bond2 (unregistering): Released all slaves [ 109.303721][ T8679] netlink: 'syz.2.862': attribute type 21 has an invalid length. [ 109.328684][ T8679] netlink: 132 bytes leftover after parsing attributes in process `syz.2.862'. [ 109.537547][ T8704] 9p: Bad value for 'rfdno' [ 109.780075][ T8632] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.781680][ T8632] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.781755][ T8632] bridge_slave_0: entered allmulticast mode [ 109.782179][ T8632] bridge_slave_0: entered promiscuous mode [ 109.784585][ T8632] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.784639][ T8632] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.784691][ T8632] bridge_slave_1: entered allmulticast mode [ 109.785141][ T8632] bridge_slave_1: entered promiscuous mode [ 109.793214][ T8632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.794167][ T8632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.801213][ T8632] team0: Port device team_slave_0 added [ 109.802116][ T8632] team0: Port device team_slave_1 added [ 109.808916][ T8632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.808924][ T8632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.808936][ T8632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.809441][ T8632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.809447][ T8632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.809460][ T8632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.820333][ T8632] hsr_slave_0: entered promiscuous mode [ 109.820616][ T8632] hsr_slave_1: entered promiscuous mode [ 109.820788][ T8632] debugfs: 'hsr0' already exists in 'hsr' [ 109.820798][ T8632] Cannot create hsr debugfs directory [ 109.933601][ T8632] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.939316][ T6477] hsr_slave_0: left promiscuous mode [ 109.943015][ T6477] hsr_slave_1: left promiscuous mode [ 109.945402][ T6477] veth1_macvtap: left promiscuous mode [ 109.945428][ T6477] veth0_macvtap: left promiscuous mode [ 109.945475][ T6477] veth1_vlan: left promiscuous mode [ 109.945520][ T6477] veth0_vlan: left promiscuous mode [ 110.119654][ T8632] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.186588][ T8632] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.240208][ T8632] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.884137][ T51] Bluetooth: hci2: command tx timeout [ 112.111595][ T8663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.120876][ T8632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.125317][ T8632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.127507][ T8632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.130676][ T8632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.130988][ T8632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.131938][ T8632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.132280][ T8662] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 112.132534][ T8632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.136150][ T8632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.159598][ T8632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.164336][ T8632] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.167120][ T1456] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.167144][ T1456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.168592][ T1456] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.168612][ T1456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.175700][ T8632] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.175715][ T8632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.962949][ T51] Bluetooth: hci2: command tx timeout [ 115.044505][ T51] Bluetooth: hci2: command tx timeout [ 116.217448][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.871'. [ 116.336863][ T8750] IPVS: sh: FWM 1 0x00000001 - no destination available [ 116.339821][ T6492] IPVS: starting estimator thread 0... [ 116.352800][ T8632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.368603][ T8632] veth0_vlan: entered promiscuous mode [ 116.370427][ T8632] veth1_vlan: entered promiscuous mode [ 116.379223][ T8632] veth0_macvtap: entered promiscuous mode [ 116.380291][ T8632] veth1_macvtap: entered promiscuous mode [ 116.388377][ T8632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.395139][ T8760] netlink: 'syz.7.877': attribute type 1 has an invalid length. [ 116.398099][ T8632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.433605][ T8755] IPVS: using max 61 ests per chain, 146400 per kthread [ 116.437188][ T8753] loop2: detected capacity change from 0 to 8192 [ 116.447475][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.447489][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.453220][ T1456] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.453643][ T1456] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.453666][ T1456] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.453684][ T1456] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.462370][ T1456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.462382][ T1456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.528541][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 116.564094][ T8777] loop1: detected capacity change from 0 to 128 [ 116.574738][ T8777] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.645443][ T8753] syz.2.876: attempt to access beyond end of device [ 116.645443][ T8753] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 116.645509][ T8753] Buffer I/O error on dev loop2, logical block 57847, async page read [ 116.649078][ T8753] syz.2.876: attempt to access beyond end of device [ 116.649078][ T8753] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 116.649099][ T8753] Buffer I/O error on dev loop2, logical block 57847, async page read [ 116.649124][ T8753] syz.2.876: attempt to access beyond end of device [ 116.649124][ T8753] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 116.649136][ T8753] Buffer I/O error on dev loop2, logical block 57847, async page read [ 116.649155][ T8753] syz.2.876: attempt to access beyond end of device [ 116.649155][ T8753] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 116.649696][ T8753] Buffer I/O error on dev loop2, logical block 57847, async page read [ 116.649719][ T8753] syz.2.876: attempt to access beyond end of device [ 116.649719][ T8753] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 116.649730][ T8753] Buffer I/O error on dev loop2, logical block 57847, async page read [ 116.649749][ T8753] syz.2.876: attempt to access beyond end of device [ 116.649749][ T8753] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 116.649758][ T8753] Buffer I/O error on dev loop2, logical block 57847, async page read [ 116.649776][ T8753] syz.2.876: attempt to access beyond end of device [ 116.649776][ T8753] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 116.649786][ T8753] Buffer I/O error on dev loop2, logical block 57847, async page read [ 116.649803][ T8753] syz.2.876: attempt to access beyond end of device [ 116.649803][ T8753] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 116.649812][ T8753] Buffer I/O error on dev loop2, logical block 57847, async page read [ 116.649829][ T8753] syz.2.876: attempt to access beyond end of device [ 116.649829][ T8753] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 116.649839][ T8753] Buffer I/O error on dev loop2, logical block 57847, async page read [ 116.649855][ T8753] syz.2.876: attempt to access beyond end of device [ 116.649855][ T8753] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 116.649865][ T8753] Buffer I/O error on dev loop2, logical block 57847, async page read [ 117.106920][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 117.125716][ T51] Bluetooth: hci2: command tx timeout [ 117.321030][ T8819] FAULT_INJECTION: forcing a failure. [ 117.321030][ T8819] name failslab, interval 1, probability 0, space 0, times 0 [ 117.321051][ T8819] CPU: 1 UID: 0 PID: 8819 Comm: syz.2.885 Not tainted syzkaller #0 PREEMPT [ 117.321061][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 117.321065][ T8819] Call trace: [ 117.321069][ T8819] show_stack+0x2c/0x3c (C) [ 117.321086][ T8819] __dump_stack+0x30/0x40 [ 117.321096][ T8819] dump_stack_lvl+0xd8/0x12c [ 117.321105][ T8819] dump_stack+0x1c/0x28 [ 117.321114][ T8819] should_fail_ex+0x418/0x58c [ 117.321128][ T8819] should_failslab+0xc4/0x120 [ 117.321140][ T8819] __kmalloc_cache_noprof+0x94/0x5fc [ 117.321148][ T8819] __arm64_sys_mount+0x188/0x388 [ 117.321159][ T8819] invoke_syscall+0x98/0x244 [ 117.321169][ T8819] el0_svc_common+0xec/0x23c [ 117.321178][ T8819] do_el0_svc+0x4c/0x5c [ 117.321187][ T8819] el0_svc+0x60/0x1d8 [ 117.321197][ T8819] el0t_64_sync_handler+0x44/0x104 [ 117.321206][ T8819] el0t_64_sync+0x198/0x19c [ 117.372136][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 117.426109][ T8632] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.589892][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 117.610546][ T8852] loop2: detected capacity change from 0 to 512 [ 117.633553][ T8852] EXT4-fs (loop2): unable to read superblock [ 117.875704][ T8852] netlink: 'syz.2.891': attribute type 83 has an invalid length. [ 118.701802][ T8878] binder: 8877:8878 tried to acquire reference to desc 0, got 1 instead [ 118.702048][ T8878] binder: 8877:8878 got reply transaction with bad transaction stack, transaction 127 has target 8877:0 [ 118.702068][ T8878] binder: 8877:8878 transaction reply to 0:0 failed 134/29201/-71, code 0 size 0-0 line 3170 [ 118.702379][ T8878] binder: 8877:8878 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 118.702390][ T8878] binder: 8878 RLIMIT_NICE not set [ 