last executing test programs: 1m9.000787078s ago: executing program 32 (id=46): fallocate(0xffffffffffffffff, 0x0, 0x2, 0x8ffff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x19) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x3}}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x4, 0x0, 0x3, {0xa, 0x4e24, 0xf, @dev={0xfe, 0x80, '\x00', 0x31}, 0x5}}}, 0x3a) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$OCFS2_IOC_GROUP_ADD(r3, 0x40186f02, &(0x7f0000000080)={0xe, 0x1, 0xf2c, 0x4}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0xffffffff, 0x0, 0x0, 0x0, 0x2005, 0x9}, 0x20) getsockopt(r3, 0x111, 0x3, 0x0, &(0x7f0000000240)=0xff12) 1m3.866127849s ago: executing program 33 (id=92): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811bfe1", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100ffffe0bf060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000100000056000000060000002c93000000000000c4030000000000008500000076000000b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m3.04292079s ago: executing program 1 (id=107): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x51) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x1, @pix={0x280, 0x1e0, 0x32315241, 0x9}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x158) r1 = syz_mount_image$fuse(0x0, &(0x7f0000000280)='./bus\x00', 0x1000810, 0x0, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'geneve0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='4', 0x1) setsockopt$inet6_int(r3, 0x29, 0x1e, &(0x7f0000000480)=0x80, 0x4) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x24008000) ioctl$int_in(r1, 0x0, &(0x7f0000000180)=0xffffffffffffcf78) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(0x0, &(0x7f0000000680)='./bus\x00', 0x20006, 0x0, 0x25, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 1m2.783841483s ago: executing program 1 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x80008a00, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000001c0), 0x43) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/80, 0x50}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="b8", 0x1}], 0x1}, 0x4000001) write$cgroup_subtree(r2, &(0x7f0000000480)=ANY=[], 0x101d0) sendmsg$kcm(r2, &(0x7f00000004c0)={&(0x7f0000000500)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x1458}, 0x20048811) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)=""/102, 0x66}], 0x1}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0), 0x7, 0x578, &(0x7f00000006c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="003f7118c0221e", 0x7, 0xc0400c0, &(0x7f0000000100)={0xa, 0x4e24, 0xffffffff, @empty, 0x878}, 0x1c) sendfile(r3, r3, 0x0, 0x1000000000007) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) syz_clone(0x80008a00, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) socket$kcm(0x1e, 0x4, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x43) (async) socket$kcm(0x1e, 0x4, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000001c0), 0x43) (async) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/80, 0x50}], 0x1}, 0x0) (async) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="b8", 0x1}], 0x1}, 0x4000001) (async) write$cgroup_subtree(r2, &(0x7f0000000480)=ANY=[], 0x101d0) (async) sendmsg$kcm(r2, &(0x7f00000004c0)={&(0x7f0000000500)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x1458}, 0x20048811) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) recvmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)=""/102, 0x66}], 0x1}, 0x40) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x2, 0x0) (async) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x8) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0), 0x7, 0x578, &(0x7f00000006c0)="$eJzs3c9rFFccAPDvbBKN0dYIIm0PJeChFuvGJP1hoaA9llYqtHe7JGOQbFzJbsSkgnqol16KFEqpUPoH9N6j9B/oXyG0ghQJ7aGXlNnMxtVk83Nt1s7nA6Pvzczmzds337ff2dllAyiskeyfUsSrEfFNEnG4bVt/5BtHVvZbenxjMluSWF7+7M8kknxda/8k//9gXnklIn79KuJkaW279YXFmUq1ms7l9dHG7NXR+sLiqcuzlel0Or0yPjFx5p2J8fffe7drfX3zwt/ff3r/ozNfH1/67ueHR+4mcS4O5dva+7ELt9orIzGSPycDce6ZHce60FgvSfb6ANiRvjzOByKbAw5HXx71wP/fzYhYBgoqEf9QUK08oHVt36Xr4BfGow9XLoDW9r9/5b2RGGxeGw0tJU9dGWXXu8NdaD9r45c/7t3NltjkfYibXWgPoOXW7Yg43d+/dv5L8vlv50433zze2LNtFO31B/bS/Sz/eWu9/Ke0mv/EOvnPwXVidyc2j//Swy4001GW/32wbv67OnUN9+W1l5o530By6XI1PR0RL0fEiRjYn9U3up9zZunBcqdt7flftmTtt3LB/Dge9u9/+jFTlUZlN31u9+h2xGtP8t8k1sz/g81cd2gpSdrHP3s+LmyxjWPpvdc7bdu8/+26nwEv/xTxxrrj/+SOVrLx/cnR5vkw2jor1vrrzrHfOrW/vf53Xzb+Qxv3fzhpv19b334bPw7+k3batsXzf7D