last executing test programs: 1m16.092663555s ago: executing program 0 (id=36): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x2001c00, &(0x7f00000005c0), 0x1, 0x445, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003b80)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x12, 0x2, 0x0, "bc57499e007105bf0000000100100000e403000000000000000040002100", 0x38414761}) 1m15.964202233s ago: executing program 0 (id=39): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x9, 0x402000, 0xf, 0xade7, 0x800000}) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0xc0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x80000000, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x0, 0x1}, {0x1d}, {0x6, 0x0, 0x0, 0x7ffffcb9}]}) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, &(0x7f0000000200)={0x1, 0xf}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) read$FUSE(r3, &(0x7f0000001e00)={0x2020}, 0x2020) listen(0xffffffffffffffff, 0x2) fdatasync(r0) 1m15.369449886s ago: executing program 0 (id=51): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000001c0), 0x3, 0x58c, &(0x7f0000000480)="$eJzs3U1rG9caAOB35I983hsHQrj3Li6GLJqSRo7tfqRQSLosbWig3afCVkywHAVLDrEbSLJooHRTQqGUBkp/QPddhu66aX9FoA2EEky76MZl5FEiW5ZlJUrldJ4HJjlnzshnzpw5R+9oRiiA3BpP/ylE/DciPk8iDrWUDUdWOL6+3eqj6zPpksTa2ge/JZFk65rbJ9n/B7LMfyLih08iThTa660tr8yXKpXyYpafqC9cmagtr5y8tFCaK8+VL09NT59+bXrqzTde71tbXz7/x1fv33vn9GfHVr/87sHhO0mcjYNZWWs7nsHN1sx4jGfHZCTObtpwsg+V7SZJb5uPPq/9oDdD2TgfiXQOOBRD2agH/vluRMQakFOJ8Q851YwDmtf2fboOfmE8fHv9Aqi9/cPrn43E3sa10f7VZMOVUXq9O9aH+tM6vv/17p10iS6fQ9zoQ30ATTdvRcSp4eH2+S/J5r+nd6rx4fH2NteRt/cfGKR7afzzylbxT+Fx/BNbxD8Hthi7T6P7+C886EM1HaXx31tbxr+Pp66xoSz3r0bMN5JcvFQpn4qIf0fE8RjZk+a3u59zevX+Wqey1vgvXdL6m7Fgth8PhvdsfM1sqV56lja3engr4n9P4t8k2ub/vY1Yd3P/p8fjfJr46dOudRwt3/1/p7Lu7W/V/wh47duIl7bs/yd3tJLt709ONM6HieZZ0e7320d/7lR/b+3vv7T/92/f/rGk9X5trfc6vtn7Z7lT2dOe/6PJh41080bitVK9vjgZMZq8175+6slrm/nm9mn7jx/bfv7b6vzfFxEf7bD9t4/c7rjpbuj/2Z76v/fE/Xc//rpT/Tvr/1cbqePZmp3MfzvdwWc5dgAAAAAAALDbFCLiYCSF4uN0oVAsrj/fcST2FyrVWv3ExerS5dlofFd2LEYKzTvdh1qeh5jMnodt5qc25acj4nBEfDG0r5EvzlQrs4NuPAAAAAAAAAAAAAAAAAAAAOwSBzp8/z/1y9Cg9w547vzkN+RX1/Hfj196AnYl7/+QX8Y/5JfxD/ll/EN+Gf+QX8Y/5JfxD/ll/AMAAAAAAAAAAAAAAAAAAAAAAAAAAEBfnT93Ll3WVh9dn0nzs1eXl+arV0/OlmvzxYWlmeJMdfFKca5anauUizPVhW5/r1KtXpmciqVrE/VyrT5RW165sFBduly/cGmhNFe+UB75W1oFAAAAAAAAAAAAAAAAAAAAL5ba8sp8qVIpLw4i8WMhosdXJQPY1TMxoOPTp0TSrZfPZCfDxqLRtjUbEpElhp/XzicRMehDl+PEgCcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxVwAAAP//3QAvsQ==") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) connect$inet6(r4, 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x805c) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x18000, &(0x7f00000002c0)={[], [], 0x2c}) setxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xfffffffc, 0x2}, {0x6, 0xfffffff7}]}, 0x14, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r5 = socket$netlink(0x10, 0x3, 0xf) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x6c3f7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1m14.459287387s ago: executing program 0 (id=64): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x5c4, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="023c05cb440703c3d6208de4dadc72088b723de339f87da7c9024f789a94a3d79acb296cf675322c342b1fcb803eb1c08d3bf976be9f03d356d2ec60172b4ac0717cc72a2514eaf8eef46ec9eb9e56b0f9139d7d7e7e0be9b00b70acb43605453929caf8f00a520815fdc9950dd62252c8163c3061e4e9ae0e0899e016e3cf97963fb3fbe285b7faab3d905ee59d6f87cba2085cc73b8ae2d55950b3cdec39143fb5db882e166906061bd4b0db000bb717df455584c9bdd4195a05e120936568e5ec86be", 0xc4, 0x0, &(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x400, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrquota}]}, 0x1, 0x4bf, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) sync() r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './bus', [], 0xa, "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"}, 0x1d4) 1m13.928427958s ago: executing program 0 (id=71): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) (async) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0xe, 0x4972, 0x4}) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x4e20, 0x2800, 0x4e21, 0xc, 0xa, 0x80, 0x20}, {0x10001, 0xfffffffffffffff9, 0x9, 0x8, 0x8, 0x80, 0x1ff, 0x3}, {0x4, 0x5, 0x8, 0x7b4}, 0x6, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3504, 0x1, 0x0, 0x3, 0x61, 0x0, 0x200}}, 0xe8) (async) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) (async) ppoll(&(0x7f0000000000)=[{r0, 0x5}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) openat(r2, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x501800, 0x4) 1m11.968724174s ago: executing program 0 (id=86): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x7, 0x4}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x28}], {0x95, 0x0, 0x2c}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 1m11.930899233s ago: executing program 32 (id=86): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x7, 0x4}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x28}], {0x95, 0x0, 0x2c}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 1m11.052513789s ago: executing program 4 (id=99): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) recvmmsg(r0, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}, 0x2bb3}, {{0x0, 0x0, 0x0}, 0x4f56}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000c40)=""/118, 0x76}, {&(0x7f0000000d00)=""/208, 0xd0}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/188, 0xbc}, {&(0x7f0000000640)=""/185, 0xb9}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000e00)=""/206, 0xce}, {&(0x7f0000000700)=""/75, 0x4b}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000980)=""/180, 0xb4}], 0xc}}, {{0x0, 0x0, 0x0}, 0x6f}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}], 0x7, 0x40002000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x40, &(0x7f00000001c0)={[{@abort}, {@debug}, {@grpjquota}, {@grpid}, {@quota}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf251600000008000300", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4008804) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x40044581, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d7, &(0x7f00000008c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x90012, r6, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000003200)=""/4096) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x236000, 0x1000, 0x0, 0x1}, 0x20) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$OCFS2_IOC_RESVSP64(r7, 0x4030582a, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) preadv2(r8, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1m10.130617884s ago: executing program 4 (id=111): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x1bc, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x18c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x1f}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x4}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x7, 0x8, 0xe, 0xf, 0xe, 0xd, 0x9, 0x4, 0xf, 0x3, 0x2, 0x10, 0x7, 0x4, 0x2, 0xf], 0x1, [0x4, 0x100, 0x200, 0xd, 0x67, 0x6, 0x4, 0x3, 0x7fff, 0x9, 0x5, 0x3ff, 0x4, 0xd3b5, 0xfff2, 0x3], [0x9, 0x1, 0x5, 0x7f, 0x4, 0x40, 0x4, 0xff, 0xfbff, 0x1000, 0x4, 0xdd30, 0x7, 0x9, 0xc, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xbc, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xb0}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xea}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xf2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0xfffffffffffffc76, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xde}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xcd2c}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x60000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1000}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xc}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1ff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x800}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x3b}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m9.964585282s ago: executing program 4 (id=113): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018210000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) 1m9.959798511s ago: executing program 4 (id=114): r0 = syz_open_dev$vcsa(&(0x7f0000000340), 0x1000006, 0x206300) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000410, &(0x7f0000000180), 0xc1, 0x7ee, &(0x7f00000011c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009965, r2, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x808004, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000280)='./sys/bus/netdevsim/del_device\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r4 = openat(r0, &(0x7f00000001c0)='\x00', 0x4003, 0x0) write(r4, &(0x7f0000000000)='\f', 0x1) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) r5 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000300)=ANY=[@ANYRESHEX=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r8, 0x16, 0x0, @void}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_genetlink_get_family_id$team(&(0x7f0000000080), r4) r10 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000800)={0x5, @sdr={0x32435750, 0xfd}}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000240)={0xfffffff4, 0x2, 0x0, 0x0, 0x2}) 1m9.910810197s ago: executing program 4 (id=115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x60, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) close(r0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x8044000}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000081, 0x30}, 0xc) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000740)={0x0, 0x2}, 0x8) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0x32600) write(r3, &(0x7f0000000040)="99", 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x1, 0xc0e, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x1}}}, &(0x7f00000001c0)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0xcda, 0x1000, 0x0, 0x170}, &(0x7f0000000280)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ae5, 0x10000, 0x3, 0x7f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc860, 0x80, 0x2, 0x2c6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72e8, 0x800, 0x0, 0x288}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaf1e, 0x40, 0x2, 0x338}, 0xffffffffffffffff}], 0x4, &(0x7f0000001500)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x4, 0xce4, 0x0, &(0x7f0000000500)=@buf_512="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"}}, &(0x7f0000001580)) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000003ec0)={@empty, @multicast1, 0x0}, &(0x7f0000003f00)=0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004300)='./sec/tomoyo/profile\x00', 0x82) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r8, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004340)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, r3, 0x4, 0x0, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000004040)={r3, 0xffffffffffffffff}, 0x4) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000040c0)=@o_path={&(0x7f0000004080)='./sec/tomoyo/profile\x00', 0x0, 0x18, r5}, 0x18) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000004100)=@base={0x19, 0x2, 0x1, 0x2, 0x0, r3, 0x1, '\x00', 0x0, r3, 0x1, 0x2, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004240)=@bpf_tracing={0x1a, 0x1, &(0x7f0000003d80)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000003dc0)='GPL\x00', 0x3f64, 0xa9, &(0x7f0000003e00)=""/169, 0x41100, 0x0, '\x00', r7, 0x1a, r8, 0x8, &(0x7f0000003f40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000003f80)={0x1, 0x6, 0x9, 0xf9}, 0x10, 0x3fa, r3, 0x5, &(0x7f0000004180)=[r9, r3, r3, r10, r11, r12], &(0x7f00000041c0)=[{0x3, 0x1, 0xa}, {0x2, 0x1, 0xe, 0x7}, {0x3, 0x2, 0x3, 0x6}, {0x1, 0x3, 0xc, 0x9}, {0x2, 0x2, 0x10, 0x4}], 0x10, 0x56}, 0x94) r13 = syz_open_procfs(0x0, &(0x7f0000001640)='net/udplite\x00') r14 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) read$FUSE(r14, 0x0, 0x4000) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001900)={0x0, 0x3858, 0x2, 0x0, 0x350}, &(0x7f0000001980)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc899, 0x4, 0x2, 0x2e9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c69, 0x4, 0x3, 0x2b0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc375, 0x1, 0x1, 0x1f9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe10d, 0x10000, 0x3, 0xe7}}], 0x4, &(0x7f0000002c00)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, '\x00', {0x2, 0x21b, 0x0, &(0x7f0000001c00)=@buf_4k="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"}}, &(0x7f0000002c80)) syz_ublk_setup_queues(r3, r4, &(0x7f00000015c0)={0x0, 0xd99f, 0x4, 0x0, 0x64, 0x0, r6}, &(0x7f0000001680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5096, 0x54c, 0x0, 0x3e4, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc099, 0x10000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbde0, 0x100, 0x0, 0x34d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2393, 0x800, 0x10000, 0x3da, 0x0, r14}}], 0x4, &(0x7f0000003cc0)={0x2e, 0xcf, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf5f}, 0x0, 0x0, '\x00', {0x4, 0xc1f, 0x0, &(0x7f0000002cc0)=@buf_1k="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"}}, &(0x7f0000003d40)) 1m9.648713734s ago: executing program 4 (id=117): set_mempolicy(0x3, &(0x7f0000000040)=0xf, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newnexthop={0x48, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xa, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xb}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008018}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c40001"], 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002e000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e868000000f6e82e27ef4d", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m9.483155923s ago: executing program 33 (id=117): set_mempolicy(0x3, &(0x7f0000000040)=0xf, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newnexthop={0x48, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xa, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xb}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008018}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c40001"], 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002e000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e868000000f6e82e27ef4d", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m2.928783512s ago: executing program 3 (id=215): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) (fail_nth: 12) 1m2.928391313s ago: executing program 3 (id=216): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0xc0) linkat(r1, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x400) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x80000000, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x0, 0x1}, {0x1d}, {0x6, 0x0, 0x0, 0x7ffffcb9}]}) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, &(0x7f0000000200)={0x1, 0xf}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) read$FUSE(r3, &(0x7f0000001e00)={0x2020}, 0x2020) listen(0xffffffffffffffff, 0x2) fdatasync(r0) 1m2.635424248s ago: executing program 3 (id=220): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000180), 0x1, 0xbdd, &(0x7f0000001140)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x75b, &(0x7f00000017c0)="$eJzs3M9rHHUbAPBnpknTH+m7eeE9vLynFypWqN2kqdqTEPFcKPQPqGEzCSGTbMhuahMDbT14EAQVwR+96H/gRRG8lP4PiuBNwYOgNY0HwUNkNpvEbnfT1CadGj8fmOzz/c7uPM+THb7swM4G8I/1/+JPEjEYERcjotKeTyPicCs6EnF943l3V1dqa6srtSTW1y/dSYqXteY2j5W0H49H6yXx34i43R9x+vX78zaWlmfG8zxbaI+Hm7Pzw42l5TPTs+NT2VQ2Nzoycu7cC6PPPzeyZ72+9dqnP7/5xctffXR+9vcX7zw7kcRYq+/o6GMvbfxP+mOsY35uP5KVKCm7AAAAdqX4nH8oIvpan1IrcagVAQAAAAfJ+sA6AAAAcOAlUXYFAAAAwP7a/B7A3dWV2ub2OL9/8NNLETG0fW/x2lb+vtY9xBFHoj8ijq0l99yZkGy8DB7J9RsRcWusy/mftM+/hzSwHXbeue4e6SfPrWL9Geu2/qVb6090WX/6Nn874RFtrn9r961/2/kP9Vj/Lu4mwfWIgYVTX/fMfyPif33d8idb+ZMe+V/ZZY+fDX77Xa99659EnIru+f+ca4ffhxienM6z9t+uOU5+fu30Tv0f65U/2bn/+V32//3N0alea0mR/5mTO7//3fIX58Tb7TrSiHin/ViM3+3I8fTtkQ936n+iR/8Pev8/7nXQa/cOv3xj+YdeTwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBu0ogYjCStbsVpWq1GHI+I/8SxNK83mqcn64tzE8W+iKHoTyen82wkIiob46QYn23F2+PRjvG5iPh3RLxXOdoaV2v1fKLs5gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhyPCIGI0mrEZFGxK+VNK1Wy64KAAAA2HNDZRcAAAAA7DvX/wAAAHDwPcz1/419rAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA40C5euFBs62urK7ViPHFlaXGmfuXMRNaYqc4u1qq1+sJ8dapen8qzaq0++6Dj5fX6/PmYW7w63MwazeHG0vLl2friXPPy9Oz4VHY5638sXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCwBltbklYjIm3FaVqtRpyIiKHoTyan82wkIv4VEd9U+geK8dmyiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDPNZaWZ8bzPFu4NzjR3t1l1wEJjrY7fFLqEQieqKDERQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNI0lpZnxvM8W2iUXQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADlSn9MIqLYTlWeGuzcezj5rdJ6jIhXb156/+p4s7lwtpj/ZWu++UF7frSM+gEAAIBOm9fp7ev4tOx6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv4/G0vLMeJ5nC/sYlN0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw1/wRAAD//4hJxgU=") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x10000) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x3f7, 0x800, 0x0, 0x82}, &(0x7f0000000240), &(0x7f0000000300), &(0x7f00000000c0)) unshare(0x22020400) (async) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r3, 0x0, 0x0, 0x8, 0x3, 0x1}, 0x1) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x40}, 0x4) (async) write$nci(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="000041ebb443ed0000ffa850d768bb59b67ad8c93ed2c2440d442cb608f822aa06a1879f8e422c40bace6a3b184d054d"], 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffff5f}]}, 0x24}}, 0x0) (async) write$nci(r1, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) r5 = socket$key(0xf, 0x3, 0x2) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r6, &(0x7f0000000240)={0x2c, 0x5, 0x0, 0x1000001}, 0x10) (async) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffe}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xb, 0x40000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0xa3a, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}]}, 0x78}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x2, 0x81, 0x6, 0x0, 0x4e, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd2a}, @sadb_x_sec_ctx={0x19, 0x18, 0x3, 0x50, 0xc0, "872322437ce041c3fe760ccca307d7ba738d44604330cf89b07f01131bad3d4d5d6fc9a165fa03212e18234d95d462317326c43cb4ce7987540e3bfa03f8b2fbe2cd481b1f3f9848e4caa24c73c88a36182a3417563484ea38b7b4c94bba9bd2d030e318a286965f7708a5bb16da81704fad7bae82a00073b7deedcd54542ba00ae42865384b02cf61969e75b541543006ceed012f03350863e96b89fe91ccd6afe35ea055ac9732956492753a65ae2a0c94f29cfe2ee48f5a1256dee930f3ee"}, @sadb_sa={0x2, 0x1, 0x4d6, 0x5, 0x4, 0xec, 0x0, 0x1}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x6e6bb5, 0x5, {0x6, 0x2b, 0xbf, 0x5, 0x0, 0x40, 0x0, @in6=@loopback, @in=@private=0xa010101}}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd27, 0x3507}, @sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bb0, 0x5, {0x6, 0x32, 0x3, 0xfa, 0x0, 0x5, 0x0, @in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_key={0x1, 0x9}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d4}, @sadb_address={0x3, 0x5, 0x2b, 0xa0, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, @sadb_x_sec_ctx={0x17, 0x18, 0x23, 0x75, 0xa9, "f3d520265d0da751822751c805be3342f313bf36b7a4e8b55c171fc668bf6a4219c4521f28096fb0d9248cc1e2e67d773f98b857aec21f893730222d25c46441c8bec21e82452aab79514ea52c51c245f2a85d6b3a00fa6e8eb06f2d194fdb09a2cdd7643f37b31efe694fece8b5d71428ca17f9cd9e56a24a29a78a4056a6754bf7266ecd5355107662e4f952fd7b88b618605485c05de4c8a656ad7cdf3208d441b8feabc65819ed"}]}, 0x270}}, 0x10) (async) dup(r5) (async) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000007c0), 0x10000, 0x0) bind$inet(r7, &(0x7f0000000800)={0x2, 0x4e23, @multicast1}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x30, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) 1m2.439138901s ago: executing program 3 (id=224): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') statx(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x2000, 0x56159817211d7953, &(0x7f0000002500)) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$eJzs3c9vFFUcAPDvbFt+FaUkhKgH04SDGGRLW39g4gGPRokkesdNOzSkW5Z0t4RWEuEgFy+GmBgjifEP8O6R+A/4V5AoCTGk0YOXNbOdhaXdH6UsdGU/n2TgvXmzvHkz8328t283G8DQmsz+KES8GhHfJhGHWspGIy+c3Dhu/cG1uWxLol7/7K8kknxf8/gk/3s8z7wSEb99HXGisLXe6uraYqlcTpfz/FRt6fJUdXXt5MWl0kK6kF6amZ09/c7szPvvvbv1xXt31tY3z/3zw6d3Pjr9zbH173+5d/hWEmfiYF7W2o6ncL01MxmT+TUZizObDpzuQ2WDJNntE2BHRvI4H4usDzgUI3nUAy++ryKiDgypRPzDkGqOA5pz+67z4PqLN8u7/+HGBGhr+5ON90ZiX2NudGA9eWxmlF2JiT7Un9Xx65+3b2Vb9O99CICert+IiFOjo4/1fy9HS/+3c6e2cczmOvR/8PzcycY/b+1tM/4pPBz/RJvxz3ib2N2J3vFfuNeHajrKxn8ftB3/Ply0mhjJcy81xnxjyYWL5TTr27Ju8niM7c3y3dZzTq/frXcqax3/ZVtWf3MsmJ/HvdFN613zpVrpadrc6v6NiNd6jH+TNvc/ux7ntlnH0fT2653Kerf/2ar/HPFG2/v/aK6TdF+fnGo8D1PNp2Krv28e/b1T/bvd/uz+H+je/omkdb22+uR1/LTv37RT2WSSL5o+4fO/J/m8kd6T77taqtWWpyP2JJ9s3T/z6LXNfPP4rP3Hj7WP/27P//6I+GKb7b955GbHQwfh/s8/0f3vkKgnHYvufvzlj53q317/93YjdTzfs53+r8uZPpZ4mmsHAAAAAAAAg6YQEQcjKRQfpguFYnHj8x1H4kChXKnWTlyorFyaj8Z3ZSdirNBc6R5v+TzEdP552GZ+ZlN+NiIOR8R3I/sb+eJcpTy/240HAAAAAAAAAAAAAAAAAACAATHe4fv/mT9GdvvsgGfOT37D8OoZ//34pSdgIPn/H4aX+IfhJf5heIl/GF7iH4aX+IfhJf5heIl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KtzZ89mW339wbW5LD9/ZXVlsXLl5HxaXSwurcwV5yrLl4sLlcpCOS3OVZZ6/XvlSuXy9EysXJ2qpUltqrq6dn6psnKpdv7iUmkhPZ+OPZdWAQAAAAAAAAAAAAAAAAAAwP9LdXVtsVQup8sSEjtKjA7GaUj0ObHbPRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPJfAAAA//9j0zaD") (async) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file7\x00', 