118.702401][ T8878] binder: 8878 RLIMIT_NICE not set [ 118.707840][ T7366] binder: release 8877:8878 transaction 127 out, still active [ 118.719119][ T8881] loop1: detected capacity change from 0 to 128 [ 118.724114][ T7366] binder: undelivered TRANSACTION_COMPLETE [ 118.724129][ T7366] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.724185][ T7366] binder: release 8877:8878 transaction 127 in, still active [ 118.724196][ T7366] binder: send failed reply for transaction 127, target dead [ 118.724705][ T8881] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.760245][ T8886] tipc: Cannot configure node identity twice [ 118.760999][ T8886] tipc: Enabled bearer , priority 0 [ 119.206927][ T8896] netlink: 'syz.7.902': attribute type 1 has an invalid length. [ 119.216730][ T8896] bond3: entered promiscuous mode [ 119.216954][ T8896] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.231570][ T8896] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.231768][ T8896] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 119.231780][ T8896] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 119.232273][ T8896] bond3: (slave gre1): Opening slave failed [ 119.588620][ T8901] bridge0: port 3(vlan2) entered blocking state [ 119.588648][ T8901] bridge0: port 3(vlan2) entered disabled state [ 119.588710][ T8901] vlan2: entered allmulticast mode [ 119.588718][ T8901] geneve0: entered allmulticast mode [ 119.589145][ T8901] vlan2: entered promiscuous mode [ 119.589152][ T8901] geneve0: entered promiscuous mode [ 119.614652][ T8632] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.705572][ T8917] loop2: detected capacity change from 0 to 512 [ 119.706240][ T8917] EXT4-fs (loop2): unable to read superblock [ 119.715999][ T8917] netlink: 'syz.2.906': attribute type 83 has an invalid length. [ 119.763037][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 119.810249][ T8924] loop1: detected capacity change from 0 to 128 [ 119.815561][ T8924] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.899912][ T4813] tipc: Node number set to 3650006347 [ 120.234227][ T8931] ptrace attach of ""[8932] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[8931] [ 120.852682][ T8632] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.871967][ T8940] loop2: detected capacity change from 0 to 128 [ 120.884322][ T8940] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.348465][ T8954] netlink: 'syz.7.916': attribute type 4 has an invalid length. [ 122.616485][ T4722] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.665297][ T8963] syzkaller1: entered allmulticast mode [ 122.683830][ T8967] loop1: detected capacity change from 0 to 512 [ 122.686257][ T8967] EXT4-fs (loop1): unable to read superblock [ 122.691304][ T8967] netlink: 'syz.1.921': attribute type 83 has an invalid length. [ 123.063976][ T8973] loop2: detected capacity change from 0 to 1024 [ 123.072611][ T8973] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 123.072641][ T8973] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 123.072651][ T8973] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.923: Failed to acquire dquot type 0 [ 123.072662][ T8973] loop2: lost filesystem error report for type 5 error -117 [ 123.080636][ T8973] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 123.080979][ T8973] EXT4-fs (loop2): 1 truncate cleaned up [ 123.082617][ T8973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.611450][ T4720] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.613245][ T4720] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.615673][ T4720] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.616964][ T4720] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.617772][ T4720] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.665163][ T8988] loop1: detected capacity change from 0 to 256 [ 123.738094][ T8991] loop1: detected capacity change from 0 to 8192 [ 123.750119][ T8991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.928'. [ 123.801904][ T8992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.928'. [ 123.885255][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.885894][ T8999] loop1: detected capacity change from 0 to 128 [ 123.906364][ T8999] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.623788][ T9020] 9p: Bad value for 'rfdno' [ 124.635728][ T4720] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 124.638528][ T4720] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 124.639687][ T4720] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 124.640007][ T4720] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 124.640472][ T4720] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 124.642623][ T8981] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.642679][ T8981] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.642731][ T8981] bridge_slave_0: entered allmulticast mode [ 124.645411][ T8981] bridge_slave_0: entered promiscuous mode [ 124.646762][ T8981] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.646825][ T8981] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.646877][ T8981] bridge_slave_1: entered allmulticast mode [ 124.647364][ T8981] bridge_slave_1: entered promiscuous mode [ 124.656546][ T8981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.657518][ T8981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.666648][ T8981] team0: Port device team_slave_0 added [ 124.667508][ T8981] team0: Port device team_slave_1 added [ 124.678053][ T8981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.678078][ T8981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.678090][ T8981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.680218][ T8981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.680226][ T8981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.680237][ T8981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.714915][ T8981] hsr_slave_0: entered promiscuous mode [ 124.715229][ T8981] hsr_slave_1: entered promiscuous mode [ 124.715461][ T8981] debugfs: 'hsr0' already exists in 'hsr' [ 124.715472][ T8981] Cannot create hsr debugfs directory [ 124.754925][ T8632] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.766629][ T9031] bridge3: entered allmulticast mode [ 124.834323][ T9038] syzkaller1: entered promiscuous mode [ 124.834340][ T9038] syzkaller1: entered allmulticast mode [ 125.002332][ T9038] TC_ACT_REPEAT abuse ? [ 125.392426][ T9085] FAULT_INJECTION: forcing a failure. [ 125.392426][ T9085] name failslab, interval 1, probability 0, space 0, times 0 [ 125.392512][ T9085] CPU: 0 UID: 0 PID: 9085 Comm: syz.1.942 Not tainted syzkaller #0 PREEMPT [ 125.392528][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 125.392534][ T9085] Call trace: [ 125.392537][ T9085] show_stack+0x2c/0x3c (C) [ 125.392556][ T9085] __dump_stack+0x30/0x40 [ 125.392568][ T9085] dump_stack_lvl+0xd8/0x12c [ 125.392580][ T9085] dump_stack+0x1c/0x28 [ 125.392591][ T9085] should_fail_ex+0x418/0x58c [ 125.392604][ T9085] should_failslab+0xc4/0x120 [ 125.392617][ T9085] __kmalloc_cache_noprof+0x94/0x5fc [ 125.392626][ T9085] mrp_init_applicant+0x184/0x47c [ 125.392637][ T9085] vlan_mvrp_init_applicant+0x28/0x38 [ 125.392648][ T9085] register_vlan_dev+0x1fc/0x6f8 [ 125.392660][ T9085] register_vlan_device+0x2c4/0x3f8 [ 125.392673][ T9085] vlan_ioctl_handler+0x2fc/0x66c [ 125.392685][ T9085] sock_ioctl+0x5a8/0x7ec [ 125.392697][ T9085] __arm64_sys_ioctl+0x154/0x1cc [ 125.392710][ T9085] invoke_syscall+0x98/0x244 [ 125.392722][ T9085] el0_svc_common+0xec/0x23c [ 125.392733][ T9085] do_el0_svc+0x4c/0x5c [ 125.392745][ T9085] el0_svc+0x60/0x1d8 [ 125.392756][ T9085] el0t_64_sync_handler+0x44/0x104 [ 125.392767][ T9085] el0t_64_sync+0x198/0x19c [ 125.431029][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.943'. [ 125.432370][ T9021] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.432462][ T9021] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.432530][ T9021] bridge_slave_0: entered allmulticast mode [ 125.434465][ T9021] bridge_slave_0: entered promiscuous mode [ 125.437724][ T9021] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.438110][ T9021] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.438182][ T9021] bridge_slave_1: entered allmulticast mode [ 125.438761][ T9092] sctp: [Deprecated]: syz.1.943 (pid 9092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.438761][ T9092] Use struct sctp_sack_info instead [ 125.438860][ T9021] bridge_slave_1: entered promiscuous mode [ 125.451590][ T9021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.460511][ T9021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.479039][ T9021] team0: Port device team_slave_0 added [ 125.481492][ T9021] team0: Port device team_slave_1 added [ 125.490633][ T9097] loop1: detected capacity change from 0 to 128 [ 125.499543][ T9097] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.528854][ T9021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.528867][ T9021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.528881][ T9021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.544246][ T9021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.544255][ T9021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.544267][ T9021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.604750][ T9021] hsr_slave_0: entered promiscuous mode [ 125.605064][ T9021] hsr_slave_1: entered promiscuous mode [ 125.606500][ T9021] debugfs: 'hsr0' already exists in 'hsr' [ 125.606513][ T9021] Cannot create hsr debugfs directory [ 125.905857][ T4720] Bluetooth: hci5: command tx timeout [ 125.934731][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.934758][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.959189][ T8981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.966754][ T8981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.967059][ T8981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.981299][ T8981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.987518][ T8981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.991016][ T8981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.991538][ T8981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.000828][ T8981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.442313][ T8632] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.509931][ T8981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.514899][ T8981] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.518960][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.518985][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.521342][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.521363][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.643060][ T4720] Bluetooth: hci6: command tx timeout [ 126.851830][ T9021] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.854529][ T9021] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.855010][ T9021] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.856502][ T9021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.856840][ T9021] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.857728][ T9021] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.858063][ T9021] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.858935][ T9021] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.889693][ T9021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.900330][ T9021] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.902793][ T3255] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.902819][ T3255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.913885][ T3255] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.913914][ T3255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.933004][ T4720] Bluetooth: hci5: command tx timeout [ 128.733003][ T4720] Bluetooth: hci6: command tx timeout [ 130.002884][ T4720] Bluetooth: hci5: command tx timeout [ 130.802991][ T4720] Bluetooth: hci6: command tx timeout [ 131.294822][ T9165] loop2: detected capacity change from 0 to 256 [ 131.353668][ T9021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.364960][ T9183] loop1: detected capacity change from 0 to 512 [ 131.378826][ T9183] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.953: attempt to clear invalid blocks 2 len 1 [ 131.378846][ T9183] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 131.379214][ T9183] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 131.379276][ T9183] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.953: invalid indirect mapped block 1819239214 (level 0) [ 131.379290][ T9183] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 131.379420][ T9183] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.953: invalid indirect mapped block 1819239214 (level 1) [ 131.379433][ T9183] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 131.380246][ T9183] EXT4-fs (loop1): 1 truncate cleaned up [ 131.380702][ T9183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.487395][ T4720] Bluetooth: hci4: connection err: -111 [ 131.530230][ T8981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.560047][ T9021] veth0_vlan: entered promiscuous mode [ 131.571419][ T9021] veth1_vlan: entered promiscuous mode [ 131.659505][ T8981] veth0_vlan: entered promiscuous mode [ 131.669171][ T8981] veth1_vlan: entered promiscuous mode [ 131.671860][ T9021] veth0_macvtap: entered promiscuous mode [ 131.674923][ T9021] veth1_macvtap: entered promiscuous mode [ 131.688396][ T9021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.749909][ T9021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.939456][ T8981] veth0_macvtap: entered promiscuous mode [ 131.947725][ T8981] veth1_macvtap: entered promiscuous mode [ 131.955057][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.955185][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.955201][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.955216][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.989930][ T8981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.997979][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.997990][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.010767][ T8981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.027471][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.027483][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.033736][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.033764][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.033781][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.033796][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.076290][ T3255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.076303][ T3255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.083364][ T4720] Bluetooth: hci5: command tx timeout [ 132.094030][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.094042][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.468063][ T8632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.520968][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'. [ 132.591638][ T9267] loop1: detected capacity change from 0 to 256 [ 132.600939][ T9267] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 132.600953][ T9267] FAT-fs (loop1): Filesystem has been set read-only [ 132.886784][ T4720] Bluetooth: hci6: command tx timeout [ 133.005476][ T9274] loop2: detected capacity change from 0 to 512 [ 133.078683][ T9286] loop5: detected capacity change from 0 to 4096 [ 133.082638][ T9286] EXT4-fs (loop5): Test dummy encryption mode enabled [ 133.082749][ T9289] loop0: detected capacity change from 0 to 128 [ 133.098883][ T9286] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 133.098931][ T9286] System zones: 0-5 [ 133.108906][ T9286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.111063][ T9289] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.126043][ T9286] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #12: comm syz.5.969: corrupted xattr block 256: invalid header [ 133.127878][ T9286] EXT4-fs (loop5): Remounting filesystem read-only [ 133.224704][ T4722] tipc: Resetting bearer [ 133.243790][ T4720] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 133.244794][ T4722] tipc: Disabling bearer [ 133.605743][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.699371][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.710824][ T9336] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 133.713269][ T9340] Bluetooth: MGMT ver 1.23 [ 133.729058][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.7.978'. [ 133.736855][ T9336] overlayfs: failed to clone upperpath [ 133.748925][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.750880][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.751339][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.751679][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.751903][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.791552][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.877696][ T49] macsec1 (unregistering): left allmulticast mode [ 133.877721][ T49] macsec1 (unregistering): left promiscuous mode [ 133.878314][ T49] bridge0: port 3(macsec1) entered disabled state [ 133.885457][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.951173][ T8981] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.991259][ T9376] futex_wake_op: syz.0.985 tries to shift op by 144; fix this program [ 134.026168][ T49] bridge_slave_1: left allmulticast mode [ 134.026187][ T49] bridge_slave_1: left promiscuous mode [ 134.026265][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.027235][ T49] bridge_slave_0: left allmulticast mode [ 134.027246][ T49] bridge_slave_0: left promiscuous mode [ 134.027297][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.205653][ T9388] loop0: detected capacity change from 0 to 256 [ 134.232147][ T9388] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 134.232161][ T9388] FAT-fs (loop0): Filesystem has been set read-only [ 134.446898][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.469813][ T9021] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.478720][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.513855][ T49] bond0 (unregistering): Released all slaves [ 134.522259][ T9402] netlink: 128 bytes leftover after parsing attributes in process `syz.1.990'. [ 134.522275][ T9402] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 134.649945][ T49] tipc: Left network mode [ 134.732037][ T9341] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.734367][ T9341] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.734436][ T9341] bridge_slave_0: entered allmulticast mode [ 134.738667][ T9341] bridge_slave_0: entered promiscuous mode [ 134.739633][ T9341] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.739659][ T9341] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.739722][ T9341] bridge_slave_1: entered allmulticast mode [ 134.740531][ T9341] bridge_slave_1: entered promiscuous mode [ 134.786441][ T9341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.801594][ T9452] FAULT_INJECTION: forcing a failure. [ 134.801594][ T9452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.801612][ T9452] CPU: 0 UID: 0 PID: 9452 Comm: syz.5.998 Not tainted syzkaller #0 PREEMPT [ 134.801622][ T9452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 134.801627][ T9452] Call trace: [ 134.801630][ T9452] show_stack+0x2c/0x3c (C) [ 134.801648][ T9452] __dump_stack+0x30/0x40 [ 134.801661][ T9452] dump_stack_lvl+0xd8/0x12c [ 134.801672][ T9452] dump_stack+0x1c/0x28 [ 134.801683][ T9452] should_fail_ex+0x418/0x58c [ 134.801696][ T9452] should_fail+0x14/0x24 [ 134.801707][ T9452] should_fail_usercopy+0x20/0x30 [ 134.801720][ T9452] strncpy_from_user+0x48/0x388 [ 134.801729][ T9452] __arm64_sys_add_key+0x150/0x43c [ 134.801740][ T9452] invoke_syscall+0x98/0x244 [ 134.801751][ T9452] el0_svc_common+0xec/0x23c [ 134.801763][ T9452] do_el0_svc+0x4c/0x5c [ 134.801774][ T9452] el0_svc+0x60/0x1d8 [ 134.801786][ T9452] el0t_64_sync_handler+0x44/0x104 [ 134.801797][ T9452] el0t_64_sync+0x198/0x19c [ 134.835271][ T9341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.847870][ T9341] team0: Port device team_slave_0 added [ 134.848757][ T9341] team0: Port device team_slave_1 added [ 134.857736][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.857746][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.857760][ T9341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.858270][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.858277][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.858292][ T9341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.928056][ T49] hsr_slave_0: left promiscuous mode [ 134.928322][ T49] hsr_slave_1: left promiscuous mode [ 134.928577][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.928588][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.929023][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.929034][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.932614][ T49] veth1_macvtap: left promiscuous mode [ 134.932639][ T49] veth0_macvtap: left promiscuous mode [ 134.932681][ T49] veth1_vlan: left promiscuous mode [ 134.932712][ T49] veth0_vlan: left promiscuous mode [ 134.956868][ T9461] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1001'. [ 135.004587][ T1028] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.060783][ T49] team0 (unregistering): Port device team_slave_1 removed [ 135.066356][ T49] team0 (unregistering): Port device team_slave_0 removed [ 135.119139][ T9469] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1003'. [ 135.119163][ T9469] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 135.137916][ T9341] hsr_slave_0: entered promiscuous mode [ 135.138215][ T9341] hsr_slave_1: entered promiscuous mode [ 135.138401][ T9341] debugfs: 'hsr0' already exists in 'hsr' [ 135.138411][ T9341] Cannot create hsr debugfs directory [ 135.152953][ T1028] usb 1-1: Using ep0 maxpacket: 8 [ 135.153655][ T1028] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 135.154366][ T1028] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.154379][ T1028] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 135.154391][ T1028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 135.154401][ T1028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 135.154413][ T1028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 135.154423][ T1028] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.155845][ T1028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.155856][ T1028] usb 1-1: Product: syz [ 135.155862][ T1028] usb 1-1: Manufacturer: syz [ 135.155869][ T1028] usb 1-1: SerialNumber: syz [ 135.157145][ T1028] usb 1-1: config 0 descriptor?? [ 135.161703][ T9447] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 135.574429][ T9447] netlink: 'syz.0.997': attribute type 4 has an invalid length. [ 135.574447][ T9447] netlink: 104 bytes leftover after parsing attributes in process `syz.0.997'. [ 135.632586][ T9501] syzkaller0: entered promiscuous mode [ 135.632609][ T9501] syzkaller0: entered allmulticast mode [ 135.637467][ T9501] tipc: Started in network mode [ 135.637483][ T9501] tipc: Node identity 1a06c1bf5914, cluster identity 4711 [ 135.637598][ T9501] tipc: Enabled bearer , priority 0 [ 135.638073][ T9498] tipc: Resetting bearer [ 135.648905][ T9498] tipc: Disabling bearer [ 135.656078][ T9506] FAULT_INJECTION: forcing a failure. [ 135.656078][ T9506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.656097][ T9506] CPU: 0 UID: 0 PID: 9506 Comm: syz.5.1010 Not tainted syzkaller #0 PREEMPT [ 135.656107][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 135.656113][ T9506] Call trace: [ 135.656116][ T9506] show_stack+0x2c/0x3c (C) [ 135.656139][ T9506] __dump_stack+0x30/0x40 [ 135.656152][ T9506] dump_stack_lvl+0xd8/0x12c [ 135.656164][ T9506] dump_stack+0x1c/0x28 [ 135.656175][ T9506] should_fail_ex+0x418/0x58c [ 135.656189][ T9506] should_fail+0x14/0x24 [ 135.656201][ T9506] should_fail_usercopy+0x20/0x30 [ 135.656213][ T9506] strncpy_from_user+0x48/0x388 [ 135.656223][ T9506] __arm64_sys_add_key+0x150/0x43c [ 135.656233][ T9506] invoke_syscall+0x98/0x244 [ 135.656245][ T9506] el0_svc_common+0xec/0x23c [ 135.656257][ T9506] do_el0_svc+0x4c/0x5c [ 135.656268][ T9506] el0_svc+0x60/0x1d8 [ 135.656280][ T9506] el0t_64_sync_handler+0x44/0x104 [ 135.656291][ T9506] el0t_64_sync+0x198/0x19c [ 135.705755][ T9510] loop5: detected capacity change from 0 to 2048 [ 135.725188][ T9510] loop5: p1 p4 [ 135.725188][ T9510] p1: [ 135.725202][ T9510] loop5: partition table partially beyond EOD, truncated [ 135.725875][ T9510] loop5: p4 start 184549376 is beyond EOD, truncated [ 135.726372][ T9510] loop5: p6 start 184549376 is beyond EOD, truncated [ 135.767198][ T9381] udevd[9381]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 135.770512][ T9379] udevd[9379]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 135.776970][ T9518] openvswitch: netlink: Actions may not be safe on all matching packets [ 135.779951][ T9522] loop5: detected capacity change from 0 to 512 [ 135.796844][ T9522] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1014: attempt to clear invalid blocks 2 len 1 [ 135.796864][ T9522] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 135.797087][ T9522] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 135.797140][ T9522] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1014: invalid indirect mapped block 1819239214 (level 0) [ 135.797153][ T9522] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 135.797293][ T9522] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1014: invalid indirect mapped block 1819239214 (level 1) [ 135.797305][ T9522] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 135.797768][ T9522] EXT4-fs (loop5): 1 truncate cleaned up [ 135.798232][ T9522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.842956][ T51] Bluetooth: hci4: command tx timeout [ 135.885976][ T9518] syzkaller0: entered promiscuous mode [ 135.885992][ T9518] syzkaller0: entered allmulticast mode [ 135.889611][ T9021] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.356511][ T9341] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 136.360602][ T9341] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.361042][ T9341] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 136.362020][ T9341] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.362415][ T9341] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 136.365592][ T9341] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 136.365931][ T9341] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 136.366952][ T9341] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 136.415013][ T9341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.420002][ T9341] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.422476][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.422512][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.428915][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.428947][ T6477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.440794][ T9550] bond4: entered promiscuous mode [ 136.607167][ T9341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.646169][ T1028] Registered IR keymap rc-snapstream-firefly [ 136.651401][ T1028] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 136.651931][ T1028] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 136.669892][ T1028] input: syz syz mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 136.685295][ T1028] usb 1-1: USB disconnect, device number 3 [ 136.685871][ C0] ati_remote 1-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 136.757091][ T9341] veth0_vlan: entered promiscuous mode [ 136.765659][ T9341] veth1_vlan: entered promiscuous mode [ 136.827304][ T9341] veth0_macvtap: entered promiscuous mode [ 136.832103][ T9341] veth1_macvtap: entered promiscuous mode [ 136.848250][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.852525][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.862034][ T6477] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.862099][ T6477] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.862115][ T6477] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.933082][ T6477] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.935604][ T1456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.935617][ T1456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.947771][ T261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.947786][ T261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.978177][ T9617] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1025'. [ 136.978772][ T9617] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1025'. [ 137.124148][ T9642] Cannot find map_set index 0 as target [ 137.158262][ T9649] loop5: detected capacity change from 0 to 512 [ 137.164109][ T9647] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 137.170652][ T9649] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1036: attempt to clear invalid blocks 2 len 1 [ 137.170672][ T9649] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 