9Mdn5vy/5vFnel6+7Xmk05sYi9iWfrF0//uSxrXpr/6z/J45vMP+dWz3/n5r/DkTEF1vs/52jdzru2gvjP7Wt8d9+4cHHX/7Qqf2tjf/bzdKJfM1W5r+tHuBunjsAAAAAAADoNaWIOBRJqbxaLpXK5ZXPdxyNoVK1Vm+cvFSbvzIVze/KDsdAqXWn+3Db5yHG8s/Dturjz9QnIuJIRHzbd6BZL0/WqlN73XkAAAAAAAAAAAAAAAAAAADoEQc7fP8/83vfXh8d8Nz5yW8ork3jvxu/9AT0JK//UFziH4pL/ENxiX8oLvEPxSX+objEPxSX+AcAAAAAAAAAAAAAAAAAAAAAAAAAAICuunD+fLYsLz2+MZnVp64tzM/Urp2aSusz5dn5yfJkbe5qebpWm66m5cna7GZ/r1qrXR0bj/nro4203hitLyxenK3NX2lcvDxbmU4vpgP/Sa8AAAAAAAAAAAAAAAAAAADgxVJfWJypVKvpnELHwtnoicPYcSHZbJTP5ifDjpro3/sOKjyHwh5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//wM3NBA=") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) (async) sendto$inet6(r3, &(0x7f00000000c0)="003f7118c0221e", 0x7, 0xc0400c0, &(0x7f0000000100)={0xa, 0x4e24, 0xffffffff, @empty, 0x878}, 0x1c) (async) sendfile(r3, r3, 0x0, 0x1000000000007) (async) 1m2.480129016s ago: executing program 1 (id=113): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811003e", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100ffffe0bf060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000100000056000000060000002c93000000000000c4030000000000008500000076000000b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m2.439859033s ago: executing program 1 (id=118): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000000)={[{@nodioread_nolock}, {@oldalloc}, {@jqfmt_vfsv0}]}, 0xfd, 0x571, &(0x7f0000000640)="$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") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4(r1, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000d40)={0x0, 0x0, 0x20}, 0xc) r2 = socket$inet6(0xa, 0x6, 0x4749) prlimit64(0x0, 0xe, &(0x7f0000000e00)={0x40, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f80)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001000)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000001040)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000007c00)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000007c80), 0x651, 0x0) recvmmsg(r4, &(0x7f0000007cc0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000007f00)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000007f40)=0x6) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/kernel/hostname\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') write$cgroup_devices(r7, &(0x7f0000000180)={'a', ' *:* ', 'rm\x00'}, 0x9) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000007f80)={0x1, 0x7, 0x3}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000008040), 0x35c, 0x0) unshare(0x64000600) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000bc0)={0x0, 0x0, "6339ead618e597cb1072897a52c30fec"}) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000010c0)='./file1\x00', 0x200000, &(0x7f0000001100), 0x1, 0x4dd, &(0x7f0000001140)="$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") openat(0xffffffffffffff9c, 0x0, 0xd2942, 0x4) 1m1.535062983s ago: executing program 1 (id=123): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffff7f7b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400002d000000850000001500000085000000a000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0xc, &(0x7f00000004c0), 0x2, 0x55a, &(0x7f0000000500)="$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") ioprio_set$pid(0x1, 0x0, 0x4007) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', 0x10042, 0x83) sendfile(r3, r3, 0x0, 0x1000000000007) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m0.670806297s ago: executing program 1 (id=132): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x8) recvmmsg(r2, &(0x7f0000003240)=[{{&(0x7f0000000040)=@pppol2tp, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f0000000580)=""/100, 0x64}, {&(0x7f0000000600)=""/91, 0x5b}, {&(0x7f0000001dc0)=""/4096, 0x1000}], 0x4, &(0x7f0000002e00)=""/121, 0x79}, 0x4}, {{&(0x7f0000002e80)=@phonet, 0x80, &(0x7f0000003140)=[{&(0x7f0000002f00)=""/152, 0x98}, {&(0x7f0000002fc0)=""/87, 0x57}, {&(0x7f0000003040)=""/230, 0xe6}], 0x3, &(0x7f0000003180)=""/160, 0xa0}}], 0x2, 0x2100, &(0x7f00000032c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) pwrite64(r4, &(0x7f0000000680)="e869aae94338a986023be496f3cd724afc8367eca983b8dac39f68871f762da4c7227b3e69ba107d8c72a434c9b480eb24dd6678c7701d02bee58b202c4843114b58d7a8742ce374ea5e22c2481b983577e775d0be97bc2057eff364a65aa2cef888edd153c5f729f4451cf27e6f3a657312337a4a9581874c917293773321b24a3c698a1e489d74e1d1b0a376e690530818808d9278305c28021658d9132f97b89e87b0f0d9a8ebed6df58b6da77d646ce3bbddbb08263da05ca882452e2cad256d9ac169da22aeb8abfae3930123230f85f536da5bebe9edb2e340d2882923a2daa42a0f3c534d1c4b", 