0x6020, 0x0, 0x3e, 0x0, 0x0) setresuid(0xee00, 0xee01, 0xee01) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x7, 0x30, 0x4, 0x4b4c}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={r4, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x7, 0x2, 0x6, 0x1714ce05, 0x80, 0x7fffffff, 0xff}, 0x9c) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x2) (async) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, &(0x7f0000000040)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3c, 0x2, [@TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0xcc094) 1m2.281281132s ago: executing program 3 (id=230): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0xc0) linkat(r1, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x400) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x80000000, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x0, 0x1}, {0x1d}, {0x6, 0x0, 0x0, 0x7ffffcb9}]}) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, &(0x7f0000000200)={0x1, 0xf}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) read$FUSE(r3, &(0x7f0000001e00)={0x2020}, 0x2020) listen(0xffffffffffffffff, 0x2) fdatasync(r0) 1m1.514436021s ago: executing program 3 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000040)={0x2e, 0x3a, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x33f81df2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r3, 0x6a, 0x1, 0x0, 0xc) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) sendmmsg(r1, &(0x7f000000a540), 0x0, 0x41) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r9, 0x0, 0xd8, 0xb9, &(0x7f0000000240)="0b17007eb07e878020aab7dfa4cc142571c14629ba7a744d321342b61a6fa5858f12a9ee930567d29285a51b7c71c1b7decd3161619aff6c536c61f1381659549bead09dbb6e14171d3b9916b974e4fdc031937d05cff057226bbdb8cd8b174d111917001f396740801d6aebdbb649ede1d946be98000608d524252046f7f47f668246e71a59889316872f8304f6870bd8a5b24e793f1b066761b0952ae349e514098a5eb6b71d2367e12b5302fecb8cf9e1ef7cd2eeeb9ba0b87e354f65c906793fa9d12def2f55114dd0142dfc71ad27f78b924338305f", &(0x7f0000000340)=""/185, 0x8b3, 0x0, 0x1b, 0x60, &(0x7f0000000400)="eafa0e39ea8883b3dde2d42709feb06d5e68cb78b00154640b6fdd", &(0x7f0000000440)="d88880a6c5a3a8c38eda7d4c29a8972472e0bb7e9bcb8d3b46d0961d19cb46f37cd701510869ef0fc975404e05fea327975e3eb05eb14b40641c21fa39e5f64de2f566ab3b4458f8a62b15e0e0e2ae6671c926a0890cb5e6c7ed7beccf2e8f6a", 0x1, 0x0, 0x8c0b}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x14, r10, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1m1.432141926s ago: executing program 34 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000040)={0x2e, 0x3a, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x33f81df2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r3, 0x6a, 0x1, 0x0, 0xc) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) sendmmsg(r1, &(0x7f000000a540), 0x0, 0x41) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r9, 0x0, 0xd8, 0xb9, &(0x7f0000000240)="0b17007eb07e878020aab7dfa4cc142571c14629ba7a744d321342b61a6fa5858f12a9ee930567d29285a51b7c71c1b7decd3161619aff6c536c61f1381659549bead09dbb6e14171d3b9916b974e4fdc031937d05cff057226bbdb8cd8b174d111917001f396740801d6aebdbb649ede1d946be98000608d524252046f7f47f668246e71a59889316872f8304f6870bd8a5b24e793f1b066761b0952ae349e514098a5eb6b71d2367e12b5302fecb8cf9e1ef7cd2eeeb9ba0b87e354f65c906793fa9d12def2f55114dd0142dfc71ad27f78b924338305f", &(0x7f0000000340)=""/185, 0x8b3, 0x0, 0x1b, 0x60, &(0x7f0000000400)="eafa0e39ea8883b3dde2d42709feb06d5e68cb78b00154640b6fdd", &(0x7f0000000440)="d88880a6c5a3a8c38eda7d4c29a8972472e0bb7e9bcb8d3b46d0961d19cb46f37cd701510869ef0fc975404e05fea327975e3eb05eb14b40641c21fa39e5f64de2f566ab3b4458f8a62b15e0e0e2ae6671c926a0890cb5e6c7ed7beccf2e8f6a", 0x1, 0x0, 0x8c0b}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x14, r10, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 56.635158707s ago: executing program 2 (id=284): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000001c0), 0x3, 0x58c, &(0x7f0000000480)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) connect$inet6(r4, 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x805c) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x18000, &(0x7f00000002c0)={[], [], 0x2c}) setxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xfffffffc, 0x2}, {0x6, 0xfffffff7}]}, 0x14, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r5 = socket$netlink(0x10, 0x3, 0xf) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x6c3f7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 55.752508206s ago: executing program 2 (id=287): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000000000000000000d00000000030000000200000f02000000010000000000000002247f995500000000020000000f0200000003740000005f"], &(0x7f00000003c0)=""/143, 0x51, 0x8f, 0x1}, 0x28) 55.680547461s ago: executing program 2 (id=288): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x28, 0x3, 0xfffffffd) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf250200000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x80) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="5001", @ANYRES8, @ANYRES64], 0x14) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000040)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7, @ANYBLOB="26f41d2ea6319d197af09c55f1cc1c567926158fa85000bfa602f624d6425db5134dd5886645c1924cff3cca54e79fb02ea9e7a19183efabd98926bec466ca9838581125bb076a0af5a80033231459dae1b8713692d30e14c53aa0bd57526b53fdfa955772cabcc3cbf57ef363bad964614b805381854d69284c85df442631ab24b37e1d81419c9536d102715794c74d29ce373c"], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022abd7000fddbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r11, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x20004001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000400)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r13, {0xffff}, {0xe, 0xa}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x40800) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 52.6895653s ago: executing program 2 (id=303): io_uring_setup(0x71d9, &(0x7f0000000000)={0x0, 0x59e4, 0x2000, 0x1, 0xa7}) (async) r0 = io_uring_setup(0x71d9, &(0x7f0000000000)={0x0, 0x59e4, 0x2000, 0x1, 0xa7}) mmap$IORING_OFF_SQ_RING(0x0, 0x80, 0x1000001, 0x10, r0, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x80, 0x1000001, 0x10, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) syz_open_pts(r1, 0x8182) (async) r2 = syz_open_pts(r1, 0x8182) dup3(r2, r1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x18888, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x18888, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = socket$rxrpc(0x21, 0x2, 0x2) syz_mount_image$fuse(0x0, 0x0, 0x2009850, 0x0, 0x1, 0x0, 0x0) getsockopt(r4, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={@remote, @local, 0x1f}}) r5 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x410700, 0x122) write(r6, &(0x7f0000000000)='3', 0x4e) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff) 52.601058173s ago: executing program 2 (id=307): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000000000000000000d00000000030000000200000f02000000010000000000000002247f995500000000050000000f0200000003740000005f"], &(0x7f00000003c0)=""/143, 0x51, 0x8f, 0x1}, 0x28) 52.092350013s ago: executing program 2 (id=317): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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") 52.006827777s ago: executing program 35 (id=317): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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") 5.42880304s ago: executing program 8 (id=783): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x3, 0x1, 0x2, 0x13, 0x4}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x32b, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1001}, [@call={0x85, 0x0, 0x0, 0x28}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.379914868s ago: executing program 8 (id=784): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000a80), 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="440100001000130400000000fbdbdf25ff0100000000000000000000000000010000000000000000000000000051ce19816355c7675ba545e5723500000000000000000000400000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000052000100001f00"/32], 0x20}}, 0x0) 5.312663264s ago: executing program 8 (id=785): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='sys_mnt\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") r1 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt\x00', 0x1ff) syz_open_procfs$pagemap(r1, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x100007) ptrace(0x4207, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @remote}, 0x3e}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsetxattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000180)='data_err=ignore', 0xf, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0xfffffffd) setns(0xc9, 0x0) r5 = syz_usb_connect(0x3, 0x4b, &(0x7f0000000300)=ANY=[@ANYRESOCT=r4], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000001000)={0x84, 0x0, &(0x7f0000000000)={0x0, 0xa, 0x1}, &(0x7f0000000000)={0x0, 0x8, 0x1}, &(0x7f0000000000)={0x20, 0x0, 0x4}, &(0x7f0000000080)=ANY=[@ANYBLOB="20000400000000000000c3886a0e8da8e364b34fe903be2fae506ce5a9951fac6e39b74a1fbe1d45f6b3"], &(0x7f0000000000)={0x40, 0x7, 0x2}, &(0x7f0000000000)={0x40, 0x9, 0x1}, &(0x7f0000000000)={0x40, 0xb, 0x2}, &(0x7f0000000000)={0x40, 0xf, 0x2}, &(0x7f0000000000)={0x40, 0x13, 0x6}, &(0x7f0000000000)={0x40, 0x17, 0x6}, &(0x7f0000000000)={0x40, 0x19, 0x2}, &(0x7f0000000000)={0x40, 0x1a, 0x2}, &(0x7f0000000000)={0x40, 0x1c, 0x1}, &(0x7f0000000000)={0x40, 0x1e, 0x1}, &(0x7f0000000000)={0x40, 0x21, 0x1}}) r6 = socket(0x8, 0x2, 0x0) setsockopt(r6, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) mremap(&(0x7f00006f6000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000721000/0x4000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) 4.012000541s ago: executing program 1 (id=796): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x2001c00, &(0x7f00000005c0), 0x1, 0x445, &(0x7f0000000b00)="$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") r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000003600), 0x40040, 0x0) read$FUSE(r0, &(0x7f0000003b80)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r2, 0xffffffff80000101, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x12, 0x2, 0x0, "bc57499e007105bf0000000100100000e403000000000000000040002100", 0x38414761}) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000200)='0\x00', 0x2) r5 = socket$inet(0x2, 0x2, 0x0) ioctl(r5, 0x8b26, &(0x7f0000000400)='wlan0') sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000040)={0xc000003, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x1000000000001}) 2.877682963s ago: executing program 6 (id=799): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000000000000000000d00000000030000000200000f02000000010000000000000002247f99550000000000000000140200000003740000005f"], &(0x7f00000003c0)=""/143, 0x51, 0x8f, 0x1}, 0x28) 2.814019006s ago: executing program 6 (id=800): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) 2.808827152s ago: executing program 7 (id=801): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) chdir(0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x9, 0x402000, 0xf, 0xade7, 0x800000}) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0xc0) linkat(r2, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x400) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) r3 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x80000000, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x0, 0x1}, {0x1d}, {0x6, 0x0, 0x0, 0x7ffffcb9}]}) ioctl$XFS_IOC_FSGROWFSRT(r3, 0x40105870, &(0x7f0000000200)={0x1, 0xf}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) read$FUSE(r4, &(0x7f0000001e00)={0x2020}, 0x2020) listen(0xffffffffffffffff, 0x2) fdatasync(r0) 2.783215119s ago: executing program 6 (id=802): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x6) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x11, 0x800000003, 0x1000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (rerun: 64) syz_pidfd_open(0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="780000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="0815010021100000580012800b000100697036746e6c000048000280080007000400000014000200fc01000000000000000000000000000114000300fe88000000000000000000000000010105000900040000000400130008000100", @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000a00)={0x2a4, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x238, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x82, 0x4, "bcf4955d5f7c81e0f543cb054472e3c84128632597ad09d9ba55d9bd58c411eecd30be63c5c6a8060df5d560bff96baf22e65bd451bd1e72d3e470948e2f2fe5ad7ae8ad1360b07b533a174480ff7aa81f0c7742b3d66f4902be47ae98198ca789369a7a3bda2eb71b8c413b29191ea4d4a5e63c825578e3020ad1679ce5"}, @ETHTOOL_A_BITSET_VALUE={0x6b, 0x4, "d89ba9b721a3857020095b4a5b0378170a595094ff1fe53f7c5c22a53777f6e32af59237fc5f4811f08bd14f875f6259e6d9856b643aee4c4cfaa5fc038d7d23ac11009e9383aacf9b93d0305fb02dca1f537c221ec2e2c6b215b25266fb69500b71a1e7c57319"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe3, 0x4, "84dd9c824ce998c540f4b8e3b30b96f06b5a2524fa8c0b27e55b297f98658b5f1427421a70c1d9190d1c5fe8ee6792b7d5a0b575f5ca162dd1db68c192fdf21743ecfb8394001d3f31fe29dc95b683d0e6ced6e10c806ce60f4cee44429e40c2963925cae219d0f89aac5eeb38e250c57f6bf59ec10b83f193351df221389bdf32a1351b043bbcef4c9c49c1f093296eb8a430866c080804c0365817fdeb7617c07ed15d76f452edead9caa1fd6810ac8b98f49153fc0ac789b44cecde76f79ca71b825aebedd99c9338557368f44e7302099deb528a296c890f27714d705a"}, @ETHTOOL_A_BITSET_VALUE={0x4b, 0x4, "150de365155af08283b216722c529d6f29e2c6c89c8ec78b855e478a9780132f7785801508344b8b1eeffc6bc518c69b6b8d6c6a27313b382cee98fa3dc2c2093fe94b770fc302"}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x60}, 0x41) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000c104000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008003a"], 0x3c}}, 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) (async) write$nci(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="600602"], 0x8) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) quotactl_fd$Q_QUOTAOFF(r5, 0xffffffff80000302, 0x0, 0x0) (async) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r12 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r9, 0x2, 0x70bd2c, 0x5, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_NET_NS_FD={0x8, 0x7, r12}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040044}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 2.696568979s ago: executing program 5 (id=803): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000180)=[{0x0, 0xffff}, {0x1, 0xffff, 0x1800}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000080007b9af8ff00000000d6090000002000007baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608ffff010000008500000005010000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './proc/net/rpc/auth.rpcsec.context/channel\x00'}, 0x6e) madvise(&(0x7f000050a000/0x4000)=nil, 0x4000, 0x64) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x89f7, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000040), &(0x7f0000000180)=r6}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) r7 = socket$inet6(0xa, 0x2, 0x0) close(r7) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) r9 = shmget$private(0x0, 0x2000, 0x4, &(0x7f00000fc000/0x2000)=nil) shmat(r9, &(0x7f0000ffd000/0x2000)=nil, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r8, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x180000, @local, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x21}}}], 0x18}, 0x2404c082) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008004) 2.428012614s ago: executing program 7 (id=804): r0 = syz_mount_image$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x8, 0x0, 0x1, 0x0, 0x0) r1 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') mount$cgroup(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x2000, &(0x7f0000000640)={[{@subsystem='net'}, {@subsystem='net_cls'}, {@cpuset_v2_mode}, {@noprefix}]}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32=r3, @ANYBLOB="c14b9a3a1568395871897e98fb2a12420889d8"], 0x3c}}, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000001c0)='./file0\x00', 0x8) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x4004, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) close(0xffffffffffffffff) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, r5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r5, 0x58, &(0x7f0000000240)}, 0xfffffffffffffe85) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000314050000000000000000000900020073797a30000000001800410072786500140033006c6f000000000000003d9fe8038d0c7449a1569cf257bccd19faaf00000000000000c95e4a6159674d15506b4c80fd2250000d68a57185d6368f005d6a97cb4f037742a48c544bb4b6c145b84e10c04b97805a730cb9122c7ac8f59c91533da19ba3aaab55cd681e00000000bfbda03fc11d4fdb66970ab93dc7a8313a3dba51b014104046cc361832"], 0x38}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) r10 = syz_open_dev$video(&(0x7f0000000040), 0xa, 0x103000) ioctl$VIDIOC_G_STD(r10, 0x80085617, &(0x7f0000000180)) io_uring_enter(r8, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) fallocate(r0, 0x42, 0xa3b8, 0x800000000) io_submit(r6, 0x0, &(0x7f0000002680)) 2.390232179s ago: executing program 1 (id=805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x2e, &(0x7f0000002080)=""/4102}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x100000000}}, './file0\x00'}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, @qipcrtr={0x2a, 0x2, 0x7ffe}, @ax25={0x3, @default, 0x2}, @isdn={0x22, 0x8, 0x7, 0x4, 0xb6}, 0x2, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)='veth0\x00', 0x14, 0x9, 0xffff}) 2.324627719s ago: executing program 1 (id=806): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xff, 0x7fff0003}]}) setreuid(0xffffffffffffffff, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000000080), 0x40, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRESDEC=0x0, @ANYBLOB="2c6673757569643d325d3432346439312da03666332d343532632d386662362d62616531646435392c00"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x1200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0xb) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000240)="b6", 0x1, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='reno', 0xfffffee5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000003c0)='\x00!E\x00', 0x4}], 0x1, 0x0, 0x0) shutdown(r4, 0x1) 2.258373717s ago: executing program 7 (id=807): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='*/\x00', &(0x7f0000000040)=']}-.