137.170912][ T9649] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 137.170969][ T9649] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1036: invalid indirect mapped block 1819239214 (level 0) [ 137.170983][ T9649] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 137.171114][ T9649] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1036: invalid indirect mapped block 1819239214 (level 1) [ 137.171127][ T9649] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 137.171656][ T9649] EXT4-fs (loop5): 1 truncate cleaned up [ 137.172130][ T9649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.244446][ T9021] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.320348][ T9668] bridge_slave_0: left allmulticast mode [ 137.320369][ T9668] bridge_slave_0: left promiscuous mode [ 137.320430][ T9668] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.339088][ T9668] bridge_slave_1: left allmulticast mode [ 137.339107][ T9668] bridge_slave_1: left promiscuous mode [ 137.339179][ T9668] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.358344][ T9668] bond0: (slave bond_slave_0): Releasing backup interface [ 137.382300][ T9668] bond0: (slave bond_slave_1): Releasing backup interface [ 137.416581][ T9668] team0: Failed to send options change via netlink (err -105) [ 137.416721][ T9668] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 137.417114][ T9668] team0: Port device team_slave_0 removed [ 137.434534][ T9668] team0: Failed to send options change via netlink (err -105) [ 137.434665][ T9668] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 137.434784][ T9668] team0: Port device team_slave_1 removed [ 137.435128][ T9668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.435141][ T9668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.438761][ T9668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.438772][ T9668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.458296][ T9668] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.509695][ T9694] loop4: detected capacity change from 0 to 512 [ 137.521033][ T9694] EXT4-fs (loop4): invalid inodes per group: 4 [ 137.627661][ T9669] team0: Failed to send options change via netlink (err -105) [ 137.627681][ T9669] team0: Mode changed to "activebackup" [ 137.924143][ T51] Bluetooth: hci4: command tx timeout [ 137.994634][ T9713] loop5: detected capacity change from 0 to 512 [ 137.996157][ T9713] EXT4-fs (loop5): unable to read superblock [ 138.015188][ T9713] netlink: 'syz.5.1049': attribute type 83 has an invalid length. [ 138.453585][ T9734] Cannot find add_set index 0 as target [ 138.564966][ T9746] FAULT_INJECTION: forcing a failure. [ 138.564966][ T9746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.564986][ T9746] CPU: 0 UID: 0 PID: 9746 Comm: syz.1.1055 Not tainted syzkaller #0 PREEMPT [ 138.564996][ T9746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 138.565000][ T9746] Call trace: [ 138.565003][ T9746] show_stack+0x2c/0x3c (C) [ 138.565020][ T9746] __dump_stack+0x30/0x40 [ 138.565031][ T9746] dump_stack_lvl+0xd8/0x12c [ 138.565040][ T9746] dump_stack+0x1c/0x28 [ 138.565049][ T9746] should_fail_ex+0x418/0x58c [ 138.565061][ T9746] should_fail+0x14/0x24 [ 138.565070][ T9746] should_fail_usercopy+0x20/0x30 [ 138.565080][ T9746] _copy_from_iter+0x188/0x1064 [ 138.565088][ T9746] copy_page_from_iter+0x220/0x2e8 [ 138.565095][ T9746] skb_copy_datagram_from_iter+0x270/0x5c8 [ 138.565105][ T9746] tun_get_user+0xa14/0x36d0 [ 138.565114][ T9746] tun_chr_write_iter+0xfc/0x168 [ 138.565122][ T9746] vfs_write+0x51c/0xa0c [ 138.565133][ T9746] ksys_write+0x12c/0x228 [ 138.565143][ T9746] __arm64_sys_write+0x84/0x98 [ 138.565152][ T9746] invoke_syscall+0x98/0x244 [ 138.565163][ T9746] el0_svc_common+0xec/0x23c [ 138.565172][ T9746] do_el0_svc+0x4c/0x5c [ 138.565181][ T9746] el0_svc+0x60/0x1d8 [ 138.565191][ T9746] el0t_64_sync_handler+0x44/0x104 [ 138.565200][ T9746] el0t_64_sync+0x198/0x19c [ 138.570630][ T9748] binder: 9747:9748 tried to acquire reference to desc 0, got 1 instead [ 138.610605][ T9745] loop0: detected capacity change from 0 to 8192 [ 138.623422][ T4827] binder: release 9747:9748 transaction 139 out, still active [ 138.665152][ T9745] loop0: [ICS] [ 138.668767][ T51] Bluetooth: hci5: Malformed LE Event: 0x1d [ 138.903575][ T4827] binder: undelivered TRANSACTION_COMPLETE [ 138.903674][ T4827] binder: send failed reply for transaction 139, target dead [ 139.006389][ T9767] loop1: detected capacity change from 0 to 256 [ 139.066330][ T9778] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 139.074577][ T9767] [U] V3Fپ"S/4:XTZWTLW= [ 139.075784][ T9767] [U] J"E: [ 139.116375][ T9767] [U] ]SKABA@SГ 7 5 &]JG [ 139.151313][ T30] audit: type=1326 audit(139.130:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9766 comm="syz.5.1062" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff81979368 code=0x0 [ 139.167244][ T9787] FAULT_INJECTION: forcing a failure. [ 139.167244][ T9787] name failslab, interval 1, probability 0, space 0, times 0 [ 139.167265][ T9787] CPU: 0 UID: 0 PID: 9787 Comm: syz.4.1064 Not tainted syzkaller #0 PREEMPT [ 139.167279][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 139.167285][ T9787] Call trace: [ 139.167288][ T9787] show_stack+0x2c/0x3c (C) [ 139.167309][ T9787] __dump_stack+0x30/0x40 [ 139.167322][ T9787] dump_stack_lvl+0xd8/0x12c [ 139.167333][ T9787] dump_stack+0x1c/0x28 [ 139.167344][ T9787] should_fail_ex+0x418/0x58c [ 139.167358][ T9787] should_failslab+0xc4/0x120 [ 139.167371][ T9787] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 139.167380][ T9787] proc_alloc_inode+0x2c/0xb8 [ 139.167393][ T9787] alloc_inode+0x68/0x198 [ 139.167403][ T9787] new_inode+0x20/0x50 [ 139.167414][ T9787] proc_pid_make_inode+0x30/0x148 [ 139.167422][ T9787] proc_pident_instantiate+0x70/0x268 [ 139.167431][ T9787] proc_pident_lookup+0x208/0x260 [ 139.167439][ T9787] proc_tgid_base_lookup+0x34/0x44 [ 139.167447][ T9787] __lookup_slow+0x1e4/0x2b4 [ 139.167457][ T9787] lookup_slow+0x60/0x84 [ 139.167465][ T9787] link_path_walk+0xb0c/0x1584 [ 139.167476][ T9787] path_openat+0x160/0x18f0 [ 139.167492][ T9787] do_file_open+0x1c8/0x2e8 [ 139.167501][ T9787] do_sys_openat2+0x114/0x1e8 [ 139.167513][ T9787] do_sys_open+0xb0/0xe0 [ 139.167524][ T9787] __arm64_sys_openat+0xa8/0xc4 [ 139.167536][ T9787] invoke_syscall+0x98/0x244 [ 139.167548][ T9787] el0_svc_common+0xec/0x23c [ 139.167560][ T9787] do_el0_svc+0x4c/0x5c [ 139.167571][ T9787] el0_svc+0x60/0x1d8 [ 139.167583][ T9787] el0t_64_sync_handler+0x44/0x104 [ 139.167594][ T9787] el0t_64_sync+0x198/0x19c [ 139.288515][ T9804] syz_tun: entered allmulticast mode [ 139.291475][ T9804] dvmrp6: entered allmulticast mode [ 139.307762][ T9804] syz_tun: left allmulticast mode [ 139.309573][ T9773] 9p: Bad value for 'wfdno' [ 139.690609][ T9828] loop1: detected capacity change from 0 to 128 [ 140.004459][ T51] Bluetooth: hci4: command tx timeout [ 140.512120][ T9839] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1078'. [ 140.656448][ T9828] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.719942][ T9853] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 141.179097][ T1456] IPVS: starting estimator thread 0... [ 141.193088][ T8632] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.262982][ T9868] IPVS: using max 61 ests per chain, 146400 per kthread [ 142.083415][ T51] Bluetooth: hci4: command tx timeout [ 146.228706][ T9877] loop5: detected capacity change from 0 to 512 [ 146.243282][ T9883] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 146.293065][ T9885] netlink: 'syz.4.1091': attribute type 4 has an invalid length. [ 146.308102][ T9877] EXT4-fs (loop5): unable to read superblock [ 146.322128][ T9877] netlink: 'syz.5.1088': attribute type 83 has an invalid length. [ 146.416024][ T9894] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.836270][ T12] bridge_slave_1: left allmulticast mode [ 146.836291][ T12] bridge_slave_1: left promiscuous mode [ 146.836366][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.838386][ T12] bridge_slave_0: left allmulticast mode [ 146.838398][ T12] bridge_slave_0: left promiscuous mode [ 146.838463][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.932542][ T12] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 146.959594][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.984426][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.013713][ T12] bond0 (unregistering): Released all slaves [ 147.016208][ T12] bond1 (unregistering): Released all slaves [ 147.025196][ T9912] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1095'. [ 147.062481][ T9917] loop4: detected capacity change from 0 to 128 [ 147.091233][ T9917] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.190789][ T9925] loop1: detected capacity change from 0 to 256 [ 147.207224][ T9923] device-mapper: ioctl: name not supplied when creating device [ 147.208608][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 147.431418][ T9934] netlink: 147896 bytes leftover after parsing attributes in process `syz.7.1099'. [ 147.431552][ T9934] netlink: zone id is out of range [ 147.431696][ T9934] netlink: zone id is out of range [ 147.431889][ T9934] netlink: zone id is out of range [ 147.432125][ T9934] netlink: zone id is out of range [ 147.432154][ T9934] netlink: zone id is out of range [ 147.432183][ T9934] netlink: zone id is out of range [ 147.432211][ T9934] netlink: zone id is out of range [ 147.432239][ T9934] netlink: zone id is out of range [ 147.432267][ T9934] netlink: zone id is out of range [ 147.598831][ T9941] bridge1: entered allmulticast mode [ 147.625484][ T9947] loop5: detected capacity change from 0 to 8 [ 147.679708][ T9952] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 147.711952][ T9952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1103'. [ 147.769221][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1103'. [ 147.770832][ T12] hsr_slave_0: left promiscuous mode [ 147.774586][ T12] hsr_slave_1: left promiscuous mode [ 147.774901][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.774912][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.775890][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.775901][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.788843][ T12] veth1_macvtap: left promiscuous mode [ 147.788873][ T12] veth0_macvtap: left promiscuous mode [ 147.788929][ T12] veth1_vlan: left promiscuous mode [ 147.788977][ T12] veth0_vlan: left promiscuous mode [ 148.215776][ T9341] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.347663][ T12] team0 (unregistering): Port device team_slave_1 removed [ 148.351920][ T12] team0 (unregistering): Port device team_slave_0 removed [ 148.556181][ T4813] kernel write not supported for file /input/mice (pid: 4813 comm: kworker/0:4) [ 148.996745][ T7365] logitech-hidpp-device 0005:046D:B012.