0xea, 0x1) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m0.564157438s ago: executing program 34 (id=132): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x8) recvmmsg(r2, &(0x7f0000003240)=[{{&(0x7f0000000040)=@pppol2tp, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f0000000580)=""/100, 0x64}, {&(0x7f0000000600)=""/91, 0x5b}, {&(0x7f0000001dc0)=""/4096, 0x1000}], 0x4, &(0x7f0000002e00)=""/121, 0x79}, 0x4}, {{&(0x7f0000002e80)=@phonet, 0x80, &(0x7f0000003140)=[{&(0x7f0000002f00)=""/152, 0x98}, {&(0x7f0000002fc0)=""/87, 0x57}, {&(0x7f0000003040)=""/230, 0xe6}], 0x3, &(0x7f0000003180)=""/160, 0xa0}}], 0x2, 0x2100, &(0x7f00000032c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) pwrite64(r4, &(0x7f0000000680)="e869aae94338a986023be496f3cd724afc8367eca983b8dac39f68871f762da4c7227b3e69ba107d8c72a434c9b480eb24dd6678c7701d02bee58b202c4843114b58d7a8742ce374ea5e22c2481b983577e775d0be97bc2057eff364a65aa2cef888edd153c5f729f4451cf27e6f3a657312337a4a9581874c917293773321b24a3c698a1e489d74e1d1b0a376e690530818808d9278305c28021658d9132f97b89e87b0f0d9a8ebed6df58b6da77d646ce3bbddbb08263da05ca882452e2cad256d9ac169da22aeb8abfae3930123230f85f536da5bebe9edb2e340d2882923a2daa42a0f3c534d1c4b", 0xea, 0x1) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 50.796091498s ago: executing program 6 (id=283): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000540)='mode\x00', &(0x7f0000000580)='\x9eV\xe1\xfb\xc6\x93:UYm~\xa6\xd0\xeb\xe4\xfe\x0e\x95\xca\xb3\xd2V\x1b)\x99\x83(8\x17\xc31\x86\"\xd2\xf5lm\x0fd\xee\xa2B\x8f\xdf\x05\xd0^\x05\x18\x13\xf5\xb5\x9f\xa9\xfc\xec\x7f\b\x94n\xe6\xd0\xe5\xd3\x13clsZTDv\x89\xe0\x1dP\xa8\xa7\x02$\x96\xf1*\x1e\xe1\xb6\xbfr\xb3\xcdq\xeb@(\x89\x86\x82IX\xeb@\xa9b\xbb\x99G\x1a\xf0\x98O\x00\x94\xcb\x16\xa5\x00\x00\x00', 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000040)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000180)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000001c0)={0x0, "3efe72f3bf818ea09f4cf95d73c3ce3e8de711a7f3de0fc1cb8a24626d1d44910f2236bf9bae103e22391ea3cd172c2ac38179be234f63df3e6f5019535184ef5c39d04cc54c7bdd661cc2ff0d793bbc8433dbbb5ced195489d9389a1b55ef1389ec4f5bdceca542cc3fa739f22d94897c6b9abd311357d25e8ef7df7c43556d8f1107b003a9f87ddfc2dd335207b494877e48ec793e0995c184a0b644a16b065b3f6a987cc6bd06b7a618126a30b9e8aaa05814ca622407b092f3636481d7ab77487609081fb930df46404c837ff3e85d0cb475baf73af4f0702d828e5da37668e8d1396493ae1f100aa9c1fad6965352f36c8c09ad29fc695a266e7b0fd95de6688a99f6dea33f7432f2079339a45bb16c89d66fa2d81feebd0c42e53d9d5abfbacc40912bece541ebb43fc5e30e5724a394a841c9bfa09f08d9cd01d614546e650605921d4c55ad74479948dd4be6086d8f5a0f800461eb7633014de028d6492792cb27ad847037ad678f79e83232f138ab2f0ed350b9ab476d9c9ee41b5c4a96b28cc572f454c4c232aab45f1bc6b0c8caa19fc8c98e598c7891c9fb095ec923afd10c6306f0834d9da98892e9fd24186f446c1f87fced883ab43bcfbe54fc37d70459c049d87030494ebad22dc68cfaf694438ebc70e84a28f63c3b8905effdc87d477c1ddbab9ff5beed93a4d17819344148be913f949635156caf1e4b"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000440)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r6, 0x0, &(0x7f00000004c0)="93929c", 0x3, 0x1, 0x1}) io_uring_enter(r2, 0x1, 0x1, 0x5, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x4561) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x80045518, 0xffffffffffffffff) 50.79545343s ago: executing program 6 (id=284): syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff00604f40003820000000000000000100000100000001000100000100007ec5bc920d0b134f0005dc0000657468300000000000000000000000000db49c3c32cbbe119b89efda10b111cae3301fcecf50a3d7f526f149dba3af1d70a1c920d39069a51b658f70d169b2585ee7656a5e97669d972c626ff562c64d65d47c641624a676bef951438000000000000025c1cc23264ebc5dd5"], 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x210000, &(0x7f0000000300)={[{@block_validity}, {@errors_continue}, {@acl}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@grpid}, {@stripe={'stripe', 0x3d, 0xd4b2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f00000003c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x210000, &(0x7f0000000300)={[{@block_validity}, {@errors_continue}, {@acl}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@grpid}, {@stripe={'stripe', 0x3d, 0xd4b2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x442842, 0x14a) (async) openat(0xffffffffffffff9c, 