-\x00', 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000200)={r0}) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x16, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000018c0)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto, @datasec={0x3, 0x2, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x2}], "34aa"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "0374"}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/143, 0x51, 0x8f, 0x1}, 0x20) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x2, 0xffffffffffffffff, &(0x7f0000000000)=0xc) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getenv(0x4201, r4, 0xffffffffffffffff, &(0x7f00000001c0)) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000000080)) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000040)={r6, 0xff81}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r6, 0x63c, 0x1}, 0xc) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1020004, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=r7, @ANYBLOB="2c61756469742c646566636f6e746578743d73746166665f752c657569643eb79c6f488a8d9d481043fb1a049d8bf23595d548a46ea2cf350a43eaabc8e62080dc9e868a2d92918234729c6ddc9e5596fd4ab9ebf190e7a067f2c45500a57babb101c85c3490b99d0dd2c90a", @ANYRESDEC=0xee01, @ANYBLOB=',measure,\x00']) 1.955253988s ago: executing program 7 (id=808): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r6}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4040401}, 0x1) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000040)={0x500, 0x1, &(0x7f0000000180)=[r6], &(0x7f00000002c0)=[0x1], &(0x7f0000000240)=[r7], &(0x7f00000001c0), 0x0, 0xff}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x2}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x158, 0x111, 0x4b4, 0x0, 0x700, 0x250, 0x278, 0x278, 0x250, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0x0, 0xff], [0xff000000], 'vlan0\x00', 'caif0\x00', {}, {}, 0x88, 0x0, 0x0, 0x1}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x8, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x4e22, 0x8], [0x0, 0x0, 0x0, 0x0, 0x80]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x1, 0x5}, {0x3, 0x5, 0x1}, 0x9, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [0xffffffff], [], 'geneve1\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) 1.86036306s ago: executing program 5 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=@acquire={0x134, 0x17, 0x1, 0x70bd25, 0x25dfdbfb, {{@in=@multicast2, 0x4d2, 0x6c}, @in=@empty, {@in6=@mcast2, @in=@multicast2, 0x4e21, 0x4a, 0x4e21, 0xf, 0x2, 0x0, 0xe0}, {{@in6=@mcast1, @in=@empty, 0x4e21, 0x0, 0x4e20, 0x5, 0xa, 0x10, 0x80, 0x29}, {0xb, 0x4, 0x5, 0x16, 0x400, 0x6, 0x9, 0x400}, {0x9, 0x1, 0x7ff0000000, 0x3}, 0x6, 0x6e6bb1, 0x1, 0x1, 0x2}, 0x1, 0x7fff, 0xfff, 0x70bd2a}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1}}]}, 0x134}}, 0x4050) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x1170, 0x1398, 0x238, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x0, 0xd, 0x5}}, @common=@unspec=@devgroup={{0x38}, {0x1d, 0x0, 0x0, 0x0, 0x3ff}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'veth1_vlan\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xad84, 0x4, 0x2, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x2) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) dup(r7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x8205, &(0x7f0000000000)={[], [{@measure}]}, 0x81, 0x63e, &(0x7f0000000c40)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 1.856682916s ago: executing program 6 (id=810): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000080)=0x2, 0x0, 0x2, &(0x7f0000000300)={r2, r3+10000000}, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x9) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)='\b', 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r5, 0x8}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@getqdisc={0x2c, 0x26, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x5, 0x10}, {0x0, 0xa}, {0x5, 0xfff1}}, [{0x4}, {0x4}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002740)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x3, 0x10000000, 0x43af, 0x8}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x9}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r9, 0x25, 0x0, @void}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdbdf250d0000000c000180080003000300000050000180080003000300000014000200697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000700000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x400c0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r12, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r12, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) recvmsg(r11, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000900)=""/191, 0xbf}], 0x1}, 0x60) r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r13, 0x4008af83, &(0x7f0000000700)={0x2, 0x0, [{0x0, 0xe7, &(0x7f00000003c0)=""/231}, {0x3000, 0x1b, &(0x7f0000000080)=""/27}]}) r14 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r14, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x800, 0x6, 0xfffc, 0x0, 0xb23be0fbe66397b6, 0x9, 0x1b}, 0x9c) r15 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) close_range(r15, 0xffffffffffffffff, 0x0) 1.855873391s ago: executing program 7 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @empty}, 0x3d}, 0x1c) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r9, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) 1.469128141s ago: executing program 1 (id=812): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) 964.780329ms ago: executing program 8 (id=813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb70300000800fff8b704000001000000850000001e00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000002300000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 964.172417ms ago: executing program 6 (id=814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) (async) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)={'gretap0\x00', r2, 0x20, 0x8000, 0x8, 0x9, {{0x9, 0x4, 0x3, 0x5, 0x24, 0x64, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, {[@generic={0x44, 0x10, "9d70fdfeda861e445b79edc433a2"}]}}}}}) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x40) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket(0x1e, 0x80000, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, 0x0, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000000540), &(0x7f00000000c0)=0x8) (rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) (async) r12 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f0000000000)) 946.10805ms ago: executing program 1 (id=815): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r0 = socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000380)=0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000400)='ceph\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000000c0)=0x8000) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000000300)={0x0, "45b15a377078f67c29899c5326833e2681c860777aefab10fd1eae835b313083ba7c324ed24a05485a097f8ffd77b7d57bb57486eaf71a5bf84bf0d2eba15af4", 0x38}, 0x48, 0xfffffffffffffff9) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0xfff7, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x86, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x9, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f00000002c0)=0x1, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi0\x00', 0x202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x398) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r8, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) 824.647976ms ago: executing program 7 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000003600), 0x40040, 0x0) read$FUSE(r0, &(0x7f0000003b80)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r2, 0xffffffff80000101, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x12, 0x2, 0x0, "bc57499e007105bf0000000100100000e403000000000000000040002100", 0x38414761}) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000200)='0\x00', 0x2) r5 = socket$inet(0x2, 0x2, 0x0) ioctl(r5, 0x8b26, &(0x7f0000000400)='wlan0') sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000040)={0xc000003, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x1000000000001}) 556.878743ms ago: executing program 5 (id=817): socket$inet(0xa, 0x801, 0x84) (async) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r0, 0x6) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) (async) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) close(r1) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x2808454, &(0x7f0000000000)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c726f6469152c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c00"], 0x1, 0x24c, &(0x7f00000002c0)="$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") (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x2808454, &(0x7f0000000000)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c726f6469152c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c00"], 0x1, 0x24c, &(0x7f00000002c0)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff}) (async) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x4, 0x700) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002600)='/sys/kernel/address_bits', 0x8802, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0xe4000, 0x42) file_getattr(r7, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x18, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x44, r9, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80000001, 0x63}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000001) (async) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80000001, 0x63}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000001) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000000700)=""/232) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) 212.145158ms ago: executing program 8 (id=818): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008f}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00010100ff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4094) write(r1, &(0x7f0000000200)='2', 0x1) futex(0x0, 0x5, 0x801, 0x0, 0x0, 0x40000000) 211.782316ms ago: executing program 5 (id=819): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") setns(0xc9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00') (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00') lseek(r3, 0x1000000, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000040)=0x43) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x270840, 0x10) setreuid(0xee01, 0xee01) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) ptrace(0x11, r5) 210.950202ms ago: executing program 8 (id=820): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f00000001c0)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x13}, 0x32}]}, 0x9a, 0x4ed, &(0x7f0000000a40)="$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") r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05fa000000000000ea09022400010000400009040001010300030009210400ff0122290009058103"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x6a, 0x4, 0x20000002, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) ioctl$PPPIOCGIDLE64(r5, 0x8010743f, &(0x7f00000000c0)) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000005000b000100000008000d000d000000080009000900000008000a"], 0x4c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r6, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain= /new_domain\n', 0x65) read(r6, &(0x7f0000000500)=""/10, 0xa) read(r6, &(0x7f0000000500)=""/10, 0xa) read(r6, &(0x7f0000000500)=""/10, 0xa) read(r6, &(0x7f0000000500)=""/10, 0xa) read(r6, &(0x7f0000000500)=""/10, 0xa) read(r6, &(0x7f0000000500)=""/10, 0xa) read(r6, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000180)=""/19, 0x13) read(r6, &(0x7f0000000500)=""/10, 0xa) read(r6, &(0x7f0000000500)=""/10, 0xa) read(r6, &(0x7f0000000500)=""/10, 0xa) read(r6, &(0x7f0000000500)=""/10, 0xa) syz_usb_control_io$hid(r1, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000240)={0x4, 0x0, 0xfffffffe, 0x1c, 0x100, &(0x7f0000001100)="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"}) 147.415737ms ago: executing program 5 (id=821): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x207c2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x44054) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r8) mknodat(r6, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x20004) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x16, 0x1, 0x70bd26, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4048854}, 0x40010) getdents64(r5, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0xfffffffffffffffb}) 54.624869ms ago: executing program 1 (id=822): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x3, 0xc8, {0x5, 0x8, 0x9}}}}, 0x53) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) read(r3, 0x0, 0x5d) 240.367µs ago: executing program 5 (id=823): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x2, &(0x7f00000000c0)={0x5, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = io_uring_setup(0x2c50, &(0x7f0000000400)={0x0, 0xc08c, 0x400, 0x4, 0x308}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @any, 0x1}, 0xa) listen(r4, 0x5) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c82010000c0001000b0108000200000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c8200c00080001000202040003004000"], 0x11) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c8200c00080001000403040040000000"], 0x11) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c8200e000a00010005010600400000000000"], 0x13) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c820080004004000033f011c"], 0xd) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c82012000e00400003ef158311020007007f00000770"], 0x17) sendfile(r3, r3, 0x0, 0x5) 0s ago: executing program 6 (id=824): socket$packet(0x11, 0x3, 0x300) (async) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000004c0)="2700000014000707030e0000120f0a0011000100fe601c8d14afa7841610817233b021f4246d67", 0x27) kernel console output (not intermixed with test programs): 26 audit(524359.158:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6804 comm="syz.6.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb19792a8 code=0x7ffc0000 [ 70.746322][ T30] audit: type=1326 audit(524359.158:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6804 comm="syz.6.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb19792a8 code=0x7ffc0000 [ 70.747801][ T30] audit: type=1326 audit(524359.158:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6804 comm="syz.6.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb19792a8 code=0x7ffc0000 [ 70.747823][ T30] audit: type=1326 audit(524359.158:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6804 comm="syz.6.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb19792a8 code=0x7ffc0000 [ 70.747990][ T30] audit: type=1326 audit(524359.158:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6804 comm="syz.6.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffb19792a8 code=0x7ffc0000 [ 70.893587][ T6440] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.018379][ T4716] Bluetooth: hci4: command tx timeout [ 71.143750][ T6828] EXT4-fs: Ignoring removed oldalloc option [ 71.147520][ T6828] EXT4-fs: Ignoring removed orlov option [ 71.150547][ T6828] EXT4-fs warning (device loop8): read_mmp_block:110: Error -117 while reading MMP block 64 [ 71.505638][ T6837] set_capacity_and_notify: 18 callbacks suppressed [ 71.507571][ T6837] loop1: detected capacity change from 0 to 128 [ 71.509374][ T6837] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.512049][ T6837] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.529751][ T6839] loop7: detected capacity change from 0 to 512 [ 71.612908][ T6843] sctp: [Deprecated]: syz.1.396 (pid 6843) Use of int in max_burst socket option deprecated. [ 71.612908][ T6843] Use struct sctp_assoc_value instead [ 71.644919][ T6840] FAULT_INJECTION: forcing a failure. [ 71.644919][ T6840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.644954][ T6840] CPU: 0 UID: 0 PID: 6840 Comm: syz.7.395 Not tainted syzkaller #0 PREEMPT [ 71.644970][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.644975][ T6840] Call trace: [ 71.644979][ T6840] show_stack+0x2c/0x3c (C) [ 71.644997][ T6840] __dump_stack+0x30/0x40 [ 71.645008][ T6840] dump_stack_lvl+0xd8/0x12c [ 71.645018][ T6840] dump_stack+0x1c/0x28 [ 71.645028][ T6840] should_fail_ex+0x41c/0x590 [ 71.645039][ T6840] should_fail+0x14/0x24 [ 71.645048][ T6840] should_fail_usercopy+0x20/0x30 [ 71.645058][ T6840] simple_read_from_buffer+0xc4/0x238 [ 71.645069][ T6840] proc_fail_nth_read+0x1a8/0x248 [ 71.645078][ T6840] vfs_read+0x230/0x8c8 [ 71.645088][ T6840] ksys_read+0x12c/0x228 [ 71.645098][ T6840] __arm64_sys_read+0x84/0x98 [ 71.645109][ T6840] invoke_syscall+0x98/0x244 [ 71.645119][ T6840] el0_svc_common+0xec/0x23c [ 71.645128][ T6840] do_el0_svc+0x4c/0x5c [ 71.645138][ T6840] el0_svc+0x64/0x260 [ 71.645147][ T6840] el0t_64_sync_handler+0x44/0x104 [ 71.645155][ T6840] el0t_64_sync+0x198/0x19c [ 71.802122][ T6855] loop7: detected capacity change from 0 to 512 [ 72.232536][ T6866] loop8: detected capacity change from 0 to 1024 [ 72.234706][ T6866] EXT4-fs: Ignoring removed bh option [ 72.244526][ T6866] EXT4-fs: test_dummy_encryption requires encrypt feature [ 72.301496][ T6871] sctp: [Deprecated]: syz.8.405 (pid 6871) Use of int in max_burst socket option deprecated. [ 72.301496][ T6871] Use struct sctp_assoc_value instead [ 72.320750][ T6873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.404'. [ 72.542361][ T6873] netlink: 48 bytes leftover after parsing attributes in process `syz.5.404'. [ 72.602349][ T6873] netlink: 16 bytes leftover after parsing attributes in process `syz.5.404'. [ 72.668463][ T6882] batman_adv: batadv0: Adding interface: veth0 [ 72.668488][ T6882] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.668507][ T6882] batman_adv: batadv0: Interface activated: veth0 [ 72.670138][ T6882] netlink: 20 bytes leftover after parsing attributes in process `syz.7.407'. [ 72.670151][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.670164][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.675882][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.675894][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.677113][ T6882] batman_adv: batadv0: Interface deactivated: veth0 [ 72.677121][ T6882] batman_adv: batadv0: Removing interface: veth0 [ 72.880805][ T6895] loop7: detected capacity change from 0 to 128 [ 72.884648][ T6894] FAT-fs (loop7): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 72.884684][ T6894] FAT-fs (loop7): Filesystem has been set read-only [ 73.015800][ T6900] FAULT_INJECTION: forcing a failure. [ 73.015800][ T6900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.015870][ T6900] CPU: 0 UID: 0 PID: 6900 Comm: syz.7.413 Not tainted syzkaller #0 PREEMPT [ 73.015886][ T6900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.015893][ T6900] Call trace: [ 73.015897][ T6900] show_stack+0x2c/0x3c (C) [ 73.015916][ T6900] __dump_stack+0x30/0x40 [ 73.015927][ T6900] dump_stack_lvl+0xd8/0x12c [ 73.015937][ T6900] dump_stack+0x1c/0x28 [ 73.015947][ T6900] should_fail_ex+0x41c/0x590 [ 73.015958][ T6900] should_fail+0x14/0x24 [ 73.015967][ T6900] should_fail_usercopy+0x20/0x30 [ 73.015977][ T6900] _inline_copy_from_user+0x3c/0x174 [ 73.015987][ T6900] copy_msghdr_from_user+0xb8/0x194 [ 73.015996][ T6900] ___sys_sendmsg+0x14c/0x224 [ 73.016004][ T6900] __sys_sendmmsg+0x204/0x580 [ 73.016013][ T6900] __arm64_sys_sendmmsg+0xac/0xc8 [ 73.016021][ T6900] invoke_syscall+0x98/0x244 [ 73.016031][ T6900] el0_svc_common+0xec/0x23c [ 73.016041][ T6900] do_el0_svc+0x4c/0x5c [ 73.016052][ T6900] el0_svc+0x64/0x260 [ 73.016062][ T6900] el0t_64_sync_handler+0x44/0x104 [ 73.016071][ T6900] el0t_64_sync+0x198/0x19c [ 73.593935][ T6915] loop6: detected capacity change from 0 to 512 [ 73.646472][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'. [ 73.654943][ T6912] xfrm1: entered promiscuous mode [ 73.656216][ T6912] xfrm1: entered allmulticast mode [ 73.657916][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'. [ 74.667968][ T6928] loop7: detected capacity change from 0 to 512 [ 74.719751][ T6928] loop7: detected capacity change from 0 to 1024 [ 74.722770][ T6928] ext4: Unknown parameter 'func' [ 74.898073][ T6941] loop8: detected capacity change from 0 to 512 [ 74.901038][ T6941] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.901083][ T6941] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.906933][ T6941] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 74.913043][ T6946] loop7: detected capacity change from 0 to 128 [ 74.919082][ T6941] EXT4-fs (loop8): 1 truncate cleaned up [ 74.920824][ T6941] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.923726][ T6940] fuse: Bad value for 'fd' [ 75.022766][ T13] IPVS: starting estimator thread 0... [ 75.164370][ T6952] vxcan0: tx address claim with dlc 0 [ 75.207088][ T6954] IPVS: using max 44 ests per chain, 105600 per kthread [ 75.243245][ T6440] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.608946][ T6970] trusted_key: encrypted_key: insufficient parameters specified [ 75.799565][ T6977] EXT4-fs: Ignoring removed i_version option [ 75.801999][ T6977] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.810153][ T6977] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a04cc01c, mo2=0122] [ 75.810200][ T6977] System zones: 0-1, 3-36 [ 75.824207][ T6977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.850595][ T5199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.552947][ T6991] set_capacity_and_notify: 1 callbacks suppressed [ 76.552986][ T6991] loop1: detected capacity change from 0 to 512 [ 76.553437][ T6991] EXT4-fs: Ignoring removed nobh option [ 76.640519][ T6991] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #3: comm syz.1.439: corrupted inode contents [ 76.640818][ T6991] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 76.641741][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 76.641770][ C0] EXT4-fs (loop1): initial error at time 524365: ext4_do_update_inode:5801: inode 3 [ 76.641818][ C0] EXT4-fs (loop1): last error at time 524365: ext4_do_update_inode:5801: inode 3 [ 76.650045][ T6991] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #3: comm syz.1.439: mark_inode_dirty error [ 76.650068][ T6991] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 76.652141][ T6991] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #3: comm syz.1.439: corrupted inode contents [ 76.652154][ T6991] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 76.652437][ T6991] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.439: mark_inode_dirty error [ 76.652462][ T6991] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 76.652897][ T6991] __quota_error: 24 callbacks suppressed [ 76.652914][ T6991] Quota error (device loop1): write_blk: dquota write failed [ 76.652961][ T6991] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 76.652978][ T6991] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.439: Failed to acquire dquot type 0 [ 76.652989][ T6991] loop1: lost filesystem error report for type 5 error -117 [ 76.655403][ T6991] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.439: corrupted inode contents [ 76.655421][ T6991] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 76.656061][ T6991] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #16: comm syz.1.439: mark_inode_dirty error [ 76.656075][ T6991] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 76.656324][ T6991] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.439: corrupted inode contents [ 76.656335][ T6991] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 76.656449][ T6991] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.439: mark_inode_dirty error [ 76.656459][ T6991] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 76.656586][ T6991] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.439: corrupted inode contents [ 76.656596][ T6991] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 76.656731][ T6991] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 76.656740][ T6991] loop1: lost filesystem error report for type 5 error -117 [ 76.656849][ T6991] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.439: corrupted inode contents [ 76.656859][ T6991] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 76.656966][ T6991] EXT4-fs error (device loop1): ext4_truncate:4721: inode #16: comm syz.1.439: mark_inode_dirty error [ 76.657080][ T6991] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 76.657087][ T6991] loop1: lost filesystem error report for type 5 error -117 [ 76.658070][ T6991] EXT4-fs (loop1): 1 truncate cleaned up [ 76.658573][ T6991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.846334][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.8.440'. [ 76.953564][ T7009] netlink: 24 bytes leftover after parsing attributes in process `syz.6.443'. [ 76.999437][ T7012] loop5: detected capacity change from 0 to 4096 [ 77.004917][ T7012] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 77.004955][ T7012] EXT4-fs (loop5): Test dummy encryption mode enabled [ 77.011934][ T7012] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 77.012001][ T7012] System zones: 0-5 [ 77.018891][ T7012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.462756][ T7012] EXT4-fs (loop5): shut down requested (0) [ 77.469632][ T7027] loop8: detected capacity change from 0 to 512 [ 77.482778][ T7027] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.448: bad orphan inode 17 [ 77.482814][ T7027] loop8: lost filesystem error report for type 5 error -117 [ 77.483115][ T7027] ext4_test_bit(bit=16, block=4) = 1 [ 77.483132][ T7027] is_bad_inode(inode)=0 [ 77.483137][ T7027] NEXT_ORPHAN(inode)=0 [ 77.483141][ T7027] max_ino=32 [ 77.483146][ T7027] i_nlink=1 [ 77.483624][ T7027] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.485714][ T7027] IPVS: length: 103 != 8 [ 77.549290][ T6440] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.590438][ T5199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.661595][ T7038] loop5: detected capacity change from 0 to 128 [ 77.662389][ T7038] vfat: Unknown parameter 'tè>_êz1ÅÿCÞx¨.' [ 77.775034][ T4716] Bluetooth: hci2: Invalid handle: 0x1ec9 > 0x0eff [ 77.792353][ T7041] netlink: 'syz.8.452': attribute type 4 has an invalid length. [ 77.798618][ T7041] sctp: [Deprecated]: syz.8.452 (pid 7041) Use of int in maxseg socket option. [ 77.798618][ T7041] Use struct sctp_assoc_value instead [ 77.822769][ T7043] loop5: detected capacity change from 0 to 1024 [ 77.837682][ T7043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 77.954171][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.455'. [ 77.956054][ T7052] netlink: 12 bytes leftover after parsing attributes in process `syz.6.455'. [ 78.019663][ T7056] loop8: detected capacity change from 0 to 1024 [ 78.059490][ T7056] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.102301][ T7063] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 78.104249][ T7063] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 78.632205][ T5199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 78.667100][ T7075] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 78.678868][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.461'. [ 78.678901][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.461'. [ 78.687913][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.461'. [ 78.687948][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.461'. [ 78.704152][ T7075] evm: overlay not supported [ 78.707738][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.710444][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.710478][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.710507][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.875999][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.897565][ T6440] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.024212][ T7099] loop5: detected capacity change from 0 to 1024 [ 79.025717][ T7099] EXT4-fs: Ignoring removed bh option [ 79.026325][ T7099] EXT4-fs: Ignoring removed bh option [ 79.033823][ T7097] nvme_rdma: malformed address passed: 172.20.20.24:0Æý [ 79.038584][ T7099] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 79.292283][ T7106] sctp: [Deprecated]: syz.6.470 (pid 7106) Use of int in max_burst socket option deprecated. [ 79.292283][ T7106] Use struct sctp_assoc_value instead [ 79.302376][ T7099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.352635][ T7109] overlay: filesystem on ./file0 not supported as upperdir [ 79.355204][ T7109] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 79.355266][ T7109] overlayfs: failed to resolve './bus': -40 [ 79.357673][ T7099] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 79.359864][ T7114] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 79.360371][ T7117] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 79.361712][ T7114] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #12: block 7: comm syz.5.468: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 79.363136][ T7114] EXT4-fs (loop5): Remounting filesystem read-only [ 79.402408][ T7112] FAULT_INJECTION: forcing a failure. [ 79.402408][ T7112] name failslab, interval 1, probability 0, space 0, times 0 [ 79.402441][ T7112] CPU: 0 UID: 0 PID: 7112 Comm: syz.6.470 Not tainted syzkaller #0 PREEMPT [ 79.402457][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 79.402464][ T7112] Call trace: [ 79.402468][ T7112] show_stack+0x2c/0x3c (C) [ 79.402486][ T7112] __dump_stack+0x30/0x40 [ 79.402498][ T7112] dump_stack_lvl+0xd8/0x12c [ 79.402508][ T7112] dump_stack+0x1c/0x28 [ 79.402517][ T7112] should_fail_ex+0x41c/0x590 [ 79.402528][ T7112] should_failslab+0xc4/0x120 [ 79.402539][ T7112] kmem_cache_alloc_node_noprof+0x98/0x604 [ 79.402551][ T7112] alloc_vmap_area+0x208/0x13e8 [ 79.402559][ T7112] __get_vm_area_node+0x210/0x32c [ 79.402567][ T7112] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 79.402576][ T7112] __vmalloc_node_noprof+0xec/0x14c [ 79.402584][ T7112] __vmalloc_noprof+0x64/0x8c [ 79.402592][ T7112] bpf_check+0xd58/0x243c [ 79.402602][ T7112] bpf_prog_load+0xf4c/0x1554 [ 79.402611][ T7112] __sys_bpf+0x7d4/0x82c [ 79.402618][ T7112] __arm64_sys_bpf+0xd0/0xec [ 79.402626][ T7112] invoke_syscall+0x98/0x244 [ 79.402636][ T7112] el0_svc_common+0xec/0x23c [ 79.402652][ T7112] do_el0_svc+0x4c/0x5c [ 79.402664][ T7112] el0_svc+0x64/0x260 [ 79.402673][ T7112] el0t_64_sync_handler+0x44/0x104 [ 79.402682][ T7112] el0t_64_sync+0x198/0x19c [ 79.402696][ T7112] warn_alloc: 3 callbacks suppressed [ 79.402701][ T7112] syz.6.470: vmalloc error: size 1632, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 79.402729][ T7112] CPU: 0 UID: 0 PID: 7112 Comm: syz.6.470 Not tainted syzkaller #0 PREEMPT [ 79.402738][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 79.402741][ T7112] Call trace: [ 79.402743][ T7112] show_stack+0x2c/0x3c (C) [ 79.402754][ T7112] __dump_stack+0x30/0x40 [ 79.402763][ T7112] dump_stack_lvl+0xd8/0x12c [ 79.402773][ T7112] dump_stack+0x1c/0x28 [ 79.402782][ T7112] warn_alloc+0x1c4/0x1d8 [ 79.402792][ T7112] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 79.402801][ T7112] __vmalloc_node_noprof+0xec/0x14c [ 79.402809][ T7112] __vmalloc_noprof+0x64/0x8c [ 79.402817][ T7112] bpf_check+0xd58/0x243c [ 79.402827][ T7112] bpf_prog_load+0xf4c/0x1554 [ 79.402835][ T7112] __sys_bpf+0x7d4/0x82c [ 79.402842][ T7112] __arm64_sys_bpf+0xd0/0xec [ 79.402850][ T7112] invoke_syscall+0x98/0x244 [ 79.402860][ T7112] el0_svc_common+0xec/0x23c [ 79.402869][ T7112] do_el0_svc+0x4c/0x5c [ 79.402881][ T7112] el0_svc+0x64/0x260 [ 79.402890][ T7112] el0t_64_sync_handler+0x44/0x104 [ 79.402900][ T7112] el0t_64_sync+0x198/0x19c [ 79.404931][ T7112] Mem-Info: [ 79.404946][ T7112] active_anon:95 inactive_anon:12974 isolated_anon:0 [ 79.404946][ T7112] active_file:3284 inactive_file:16420 isolated_file:0 [ 79.404946][ T7112] unevictable:768 dirty:206 writeback:0 [ 79.404946][ T7112] slab_reclaimable:9557 slab_unreclaimable:92566 [ 79.404946][ T7112] mapped:36340 shmem:7245 pagetables:3774 [ 79.404946][ T7112] sec_pagetables:0 bounce:0 [ 79.404946][ T7112] kernel_misc_reclaimable:0 [ 79.404946][ T7112] free:1450808 free_pcp:19802 free_cma:7616 [ 79.404976][ T7112] Node 0 active_anon:380kB inactive_anon:51896kB active_file:13136kB inactive_file:65680kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:145360kB dirty:824kB writeback:0kB shmem:28980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9948kB pagetables:15096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 79.404997][ T7112] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 79.405020][ T7112] lowmem_reserve[]: 0 0 3650 3650 3650 [ 79.405039][ T7112] Node 0 Normal free:2725344kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:380kB inactive_anon:51896kB active_file:13136kB inactive_file:65680kB unevictable:3072kB writepending:824kB zspages:0kB present:5242880kB managed:3738144kB mlocked:0kB bounce:0kB free_pcp:79208kB local_pcp:11200kB free_cma:0kB [ 79.405062][ T7112] lowmem_reserve[]: 0 0 0 0 0 [ 79.405079][ T7112] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 79.405137][ T7112] Node 0 Normal: 396*4kB (UME) 1030*8kB (UME) 516*16kB (UME) 992*32kB (UME) 676*64kB (UME) 358*128kB (UME) 309*256kB (UME) 271*512kB (UME) 185*1024kB (UM) 6*2048kB (UM) 529*4096kB (UM) = 2725280kB [ 79.405214][ T7112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 79.405221][ T7112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 79.405227][ T7112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 79.405233][ T7112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 79.405239][ T7112] 26951 total pagecache pages [ 79.405243][ T7112] 7 pages in swap cache [ 79.405246][ T7112] Free swap = 124996kB [ 79.405249][ T7112] Total swap = 124996kB [ 79.405253][ T7112] 2097152 pages RAM [ 79.405256][ T7112] 0 pages HighMem/MovableOnly [ 79.405259][ T7112] 392568 pages reserved [ 79.405262][ T7112] 8192 pages cma reserved [ 79.405265][ T7112] 3 pages hwpoisoned [ 79.405277][ T5199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.429559][ T7120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.472'. [ 79.487940][ T7124] loop1: detected capacity change from 0 to 512 [ 79.511963][ T7124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.524490][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.5.473'. [ 79.529266][ T7122] vlan2: entered allmulticast mode [ 79.530852][ T7122] macsec0: entered allmulticast mode [ 79.532029][ T7122] veth1_macvtap: entered allmulticast mode [ 79.587272][ T7129] loop5: detected capacity change from 0 to 128 [ 79.595276][ T7129] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.626323][ T7129] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 79.918378][ T5199] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.968578][ T7152] netlink: 'syz.7.476': attribute type 10 has an invalid length. [ 80.178531][ T30] audit: type=1326 audit(524368.612:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7156 comm="syz.6.480" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb19792a8 code=0x0 [ 80.280116][ T30] audit: type=1326 audit(524368.712:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7156 comm="syz.6.480" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb19792a8 code=0x0 [ 80.344915][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.365683][ T7160] netlink: 'syz.1.481': attribute type 1 has an invalid length. [ 80.376044][ T7160] support for cryptoloop has been removed. Use dm-crypt instead. [ 80.379364][ T7160] macvtap1: entered allmulticast mode [ 80.389246][ T7160] macvtap2: entered allmulticast mode [ 80.396006][ T7160] bond1: (slave bridge2): making interface the new active one [ 80.397624][ T7160] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 81.553847][ T7204] loop1: detected capacity change from 0 to 2048 [ 81.558032][ T7204] EXT4-fs (loop1): blocks per group (262148) and clusters per group (16384) inconsistent [ 81.561626][ T7208] loop5: detected capacity change from 0 to 1024 [ 81.586494][ T7208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.649323][ T7215] loop1: detected capacity change from 0 to 2048 [ 81.667347][ T7215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.760461][ T7221] FAULT_INJECTION: forcing a failure. [ 81.760461][ T7221] name failslab, interval 1, probability 0, space 0, times 0 [ 81.760530][ T7221] CPU: 1 UID: 0 PID: 7221 Comm: syz.5.495 Not tainted syzkaller #0 PREEMPT [ 81.760547][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 81.760554][ T7221] Call trace: [ 81.760557][ T7221] show_stack+0x2c/0x3c (C) [ 81.760576][ T7221] __dump_stack+0x30/0x40 [ 81.760587][ T7221] dump_stack_lvl+0xd8/0x12c [ 81.760597][ T7221] dump_stack+0x1c/0x28 [ 81.760607][ T7221] should_fail_ex+0x41c/0x590 [ 81.760618][ T7221] should_failslab+0xc4/0x120 [ 81.760629][ T7221] kmem_cache_alloc_node_noprof+0x98/0x604 [ 81.760640][ T7221] __alloc_skb+0x1f0/0x610 [ 81.760649][ T7221] netlink_alloc_large_skb+0xd4/0x114 [ 81.760663][ T7221] netlink_sendmsg+0x4c4/0x948 [ 81.760674][ T7221] __sock_sendmsg+0xc8/0x17c [ 81.760683][ T7221] ____sys_sendmsg+0x3d0/0x6c8 [ 81.760692][ T7221] ___sys_sendmsg+0x198/0x224 [ 81.760701][ T7221] __sys_sendmsg+0x158/0x204 [ 81.760709][ T7221] __arm64_sys_sendmsg+0x88/0x9c [ 81.760717][ T7221] invoke_syscall+0x98/0x244 [ 81.760727][ T7221] el0_svc_common+0xec/0x23c [ 81.760737][ T7221] do_el0_svc+0x4c/0x5c [ 81.760746][ T7221] el0_svc+0x64/0x260 [ 81.760755][ T7221] el0t_64_sync_handler+0x44/0x104 [ 81.760764][ T7221] el0t_64_sync+0x198/0x19c [ 82.017012][ T7223] loop7: detected capacity change from 0 to 512 [ 82.019417][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.024368][ T7223] EXT4-fs (loop7): Test dummy encryption mode enabled [ 82.037892][ T7223] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.498: inode has both inline data and extents flags [ 82.037926][ T7223] fserror_report: 1 callbacks suppressed [ 82.037942][ T7223] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.038260][ T7223] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.498: couldn't read orphan inode 15 (err -117) [ 82.038284][ T7223] loop7: lost filesystem error report for type 5 error -117 [ 82.038791][ T7223] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.077447][ T7230] sctp: [Deprecated]: syz.6.500 (pid 7230) Use of int in max_burst socket option deprecated. [ 82.077447][ T7230] Use struct sctp_assoc_value instead [ 82.101541][ T7228] loop1: detected capacity change from 0 to 4096 [ 82.144739][ T7228] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.144776][ T7228] EXT4-fs (loop1): Test dummy encryption mode enabled [ 82.150564][ T7228] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 82.150630][ T7228] System zones: 0-5 [ 82.169079][ T7228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.317122][ T7228] EXT4-fs (loop1): shut down requested (0) [ 82.323339][ T5942] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.346996][ T7259] loop7: detected capacity change from 0 to 1024 [ 82.364062][ T7259] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.441135][ T5199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.794035][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.840170][ T7280] loop5: detected capacity change from 0 to 512 [ 82.863156][ T7280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.867165][ T7280] EXT4-fs (loop5): shut down requested (1) [ 82.874463][ T7280] netlink: 20 bytes leftover after parsing attributes in process `syz.5.503'. [ 82.907796][ T7291] loop1: detected capacity change from 0 to 256 [ 82.934435][ T5199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.998142][ T7298] macvlan1: entered promiscuous mode [ 83.005951][ T7298] macvlan1: left promiscuous mode [ 83.045837][ T7299] macvlan1: entered promiscuous mode [ 83.052770][ T7299] macvlan1: left promiscuous mode [ 83.088083][ T7302] ip6erspan0: entered allmulticast mode [ 83.173077][ T7313] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 83.474628][ T5942] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.484318][ T7313] netlink: 'syz.5.509': attribute type 9 has an invalid length. [ 83.484347][ T7313] netlink: 232 bytes leftover after parsing attributes in process `syz.5.509'. [ 83.496397][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.509'. [ 83.536707][ T7326] loop7: detected capacity change from 0 to 1024 [ 83.557328][ T7326] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.989966][ T7347] loop6: detected capacity change from 0 to 512 [ 84.002315][ T7347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002] [ 84.008979][ T7347] System zones: 1-12 [ 84.013736][ T7347] EXT4-fs error (device loop6): ext4_xattr_inode_iget:473: comm syz.6.514: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 84.013776][ T7347] loop6: lost filesystem error report for type 5 error -117 [ 84.017890][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 84.017914][ C1] EXT4-fs (loop6): initial error at time 524372: ext4_xattr_inode_iget:473 [ 84.017941][ C1] EXT4-fs (loop6): last error at time 524372: ext4_xattr_inode_iget:473 [ 84.026193][ T7347] EXT4-fs (loop6): 1 orphan inode deleted [ 84.033098][ T7347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.076061][ T5412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.161932][ T7362] netlink: 'syz.6.517': attribute type 1 has an invalid length. [ 84.182758][ T7362] support for cryptoloop has been removed. Use dm-crypt instead. [ 84.195887][ T7362] macvtap1: entered allmulticast mode [ 84.212394][ T7362] macvtap2: entered allmulticast mode [ 84.221439][ T7362] bond1: (slave bridge2): making interface the new active one [ 84.224400][ T7362] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 84.415127][ T5942] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.468883][ T7382] EXT4-fs error (device loop6): ext4_xattr_inode_iget:473: comm syz.6.521: EA inode 11 has unexpected i_nlink=0 ref_count=7168870745731235840 [ 84.468922][ T7382] loop6: lost filesystem error report for type 5 error -117 [ 84.477494][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 84.477523][ C0] EXT4-fs (loop6): initial error at time 524372: ext4_xattr_inode_iget:473 [ 84.477538][ C0] EXT4-fs (loop6): last error at time 524372: ext4_xattr_inode_iget:473 [ 84.477713][ T7382] EXT4-fs (loop6): 1 orphan inode deleted [ 84.478152][ T7382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.501613][ T7392] tunl0: entered promiscuous mode [ 84.516334][ T5412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.633878][ T7401] netlink: 'syz.8.525': attribute type 27 has an invalid length. [ 84.676883][ T7401] bond0: (slave bond_slave_1): Releasing backup interface [ 84.728142][ T7397] syzkaller0: entered promiscuous mode [ 84.729260][ T7397] syzkaller0: entered allmulticast mode [ 85.031591][ T7424] netlink: 'syz.8.528': attribute type 1 has an invalid length. [ 85.035021][ T7436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.041484][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.533'. [ 85.066805][ T7424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.108531][ T7424] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 85.119311][ T7424] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 85.124599][ T7424] netlink: 'syz.8.528': attribute type 10 has an invalid length. [ 85.124638][ T7424] netlink: 40 bytes leftover after parsing attributes in process `syz.8.528'. [ 85.124731][ T7424] dummy0: entered promiscuous mode [ 85.127084][ T7424] bond1: (slave dummy0): Releasing backup interface [ 85.379312][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 85.385715][ T7443] FAULT_INJECTION: forcing a failure. [ 85.385715][ T7443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.385748][ T7443] CPU: 1 UID: 0 PID: 7443 Comm: syz.6.532 Not tainted syzkaller #0 PREEMPT [ 85.385763][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 85.385770][ T7443] Call trace: [ 85.385773][ T7443] show_stack+0x2c/0x3c (C) [ 85.385792][ T7443] __dump_stack+0x30/0x40 [ 85.385804][ T7443] dump_stack_lvl+0xd8/0x12c [ 85.385814][ T7443] dump_stack+0x1c/0x28 [ 85.385823][ T7443] should_fail_ex+0x41c/0x590 [ 85.385835][ T7443] should_fail+0x14/0x24 [ 85.385844][ T7443] should_fail_usercopy+0x20/0x30 [ 85.385854][ T7443] _copy_from_iter+0x188/0x1064 [ 85.385865][ T7443] netlink_sendmsg+0x570/0x948 [ 85.385874][ T7443] __sock_sendmsg+0xc8/0x17c [ 85.385882][ T7443] ____sys_sendmsg+0x3d0/0x6c8 [ 85.385891][ T7443] ___sys_sendmsg+0x198/0x224 [ 85.385899][ T7443] __sys_sendmsg+0x158/0x204 [ 85.385907][ T7443] __arm64_sys_sendmsg+0x88/0x9c [ 85.385915][ T7443] invoke_syscall+0x98/0x244 [ 85.385925][ T7443] el0_svc_common+0xec/0x23c [ 85.385935][ T7443] do_el0_svc+0x4c/0x5c [ 85.385947][ T7443] el0_svc+0x64/0x260 [ 85.385959][ T7443] el0t_64_sync_handler+0x44/0x104 [ 85.385970][ T7443] el0t_64_sync+0x198/0x19c [ 85.491571][ T42] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 85.603693][ T7467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.694502][ T30] audit: type=1326 audit(524374.131:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7476 comm="syz.7.541" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa49792a8 code=0x0 [ 85.881325][ T5412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.892043][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.947225][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.542'. [ 85.956582][ T7493] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 87.664863][ T7493] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 87.724354][ T7502] netlink: 'syz.6.547': attribute type 28 has an invalid length. [ 87.724385][ T7502] netlink: 'syz.6.547': attribute type 29 has an invalid length. [ 87.724409][ T7502] netlink: 132 bytes leftover after parsing attributes in process `syz.6.547'. [ 87.728920][ T7508] set_capacity_and_notify: 6 callbacks suppressed [ 87.728929][ T7508] loop5: detected capacity change from 0 to 1024 [ 87.729256][ T7508] EXT4-fs: quotafile must be on filesystem root [ 87.747078][ T7508] Bluetooth: MGMT ver 1.23 [ 87.790173][ T7514] loop7: detected capacity change from 0 to 512 [ 87.887538][ T7519] loop1: detected capacity change from 0 to 512 [ 87.892151][ T7522] loop5: detected capacity change from 0 to 1024 [ 87.908699][ T7519] EXT4-fs (loop1): Test dummy encryption mode enabled [ 87.926434][ T7522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.927154][ T7519] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.554: inode has both inline data and extents flags [ 87.927170][ T7519] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.927276][ T7519] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.554: couldn't read orphan inode 15 (err -117) [ 87.927289][ T7519] loop1: lost filesystem error report for type 5 error -117 [ 87.927800][ T7519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.150514][ T7531] FAULT_INJECTION: forcing a failure. [ 88.150514][ T7531] name failslab, interval 1, probability 0, space 0, times 0 [ 88.150572][ T7531] CPU: 0 UID: 0 PID: 7531 Comm: syz.5.555 Not tainted syzkaller #0 PREEMPT [ 88.150588][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 88.150595][ T7531] Call trace: [ 88.150599][ T7531] show_stack+0x2c/0x3c (C) [ 88.150618][ T7531] __dump_stack+0x30/0x40 [ 88.150629][ T7531] dump_stack_lvl+0xd8/0x12c [ 88.150639][ T7531] dump_stack+0x1c/0x28 [ 88.150652][ T7531] should_fail_ex+0x41c/0x590 [ 88.150664][ T7531] should_failslab+0xc4/0x120 [ 88.150675][ T7531] kmem_cache_alloc_node_noprof+0x98/0x604 [ 88.150687][ T7531] __alloc_skb+0x1f0/0x610 [ 88.150697][ T7531] skb_copy_expand+0x134/0x364 [ 88.150705][ T7531] uevent_net_rcv_skb+0x270/0x400 [ 88.150717][ T7531] netlink_rcv_skb+0x238/0x414 [ 88.150726][ T7531] uevent_net_rcv+0x28/0x38 [ 88.150735][ T7531] netlink_unicast+0x600/0x7f8 [ 88.150743][ T7531] netlink_sendmsg+0x648/0x948 [ 88.150751][ T7531] __sock_sendmsg+0xc8/0x17c [ 88.150758][ T7531] ____sys_sendmsg+0x3d0/0x6c8 [ 88.150766][ T7531] ___sys_sendmsg+0x198/0x224 [ 88.150774][ T7531] __sys_sendmsg+0x158/0x204 [ 88.150782][ T7531] __arm64_sys_sendmsg+0x88/0x9c [ 88.150791][ T7531] invoke_syscall+0x98/0x244 [ 88.150801][ T7531] el0_svc_common+0xec/0x23c [ 88.150810][ T7531] do_el0_svc+0x4c/0x5c [ 88.150819][ T7531] el0_svc+0x64/0x260 [ 88.150828][ T7531] el0t_64_sync_handler+0x44/0x104 [ 88.150836][ T7531] el0t_64_sync+0x198/0x19c [ 88.227617][ T7532] loop6: detected capacity change from 0 to 512 [ 88.228949][ T7532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.234402][ T7532] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.556: iget: bad i_size value: 38620345925642 [ 88.234449][ T7532] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.238301][ T7532] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.556: couldn't read orphan inode 15 (err -117) [ 88.238335][ T7532] loop6: lost filesystem error report for type 5 error -117 [ 88.242861][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 88.242875][ C0] EXT4-fs (loop6): initial error at time 524376: ext4_orphan_get:1403: inode 15 [ 88.242894][ C0] EXT4-fs (loop6): last error at time 524376: ext4_orphan_get:1408 [ 88.249189][ T7532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.264322][ T7532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.392942][ T7516] EXT4-fs (loop1): shut down requested (0) [ 88.673370][ T7538] loop6: detected capacity change from 0 to 1024 [ 88.673760][ T7538] ext4: Unknown parameter 'measure' [ 89.332095][ T5199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.460774][ T7544] netlink: 'syz.5.558': attribute type 49 has an invalid length. [ 89.486091][ T7542] loop8: detected capacity change from 0 to 8 [ 89.515193][ T7542] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 89.517183][ T7542] unable to read xattr id index table [ 89.520049][ T7542] SQUASHFS error: zlib decompression failed, data probably corrupt [ 89.520399][ T7542] SQUASHFS error: Failed to read block 0x9b: -5 [ 89.520416][ T7542] SQUASHFS error: Unable to read metadata cache entry [99] [ 89.520432][ T7542] SQUASHFS error: Unable to read inode 0x127 [ 89.548539][ T7544] ip6gretap0: entered promiscuous mode [ 89.548576][ T7544] ip6gretap0: entered allmulticast mode [ 89.607475][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.7.559'. [ 89.610458][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.715400][ T7568] loop5: detected capacity change from 0 to 1024 [ 89.755978][ T7568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.779267][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 89.784726][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'. [ 89.787395][ T7577] loop8: detected capacity change from 0 to 1024 [ 89.854754][ T7577] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.222625][ T7592] loop6: detected capacity change from 0 to 512 [ 91.025479][ T7611] ext4: Unknown parameter 'measure' [ 91.310281][ T5199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.321995][ T6440] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.415892][ T7629] block2mtd: erasesize must be a divisor of device size [ 91.458824][ T7632] EXT4-fs (loop8): Test dummy encryption mode enabled [ 91.464582][ T7630] netlink: 'syz.7.577': attribute type 58 has an invalid length. [ 91.464609][ T7630] netlink: 468 bytes leftover after parsing attributes in process `syz.7.577'. [ 91.471992][ T7632] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.575: inode has both inline data and extents flags [ 91.472028][ T7632] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 91.475438][ T7632] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.575: couldn't read orphan inode 15 (err -117) [ 91.475473][ T7632] loop8: lost filesystem error report for type 5 error -117 [ 91.479788][ C1] EXT4-fs (loop8): error count since last fsck: 2 [ 91.479799][ C1] EXT4-fs (loop8): initial error at time 524379: ext4_orphan_get:1403: inode 15 [ 91.479817][ C1] EXT4-fs (loop8): last error at time 524379: ext4_orphan_get:1408 [ 91.482871][ T7632] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.671145][ T7643] netlink: 'syz.7.580': attribute type 10 has an invalid length. [ 91.712544][ T7623] EXT4-fs (loop8): shut down requested (0) [ 91.761757][ T7646] binder: Binderfs stats mode cannot be changed during a remount [ 91.835176][ T7652] netlink: 'syz.8.584': attribute type 11 has an invalid length. [ 91.835211][ T7652] netlink: 36 bytes leftover after parsing attributes in process `syz.8.584'. [ 91.909767][ T7657] EXT4-fs: Ignoring removed bh option [ 91.916693][ T7657] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.937330][ T7657] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 91.938413][ T7657] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.585: bg 0: block 248: padding at end of block bitmap is not set [ 91.938445][ T7657] loop8: lost filesystem error report for type 5 error -117 [ 91.938726][ T7657] Quota error (device loop8): write_blk: dquota write failed [ 91.938756][ T7657] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 91.938775][ T7657] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.585: Failed to acquire dquot type 1 [ 91.938785][ T7657] loop8: lost filesystem error report for type 5 error -28 [ 91.938846][ C0] EXT4-fs (loop8): error count since last fsck: 2 [ 91.938855][ C0] EXT4-fs (loop8): last error at time 524380: ext4_acquire_dquot:7069 [ 91.945655][ T7657] EXT4-fs (loop8): 1 truncate cleaned up [ 92.039728][ T7667] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 92.042198][ T7667] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 131074 [ 92.048963][ T7667] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.585: Failed to acquire dquot type 1 [ 92.246981][ T7670] FAULT_INJECTION: forcing a failure. [ 92.246981][ T7670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.247015][ T7670] CPU: 1 UID: 0 PID: 7670 Comm: syz.1.586 Not tainted syzkaller #0 PREEMPT [ 92.247029][ T7670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 92.247037][ T7670] Call trace: [ 92.247041][ T7670] show_stack+0x2c/0x3c (C) [ 92.247061][ T7670] __dump_stack+0x30/0x40 [ 92.247072][ T7670] dump_stack_lvl+0xd8/0x12c [ 92.247082][ T7670] dump_stack+0x1c/0x28 [ 92.247092][ T7670] should_fail_ex+0x41c/0x590 [ 92.247103][ T7670] should_fail+0x14/0x24 [ 92.247112][ T7670] should_fail_usercopy+0x20/0x30 [ 92.247123][ T7670] simple_read_from_buffer+0xc4/0x238 [ 92.247133][ T7670] proc_fail_nth_read+0x1a8/0x248 [ 92.247142][ T7670] vfs_read+0x230/0x8c8 [ 92.247152][ T7670] ksys_read+0x12c/0x228 [ 92.247162][ T7670] __arm64_sys_read+0x84/0x98 [ 92.247172][ T7670] invoke_syscall+0x98/0x244 [ 92.247182][ T7670] el0_svc_common+0xec/0x23c [ 92.247192][ T7670] do_el0_svc+0x4c/0x5c [ 92.247202][ T7670] el0_svc+0x64/0x260 [ 92.247211][ T7670] el0t_64_sync_handler+0x44/0x104 [ 92.247219][ T7670] el0t_64_sync+0x198/0x19c [ 92.416712][ T7674] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 92.417281][ T7674] loop5: p3 start 32767 is beyond EOD, truncated [ 92.435044][ T7674] loop5: p5 start 32767 is beyond EOD, truncated [ 92.435064][ T7674] loop5: p6 start 32767 is beyond EOD, truncated [ 92.435073][ T7674] loop5: p7 start 32767 is beyond EOD, truncated [ 92.435081][ T7674] loop5: p8 start 32767 is beyond EOD, truncated [ 92.435088][ T7674] loop5: p9 start 32767 is beyond EOD, truncated [ 92.435095][ T7674] loop5: p10 start 32767 is beyond EOD, truncated [ 92.435102][ T7674] loop5: p11 start 32767 is beyond EOD, truncated [ 92.435110][ T7674] loop5: p12 start 32767 is beyond EOD, truncated [ 92.435117][ T7674] loop5: p13 start 32767 is beyond EOD, truncated [ 92.435124][ T7674] loop5: p14 start 32767 is beyond EOD, truncated [ 92.435131][ T7674] loop5: p15 start 32767 is beyond EOD, truncated [ 92.435138][ T7674] loop5: p16 start 32767 is beyond EOD, truncated [ 92.435145][ T7674] loop5: p17 start 32767 is beyond EOD, truncated [ 92.435152][ T7674] loop5: p18 start 32767 is beyond EOD, truncated [ 92.435159][ T7674] loop5: p19 start 32767 is beyond EOD, truncated [ 92.435166][ T7674] loop5: p20 start 32767 is beyond EOD, truncated [ 92.435173][ T7674] loop5: p21 start 32767 is beyond EOD, truncated [ 92.435180][ T7674] loop5: p22 start 32767 is beyond EOD, truncated [ 92.435187][ T7674] loop5: p23 start 32767 is beyond EOD, truncated [ 92.435194][ T7674] loop5: p24 start 32767 is beyond EOD, truncated [ 92.435201][ T7674] loop5: p25 start 32767 is beyond EOD, truncated [ 92.435208][ T7674] loop5: p26 start 32767 is beyond EOD, truncated [ 92.435215][ T7674] loop5: p27 start 32767 is beyond EOD, truncated [ 92.435222][ T7674] loop5: p28 start 32767 is beyond EOD, truncated [ 92.435229][ T7674] loop5: p29 start 32767 is beyond EOD, truncated [ 92.435236][ T7674] loop5: p30 start 32767 is beyond EOD, truncated [ 92.435243][ T7674] loop5: p31 start 32767 is beyond EOD, truncated [ 92.435249][ T7674] loop5: p32 start 32767 is beyond EOD, truncated [ 92.435257][ T7674] loop5: p33 start 32767 is beyond EOD, truncated [ 92.435264][ T7674] loop5: p34 start 32767 is beyond EOD, truncated [ 92.435271][ T7674] loop5: p35 start 32767 is beyond EOD, truncated [ 92.435278][ T7674] loop5: p36 start 32767 is beyond EOD, truncated [ 92.435285][ T7674] loop5: p37 start 32767 is beyond EOD, truncated [ 92.435292][ T7674] loop5: p38 start 32767 is beyond EOD, truncated [ 92.435299][ T7674] loop5: p39 start 32767 is beyond EOD, truncated [ 92.435306][ T7674] loop5: p40 start 32767 is beyond EOD, truncated [ 92.435313][ T7674] loop5: p41 start 32767 is beyond EOD, truncated [ 92.435320][ T7674] loop5: p42 start 32767 is beyond EOD, truncated [ 92.435327][ T7674] loop5: p43 start 32767 is beyond EOD, truncated [ 92.435334][ T7674] loop5: p44 start 32767 is beyond EOD, truncated [ 92.435341][ T7674] loop5: p45 start 32767 is beyond EOD, truncated [ 92.435347][ T7674] loop5: p46 start 32767 is beyond EOD, truncated [ 92.435354][ T7674] loop5: p47 start 32767 is beyond EOD, truncated [ 92.435361][ T7674] loop5: p48 start 32767 is beyond EOD, truncated [ 92.435368][ T7674] loop5: p49 start 32767 is beyond EOD, truncated [ 92.435375][ T7674] loop5: p50 start 32767 is beyond EOD, truncated [ 92.435382][ T7674] loop5: p51 start 32767 is beyond EOD, truncated [ 92.435389][ T7674] loop5: p52 start 32767 is beyond EOD, truncated [ 92.435396][ T7674] loop5: p53 start 32767 is beyond EOD, truncated [ 92.435403][ T7674] loop5: p54 start 32767 is beyond EOD, truncated [ 92.435409][ T7674] loop5: p55 start 32767 is beyond EOD, truncated [ 92.435416][ T7674] loop5: p56 start 32767 is beyond EOD, truncated [ 92.435423][ T7674] loop5: p57 start 32767 is beyond EOD, truncated [ 92.435430][ T7674] loop5: p58 start 32767 is beyond EOD, truncated [ 92.435437][ T7674] loop5: p59 start 32767 is beyond EOD, truncated [ 92.435444][ T7674] loop5: p60 start 32767 is beyond EOD, truncated [ 92.435451][ T7674] loop5: p61 start 32767 is beyond EOD, truncated [ 92.435458][ T7674] loop5: p62 start 32767 is beyond EOD, truncated [ 92.435465][ T7674] loop5: p63 start 32767 is beyond EOD, truncated [ 92.435471][ T7674] loop5: p64 start 32767 is beyond EOD, truncated [ 92.435478][ T7674] loop5: p65 start 32767 is beyond EOD, truncated [ 92.435485][ T7674] loop5: p66 start 32767 is beyond EOD, truncated [ 92.435492][ T7674] loop5: p67 start 32767 is beyond EOD, truncated [ 92.435499][ T7674] loop5: p68 start 32767 is beyond EOD, truncated [ 92.435506][ T7674] loop5: p69 start 32767 is beyond EOD, truncated [ 92.435512][ T7674] loop5: p70 start 32767 is beyond EOD, truncated [ 92.435519][ T7674] loop5: p71 start 32767 is beyond EOD, truncated [ 92.435526][ T7674] loop5: p72 start 32767 is beyond EOD, truncated [ 92.435533][ T7674] loop5: p73 start 32767 is beyond EOD, truncated [ 92.435540][ T7674] loop5: p74 start 32767 is beyond EOD, truncated [ 92.435547][ T7674] loop5: p75 start 32767 is beyond EOD, truncated [ 92.435553][ T7674] loop5: p76 start 32767 is beyond EOD, truncated [ 92.435560][ T7674] loop5: p77 start 32767 is beyond EOD, truncated [ 92.435567][ T7674] loop5: p78 start 32767 is beyond EOD, truncated [ 92.435574][ T7674] loop5: p79 start 32767 is beyond EOD, truncated [ 92.435581][ T7674] loop5: p80 start 32767 is beyond EOD, truncated [ 92.435588][ T7674] loop5: p81 start 32767 is beyond EOD, truncated [ 92.435594][ T7674] loop5: p82 start 32767 is beyond EOD, truncated [ 92.435601][ T7674] loop5: p83 start 32767 is beyond EOD, truncated [ 92.435608][ T7674] loop5: p84 start 32767 is beyond EOD, truncated [ 92.435615][ T7674] loop5: p85 start 32767 is beyond EOD, truncated [ 92.435622][ T7674] loop5: p86 start 32767 is beyond EOD, truncated [ 92.435628][ T7674] loop5: p87 start 32767 is beyond EOD, truncated [ 92.435635][ T7674] loop5: p88 start 32767 is beyond EOD, truncated [ 92.435642][ T7674] loop5: p89 start 32767 is beyond EOD, truncated [ 92.435649][ T7674] loop5: p90 start 32767 is beyond EOD, truncated [ 92.435661][ T7674] loop5: p91 start 32767 is beyond EOD, truncated [ 92.435668][ T7674] loop5: p92 start 32767 is beyond EOD, truncated [ 92.435675][ T7674] loop5: p93 start 32767 is beyond EOD, truncated [ 92.435683][ T7674] loop5: p94 start 32767 is beyond EOD, truncated [ 92.435690][ T7674] loop5: p95 start 32767 is beyond EOD, truncated [ 92.435697][ T7674] loop5: p96 start 32767 is beyond EOD, truncated [ 92.435705][ T7674] loop5: p97 start 32767 is beyond EOD, truncated [ 92.435712][ T7674] loop5: p98 start 32767 is beyond EOD, truncated [ 92.435718][ T7674] loop5: p99 start 32767 is beyond EOD, truncated [ 92.435725][ T7674] loop5: p100 start 32767 is beyond EOD, truncated [ 92.435732][ T7674] loop5: p101 start 32767 is beyond EOD, truncated [ 92.435739][ T7674] loop5: p102 start 32767 is beyond EOD, truncated [ 92.435746][ T7674] loop5: p103 start 32767 is beyond EOD, truncated [ 92.435753][ T7674] loop5: p104 start 32767 is beyond EOD, truncated [ 92.435760][ T7674] loop5: p105 start 32767 is beyond EOD, truncated [ 92.435767][ T7674] loop5: p106 start 32767 is beyond EOD, truncated [ 92.435774][ T7674] loop5: p107 start 32767 is beyond EOD, truncated [ 92.435781][ T7674] loop5: p108 start 32767 is beyond EOD, truncated [ 92.435788][ T7674] loop5: p109 start 32767 is beyond EOD, truncated [ 92.435794][ T7674] loop5: p110 start 32767 is beyond EOD, truncated [ 92.435801][ T7674] loop5: p111 start 32767 is beyond EOD, truncated [ 92.435808][ T7674] loop5: p112 start 32767 is beyond EOD, truncated [ 92.435815][ T7674] loop5: p113 start 32767 is beyond EOD, truncated [ 92.435822][ T7674] loop5: p114 start 32767 is beyond EOD, truncated [ 92.435829][ T7674] loop5: p115 start 32767 is beyond EOD, truncated [ 92.435836][ T7674] loop5: p116 start 32767 is beyond EOD, truncated [ 92.435843][ T7674] loop5: p117 start 32767 is beyond EOD, truncated [ 92.435850][ T7674] loop5: p118 start 32767 is beyond EOD, truncated [ 92.435856][ T7674] loop5: p119 start 32767 is beyond EOD, truncated [ 92.435863][ T7674] loop5: p120 start 32767 is beyond EOD, truncated [ 92.435870][ T7674] loop5: p121 start 32767 is beyond EOD, truncated [ 92.435877][ T7674] loop5: p122 start 32767 is beyond EOD, truncated [ 92.435884][ T7674] loop5: p123 start 32767 is beyond EOD, truncated [ 92.435891][ T7674] loop5: p124 start 32767 is beyond EOD, truncated [ 92.435898][ T7674] loop5: p125 start 32767 is beyond EOD, truncated [ 92.435905][ T7674] loop5: p126 start 32767 is beyond EOD, truncated [ 92.435912][ T7674] loop5: p127 start 32767 is beyond EOD, truncated [ 92.435918][ T7674] loop5: p128 start 32767 is beyond EOD, truncated [ 92.435925][ T7674] loop5: p129 start 32767 is beyond EOD, truncated [ 92.435932][ T7674] loop5: p130 start 32767 is beyond EOD, truncated [ 92.435939][ T7674] loop5: p131 start 32767 is beyond EOD, truncated [ 92.435946][ T7674] loop5: p132 start 32767 is beyond EOD, truncated [ 92.435953][ T7674] loop5: p133 start 32767 is beyond EOD, truncated [ 92.435960][ T7674] loop5: p134 start 32767 is beyond EOD, truncated [ 92.435966][ T7674] loop5: p135 start 32767 is beyond EOD, truncated [ 92.435973][ T7674] loop5: p136 start 32767 is beyond EOD, truncated [ 92.435980][ T7674] loop5: p137 start 32767 is beyond EOD, truncated [ 92.435987][ T7674] loop5: p138 start 32767 is beyond EOD, truncated [ 92.435994][ T7674] loop5: p139 start 32767 is beyond EOD, truncated [ 92.436001][ T7674] loop5: p140 start 32767 is beyond EOD, truncated [ 92.436008][ T7674] loop5: p141 start 32767 is beyond EOD, truncated [ 92.436015][ T7674] loop5: p142 start 32767 is beyond EOD, truncated [ 92.436021][ T7674] loop5: p143 start 32767 is beyond EOD, truncated [ 92.436028][ T7674] loop5: p144 start 32767 is beyond EOD, truncated [ 92.436035][ T7674] loop5: p145 start 32767 is beyond EOD, truncated [ 92.436042][ T7674] loop5: p146 start 32767 is beyond EOD, truncated [ 92.436049][ T7674] loop5: p147 start 32767 is beyond EOD, truncated [ 92.436056][ T7674] loop5: p148 start 32767 is beyond EOD, truncated [ 92.436063][ T7674] loop5: p149 start 32767 is beyond EOD, truncated [ 92.436069][ T7674] loop5: p150 start 32767 is beyond EOD, truncated [ 92.436076][ T7674] loop5: p151 start 32767 is beyond EOD, truncated [ 92.436083][ T7674] loop5: p152 start 32767 is beyond EOD, truncated [ 92.436090][ T7674] loop5: p153 start 32767 is beyond EOD, truncated [ 92.436097][ T7674] loop5: p154 start 32767 is beyond EOD, truncated [ 92.436104][ T7674] loop5: p155 start 32767 is beyond EOD, truncated [ 92.436111][ T7674] loop5: p156 start 32767 is beyond EOD, truncated [ 92.436118][ T7674] loop5: p157 start 32767 is beyond EOD, truncated [ 92.436125][ T7674] loop5: p158 start 32767 is beyond EOD, truncated [ 92.436131][ T7674] loop5: p159 start 32767 is beyond EOD, truncated [ 92.436138][ T7674] loop5: p160 start 32767 is beyond EOD, truncated [ 92.436145][ T7674] loop5: p161 start 32767 is beyond EOD, truncated [ 92.436152][ T7674] loop5: p162 start 32767 is beyond EOD, truncated [ 92.436159][ T7674] loop5: p163 start 32767 is beyond EOD, truncated [ 92.436166][ T7674] loop5: p164 start 32767 is beyond EOD, truncated [ 92.436173][ T7674] loop5: p165 start 32767 is beyond EOD, truncated [ 92.436179][ T7674] loop5: p166 start 32767 is beyond EOD, truncated [ 92.436186][ T7674] loop5: p167 start 32767 is beyond EOD, truncated [ 92.436193][ T7674] loop5: p168 start 32767 is beyond EOD, truncated [ 92.436200][ T7674] loop5: p169 start 32767 is beyond EOD, truncated [ 92.436207][ T7674] loop5: p170 start 32767 is beyond EOD, truncated [ 92.436214][ T7674] loop5: p171 start 32767 is beyond EOD, truncated [ 92.436221][ T7674] loop5: p172 start 32767 is beyond EOD, truncated [ 92.436228][ T7674] loop5: p173 start 32767 is beyond EOD, truncated [ 92.436235][ T7674] loop5: p174 start 32767 is beyond EOD, truncated [ 92.436242][ T7674] loop5: p175 start 32767 is beyond EOD, truncated [ 92.436249][ T7674] loop5: p176 start 32767 is beyond EOD, truncated [ 92.436256][ T7674] loop5: p177 start 32767 is beyond EOD, truncated [ 92.436263][ T7674] loop5: p178 start 32767 is beyond EOD, truncated [ 92.436270][ T7674] loop5: p179 start 32767 is beyond EOD, truncated [ 92.436276][ T7674] loop5: p180 start 32767 is beyond EOD, truncated [ 92.436283][ T7674] loop5: p181 start 32767 is beyond EOD, truncated [ 92.436290][ T7674] loop5: p182 start 32767 is beyond EOD, truncated [ 92.436297][ T7674] loop5: p183 start 32767 is beyond EOD, truncated [ 92.436304][ T7674] loop5: p184 start 32767 is beyond EOD, truncated [ 92.436311][ T7674] loop5: p185 start 32767 is beyond EOD, truncated [ 92.436318][ T7674] loop5: p186 start 32767 is beyond EOD, truncated [ 92.436325][ T7674] loop5: p187 start 32767 is beyond EOD, truncated [ 92.436332][ T7674] loop5: p188 start 32767 is beyond EOD, truncated [ 92.436339][ T7674] loop5: p189 start 32767 is beyond EOD, truncated [ 92.436345][ T7674] loop5: p190 start 32767 is beyond EOD, truncated [ 92.436352][ T7674] loop5: p191 start 32767 is beyond EOD, truncated [ 92.436359][ T7674] loop5: p192 start 32767 is beyond EOD, truncated [ 92.436366][ T7674] loop5: p193 start 32767 is beyond EOD, truncated [ 92.436373][ T7674] loop5: p194 start 32767 is beyond EOD, truncated [ 92.436380][ T7674] loop5: p195 start 32767 is beyond EOD, truncated [ 92.436387][ T7674] loop5: p196 start 32767 is beyond EOD, truncated [ 92.436394][ T7674] loop5: p197 start 32767 is beyond EOD, truncated [ 92.436401][ T7674] loop5: p198 start 32767 is beyond EOD, truncated [ 92.436408][ T7674] loop5: p199 start 32767 is beyond EOD, truncated [ 92.436414][ T7674] loop5: p200 start 32767 is beyond EOD, truncated [ 92.436421][ T7674] loop5: p201 start 32767 is beyond EOD, truncated [ 92.436428][ T7674] loop5: p202 start 32767 is beyond EOD, truncated [ 92.436435][ T7674] loop5: p203 start 32767 is beyond EOD, truncated [ 92.436442][ T7674] loop5: p204 start 32767 is beyond EOD, truncated [ 92.436449][ T7674] loop5: p205 start 32767 is beyond EOD, truncated [ 92.436456][ T7674] loop5: p206 start 32767 is beyond EOD, truncated [ 92.436463][ T7674] loop5: p207 start 32767 is beyond EOD, truncated [ 92.436470][ T7674] loop5: p208 start 32767 is beyond EOD, truncated [ 92.436476][ T7674] loop5: p209 start 32767 is beyond EOD, truncated [ 92.436483][ T7674] loop5: p210 start 32767 is beyond EOD, truncated [ 92.436490][ T7674] loop5: p211 start 32767 is beyond EOD, truncated [ 92.436497][ T7674] loop5: p212 start 32767 is beyond EOD, truncated [ 92.436504][ T7674] loop5: p213 start 32767 is beyond EOD, truncated [ 92.436511][ T7674] loop5: p214 start 32767 is beyond EOD, truncated [ 92.436518][ T7674] loop5: p215 start 32767 is beyond EOD, truncated [ 92.436525][ T7674] loop5: p216 start 32767 is beyond EOD, truncated [ 92.436531][ T7674] loop5: p217 start 32767 is beyond EOD, truncated [ 92.436538][ T7674] loop5: p218 start 32767 is beyond EOD, truncated [ 92.436545][ T7674] loop5: p219 start 32767 is beyond EOD, truncated [ 92.436552][ T7674] loop5: p220 start 32767 is beyond EOD, truncated [ 92.436559][ T7674] loop5: p221 start 32767 is beyond EOD, truncated [ 92.436566][ T7674] loop5: p222 start 32767 is beyond EOD, truncated [ 92.436573][ T7674] loop5: p223 start 32767 is beyond EOD, truncated [ 92.436580][ T7674] loop5: p224 start 32767 is beyond EOD, truncated [ 92.436587][ T7674] loop5: p225 start 32767 is beyond EOD, truncated [ 92.436594][ T7674] loop5: p226 start 32767 is beyond EOD, truncated [ 92.436601][ T7674] loop5: p227 start 32767 is beyond EOD, truncated [ 92.436608][ T7674] loop5: p228 start 32767 is beyond EOD, truncated [ 92.436615][ T7674] loop5: p229 start 32767 is beyond EOD, truncated [ 92.436622][ T7674] loop5: p230 start 32767 is beyond EOD, truncated [ 92.436629][ T7674] loop5: p231 start 32767 is beyond EOD, truncated [ 92.436635][ T7674] loop5: p232 start 32767 is beyond EOD, truncated [ 92.436642][ T7674] loop5: p233 start 32767 is beyond EOD, truncated [ 92.436649][ T7674] loop5: p234 start 32767 is beyond EOD, truncated [ 92.436660][ T7674] loop5: p235 start 32767 is beyond EOD, truncated [ 92.436668][ T7674] loop5: p236 start 32767 is beyond EOD, truncated [ 92.436676][ T7674] loop5: p237 start 32767 is beyond EOD, truncated [ 92.436684][ T7674] loop5: p238 start 32767 is beyond EOD, truncated [ 92.436691][ T7674] loop5: p239 start 32767 is beyond EOD, truncated [ 92.436698][ T7674] loop5: p240 start 32767 is beyond EOD, truncated [ 92.436704][ T7674] loop5: p241 start 32767 is beyond EOD, truncated [ 92.436712][ T7674] loop5: p242 start 32767 is beyond EOD, truncated [ 92.436718][ T7674] loop5: p243 start 32767 is beyond EOD, truncated [ 92.436725][ T7674] loop5: p244 start 32767 is beyond EOD, truncated [ 92.436732][ T7674] loop5: p245 start 32767 is beyond EOD, truncated [ 92.436739][ T7674] loop5: p246 start 32767 is beyond EOD, truncated [ 92.436746][ T7674] loop5: p247 start 32767 is beyond EOD, truncated [ 92.436753][ T7674] loop5: p248 start 32767 is beyond EOD, truncated [ 92.436760][ T7674] loop5: p249 start 32767 is beyond EOD, truncated [ 92.436767][ T7674] loop5: p250 start 32767 is beyond EOD, truncated [ 92.436774][ T7674] loop5: p251 start 32767 is beyond EOD, truncated [ 92.436781][ T7674] loop5: p252 start 32767 is beyond EOD, truncated [ 92.436788][ T7674] loop5: p253 start 32767 is beyond EOD, truncated [ 92.436795][ T7674] loop5: p254 start 32767 is beyond EOD, truncated [ 92.436802][ T7674] loop5: p255 start 32767 is beyond EOD, truncated [ 92.491219][ T4338] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 92.496339][ T4338] loop5: p3 start 32767 is beyond EOD, truncated [ 92.496356][ T4338] loop5: p5 start 32767 is beyond EOD, truncated [ 92.496366][ T4338] loop5: p6 start 32767 is beyond EOD, truncated [ 92.496374][ T4338] loop5: p7 start 32767 is beyond EOD, truncated [ 92.496381][ T4338] loop5: p8 start 32767 is beyond EOD, truncated [ 92.496388][ T4338] loop5: p9 start 32767 is beyond EOD, truncated [ 92.496395][ T4338] loop5: p10 start 32767 is beyond EOD, truncated [ 92.496402][ T4338] loop5: p11 start 32767 is beyond EOD, truncated [ 92.496409][ T4338] loop5: p12 start 32767 is beyond EOD, truncated [ 92.496416][ T4338] loop5: p13 start 32767 is beyond EOD, truncated [ 92.496423][ T4338] loop5: p14 start 32767 is beyond EOD, truncated [ 92.496430][ T4338] loop5: p15 start 32767 is beyond EOD, truncated [ 92.496437][ T4338] loop5: p16 start 32767 is beyond EOD, truncated [ 92.496444][ T4338] loop5: p17 start 32767 is beyond EOD, truncated [ 92.496451][ T4338] loop5: p18 start 32767 is beyond EOD, truncated [ 92.496457][ T4338] loop5: p19 start 32767 is beyond EOD, truncated [ 92.496464][ T4338] loop5: p20 start 32767 is beyond EOD, truncated [ 92.496471][ T4338] loop5: p21 start 32767 is beyond EOD, truncated [ 92.496478][ T4338] loop5: p22 start 32767 is beyond EOD, truncated [ 92.496485][ T4338] loop5: p23 start 32767 is beyond EOD, truncated [ 92.496492][ T4338] loop5: p24 start 32767 is beyond EOD, truncated [ 92.496499][ T4338] loop5: p25 start 32767 is beyond EOD, truncated [ 92.496505][ T4338] loop5: p26 start 32767 is beyond EOD, truncated [ 92.496512][ T4338] loop5: p27 start 32767 is beyond EOD, truncated [ 92.496519][ T4338] loop5: p28 start 32767 is beyond EOD, truncated [ 92.496526][ T4338] loop5: p29 start 32767 is beyond EOD, truncated [ 92.496533][ T4338] loop5: p30 start 32767 is beyond EOD, truncated [ 92.496540][ T4338] loop5: p31 start 32767 is beyond EOD, truncated [ 92.496547][ T4338] loop5: p32 start 32767 is beyond EOD, truncated [ 92.496553][ T4338] loop5: p33 start 32767 is beyond EOD, truncated [ 92.496560][ T4338] loop5: p34 start 32767 is beyond EOD, truncated [ 92.496567][ T4338] loop5: p35 start 32767 is beyond EOD, truncated [ 92.496574][ T4338] loop5: p36 start 32767 is beyond EOD, truncated [ 92.496581][ T4338] loop5: p37 start 32767 is beyond EOD, truncated [ 92.496588][ T4338] loop5: p38 start 32767 is beyond EOD, truncated [ 92.496595][ T4338] loop5: p39 start 32767 is beyond EOD, truncated [ 92.496601][ T4338] loop5: p40 start 32767 is beyond EOD, truncated [ 92.496608][ T4338] loop5: p41 start 32767 is beyond EOD, truncated [ 92.496615][ T4338] loop5: p42 start 32767 is beyond EOD, truncated [ 92.496622][ T4338] loop5: p43 start 32767 is beyond EOD, truncated [ 92.496629][ T4338] loop5: p44 start 32767 is beyond EOD, truncated [ 92.496635][ T4338] loop5: p45 start 32767 is beyond EOD, truncated [ 92.496648][ T4338] loop5: p46 start 32767 is beyond EOD, truncated [ 92.496656][ T4338] loop5: p47 start 32767 is beyond EOD, truncated [ 92.496663][ T4338] loop5: p48 start 32767 is beyond EOD, truncated [ 92.496670][ T4338] loop5: p49 start 32767 is beyond EOD, truncated [ 92.496677][ T4338] loop5: p50 start 32767 is beyond EOD, truncated [ 92.496684][ T4338] loop5: p51 start 32767 is beyond EOD, truncated [ 92.498072][ T4338] loop5: p52 start 32767 is beyond EOD, truncated [ 92.498091][ T4338] loop5: p53 start 32767 is beyond EOD, truncated [ 92.498099][ T4338] loop5: p54 start 32767 is beyond EOD, truncated [ 92.498108][ T4338] loop5: p55 start 32767 is beyond EOD, truncated [ 92.498117][ T4338] loop5: p56 start 32767 is beyond EOD, truncated [ 92.498124][ T4338] loop5: p57 start 32767 is beyond EOD, truncated [ 92.498131][ T4338] loop5: p58 start 32767 is beyond EOD, truncated [ 92.498138][ T4338] loop5: p59 start 32767 is beyond EOD, truncated [ 92.498146][ T4338] loop5: p60 start 32767 is beyond EOD, truncated [ 92.498153][ T4338] loop5: p61 start 32767 is beyond EOD, truncated [ 92.498160][ T4338] loop5: p62 start 32767 is beyond EOD, truncated [ 92.498166][ T4338] loop5: p63 start 32767 is beyond EOD, truncated [ 92.498173][ T4338] loop5: p64 start 32767 is beyond EOD, truncated [ 92.498180][ T4338] loop5: p65 start 32767 is beyond EOD, truncated [ 92.498187][ T4338] loop5: p66 start 32767 is beyond EOD, truncated [ 92.498194][ T4338] loop5: p67 start 32767 is beyond EOD, truncated [ 92.498201][ T4338] loop5: p68 start 32767 is beyond EOD, truncated [ 92.498208][ T4338] loop5: p69 start 32767 is beyond EOD, truncated [ 92.498215][ T4338] loop5: p70 start 32767 is beyond EOD, truncated [ 92.498222][ T4338] loop5: p71 start 32767 is beyond EOD, truncated [ 92.498228][ T4338] loop5: p72 start 32767 is beyond EOD, truncated [ 92.498235][ T4338] loop5: p73 start 32767 is beyond EOD, truncated [ 92.498242][ T4338] loop5: p74 start 32767 is beyond EOD, truncated [ 92.498249][ T4338] loop5: p75 start 32767 is beyond EOD, truncated [ 92.498256][ T4338] loop5: p76 start 32767 is beyond EOD, truncated [ 92.498263][ T4338] loop5: p77 start 32767 is beyond EOD, truncated [ 92.498270][ T4338] loop5: p78 start 32767 is beyond EOD, truncated [ 92.498276][ T4338] loop5: p79 start 32767 is beyond EOD, truncated [ 92.498283][ T4338] loop5: p80 start 32767 is beyond EOD, truncated [ 92.498290][ T4338] loop5: p81 start 32767 is beyond EOD, truncated [ 92.498297][ T4338] loop5: p82 start 32767 is beyond EOD, truncated [ 92.498304][ T4338] loop5: p83 start 32767 is beyond EOD, truncated [ 92.498311][ T4338] loop5: p84 start 32767 is beyond EOD, truncated [ 92.498318][ T4338] loop5: p85 start 32767 is beyond EOD, truncated [ 92.498324][ T4338] loop5: p86 start 32767 is beyond EOD, truncated [ 92.503257][ T4338] loop5: p87 start 32767 is beyond EOD, truncated [ 92.503287][ T4338] loop5: p88 start 32767 is beyond EOD, truncated [ 92.503296][ T4338] loop5: p89 start 32767 is beyond EOD, truncated [ 92.503304][ T4338] loop5: p90 start 32767 is beyond EOD, truncated [ 92.503311][ T4338] loop5: p91 start 32767 is beyond EOD, truncated [ 92.503318][ T4338] loop5: p92 start 32767 is beyond EOD, truncated [ 92.503325][ T4338] loop5: p93 start 32767 is beyond EOD, truncated [ 92.503332][ T4338] loop5: p94 start 32767 is beyond EOD, truncated [ 92.503339][ T4338] loop5: p95 start 32767 is beyond EOD, truncated [ 92.503346][ T4338] loop5: p96 start 32767 is beyond EOD, truncated [ 92.503353][ T4338] loop5: p97 start 32767 is beyond EOD, truncated [ 92.503360][ T4338] loop5: p98 start 32767 is beyond EOD, truncated [ 92.503366][ T4338] loop5: p99 start 32767 is beyond EOD, truncated [ 92.503373][ T4338] loop5: p100 start 32767 is beyond EOD, truncated [ 92.503380][ T4338] loop5: p101 start 32767 is beyond EOD, truncated [ 92.503387][ T4338] loop5: p102 start 32767 is beyond EOD, truncated [ 92.504244][ T4338] loop5: p103 start 32767 is beyond EOD, truncated [ 92.504271][ T4338] loop5: p104 start 32767 is beyond EOD, truncated [ 92.504283][ T4338] loop5: p105 start 32767 is beyond EOD, truncated [ 92.504291][ T4338] loop5: p106 start 32767 is beyond EOD, truncated [ 92.504299][ T4338] loop5: p107 start 32767 is beyond EOD, truncated [ 92.504306][ T4338] loop5: p108 start 32767 is beyond EOD, truncated [ 92.504314][ T4338] loop5: p109 start 32767 is beyond EOD, truncated [ 92.504321][ T4338] loop5: p110 start 32767 is beyond EOD, truncated [ 92.504328][ T4338] loop5: p111 start 32767 is beyond EOD, truncated [ 92.504335][ T4338] loop5: p112 start 32767 is beyond EOD, truncated [ 92.504342][ T4338] loop5: p113 start 32767 is beyond EOD, truncated [ 92.504349][ T4338] loop5: p114 start 32767 is beyond EOD, truncated [ 92.504356][ T4338] loop5: p115 start 32767 is beyond EOD, truncated [ 92.504363][ T4338] loop5: p116 start 32767 is beyond EOD, truncated [ 92.504370][ T4338] loop5: p117 start 32767 is beyond EOD, truncated [ 92.504377][ T4338] loop5: p118 start 32767 is beyond EOD, truncated [ 92.504384][ T4338] loop5: p119 start 32767 is beyond EOD, truncated [ 92.504390][ T4338] loop5: p120 start 32767 is beyond EOD, truncated [ 92.504397][ T4338] loop5: p121 start 32767 is beyond EOD, truncated [ 92.504404][ T4338] loop5: p122 start 32767 is beyond EOD, truncated [ 92.504411][ T4338] loop5: p123 start 32767 is beyond EOD, truncated [ 92.504418][ T4338] loop5: p124 start 32767 is beyond EOD, truncated [ 92.504425][ T4338] loop5: p125 start 32767 is beyond EOD, truncated [ 92.504432][ T4338] loop5: p126 start 32767 is beyond EOD, truncated [ 92.504439][ T4338] loop5: p127 start 32767 is beyond EOD, truncated [ 92.504446][ T4338] loop5: p128 start 32767 is beyond EOD, truncated [ 92.504453][ T4338] loop5: p129 start 32767 is beyond EOD, truncated [ 92.504460][ T4338] loop5: p130 start 32767 is beyond EOD, truncated [ 92.504467][ T4338] loop5: p131 start 32767 is beyond EOD, truncated [ 92.504473][ T4338] loop5: p132 start 32767 is beyond EOD, truncated [ 92.504480][ T4338] loop5: p133 start 32767 is beyond EOD, truncated [ 92.504487][ T4338] loop5: p134 start 32767 is beyond EOD, truncated [ 92.504494][ T4338] loop5: p135 start 32767 is beyond EOD, truncated [ 92.504501][ T4338] loop5: p136 start 32767 is beyond EOD, truncated [ 92.504508][ T4338] loop5: p137 start 32767 is beyond EOD, truncated [ 92.509081][ T4338] loop5: p138 start 32767 is beyond EOD, truncated [ 92.509098][ T4338] loop5: p139 start 32767 is beyond EOD, truncated [ 92.509107][ T4338] loop5: p140 start 32767 is beyond EOD, truncated [ 92.509115][ T4338] loop5: p141 start 32767 is beyond EOD, truncated [ 92.509123][ T4338] loop5: p142 start 32767 is beyond EOD, truncated [ 92.509130][ T4338] loop5: p143 start 32767 is beyond EOD, truncated [ 92.509137][ T4338] loop5: p144 start 32767 is beyond EOD, truncated [ 92.509144][ T4338] loop5: p145 start 32767 is beyond EOD, truncated [ 92.509151][ T4338] loop5: p146 start 32767 is beyond EOD, truncated [ 92.509158][ T4338] loop5: p147 start 32767 is beyond EOD, truncated [ 92.509165][ T4338] loop5: p148 start 32767 is beyond EOD, truncated [ 92.509172][ T4338] loop5: p149 start 32767 is beyond EOD, truncated [ 92.509179][ T4338] loop5: p150 start 32767 is beyond EOD, truncated [ 92.509185][ T4338] loop5: p151 start 32767 is beyond EOD, truncated [ 92.509193][ T4338] loop5: p152 start 32767 is beyond EOD, truncated [ 92.509199][ T4338] loop5: p153 start 32767 is beyond EOD, truncated [ 92.509206][ T4338] loop5: p154 start 32767 is beyond EOD, truncated [ 92.509213][ T4338] loop5: p155 start 32767 is beyond EOD, truncated [ 92.509220][ T4338] loop5: p156 start 32767 is beyond EOD, truncated [ 92.509227][ T4338] loop5: p157 start 32767 is beyond EOD, truncated [ 92.509234][ T4338] loop5: p158 start 32767 is beyond EOD, truncated [ 92.509241][ T4338] loop5: p159 start 32767 is beyond EOD, truncated [ 92.509247][ T4338] loop5: p160 start 32767 is beyond EOD, truncated [ 92.509254][ T4338] loop5: p161 start 32767 is beyond EOD, truncated [ 92.509261][ T4338] loop5: p162 start 32767 is beyond EOD, truncated [ 92.509268][ T4338] loop5: p163 start 32767 is beyond EOD, truncated [ 92.509275][ T4338] loop5: p164 start 32767 is beyond EOD, truncated [ 92.509282][ T4338] loop5: p165 start 32767 is beyond EOD, truncated [ 92.509289][ T4338] loop5: p166 start 32767 is beyond EOD, truncated [ 92.509295][ T4338] loop5: p167 start 32767 is beyond EOD, truncated [ 92.509302][ T4338] loop5: p168 start 32767 is beyond EOD, truncated [ 92.509309][ T4338] loop5: p169 start 32767 is beyond EOD, truncated [ 92.509316][ T4338] loop5: p170 start 32767 is beyond EOD, truncated [ 92.509369][ T4338] loop5: p171 start 32767 is beyond EOD, truncated [ 92.509376][ T4338] loop5: p172 start 32767 is beyond EOD, truncated [ 92.509383][ T4338] loop5: p173 start 32767 is beyond EOD, truncated [ 92.509390][ T4338] loop5: p174 start 32767 is beyond EOD, truncated [ 92.509397][ T4338] loop5: p175 start 32767 is beyond EOD, truncated [ 92.509403][ T4338] loop5: p176 start 32767 is beyond EOD, truncated [ 92.509410][ T4338] loop5: p177 start 32767 is beyond EOD, truncated [ 92.509417][ T4338] loop5: p178 start 32767 is beyond EOD, truncated [ 92.509424][ T4338] loop5: p179 start 32767 is beyond EOD, truncated [ 92.509431][ T4338] loop5: p180 start 32767 is beyond EOD, truncated [ 92.509438][ T4338] loop5: p181 start 32767 is beyond EOD, truncated [ 92.509445][ T4338] loop5: p182 start 32767 is beyond EOD, truncated [ 92.509452][ T4338] loop5: p183 start 32767 is beyond EOD, truncated [ 92.509459][ T4338] loop5: p184 start 32767 is beyond EOD, truncated [ 92.509465][ T4338] loop5: p185 start 32767 is beyond EOD, truncated [ 92.509472][ T4338] loop5: p186 start 32767 is beyond EOD, truncated [ 92.509479][ T4338] loop5: p187 start 32767 is beyond EOD, truncated [ 92.509486][ T4338] loop5: p188 start 32767 is beyond EOD, truncated [ 92.509493][ T4338] loop5: p189 start 32767 is beyond EOD, truncated [ 92.509500][ T4338] loop5: p190 start 32767 is beyond EOD, truncated [ 92.509507][ T4338] loop5: p191 start 32767 is beyond EOD, truncated [ 92.509514][ T4338] loop5: p192 start 32767 is beyond EOD, truncated [ 92.509521][ T4338] loop5: p193 start 32767 is beyond EOD, truncated [ 92.509527][ T4338] loop5: p194 start 32767 is beyond EOD, truncated [ 92.509534][ T4338] loop5: p195 start 32767 is beyond EOD, truncated [ 92.509541][ T4338] loop5: p196 start 32767 is beyond EOD, truncated [ 92.509548][ T4338] loop5: p197 start 32767 is beyond EOD, truncated [ 92.509555][ T4338] loop5: p198 start 32767 is beyond EOD, truncated [ 92.509562][ T4338] loop5: p199 start 32767 is beyond EOD, truncated [ 92.509569][ T4338] loop5: p200 start 32767 is beyond EOD, truncated [ 92.509575][ T4338] loop5: p201 start 32767 is beyond EOD, truncated [ 92.509582][ T4338] loop5: p202 start 32767 is beyond EOD, truncated [ 92.509589][ T4338] loop5: p203 start 32767 is beyond EOD, truncated [ 92.509596][ T4338] loop5: p204 start 32767 is beyond EOD, truncated [ 92.509603][ T4338] loop5: p205 start 32767 is beyond EOD, truncated [ 92.509610][ T4338] loop5: p206 start 32767 is beyond EOD, truncated [ 92.509617][ T4338] loop5: p207 start 32767 is beyond EOD, truncated [ 92.509624][ T4338] loop5: p208 start 32767 is beyond EOD, truncated [ 92.509631][ T4338] loop5: p209 start 32767 is beyond EOD, truncated [ 92.509637][ T4338] loop5: p210 start 32767 is beyond EOD, truncated [ 92.509649][ T4338] loop5: p211 start 32767 is beyond EOD, truncated [ 92.509657][ T4338] loop5: p212 start 32767 is beyond EOD, truncated [ 92.509664][ T4338] loop5: p213 start 32767 is beyond EOD, truncated [ 92.510557][ T4338] loop5: p214 start 32767 is beyond EOD, truncated [ 92.510573][ T4338] loop5: p215 start 32767 is beyond EOD, truncated [ 92.510581][ T4338] loop5: p216 start 32767 is beyond EOD, truncated [ 92.510589][ T4338] loop5: p217 start 32767 is beyond EOD, truncated [ 92.510596][ T4338] loop5: p218 start 32767 is beyond EOD, truncated [ 92.510603][ T4338] loop5: p219 start 32767 is beyond EOD, truncated [ 92.510610][ T4338] loop5: p220 start 32767 is beyond EOD, truncated [ 92.510617][ T4338] loop5: p221 start 32767 is beyond EOD, truncated [ 92.510624][ T4338] loop5: p222 start 32767 is beyond EOD, truncated [ 92.510631][ T4338] loop5: p223 start 32767 is beyond EOD, truncated [ 92.510638][ T4338] loop5: p224 start 32767 is beyond EOD, truncated [ 92.510655][ T4338] loop5: p225 start 32767 is beyond EOD, truncated [ 92.510663][ T4338] loop5: p226 start 32767 is beyond EOD, truncated [ 92.510670][ T4338] loop5: p227 start 32767 is beyond EOD, truncated [ 92.510677][ T4338] loop5: p228 start 32767 is beyond EOD, truncated [ 92.510684][ T4338] loop5: p229 start 32767 is beyond EOD, truncated [ 92.510691][ T4338] loop5: p230 start 32767 is beyond EOD, truncated [ 92.510698][ T4338] loop5: p231 start 32767 is beyond EOD, truncated [ 92.510705][ T4338] loop5: p232 start 32767 is beyond EOD, truncated [ 92.510712][ T4338] loop5: p233 start 32767 is beyond EOD, truncated [ 92.511912][ T4338] loop5: p234 start 32767 is beyond EOD, truncated [ 92.511935][ T4338] loop5: p235 start 32767 is beyond EOD, truncated [ 92.511947][ T4338] loop5: p236 start 32767 is beyond EOD, truncated [ 92.511957][ T4338] loop5: p237 start 32767 is beyond EOD, truncated [ 92.511965][ T4338] loop5: p238 start 32767 is beyond EOD, truncated [ 92.511972][ T4338] loop5: p239 start 32767 is beyond EOD, truncated [ 92.511979][ T4338] loop5: p240 start 32767 is beyond EOD, truncated [ 92.511986][ T4338] loop5: p241 start 32767 is beyond EOD, truncated [ 92.511993][ T4338] loop5: p242 start 32767 is beyond EOD, truncated [ 92.512000][ T4338] loop5: p243 start 32767 is beyond EOD, truncated [ 92.512007][ T4338] loop5: p244 start 32767 is beyond EOD, truncated [ 92.512014][ T4338] loop5: p245 start 32767 is beyond EOD, truncated [ 92.512021][ T4338] loop5: p246 start 32767 is beyond EOD, truncated [ 92.512028][ T4338] loop5: p247 start 32767 is beyond EOD, truncated [ 92.512035][ T4338] loop5: p248 start 32767 is beyond EOD, truncated [ 92.512042][ T4338] loop5: p249 start 32767 is beyond EOD, truncated [ 92.512049][ T4338] loop5: p250 start 32767 is beyond EOD, truncated [ 92.512055][ T4338] loop5: p251 start 32767 is beyond EOD, truncated [ 92.512062][ T4338] loop5: p252 start 32767 is beyond EOD, truncated [ 92.512069][ T4338] loop5: p253 start 32767 is beyond EOD, truncated [ 92.512076][ T4338] loop5: p254 start 32767 is beyond EOD, truncated [ 92.512083][ T4338] loop5: p255 start 32767 is beyond EOD, truncated [ 92.621280][ T7687] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.629550][ T7687] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.592: corrupted in-inode xattr: e_value size too large [ 92.629568][ T7687] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.630298][ T7687] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.592: couldn't read orphan inode 15 (err -117) [ 92.630321][ T7687] loop1: lost filesystem error report for type 5 error -117 [ 92.887200][ T7693] set_capacity_and_notify: 7 callbacks suppressed [ 92.887213][ T7693] loop6: detected capacity change from 0 to 256 [ 92.946541][ T7698] netlink: 96 bytes leftover after parsing attributes in process `syz.8.595'. [ 92.996084][ T7698] loop8: detected capacity change from 0 to 512 [ 93.005282][ T7699] loop5: detected capacity change from 0 to 512 [ 93.006311][ T7699] EXT4-fs (loop5): Test dummy encryption mode enabled [ 93.012451][ T6886] udevd[6886]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 93.013721][ T7699] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.594: inode has both inline data and extents flags [ 93.013740][ T7699] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.013857][ T7699] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.594: couldn't read orphan inode 15 (err -117) [ 93.013870][ T7699] loop5: lost filesystem error report for type 5 error -117 [ 93.184636][ T7705] Injecting memory failure for pfn 0x13d174 at process virtual address 0x20000000 [ 93.213909][ T7705] Memory failure: 0x13d174: Sending SIGBUS to syz.1.596:7705 due to hardware memory corruption [ 93.213956][ T7705] Memory failure: 0x13d174: recovery action for dirty LRU page: Recovered [ 93.213980][ T7705] Injecting memory failure for pfn 0x2190ff at process virtual address 0x20001000 [ 93.214188][ T7705] Memory failure: 0x2190ff: unhandlable page. [ 93.214196][ T7705] Memory failure: 0x2190ff: recovery action for reserved kernel page: Ignored [ 93.356713][ T7708] netlink: 766 bytes leftover after parsing attributes in process `syz.1.597'. [ 93.376979][ T7695] EXT4-fs (loop5): shut down requested (0) [ 94.435008][ T7721] netlink: 'syz.7.600': attribute type 10 has an invalid length. [ 94.509072][ T5199] EXT4-fs unmount: 8 callbacks suppressed [ 94.509646][ T5199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.537268][ T7729] loop8: detected capacity change from 0 to 294 [ 94.539199][ T7729] vfat: Unknown parameter '' [ 94.624812][ T7743] FAULT_INJECTION: forcing a failure. [ 94.624812][ T7743] name failslab, interval 1, probability 0, space 0, times 0 [ 94.624856][ T7743] CPU: 1 UID: 0 PID: 7743 Comm: syz.6.606 Not tainted syzkaller #0 PREEMPT [ 94.624868][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.624874][ T7743] Call trace: [ 94.624877][ T7743] show_stack+0x2c/0x3c (C) [ 94.624895][ T7743] __dump_stack+0x30/0x40 [ 94.624909][ T7743] dump_stack_lvl+0xd8/0x12c [ 94.624920][ T7743] dump_stack+0x1c/0x28 [ 94.624931][ T7743] should_fail_ex+0x41c/0x590 [ 94.624944][ T7743] should_failslab+0xc4/0x120 [ 94.624957][ T7743] __kmalloc_noprof+0x108/0x6c8 [ 94.624966][ T7743] tomoyo_encode2+0x10c/0x330 [ 94.624977][ T7743] tomoyo_encode+0x34/0x50 [ 94.624987][ T7743] tomoyo_realpath_from_path+0x488/0x4dc [ 94.624998][ T7743] tomoyo_mount_permission+0x3b4/0x7e4 [ 94.625008][ T7743] tomoyo_sb_mount+0x48/0x60 [ 94.625019][ T7743] security_sb_mount+0xfc/0x308 [ 94.625027][ T7743] path_mount+0xb8/0xa88 [ 94.625038][ T7743] do_mount+0xe8/0x148 [ 94.625048][ T7743] __arm64_sys_mount+0x33c/0x388 [ 94.625059][ T7743] invoke_syscall+0x98/0x244 [ 94.625071][ T7743] el0_svc_common+0xec/0x23c [ 94.625082][ T7743] do_el0_svc+0x4c/0x5c [ 94.625093][ T7743] el0_svc+0x64/0x260 [ 94.625104][ T7743] el0t_64_sync_handler+0x44/0x104 [ 94.625114][ T7743] el0t_64_sync+0x198/0x19c [ 94.629806][ T7743] ERROR: Out of memory at tomoyo_realpath_from_path. [ 94.688796][ T7745] loop8: detected capacity change from 0 to 512 [ 94.690348][ T7745] EXT4-fs: Ignoring removed oldalloc option [ 94.692263][ T7745] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 94.702325][ T7745] EXT4-fs (loop8): 1 orphan inode deleted [ 94.702351][ T7745] EXT4-fs (loop8): 1 truncate cleaned up [ 94.703020][ T7745] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.709551][ T7745] EXT4-fs error (device loop8): empty_inline_dir:1796: inode #12: block 7: comm syz.8.608: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 94.715020][ T7745] EXT4-fs (loop8): Remounting filesystem read-only [ 94.715065][ T7745] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 94.735631][ T6440] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.123729][ T7764] input: syz0 as /devices/virtual/input/input6 [ 95.139775][ T7764] loop5: detected capacity change from 0 to 128 [ 95.164885][ T7764] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.359611][ T7777] netlink: 40 bytes leftover after parsing attributes in process `syz.7.613'. [ 95.383812][ T5199] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.421592][ T7824] loop5: detected capacity change from 0 to 4096 [ 95.424495][ T7824] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.424534][ T7824] EXT4-fs (loop5): Test dummy encryption mode enabled [ 95.439660][ T7824] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 95.439732][ T7824] System zones: 0-5 [ 95.441243][ T7824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.524217][ T7824] EXT4-fs (loop5): shut down requested (0) [ 95.639429][ T5199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.784795][ T7854] netlink: 'syz.6.621': attribute type 3 has an invalid length. [ 96.784824][ T7854] netlink: 252 bytes leftover after parsing attributes in process `syz.6.621'. [ 96.838084][ T7863] loop1: detected capacity change from 0 to 4096 [ 96.841607][ T7863] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.841660][ T7863] EXT4-fs (loop1): Test dummy encryption mode enabled [ 96.854600][ T7863] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 96.854693][ T7863] System zones: 0-5 [ 96.861495][ T7863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.873578][ T7865] loop8: detected capacity change from 0 to 512 [ 97.291065][ T7865] netlink: 'syz.8.623': attribute type 4 has an invalid length. [ 97.631645][ T7863] EXT4-fs (loop1): shut down requested (0) [ 97.748743][ T7895] loop5: detected capacity change from 0 to 1024 [ 97.784049][ T7895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 97.811723][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.878755][ T5199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 98.802357][ T7914] loop7: detected capacity change from 0 to 1024 [ 98.802722][ T7914] ext4: Unknown parameter 'measure' [ 98.963732][ T7913] loop1: detected capacity change from 0 to 256 [ 99.032204][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 99.045589][ T7920] loop5: detected capacity change from 0 to 512 [ 99.059841][ T7920] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 99.060142][ T7920] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.637: invalid indirect mapped block 2683928664 (level 1) [ 99.060162][ T7920] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 99.060747][ T7920] EXT4-fs (loop5): Remounting filesystem read-only [ 99.060916][ T7920] EXT4-fs (loop5): 1 truncate cleaned up [ 99.061368][ T7920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.080920][ T7920] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 99.097686][ T7807] Bluetooth: hci5: Frame reassembly failed (-84) [ 99.101707][ T7918] netlink: 16 bytes leftover after parsing attributes in process `syz.6.636'. [ 99.145780][ T5199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.217024][ T7942] loop7: detected capacity change from 0 to 512 [ 99.227210][ T7942] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.241906][ T7942] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 99.241964][ T7942] System zones: 0-2, 18-18, 34-34 [ 99.244028][ T7942] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.639: inode #15: comm syz.7.639: iget: illegal inode # [ 99.244050][ T7942] loop7: lost filesystem error report for type 5 error -117 [ 99.248412][ T7939] loop6: detected capacity change from 0 to 1024 [ 99.248714][ T7939] ext4: Bad value for 'inode_readahead_blks' [ 99.249334][ T7942] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.639: couldn't read orphan inode 15 (err -117) [ 99.249358][ T7942] loop7: lost filesystem error report for type 5 error -117 [ 99.253758][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 99.253771][ C0] EXT4-fs (loop7): initial error at time 524387: ext4_orphan_get:1403 [ 99.253785][ C0] EXT4-fs (loop7): last error at time 524387: ext4_orphan_get:1408 [ 99.260714][ T7942] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.279766][ T7929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.603817][ T5942] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.621436][ T10] kernel read not supported for file /vcs (pid: 10 comm: kworker/0:1) [ 99.647225][ T7959] sctp: [Deprecated]: syz.7.648 (pid 7959) Use of int in max_burst socket option deprecated. [ 99.647225][ T7959] Use struct sctp_assoc_value instead [ 100.130653][ T7974] loop1: detected capacity change from 0 to 512 [ 100.150674][ T7976] loop5: detected capacity change from 0 to 256 [ 100.215675][ T7978] loop6: detected capacity change from 0 to 512 [ 100.224984][ T7978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.225009][ T7978] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.246379][ T7978] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 1 [ 100.246440][ T7978] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 100.247173][ T7978] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.653: Failed to acquire dquot type 1 [ 100.247212][ T7978] loop6: lost filesystem error report for type 5 error -5 [ 100.247389][ T7978] EXT4-fs (loop6): Remounting filesystem read-only [ 100.247446][ T7978] EXT4-fs (loop6): 1 truncate cleaned up [ 100.247874][ T7978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.322271][ T5412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.327769][ T7995] binder: 7994:7995 tried to acquire reference to desc 0, got 1 instead [ 100.328828][ T4793] binder: release 7994:7995 transaction 6 out, still active [ 100.328845][ T4793] binder: undelivered TRANSACTION_COMPLETE [ 100.336763][ T4793] binder: send failed reply for transaction 6, target dead [ 100.357814][ T7997] loop6: detected capacity change from 0 to 1024 [ 100.362612][ T30] audit: type=1326 audit(524388.813:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.5.657" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85792a8 code=0x0 [ 100.366288][ T7999] loop1: detected capacity change from 0 to 1024 [ 100.366927][ T7999] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 100.368044][ T7999] JBD2: no valid journal superblock found [ 100.369142][ T7999] EXT4-fs (loop1): Could not load journal inode [ 100.377837][ T7997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.416002][ T8009] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 100.416060][ T8009] System zones: 1-3, 19-19, 35-36 [ 100.419270][ T5412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.421683][ T8009] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 100.445788][ T4705] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.466988][ T8018] netlink: 64 bytes leftover after parsing attributes in process `syz.5.657'. [ 100.537000][ T30] audit: type=1326 audit(524388.993:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.5.657" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85792a8 code=0x0 [ 100.584190][ T8026] netlink: 64 bytes leftover after parsing attributes in process `syz.5.657'. [ 100.812883][ T8028] netlink: 60 bytes leftover after parsing attributes in process `syz.7.662'. [ 100.814007][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.7.662'. [ 100.814388][ T8028] netlink: 60 bytes leftover after parsing attributes in process `syz.7.662'. [ 100.857239][ T8038] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.943579][ T8047] vfat: Unknown parameter 'nonuytail' [ 101.134937][ T4709] Bluetooth: hci5: command 0x1003 tx timeout [ 101.137063][ T4716] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 101.230276][ T8045] can: request_module (can-proto-0) failed. [ 101.342026][ T8066] netlink: 48 bytes leftover after parsing attributes in process `syz.1.671'. [ 101.342117][ T8066] netlink: 48 bytes leftover after parsing attributes in process `syz.1.671'. [ 101.347212][ T8065] netlink: 48 bytes leftover after parsing attributes in process `syz.1.671'. [ 101.718447][ T5412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.839225][ T8089] vfat: Unknown parameter 'uóR8' [ 101.865662][ T8096] netlink: 132 bytes leftover after parsing attributes in process `syz.8.676'. [ 101.943651][ T8103] sctp: [Deprecated]: syz.6.672 (pid 8103) Use of int in max_burst socket option deprecated. [ 101.943651][ T8103] Use struct sctp_assoc_value instead [ 101.972315][ T8107] Injecting memory failure for pfn 0x1613cc at process virtual address 0x20000000 [ 102.017358][ T8107] Memory failure: 0x1613cc: Sending SIGBUS to syz.1.678:8107 due to hardware memory corruption [ 102.017428][ T8107] Memory failure: 0x1613cc: recovery action for dirty LRU page: Recovered [ 102.017814][ T8107] Injecting memory failure for pfn 0x2190ff at process virtual address 0x20001000 [ 102.018042][ T8107] Memory failure: 0x2190ff: Sending SIGBUS to syz.1.678:8107 due to hardware memory corruption [ 102.018075][ T8107] Memory failure: 0x2190ff: recovery action for already poisoned page: Failed [ 102.033744][ T8111] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.124005][ T8119] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 102.124033][ T8119] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.180134][ T8130] scsi_nl_rcv_msg: discarding partial skb [ 102.320790][ T8144] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 102.327020][ T8144] EXT4-fs (loop7): 1 truncate cleaned up [ 102.329373][ T8144] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.335387][ T8144] EXT4-fs error (device loop7): ext4_lookup:1787: inode #14: comm syz.7.686: invalid fast symlink length 39 [ 102.355699][ T5942] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.380504][ T8147] FAULT_INJECTION: forcing a failure. [ 102.380504][ T8147] name failslab, interval 1, probability 0, space 0, times 0 [ 102.380542][ T8147] CPU: 0 UID: 60928 PID: 8147 Comm: syz.8.688 Not tainted syzkaller #0 PREEMPT [ 102.380555][ T8147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.380561][ T8147] Call trace: [ 102.380565][ T8147] show_stack+0x2c/0x3c (C) [ 102.380584][ T8147] __dump_stack+0x30/0x40 [ 102.380596][ T8147] dump_stack_lvl+0xd8/0x12c [ 102.380606][ T8147] dump_stack+0x1c/0x28 [ 102.380616][ T8147] should_fail_ex+0x41c/0x590 [ 102.380627][ T8147] should_failslab+0xc4/0x120 [ 102.380638][ T8147] kmem_cache_alloc_noprof+0x94/0x5d4 [ 102.380655][ T8147] alloc_empty_file+0x6c/0x1cc [ 102.380664][ T8147] alloc_file+0x58/0x98 [ 102.380671][ T8147] alloc_file_pseudo+0xe0/0x198 [ 102.380679][ T8147] sock_alloc_file+0xb4/0x1ac [ 102.380689][ T8147] __sys_socket+0x90/0xec [ 102.380696][ T8147] __arm64_sys_socket+0x84/0x9c [ 102.380704][ T8147] invoke_syscall+0x98/0x244 [ 102.380714][ T8147] el0_svc_common+0xec/0x23c [ 102.380724][ T8147] do_el0_svc+0x4c/0x5c [ 102.380733][ T8147] el0_svc+0x64/0x260 [ 102.380743][ T8147] el0t_64_sync_handler+0x44/0x104 [ 102.380751][ T8147] el0t_64_sync+0x198/0x19c [ 102.592478][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.7.687'. [ 103.315046][ T8194] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.695: iget: bad i_size value: 38620345925642 [ 103.317750][ T8194] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.318147][ T8194] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.695: couldn't read orphan inode 15 (err -117) [ 103.322426][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 103.322445][ C1] EXT4-fs (loop5): initial error at time 524391: ext4_orphan_get:1403: inode 15 [ 103.322467][ C1] EXT4-fs (loop5): last error at time 524391: ext4_orphan_get:1403: inode 15 [ 103.327955][ T8194] loop5: lost filesystem error report for type 5 error -117 [ 103.330608][ T8194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.347605][ T8194] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.695: bg 0: block 5: invalid block bitmap [ 103.351732][ T8194] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 64 with max blocks 6 with error 28 [ 103.355404][ T8194] EXT4-fs (loop5): This should not happen!! Data will be lost [ 103.355404][ T8194] [ 103.357897][ T8194] EXT4-fs (loop5): Total free blocks count 0 [ 103.357930][ T8194] EXT4-fs (loop5): Free/Dirty block details [ 103.357957][ T8194] EXT4-fs (loop5): free_blocks=0 [ 103.357978][ T8194] EXT4-fs (loop5): dirty_blocks=67 [ 103.357991][ T8194] EXT4-fs (loop5): Block reservation details [ 103.358003][ T8194] EXT4-fs (loop5): i_reserved_data_blocks=67 [ 103.377592][ T6922] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 61 with error 28 [ 103.525759][ T8206] EXT4-fs (loop8): can't mount with both data=journal and delalloc [ 103.620481][ T8219] syzkaller0: entered promiscuous mode [ 103.620518][ T8219] syzkaller0: entered allmulticast mode [ 103.700736][ T8236] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.700771][ T8236] EXT4-fs (loop8): Test dummy encryption mode enabled [ 103.715177][ T8236] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 103.715235][ T8236] System zones: 0-5 [ 103.717069][ T8236] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.807000][ T8248] set_capacity_and_notify: 12 callbacks suppressed [ 103.809515][ T8248] loop5: detected capacity change from 0 to 512 [ 103.826630][ T8250] loop6: detected capacity change from 0 to 512 [ 103.832469][ T8250] EXT4-fs error (device loop6): ext4_get_journal_inode:5927: comm syz.6.706: inode #2147418112: comm syz.6.706: iget: illegal inode # [ 103.832509][ T8250] loop6: lost filesystem error report for type 5 error -117 [ 103.835449][ T8250] EXT4-fs (loop6): no journal found [ 103.835500][ T8250] EXT4-fs (loop6): can't get journal size [ 103.841614][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 103.841644][ C1] EXT4-fs (loop6): initial error at time 524392: ext4_get_journal_inode:5927 [ 103.841679][ C1] EXT4-fs (loop6): last error at time 524392: ext4_get_journal_inode:5927 [ 103.851138][ T8250] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 103.854315][ T8250] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 103.854795][ T8250] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.864300][ T8248] loop5: detected capacity change from 0 to 2048 [ 103.870631][ T8248] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 103.883289][ T5412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.922607][ T8236] EXT4-fs (loop8): shut down requested (0) [ 104.057958][ T6440] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.175628][ T8261] loop6: detected capacity change from 0 to 256 [ 104.755860][ T8283] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 104.758299][ T8283] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 105.127274][ T8295] loop5: detected capacity change from 0 to 512 [ 105.135780][ T8295] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.719: bad orphan inode 13 [ 105.135815][ T8295] loop5: lost filesystem error report for type 5 error -117 [ 105.138034][ T8295] ext4_test_bit(bit=12, block=4) = 1 [ 105.138066][ T8295] is_bad_inode(inode)=0 [ 105.138089][ T8295] NEXT_ORPHAN(inode)=0 [ 105.138101][ T8295] max_ino=32 [ 105.138113][ T8295] i_nlink=1 [ 105.138592][ T8295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.154442][ T8295] EXT4-fs warning (device loop5): dx_probe:813: inode #2: comm syz.5.719: Hash code is SIPHASH, but hash not in dirent [ 105.157648][ T8295] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.719: Corrupt directory, running e2fsck is recommended [ 105.160506][ T8295] EXT4-fs warning (device loop5): dx_probe:813: inode #2: comm syz.5.719: Hash code is SIPHASH, but hash not in dirent [ 105.163352][ T8295] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.719: Corrupt directory, running e2fsck is recommended [ 105.166045][ T8295] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.719: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 105.180585][ T5199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.206965][ T8305] openvswitch: netlink: Actions may not be safe on all matching packets [ 105.326790][ T8314] xt_hashlimit: size too large, truncated to 1048576 [ 105.504264][ T8327] loop5: detected capacity change from 0 to 4096 [ 105.505729][ T8327] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.505916][ T8327] EXT4-fs (loop5): Test dummy encryption mode enabled [ 105.506766][ T8327] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 105.506809][ T8327] System zones: 0-5 [ 105.516146][ T8327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.587218][ T8334] loop8: detected capacity change from 0 to 512 [ 105.589365][ T8334] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 105.595961][ T8334] EXT4-fs (loop8): 1 truncate cleaned up [ 105.596461][ T8334] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.622308][ T6440] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.651374][ T8338] netlink: 'syz.8.731': attribute type 3 has an invalid length. [ 105.654668][ T8338] __nla_validate_parse: 2 callbacks suppressed [ 105.654704][ T8338] netlink: 56 bytes leftover after parsing attributes in process `syz.8.731'. [ 105.654973][ T8338] netlink: 56 bytes leftover after parsing attributes in process `syz.8.731'. [ 105.658902][ T8327] EXT4-fs (loop5): shut down requested (0) [ 105.721765][ T8343] fuse: Bad value for 'fd' [ 105.749082][ T8348] sctp: [Deprecated]: syz.8.735 (pid 8348) Use of int in max_burst socket option deprecated. [ 105.749082][ T8348] Use struct sctp_assoc_value instead [ 105.776733][ T5199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.825662][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.5.736'. [ 105.930549][ T8355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.736'. [ 106.151311][ T8361] FAULT_INJECTION: forcing a failure. [ 106.151311][ T8361] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.155153][ T8361] CPU: 0 UID: 0 PID: 8361 Comm: syz.1.737 Not tainted syzkaller #0 PREEMPT [ 106.155174][ T8361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 106.155181][ T8361] Call trace: [ 106.155185][ T8361] show_stack+0x2c/0x3c (C) [ 106.155208][ T8361] __dump_stack+0x30/0x40 [ 106.155223][ T8361] dump_stack_lvl+0xd8/0x12c [ 106.155235][ T8361] dump_stack+0x1c/0x28 [ 106.155247][ T8361] should_fail_ex+0x41c/0x590 [ 106.155260][ T8361] should_fail_alloc_page+0xec/0x10c [ 106.155273][ T8361] prepare_alloc_pages+0x194/0x484 [ 106.155282][ T8361] __alloc_frozen_pages_noprof+0x180/0x648 [ 106.155291][ T8361] alloc_pages_mpol+0x1fc/0x3d0 [ 106.155300][ T8361] alloc_frozen_pages_noprof+0xc4/0x10c [ 106.155309][ T8361] ___kmalloc_large_node+0x74/0x158 [ 106.155318][ T8361] __kmalloc_large_noprof+0x28/0x84 [ 106.155326][ T8361] uhid_char_open+0x30/0x214 [ 106.155339][ T8361] misc_open+0x2dc/0x338 [ 106.155351][ T8361] chrdev_open+0x398/0x3e8 [ 106.155362][ T8361] do_dentry_open+0x5c4/0xfc0 [ 106.155373][ T8361] vfs_open+0x44/0x2dc [ 106.155384][ T8361] path_openat+0x1084/0x18f4 [ 106.155394][ T8361] do_file_open+0x1c8/0x2e8 [ 106.155404][ T8361] do_sys_openat2+0x114/0x1e8 [ 106.155415][ T8361] do_sys_open+0xb0/0xe0 [ 106.155426][ T8361] __arm64_sys_openat+0xa8/0xc4 [ 106.155437][ T8361] invoke_syscall+0x98/0x244 [ 106.155449][ T8361] el0_svc_common+0xec/0x23c [ 106.155461][ T8361] do_el0_svc+0x4c/0x5c [ 106.155472][ T8361] el0_svc+0x64/0x260 [ 106.155483][ T8361] el0t_64_sync_handler+0x44/0x104 [ 106.155493][ T8361] el0t_64_sync+0x198/0x19c [ 106.608419][ T8375] loop7: detected capacity change from 0 to 256 [ 106.833028][ T8375] FAT-fs (loop7): unable to read block(809802661888) for building NFS inode [ 106.967693][ T8384] RGB/YUV Input: ================= START STATUS ================= [ 106.967723][ T8384] RGB/YUV Input: Test Pattern: 75% Colorbar [ 106.967768][ T8384] RGB/YUV Input: Show Information: All [ 106.967793][ T8384] RGB/YUV Input: Vertical Flip: false [ 106.967817][ T8384] RGB/YUV Input: Horizontal Flip: false [ 106.967840][ T8384] RGB/YUV Input: Brightness: 128 [ 106.967861][ T8384] RGB/YUV Input: Contrast: 128 [ 106.967881][ T8384] RGB/YUV Input: Hue: 0 [ 106.967902][ T8384] RGB/YUV Input: Saturation: 128 [ 106.967922][ T8384] RGB/YUV Input: Pixel Rate: 160000000 [ 106.967943][ T8384] RGB/YUV Input: Horizontal Blanking: 800 [ 106.967963][ T8384] RGB/YUV Input: Vertical Blanking: 3223 [ 106.967984][ T8384] RGB/YUV Input: ================== END STATUS ================== [ 106.985759][ T8382] sctp: [Deprecated]: syz.5.745 (pid 8382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.985759][ T8382] Use struct sctp_sack_info instead [ 106.991003][ T8386] netlink: 40 bytes leftover after parsing attributes in process `syz.8.747'. [ 107.040308][ T8389] loop7: detected capacity change from 0 to 4096 [ 107.047362][ T8389] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.047397][ T8389] EXT4-fs (loop7): Test dummy encryption mode enabled [ 107.054201][ T8389] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 107.054258][ T8389] System zones: 0-5 [ 107.057085][ T8393] sock: sock_timestamping_bind_phc: sock not bind to device [ 107.063449][ T8389] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.194351][ T8401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 107.204961][ T8401] loop5: detected capacity change from 0 to 2048 [ 107.237970][ T8401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.267017][ T5199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.326961][ T8408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.344510][ T8389] EXT4-fs (loop7): shut down requested (0) [ 107.356610][ T8415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.756'. [ 107.822332][ T5942] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.827636][ T7803] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 107.827673][ T7803] Quota error (device loop7): write_blk: dquota write failed [ 107.827684][ T7803] Quota error (device loop7): free_dqentry: Can't write quota data block 5 [ 108.022083][ T8430] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.097611][ T5942] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.126307][ T8442] netlink: 116 bytes leftover after parsing attributes in process `syz.8.761'. [ 108.138691][ T8443] EXT4-fs: old and new quota format mixing [ 108.206017][ T9] Process accounting resumed [ 108.213647][ T8453] EXT4-fs: Ignoring removed orlov option [ 108.265123][ T8453] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.414620][ T6440] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.418566][ T8463] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.517055][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.769'. [ 108.815154][ T8472] nvme_fabrics: missing parameter 'traddr=%s' [ 108.923024][ T8481] set_capacity_and_notify: 5 callbacks suppressed [ 108.923234][ T8481] loop1: detected capacity change from 0 to 256 [ 108.937229][ T8481] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 108.937261][ T8481] FAT-fs (loop1): Filesystem has been set read-only [ 108.944578][ T8483] loop7: detected capacity change from 0 to 128 [ 108.976991][ T8483] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.004128][ T8486] netlink: 36 bytes leftover after parsing attributes in process `syz.1.776'. [ 109.006042][ T8486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.776'. [ 109.095263][ T8498] ip_tables: iptables: counters copy to user failed while replacing table [ 109.152343][ T8498] loop1: detected capacity change from 0 to 8 [ 109.162893][ T8498] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 109.162913][ T8498] unable to read xattr id index table [ 109.325812][ T8510] loop5: detected capacity change from 0 to 8192 [ 109.327664][ T8510] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.416089][ T8519] loop8: detected capacity change from 0 to 1024 [ 109.433125][ T8519] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.602104][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.604019][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.902941][ T5942] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.937724][ T8529] loop6: detected capacity change from 0 to 1024 [ 109.943514][ T8529] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 109.960235][ T8529] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #3: block 1: comm syz.6.787: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.960273][ T8529] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 109.964772][ T8529] Quota error (device loop6): write_blk: dquota write failed [ 109.964809][ T8529] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 109.964855][ T8529] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.787: Failed to acquire dquot type 0 [ 109.964874][ T8529] loop6: lost filesystem error report for type 5 error -117 [ 109.970331][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 109.970345][ C0] EXT4-fs (loop6): initial error at time 524398: ext4_map_blocks:832: inode 3: block 1 [ 109.970367][ C0] EXT4-fs (loop6): last error at time 524398: ext4_acquire_dquot:7069 [ 109.983985][ T8529] EXT4-fs error (device loop6): ext4_free_blocks:6719: comm syz.6.787: Freeing blocks not in datazone - block = 0, count = 4096 [ 109.988056][ T8529] loop6: lost filesystem error report for type 5 error -117 [ 109.994425][ T8529] EXT4-fs error (device loop6): ext4_read_inode_bitmap:141: comm syz.6.787: Invalid inode bitmap blk 0 in block_group 0 [ 109.999206][ T8529] loop6: lost filesystem error report for type 5 error -117 [ 110.000384][ T8529] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem [ 110.003651][ T8529] loop6: lost filesystem error report for type 5 error -117 [ 110.004028][ T8529] EXT4-fs (loop6): 1 orphan inode deleted [ 110.007276][ T8529] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.012214][ T7797] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 110.020672][ T7797] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 110.023269][ T7797] EXT4-fs error (device loop6): ext4_release_dquot:7105: comm kworker/u8:37: Failed to release dquot type 0 [ 110.051317][ T8535] loop7: detected capacity change from 0 to 128 [ 110.055926][ T8535] EXT4-fs: Mount option(s) incompatible with ext2 [ 110.076146][ T8530] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm syz.6.787: Invalid block bitmap block 0 in block_group 0 [ 110.441946][ T8543] loop5: detected capacity change from 0 to 256 [ 110.444070][ T8544] loop1: detected capacity change from 0 to 256 [ 110.444453][ T8544] vfat: Unknown parameter 'nnonumtail' [ 110.449852][ T8543] FAT-fs (loop5): bogus sectors per cluster 0 [ 110.449890][ T8543] FAT-fs (loop5): Can't find a valid FAT filesystem [ 110.531772][ T8547] loop1: detected capacity change from 0 to 1024 [ 110.551744][ T8547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.627642][ T8552] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 110.636626][ T8553] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 110.806070][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.840861][ T5412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.654782][ T8565] ext4: Unknown parameter 'measure' [ 111.985502][ T8574] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.987189][ T8574] EXT4-fs (loop7): Test dummy encryption mode enabled [ 111.992135][ T8574] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 111.994972][ T8574] System zones: 0-5 [ 111.997180][ T8574] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.159463][ T8595] Injecting memory failure for pfn 0x15df0a at process virtual address 0x2050a000 [ 112.176046][ T8595] Memory failure: 0x15df0a: Sending SIGBUS to syz.5.803:8595 due to hardware memory corruption [ 112.176940][ T8595] Memory failure: 0x15df0a: recovery action for dirty LRU page: Recovered [ 112.183706][ T8574] EXT4-fs (loop7): shut down requested (0) [ 112.332652][ T5942] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.334494][ T7807] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 112.334507][ T7807] Quota error (device loop7): write_blk: dquota write failed [ 112.334515][ T7807] Quota error (device loop7): free_dqentry: Can't write quota data block 5 [ 112.766270][ T8604] __nla_validate_parse: 1 callbacks suppressed [ 112.766303][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.7.807'. [ 112.766351][ T8604] bridge_slave_1: left allmulticast mode [ 112.766372][ T8604] bridge_slave_1: left promiscuous mode [ 112.766682][ T8604] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.771246][ T8604] bridge_slave_0: left allmulticast mode [ 112.771262][ T8604] bridge_slave_0: left promiscuous mode [ 112.771352][ T8604] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.831107][ T8579] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.835041][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.7.808'. [ 113.434113][ T8623] ext4: Unknown parameter 'measure' [ 113.792817][ T6440] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.110077][ T8632] set_capacity_and_notify: 5 callbacks suppressed [ 114.113084][ T8632] loop6: detected capacity change from 0 to 128 [ 114.206075][ T8632] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 114.527909][ T8649] FAULT_INJECTION: forcing a failure. [ 114.527909][ T8649] name fail_futex, interval 1, probability 0, space 0, times 1 [ 114.527949][ T8649] CPU: 0 UID: 0 PID: 8649 Comm: syz.8.818 Not tainted syzkaller #0 PREEMPT [ 114.527961][ T8649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 114.527968][ T8649] Call trace: [ 114.527971][ T8649] show_stack+0x2c/0x3c (C) [ 114.527989][ T8649] __dump_stack+0x30/0x40 [ 114.528002][ T8649] dump_stack_lvl+0xd8/0x12c [ 114.528014][ T8649] dump_stack+0x1c/0x28 [ 114.528025][ T8649] should_fail_ex+0x41c/0x590 [ 114.528038][ T8649] should_fail+0x14/0x24 [ 114.528049][ T8649] get_futex_key+0x1ec/0x12b0 [ 114.528060][ T8649] futex_wake_op+0x12c/0xfe8 [ 114.528072][ T8649] do_futex+0x200/0x378 [ 114.528082][ T8649] __arm64_sys_futex+0x2e4/0x418 [ 114.528093][ T8649] invoke_syscall+0x98/0x244 [ 114.528105][ T8649] el0_svc_common+0xec/0x23c [ 114.528116][ T8649] do_el0_svc+0x4c/0x5c [ 114.528128][ T8649] el0_svc+0x64/0x260 [ 114.528139][ T8649] el0t_64_sync_handler+0x44/0x104 [ 114.528148][ T8649] el0t_64_sync+0x198/0x19c [ 114.554250][ T8650] loop5: detected capacity change from 0 to 2048 [ 114.564673][ T8652] netlink: 20 bytes leftover after parsing attributes in process `syz.5.819'. [ 114.569933][ T8654] loop8: detected capacity change from 0 to 512 [ 114.573093][ T8654] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.574631][ T8654] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 114.583436][ T8650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.595553][ T8654] block device autoloading is deprecated and will be removed. [ 114.595626][ T8654] EXT4-fs (loop8): external journal has bad superblock [ 114.609883][ T8654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.612792][ T8654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.617500][ T5199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.650951][ T8659] vxcan3: entered promiscuous mode [ 114.652127][ T8659] vxcan3: entered allmulticast mode [ 114.653875][ T8659] team0: Device vxcan3 is of different type [ 114.690244][ T8659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.821'. [ 114.722576][ T8661] loop1: detected capacity change from 0 to 1024 [ 114.741875][ T8661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.743127][ T4716] Bluetooth: hci3: link tx timeout [ 114.743195][ T4716] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.746238][ T5412] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.746855][ T4709] Bluetooth: hci3: link tx timeout [ 114.746866][ T4709] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.762040][ T4709] Bluetooth: hci3: link tx timeout [ 114.763231][ T4709] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.766545][ T4709] Bluetooth: hci3: link tx timeout [ 114.767497][ T4709] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.775428][ T8663] [ 114.775867][ T8663] ====================================================== [ 114.777139][ T8663] WARNING: possible circular locking dependency detected [ 114.778430][ T8663] syzkaller #0 Not tainted [ 114.779239][ T8663] ------------------------------------------------------ [ 114.780427][ T8663] syz.5.823/8663 is trying to acquire lock: [ 114.781453][ T8663] ffff80008a06cbe0 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_close+0x44/0x1cc [ 114.783100][ T8663] [ 114.783100][ T8663] but task is already holding lock: [ 114.784407][ T8663] ffff0000c8a0b260 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: __rfcomm_sock_close+0xe0/0x330 [ 114.786454][ T8663] [ 114.786454][ T8663] which lock already depends on the new lock. [ 114.786454][ T8663] [ 114.788266][ T8663] [ 114.788266][ T8663] the existing dependency chain (in reverse order) is: [ 114.789852][ T8663] [ 114.789852][ T8663] -> #1 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 114.791541][ T8663] lock_sock_nested+0x58/0x110 [ 114.792511][ T8663] rfcomm_connect_ind+0x498/0x920 [ 114.793450][ T8663] rfcomm_run+0x1f08/0x4bac [ 114.794315][ T8663] kthread+0x304/0x3d4 [ 114.795263][ T8663] ret_from_fork+0x10/0x20 [ 114.796044][ T8663] [ 114.796044][ T8663] -> #0 (rfcomm_mutex){+.+.}-{4:4}: [ 114.797260][ T8663] __lock_acquire+0x1600/0x2a6c [ 114.798185][ T8663] lock_acquire+0x150/0x370 [ 114.799053][ T8663] __mutex_lock+0x164/0xf14 [ 114.799894][ T8663] mutex_lock_nested+0x24/0x30 [ 114.800777][ T8663] rfcomm_dlc_close+0x44/0x1cc [ 114.801660][ T8663] __rfcomm_sock_close+0x1c0/0x330 [ 114.802607][ T8663] __rfcomm_sock_close+0xe8/0x330 [ 114.803609][ T8663] rfcomm_sock_shutdown+0xa8/0x23c [ 114.804610][ T8663] rfcomm_sock_release+0x58/0x160 [ 114.805579][ T8663] __sock_release+0xa0/0x1d4 [ 114.806446][ T8663] sock_close+0x24/0x38 [ 114.807230][ T8663] __fput+0x338/0x74c [ 114.807998][ T8663] ____fput+0x20/0x30 [ 114.808797][ T8663] task_work_run+0x1cc/0x25c [ 114.809696][ T8663] do_exit+0x58c/0x1a74 [ 114.810501][ T8663] do_group_exit+0x198/0x238 [ 114.811349][ T8663] get_signal+0xfb0/0x1094 [ 114.812218][ T8663] arch_do_signal_or_restart+0x288/0x444c [ 114.813290][ T8663] exit_to_user_mode_loop+0x70/0x17c [ 114.814219][ T8663] el0_svc+0x18c/0x260 [ 114.814970][ T8663] el0t_64_sync_handler+0x44/0x104 [ 114.815902][ T8663] el0t_64_sync+0x198/0x19c [ 114.816751][ T8663] [ 114.816751][ T8663] other info that might help us debug this: [ 114.816751][ T8663] [ 114.818473][ T8663] Possible unsafe locking scenario: [ 114.818473][ T8663] [ 114.819721][ T8663] CPU0 CPU1 [ 114.820632][ T8663] ---- ---- [ 114.821574][ T8663] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 114.822688][ T8663] lock(rfcomm_mutex); [ 114.823807][ T8663] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 114.825256][ T8663] lock(rfcomm_mutex); [ 114.825945][ T8663] [ 114.825945][ T8663] *** DEADLOCK *** [ 114.825945][ T8663] [ 114.827306][ T8663] locks held by syz.5.823/8663: 2, last CPU#1: [ 114.828361][ T8663] #0: ffff0000d09bb040 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4 [ 114.830243][ T8663] #1: ffff0000c8a0b260 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: __rfcomm_sock_close+0xe0/0x330 [ 114.832442][ T8663] [ 114.832442][ T8663] stack backtrace: [ 114.833559][ T8663] CPU: 1 UID: 0 PID: 8663 Comm: syz.5.823 Not tainted syzkaller #0 PREEMPT [ 114.835089][ T8663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 114.836768][ T8663] Call trace: [ 114.837304][ T8663] show_stack+0x2c/0x3c (C) [ 114.838097][ T8663] __dump_stack+0x30/0x40 [ 114.838886][ T8663] dump_stack_lvl+0xd8/0x12c [ 114.839757][ T8663] dump_stack+0x1c/0x28 [ 114.840533][ T8663] print_circular_bug+0x328/0x330 [ 114.841472][ T8663] check_noncircular+0x158/0x174 [ 114.842340][ T8663] __lock_acquire+0x1600/0x2a6c [ 114.843232][ T8663] lock_acquire+0x150/0x370 [ 114.844041][ T8663] __mutex_lock+0x164/0xf14 [ 114.844850][ T8663] mutex_lock_nested+0x24/0x30 [ 114.845680][ T8663] rfcomm_dlc_close+0x44/0x1cc [ 114.846519][ T8663] __rfcomm_sock_close+0x1c0/0x330 [ 114.847467][ T8663] __rfcomm_sock_close+0xe8/0x330 [ 114.848354][ T8663] rfcomm_sock_shutdown+0xa8/0x23c [ 114.849236][ T8663] rfcomm_sock_release+0x58/0x160 [ 114.850119][ T8663] __sock_release+0xa0/0x1d4 [ 114.850960][ T8663] sock_close+0x24/0x38 [ 114.851717][ T8663] __fput+0x338/0x74c [ 114.852447][ T8663] ____fput+0x20/0x30 [ 114.853153][ T8663] task_work_run+0x1cc/0x25c [ 114.853958][ T8663] do_exit+0x58c/0x1a74 [ 114.854664][ T8663] do_group_exit+0x198/0x238 [ 114.855457][ T8663] get_signal+0xfb0/0x1094 [ 114.856236][ T8663] arch_do_signal_or_restart+0x288/0x444c [ 114.857269][ T8663] exit_to_user_mode_loop+0x70/0x17c [ 114.858188][ T8663] el0_svc+0x18c/0x260 [ 114.858906][ T8663] el0t_64_sync_handler+0x44/0x104 [ 114.859747][ T8663] el0t_64_sync+0x198/0x19c [ 115.571707][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.808110][ T4709] Bluetooth: hci3: command 0x0406 tx timeout