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 149.027010][T10028] fido_id[10028]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 149.156786][T10038] device-mapper: ioctl: name not supplied when creating device [ 149.271668][T10052] netlink: 'syz.5.1118': attribute type 7 has an invalid length. [ 149.271687][T10052] netlink: 'syz.5.1118': attribute type 5 has an invalid length. [ 149.271698][T10052] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1118'. [ 149.272112][T10052] syz.5.1118 (10052): attempted to duplicate a private mapping with mremap. This is not supported. [ 149.289865][T10052] loop5: detected capacity change from 0 to 256 [ 149.332492][T10054] binder: 10053:10054 tried to acquire reference to desc 0, got 1 instead [ 149.332962][T10054] binder: 10053:10054 got reply transaction with bad transaction stack, transaction 150 has target 10053:0 [ 149.332983][T10054] binder: 10053:10054 transaction reply to 0:0 failed 157/29201/-71, code 0 size 0-0 line 3170 [ 149.344042][T10054] binder: 10053:10054 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 149.344062][T10054] binder: 10054 RLIMIT_NICE not set [ 149.344074][T10054] binder: 10054 RLIMIT_NICE not set [ 149.383146][ T4882] binder: release 10053:10054 transaction 158 out, still active [ 149.383168][ T4882] binder: release 10053:10054 transaction 150 in, still active [ 149.383182][ T4882] binder: undelivered TRANSACTION_COMPLETE [ 149.383255][ T4882] binder: release 10053:10054 transaction 150 out, still active [ 149.423860][ T4882] binder: undelivered TRANSACTION_COMPLETE [ 149.423878][ T4882] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.423887][ T4882] binder: send failed reply for transaction 158, target dead [ 149.423901][ T4882] binder: send failed reply for transaction 150, target dead [ 149.530071][T10071] loop5: detected capacity change from 0 to 256 [ 149.661848][T10080] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 149.956635][T10102] loop5: detected capacity change from 0 to 128 [ 149.969309][T10102] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.037268][ T30] audit: type=1326 audit(150.020:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.0.1126" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff83179368 code=0x0 [ 150.078670][T10118] loop4: detected capacity change from 0 to 512 [ 150.081940][T10118] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 150.098996][T10118] EXT4-fs (loop4): 1 truncate cleaned up [ 150.099638][T10118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.373141][T10124] syz_tun: entered allmulticast mode [ 150.377059][T10124] dvmrp6: entered allmulticast mode [ 150.382942][T10124] syz_tun: left allmulticast mode [ 150.452322][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'. [ 150.473271][ T9341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.529365][T10141] 9p: Bad value for 'rfdno' [ 150.532754][T10144] loop1: detected capacity change from 0 to 128 [ 150.542643][T10144] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.974567][ T9021] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.995185][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1135'. [ 151.090338][ T4720] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 151.090354][ T4720] CPU: 0 UID: 0 PID: 4720 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT [ 151.090365][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 151.090382][ T4720] Workqueue: hci6 hci_rx_work [ 151.090412][ T4720] Call trace: [ 151.090415][ T4720] show_stack+0x2c/0x3c (C) [ 151.090431][ T4720] __dump_stack+0x30/0x40 [ 151.090445][ T4720] dump_stack_lvl+0xd8/0x12c [ 151.090456][ T4720] dump_stack+0x1c/0x28 [ 151.090468][ T4720] sysfs_warn_dup+0x9c/0xb8 [ 151.090488][ T4720] sysfs_create_dir_ns+0x190/0x1f4 [ 151.090500][ T4720] kobject_add_internal+0x290/0x6f0 [ 151.090514][ T4720] kobject_add_varg+0x9c/0xe8 [ 151.090527][ T4720] kobject_add+0x110/0x1c8 [ 151.090538][ T4720] device_add+0x394/0x9e0 [ 151.090549][ T4720] hci_conn_add_sysfs+0xbc/0x1e8 [ 151.090558][ T4720] le_conn_complete_evt+0xc84/0x122c [ 151.090571][ T4720] hci_le_enh_conn_complete_evt+0x114/0x3d8 [ 151.090584][ T4720] hci_le_meta_evt+0x2b0/0x46c [ 151.090593][ T4720] hci_event_packet+0x4c0/0x9c8 [ 151.090602][ T4720] hci_rx_work+0x2f4/0xd78 [ 151.090612][ T4720] process_scheduled_works+0x91c/0x1250 [ 151.090624][ T4720] worker_thread+0x798/0xbd0 [ 151.090634][ T4720] kthread+0x304/0x3d4 [ 151.090643][ T4720] ret_from_fork+0x10/0x20 [ 151.090720][ T4720] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 151.090744][ T4720] Bluetooth: hci6: failed to register connection device [ 151.092046][T10177] loop0: detected capacity change from 0 to 512 [ 151.115228][T10177] EXT4-fs (loop0): invalid inodes per group: 4 [ 151.139200][T10176] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 151.149626][T10176] EXT4-fs (loop5): 1 truncate cleaned up [ 151.155114][T10176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.332820][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4 [ 151.411937][ T8632] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.502116][T10223] fuse: Bad value for 'rootmode' [ 151.508043][ T4401] 8021q: adding VLAN 0 to HW filter on device eth6 [ 151.531426][T10227] 9p: Bad value for 'wfdno' [ 151.589334][T10236] set_capacity_and_notify: 1 callbacks suppressed [ 151.589348][T10236] loop4: detected capacity change from 0 to 256 [ 151.668790][T10248] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1152'. [ 151.718977][ T4401] 8021q: adding VLAN 0 to HW filter on device eth7 [ 151.719270][ T9021] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.771197][T10257] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1154'. [ 151.813421][T10263] misc userio: No port type given on /dev/userio [ 151.865963][T10275] fuse: Bad value for 'rootmode' [ 151.894085][T10279] 9p: Bad value for 'wfdno' [ 151.919557][T10286] loop4: detected capacity change from 0 to 1024 [ 151.920724][T10286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.936549][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1161'. [ 151.937769][T10284] net_ratelimit: 58 callbacks suppressed [ 151.937780][T10284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.939573][T10284] binder: 10282:10284 tried to acquire reference to desc 0, got 1 instead [ 151.942623][T10284] binder: 10282:10284 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 151.942639][T10284] binder: 10284 RLIMIT_NICE not set [ 151.955679][T10284] binder_alloc: 10282: binder_alloc_buf, no vma [ 151.955690][T10284] binder: cannot allocate buffer: vma cleared, target dead or dying [ 151.962336][T10284] binder: 10282:10284 ioctl 80089418 20000800 returned -22 [ 151.962344][T10286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.962462][T10284] binder: 10282:10284 ioctl c0c89425 20000840 returned -22 [ 152.039809][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5 [ 152.100698][T10299] loop5: detected capacity change from 0 to 8192 [ 152.122353][ T9341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.154631][T10299] loop5: [ICS] [ 152.156809][ T4720] Bluetooth: hci6: Malformed LE Event: 0x1d [ 152.265800][T10324] fuse: Bad value for 'rootmode' [ 152.687630][T10342] FAULT_INJECTION: forcing a failure. [ 152.687630][T10342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.687675][T10342] CPU: 0 UID: 0 PID: 10342 Comm: syz.1.1171 Not tainted syzkaller #0 PREEMPT [ 152.687686][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 152.687691][T10342] Call trace: [ 152.687694][T10342] show_stack+0x2c/0x3c (C) [ 152.687714][T10342] __dump_stack+0x30/0x40 [ 152.687724][T10342] dump_stack_lvl+0xd8/0x12c [ 152.687734][T10342] dump_stack+0x1c/0x28 [ 152.687743][T10342] should_fail_ex+0x418/0x58c [ 152.687754][T10342] should_fail+0x14/0x24 [ 152.687763][T10342] should_fail_usercopy+0x20/0x30 [ 152.687773][T10342] _inline_copy_from_user+0x3c/0x174 [ 152.687782][T10342] __copy_siginfo_from_user+0x34/0xac [ 152.687791][T10342] __arm64_sys_rt_sigqueueinfo+0xf8/0x188 [ 152.687799][T10342] invoke_syscall+0x98/0x244 [ 152.687809][T10342] el0_svc_common+0xec/0x23c [ 152.687818][T10342] do_el0_svc+0x4c/0x5c [ 152.687827][T10342] el0_svc+0x60/0x1d8 [ 152.687838][T10342] el0t_64_sync_handler+0x44/0x104 [ 152.687847][T10342] el0t_64_sync+0x198/0x19c [ 152.907271][T10351] loop0: detected capacity change from 0 to 512 [ 152.909406][T10351] EXT4-fs (loop0): unable to read superblock [ 152.922798][T10351] netlink: 'syz.0.1177': attribute type 83 has an invalid length. [ 153.024031][T10366] syz_tun: entered allmulticast mode [ 153.026983][T10364] syz_tun: left allmulticast mode [ 153.137258][T10375] loop5: detected capacity change from 0 to 512 [ 153.137793][T10375] EXT4-fs (loop5): unable to read superblock [ 153.155259][T10375] netlink: 'syz.5.1182': attribute type 83 has an invalid length. [ 153.229104][T10383] __nla_validate_parse: 3 callbacks suppressed [ 153.229120][T10383] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1184'. [ 153.229132][T10383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.297511][T10390] loop1: detected capacity change from 0 to 128 [ 153.309829][T10390] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.916391][T10438] loop4: detected capacity change from 0 to 512 [ 154.951666][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 154.951838][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 154.951938][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 154.958992][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 154.959392][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 154.966273][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 154.966342][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 154.966408][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 154.966494][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 154.982263][T10438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.005564][ T9341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.121302][T10451] hub 6-0:1.0: USB hub found [ 155.125586][T10451] hub 6-0:1.0: 8 ports detected [ 155.228716][T10457] loop5: detected capacity change from 0 to 512 [ 155.231987][T10461] fuse: Bad value for 'fd' [ 155.252035][T10457] EXT4-fs (loop5): invalid inodes per group: 7 [ 155.671841][T10472] xt_hashlimit: size too large, truncated to 1048576 [ 155.671887][T10472] xt_hashlimit: max too large, truncated to 1048576 [ 155.677406][ T8632] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.775756][T10476] could not allocate digest TFM handle crc32-pclmul [ 155.901842][T10495] loop1: detected capacity change from 0 to 512 [ 155.912082][T10495] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.921765][T10495] EXT4-fs (loop1): 1 truncate cleaned up [ 155.922553][T10495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.947684][T10495] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6542: inode #12: comm syz.1.1201: bad extra_isize 62 (inode size 256) [ 155.950333][T10495] EXT4-fs (loop1): Remounting filesystem read-only [ 155.985602][ T8632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.034830][T10507] loop1: detected capacity change from 0 to 512 [ 156.045771][T10507] EXT4-fs (loop1): unable to read superblock [ 156.050839][T10507] netlink: 'syz.1.1202': attribute type 83 has an invalid length. [ 161.224123][T10527] fuse: Bad value for 'fd' [ 161.349250][ T216] IPVS: starting estimator thread 0... [ 161.353771][T10545] syzkaller0: entered promiscuous mode [ 161.353784][T10545] syzkaller0: entered allmulticast mode [ 161.389602][T10550] __nla_validate_parse: 90 callbacks suppressed [ 161.389619][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1214'. [ 161.389907][ T4720] Bluetooth: hci2: ACL packet for unknown connection handle 2761 [ 161.398809][T10550] vlan2: entered promiscuous mode [ 161.398827][T10550] gretap0: entered promiscuous mode [ 161.402104][T10544] set_capacity_and_notify: 1 callbacks suppressed [ 161.402115][T10544] loop1: detected capacity change from 0 to 512 [ 161.418993][T10544] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.1213: iget: bad i_size value: 38620345925642 [ 161.419024][T10544] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 161.419359][T10544] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1213: couldn't read orphan inode 15 (err -117) [ 161.419379][T10544] loop1: lost filesystem error report for type 5 error -117 [ 161.420409][T10544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.431355][T10554] FAULT_INJECTION: forcing a failure. [ 161.431355][T10554] name failslab, interval 1, probability 0, space 0, times 0 [ 161.431375][T10554] CPU: 0 UID: 0 PID: 10554 Comm: syz.5.1215 Tainted: G L syzkaller #0 PREEMPT [ 161.431388][T10554] Tainted: [L]=SOFTLOCKUP [ 161.431391][T10554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 161.431395][T10554] Call trace: [ 161.431398][T10554] show_stack+0x2c/0x3c (C) [ 161.431415][T10554] __dump_stack+0x30/0x40 [ 161.431425][T10554] dump_stack_lvl+0xd8/0x12c [ 161.431435][T10554] dump_stack+0x1c/0x28 [ 161.431443][T10554] should_fail_ex+0x418/0x58c [ 161.431454][T10554] should_failslab+0xc4/0x120 [ 161.431465][T10554] kmem_cache_alloc_noprof+0x94/0x5d4 [ 161.431476][T10554] do_getname+0x48/0x234 [ 161.431489][T10554] user_path_at+0x38/0x78 [ 161.431496][T10554] do_mount+0xb0/0x148 [ 161.431505][T10554] __arm64_sys_mount+0x33c/0x388 [ 161.431514][T10554] invoke_syscall+0x98/0x244 [ 161.431524][T10554] el0_svc_common+0xec/0x23c [ 161.431534][T10554] do_el0_svc+0x4c/0x5c [ 161.431543][T10554] el0_svc+0x60/0x1d8 [ 161.431553][T10554] el0t_64_sync_handler+0x44/0x104 [ 161.431562][T10554] el0t_64_sync+0x198/0x19c [ 161.453817][T10547] IPVS: using max 45 ests per chain, 108000 per kthread [ 161.472537][T10560] loop5: detected capacity change from 0 to 128 [ 161.491737][T10560] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.982170][T10592] loop4: detected capacity change from 0 to 8192 [ 161.986242][T10592] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.998485][T10592] netlink: 'syz.4.1220': attribute type 11 has an invalid length. [ 162.128424][T10609] fuse: Bad value for 'fd' [ 162.132008][ T8632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.337555][ T30] audit: type=1326 audit(162.320:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10614 comm="syz.4.1222" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff80179368 code=0x0 [ 162.416227][ T9021] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.312951][T10644] syz_tun: entered allmulticast mode [ 163.313537][T10644] syz_tun: left allmulticast mode [ 165.516265][T10675] netlink: 147896 bytes leftover after parsing attributes in process `syz.0.1231'. [ 165.516296][T10675] netlink: zone id is out of range [ 165.516307][T10675] netlink: zone id is out of range [ 165.587061][T10681] loop0: detected capacity change from 0 to 128 [ 165.605287][T10681] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.648529][T10691] loop4: detected capacity change from 0 to 512 [ 165.649313][T10691] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.703263][ T30] audit: type=1326 audit(165.690:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10683 comm="syz.1.1236" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcf79368 code=0x0 [ 166.023515][T10702] syz_tun: entered allmulticast mode [ 166.024288][T10702] syz_tun: left allmulticast mode [ 166.089123][T10704] loop4: detected capacity change from 0 to 1024 [ 166.089635][T10704] EXT4-fs: Ignoring removed i_version option [ 166.096763][T10704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 166.230276][T10710] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1241'. [ 166.288064][ T9341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 166.456926][ T30] audit: type=1326 audit(166.440:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10714 comm="syz.4.1244" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff80179368 code=0x0 [ 166.459544][ T216] IPVS: starting estimator thread 0... [ 166.462803][ T8981] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.530772][T10731] loop1: detected capacity change from 0 to 8 [ 166.538921][T10731] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 166.538931][T10731] unable to read xattr id index table [ 166.539360][T10731] SQUASHFS error: zlib decompression failed, data probably corrupt [ 166.539374][T10731] SQUASHFS error: Failed to read block 0x9b: -5 [ 166.539381][T10731] SQUASHFS error: Unable to read metadata cache entry [99] [ 166.539387][T10731] SQUASHFS error: Unable to read inode 0x127 [ 166.549876][T10723] IPVS: using max 61 ests per chain, 146400 per kthread [ 166.562431][T10736] syz_tun: entered allmulticast mode [ 166.572595][T10736] syz_tun: left allmulticast mode [ 166.616025][T10744] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1253'. [ 166.693819][T10747] loop0: detected capacity change from 0 to 4096 [ 166.700699][T10747] ext4: Unknown parameter 'nouser_xattr' [ 166.736763][T10747] loop0: detected capacity change from 0 to 4096 [ 166.744149][T10747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.227197][T10761] loop1: detected capacity change from 0 to 1024 [ 167.258082][T10761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.281532][T10761] netlink: 'syz.1.1260': attribute type 39 has an invalid length. [ 167.281842][T10761] hsr_slave_0: left promiscuous mode [ 167.292023][T10761] hsr_slave_1: left promiscuous mode [ 167.445465][T10773] syzkaller0: entered promiscuous mode [ 167.445482][T10773] syzkaller0: entered allmulticast mode [ 167.452193][T10773] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 167.517110][ T8632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.611809][T10789] FAULT_INJECTION: forcing a failure. [ 167.611809][T10789] name fail_futex, interval 1, probability 0, space 0, times 1 [ 167.611833][T10789] CPU: 1 UID: 0 PID: 10789 Comm: syz.1.1268 Tainted: G L syzkaller #0 PREEMPT [ 167.611847][T10789] Tainted: [L]=SOFTLOCKUP [ 167.611850][T10789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 167.611856][T10789] Call trace: [ 167.611859][T10789] show_stack+0x2c/0x3c (C) [ 167.611877][T10789] __dump_stack+0x30/0x40 [ 167.611889][T10789] dump_stack_lvl+0xd8/0x12c [ 