0x0, 0x442842, 0x14a) setns(0xc9, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000940), 0x2) (async) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000940), 0x2) r1 = memfd_create(&(0x7f0000000980)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000b40)={r1, 0x1, 0x0, 0x2000}) (async) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000b40)={r1, 0x1, 0x0, 0x2000}) getpid() (async) getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x7, 0xff}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000bc0)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000bc0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000c00)=0x7) (async) sched_setscheduler(r3, 0x1, &(0x7f0000000c00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000c80)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000d00), 0x651, 0x0) recvmmsg(r4, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000080)=""/204, 0xcc}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/206, 0xce}, {&(0x7f0000000180)=""/175, 0xaf}, {&(0x7f0000002140)=""/248, 0xf8}, {&(0x7f0000002240)=""/83, 0x53}, {&(0x7f0000002080)=""/93, 0x5d}, {&(0x7f0000002340)=""/86, 0x56}, {&(0x7f00000023c0)=""/103, 0x67}, {&(0x7f0000002440)=""/31, 0x1f}], 0xa, &(0x7f0000000d00)=""/41, 0x29}, 0x1}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d80)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000d80)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000ec0)={'wlan1\x00', &(0x7f0000000f00)=@ethtool_stats}) sched_setscheduler(0x0, 0x2, &(0x7f0000000f40)=0x3) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, 0x0, 0x0) 49.883318519s ago: executing program 6 (id=299): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet(0xa, 0x801, 0x84) ftruncate(r0, 0x2) connect$inet(r3, &(0x7f0000000a80)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x6) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000ac0)={0x2, 0xff6}, &(0x7f0000000b00)=0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00g\x00\b\x00', @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x129942, 0x18) syz_mount_image$ext4(&(0x7f0000000480)='ext2\x00', &(0x7f00000004c0)='./file1\x00', 0x5080, &(0x7f0000000500), 0x1, 0x4d6, &(0x7f0000000540)="$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") getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000b40)={{{@in=@empty, @in6=@local}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f0000000c40)=0xe8) unlinkat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x0) ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x101000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_SET_GEOMETRY(0xffffffffffffffff, 0xc138fd0f, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x0, 0x0, 0x8000, 0x0, 0x0, @by_dev={r5}, {0x3d, 0x20, 0x84, 0x20, 0x5, 0x20, 0x400000000e48}}) 49.788847007s ago: executing program 6 (id=303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket(0x2b, 0x80801, 0x1) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x11e, 0x2, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000bc0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xffff0000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x10888) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$squashfs(&(0x7f0000000c00), &(0x7f0000000c40)='./file0\x00', 0x8000, &(0x7f0000000c80)=ANY=[], 0xfd, 0x1e6, &(0x7f0000000cc0)="$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") io_setup(0x8, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), 0x0, &(0x7f0000000f80)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}}) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa12}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000001100)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="b0000000000101010000000000000000010000008c000e802c00018014000300fe8000000000000000000000000000bb14000400fc00000000002000000000000000000114000180080001006401010108000200ac1e010106000340000100002c00018014000300fe8000000000000000000000000000aa14000400fe8000000000003d103e3636ec33361b14000180080001006401010208000200e000000106001240000100000800034000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x44040}, 0x4040000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000064f36ece811179cae57f73a485d6b48586968a39e92098831ca589451b95ebc19ac0f9335e78eee4bbbb3a884631bc805b97ed34cd1a2ec943f2b5a58f5caea4e16949e1c6217b0274feb1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28, @ANYRES16=0x0, @ANYRESOCT=r3], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_emit_ethernet(0x72, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x64, 