167.611900][T10789] dump_stack+0x1c/0x28 [ 167.611911][T10789] should_fail_ex+0x418/0x58c [ 167.611924][T10789] should_fail+0x14/0x24 [ 167.611936][T10789] get_futex_key+0x1ec/0x12b0 [ 167.611946][T10789] futex_wake+0x10c/0x594 [ 167.611957][T10789] do_futex+0x2c4/0x378 [ 167.611967][T10789] __arm64_sys_futex+0x2e4/0x418 [ 167.611978][T10789] invoke_syscall+0x98/0x244 [ 167.611990][T10789] el0_svc_common+0xec/0x23c [ 167.612001][T10789] do_el0_svc+0x4c/0x5c [ 167.612012][T10789] el0_svc+0x60/0x1d8 [ 167.612024][T10789] el0t_64_sync_handler+0x44/0x104 [ 167.612035][T10789] el0t_64_sync+0x198/0x19c [ 167.714997][T10798] loop5: detected capacity change from 0 to 512 [ 167.726071][T10798] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 167.726090][T10798] EXT4-fs (loop5): group descriptors corrupted! [ 167.924356][T10803] xt_MASQUERADE: bad rangesize 20224 [ 167.927153][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1275'. [ 168.030972][T10803] team1: entered allmulticast mode [ 168.031264][T10803] 8021q: adding VLAN 0 to HW filter on device team1 [ 168.039356][ T8981] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.312619][T10822] loop5: detected capacity change from 0 to 8192 [ 168.328098][T10822] hugetlbfs: Bad value 'A' for mount option 'size' [ 168.328098][T10822] [ 168.409686][T10829] FAULT_INJECTION: forcing a failure. [ 168.409686][T10829] name fail_futex, interval 1, probability 0, space 0, times 0 [ 168.409709][T10829] CPU: 0 UID: 0 PID: 10829 Comm: syz.0.1283 Tainted: G L syzkaller #0 PREEMPT [ 168.409724][T10829] Tainted: [L]=SOFTLOCKUP [ 168.409728][T10829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 168.409735][T10829] Call trace: [ 168.409738][T10829] show_stack+0x2c/0x3c (C) [ 168.409757][T10829] __dump_stack+0x30/0x40 [ 168.409769][T10829] dump_stack_lvl+0xd8/0x12c [ 168.409781][T10829] dump_stack+0x1c/0x28 [ 168.409792][T10829] should_fail_ex+0x418/0x58c [ 168.409805][T10829] should_fail+0x14/0x24 [ 168.409817][T10829] get_futex_key+0x1ec/0x12b0 [ 168.409827][T10829] futex_wake+0x10c/0x594 [ 168.409838][T10829] do_futex+0x2c4/0x378 [ 168.409848][T10829] __arm64_sys_futex+0x2e4/0x418 [ 168.409859][T10829] invoke_syscall+0x98/0x244 [ 168.409870][T10829] el0_svc_common+0xec/0x23c [ 168.409882][T10829] do_el0_svc+0x4c/0x5c [ 168.409893][T10829] el0_svc+0x60/0x1d8 [ 168.409904][T10829] el0t_64_sync_handler+0x44/0x104 [ 168.409915][T10829] el0t_64_sync+0x198/0x19c [ 168.415931][T10831] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 168.757421][T10839] loop1: detected capacity change from 0 to 8192 [ 168.771603][T10839] TC_ACT_REPEAT abuse ? [ 168.908220][T10860] syzkaller1: entered promiscuous mode [ 168.908237][T10860] syzkaller1: entered allmulticast mode [ 168.994867][T10870] loop1: detected capacity change from 0 to 512 [ 168.995687][T10870] EXT4-fs: Ignoring removed bh option [ 169.005325][T10870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.024562][ T8632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.074799][T10877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.074969][T10877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.198116][T10886] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1301'. [ 169.213772][T10886] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 169.217542][T10886] bond1 (unregistering): Released all slaves [ 169.257707][T10886] loop1: detected capacity change from 0 to 4096 [ 169.278507][T10886] loop1: detected capacity change from 0 to 512 [ 169.317768][T10897] netlink: 'syz.1.1306': attribute type 39 has an invalid length. [ 169.520305][T10920] netlink: 'syz.1.1316': attribute type 1 has an invalid length. [ 169.531392][T10920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.541698][T10920] bond1: (slave geneve2): making interface the new active one [ 169.542737][T10920] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 169.602296][T10928] syz_tun: entered allmulticast mode [ 169.608783][T10927] syz_tun: left allmulticast mode [ 169.619880][T10930] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1321'. [ 169.797979][T10948] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.857258][T10948] EXT4-fs (loop1): 1 truncate cleaned up [ 169.857709][T10948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.952106][T10948] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6542: inode #12: comm syz.1.1328: bad extra_isize 62 (inode size 256) [ 170.147638][T10948] EXT4-fs (loop1): Remounting filesystem read-only [ 170.821486][ T8632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.871404][T10973] fuse: Bad value for 'fd' [ 170.898883][T10978] FAULT_INJECTION: forcing a failure. [ 170.898883][T10978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.898903][T10978] CPU: 0 UID: 0 PID: 10978 Comm: syz.4.1337 Tainted: G L syzkaller #0 PREEMPT [ 170.898916][T10978] Tainted: [L]=SOFTLOCKUP [ 170.898919][T10978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 170.898925][T10978] Call trace: [ 170.898928][T10978] show_stack+0x2c/0x3c (C) [ 170.898946][T10978] __dump_stack+0x30/0x40 [ 170.898958][T10978] dump_stack_lvl+0xd8/0x12c [ 170.898970][T10978] dump_stack+0x1c/0x28 [ 170.898981][T10978] should_fail_ex+0x418/0x58c [ 170.898994][T10978] should_fail+0x14/0x24 [ 170.899005][T10978] should_fail_usercopy+0x20/0x30 [ 170.899018][T10978] bpf_verifier_vlog+0x3f4/0xbc0 [ 170.899031][T10978] __btf_verifier_log+0xe8/0x13c [ 170.899040][T10978] __btf_verifier_log_type+0x464/0x5e4 [ 170.899048][T10978] btf_struct_check_meta+0x140/0x5a4 [ 170.899057][T10978] btf_parse_type_sec+0x36c/0x17a8 [ 170.899066][T10978] btf_new_fd+0x33c/0xa50 [ 170.899078][T10978] bpf_btf_load+0x144/0x190 [ 170.899089][T10978] __sys_bpf+0x7f0/0x82c [ 170.899098][T10978] __arm64_sys_bpf+0xd0/0xec [ 170.899107][T10978] invoke_syscall+0x98/0x244 [ 170.899119][T10978] el0_svc_common+0xec/0x23c [ 170.899130][T10978] do_el0_svc+0x4c/0x5c [ 170.899141][T10978] el0_svc+0x60/0x1d8 [ 170.899153][T10978] el0t_64_sync_handler+0x44/0x104 [ 170.899164][T10978] el0t_64_sync+0x198/0x19c [ 170.934588][T10980] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1339'. [ 170.991052][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1340'. [ 170.991070][T10983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1340'. [ 171.054035][T10987] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1343'. [ 171.055916][T10987] ip6gre1: entered promiscuous mode [ 171.055931][T10987] ip6gre1: entered allmulticast mode [ 171.077898][T10989] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1342'. [ 172.023100][ T4388] nvme nvme0: controller is down; will reset: CSTS=0xffffffff, PCI_STATUS=0x10 [ 172.023134][ T4388] nvme nvme0: Does your device have a faulty power saving mode enabled? [ 172.023144][ T4388] nvme nvme0: Try "nvme_core.default_ps_max_latency_us=0 pcie_aspm=off pcie_port_pm=off" and report a bug [ 172.136488][ T1456] nvme 0000:00:02.0: enabling device (0000 -> 0002) [ 172.153781][ T1456] nvme nvme0: Disabling device after reset failure: -19 [ 172.174707][ T4387] non-slab/vmalloc memory [ 172.174719][ T4387] list_add corruption. prev->next should be next (ffff0000c72c3840), but was ffff0000c85b8048. (prev=ffff0000c85b8048). [ 172.174836][ T4387] ------------[ cut here ]------------ [ 172.174840][ T4387] kernel BUG at lib/list_debug.c:34! [ 172.174910][ T4387] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 172.181210][ T4387] Modules linked in: [ 172.181952][ T4387] CPU: 1 UID: 0 PID: 4387 Comm: kworker/1:1H Tainted: G L syzkaller #0 PREEMPT [ 172.183980][ T4387] Tainted: [L]=SOFTLOCKUP [ 172.184788][ T4387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 172.186683][ T4387] Workqueue: kblockd blk_mq_requeue_work [ 172.187732][ T4387] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 172.189203][ T4387] pc : __list_add_valid_or_report+0x144/0x148 [ 172.190291][ T4387] lr : __list_add_valid_or_report+0x144/0x148 [ 172.191427][ T4387] sp : ffff80009a2f79f0 [ 172.192157][ T4387] x29: ffff80009a2f79f0 x28: ffff80009a2f7aa8 x27: ffff80009a2f7aa0 [ 172.193606][ T4387] x26: 1fffe00018e58709 x25: ffff0000c72c3840 x24: ffff0000c72c3848 [ 172.195082][ T4387] x23: 1fffe000190b7009 x22: dfff800000000000 x21: ffff0000c85b8048 [ 172.196613][ T4387] x20: ffff0000c85b8048 x19: ffff0000c72c3840 x18: 1fffe00035bd9828 [ 172.198171][ T4387] x17: 3034383363323763 x16: 3030303066666666 x15: 28207478656e2065 [ 172.199675][ T4387] x14: 0000000000001aa8 x13: 0000000000000001 x12: 0000000000000003 [ 172.201198][ T4387] x11: 0000000000000000 x10: 0000000000000002 x9 : 8a8a3d55b229bf00 [ 172.202748][ T4387] x8 : 8a8a3d55b229bf00 x7 : ffff800080483164 x6 : 0000000000000000 [ 172.204227][ T4387] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008048dc64 [ 172.205682][ T4387] x2 : 0000000100000001 x1 : ffff0000c4758000 x0 : 0000000000000075 [ 172.207222][ T4387] Call trace: [ 172.207851][ T4387] __list_add_valid_or_report+0x144/0x148 (P) [ 172.208990][ T4387] blk_mq_request_bypass_insert+0x130/0x1cc [ 172.210060][ T4387] blk_mq_requeue_work+0x3a4/0x52c [ 172.210950][ T4387] process_scheduled_works+0x91c/0x1250 [ 172.211928][ T4387] worker_thread+0x798/0xbd0 [ 172.212772][ T4387] kthread+0x304/0x3d4 [ 172.213533][ T4387] ret_from_fork+0x10/0x20 [ 172.214374][ T4387] Code: 913f0000 aa1303e1 aa1403e3 979c686c (d4210000) [ 172.215627][ T4387] ---[ end trace 0000000000000000 ]--- [ 172.520812][ T4387] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 172.522153][ T4387] SMP: stopping secondary CPUs [ 172.523065][ T4387] Kernel Offset: disabled [ 172.523872][ T4387] CPU features: 0x0,50000000,00f00020,9c080a02,a84ff6a7 [ 172.525218][ T4387] Memory Limit: none [ 172.831032][ T4387] Rebooting in 86400 seconds..