0x66, 0x0, 0x8, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x0, 0x0, @private=0xa010101, {0x12, 0x4, 0x1, 0x8, 0x6, 0x67, 0xffff, 0x6, 0x6, 0x2, @broadcast, @local, {[@ssrr={0x89, 0x7, 0x90, [@broadcast]}, @lsrr={0x83, 0x7, 0x98, [@broadcast]}, @timestamp={0x44, 0x8, 0x3a, 0x0, 0x9, [0x1000]}, @rr={0x7, 0x13, 0xfa, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x5, 0x0}, @private=0xa010100, @loopback]}, @ssrr={0x89, 0xb, 0xb, [@rand_addr=0x64010101, @broadcast]}]}}}}}}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x25, &(0x7f0000000800)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5f4b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], &(0x7f0000000940)='syzkaller\x00', 0x9b, 0x4c, &(0x7f0000000980)=""/76, 0x41100, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a00)=[r8, 0xffffffffffffffff, 0xffffffffffffffff, r7, r9, r7, r7], &(0x7f0000000a40)=[{0x3, 0x2, 0x6, 0x6}, {0x4, 0x2, 0xb, 0x9}, {0x2, 0x2, 0xe}, {0x0, 0x5, 0x4, 0x9}], 0x10, 0xff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000018000000000000000100000018110000", @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="00000000000400000000000000000b724608f0ff76000000bf98000000000000560800000200000085000000b4000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) io_setup(0x9, &(0x7f0000000280)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000020101040d0000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001"], 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x0) 49.630623213s ago: executing program 6 (id=308): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100ffffe0bf060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000100000056000000060000002c93000000000000c4030000000000008500000076000000b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 49.252129395s ago: executing program 6 (id=314): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08020209"], 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6018232500682c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa890802"], 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08020209"], 0x0) (async) syz_emit_ethernet(0x9e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6018232500682c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa890802"], 0x0) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) 49.243688901s ago: executing program 35 (id=314): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08020209"], 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6018232500682c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa890802"], 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08020209"], 0x0) (async) syz_emit_ethernet(0x9e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6018232500682c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa890802"], 0x0) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) 47.349063581s ago: executing program 3 (id=345): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001600010a00ffffffffffffff810000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) capset(&(0x7f0000000200)={0x20080522}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x7}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x15, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="6daa000000000000000000954000"/24], &(0x7f0000000380)='syzkaller\x00'}, 0x80) setns(0xffffffffffffffff, 0x24020000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00002d6000/0x2000)=nil, 0x2000, 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) 47.223936683s ago: executing program 3 (id=347): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100ffffe0bf060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000100000056000000060000002c93000000000000c4030000000000008500000076000000b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 47.151965902s ago: executing program 3 (id=348): syz_open_dev$ttys(0xc, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) tgkill(r0, r0, 0x1b) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000004c0)={'vlan0\x00', &(0x7f0000000a00)=@ethtool_drvinfo={0x3, "dd321f3736ec1ef516f2626fb5f9723130a405dd0c240bfa70b6a5deaa326c10", "cc6136523c00ba82e2eb220c26170b4f46a00e75e9a0f39917f24ea5ca3dcfe3", "d191f6098bccd004230253a6dcad00024f992e7d2e9d5a596ca124fc8d001778", "1ed80877783639c0ce09452674d92326a52b28fe43daf8d50e370a1ef166e400", "7dd0d762aa95776dc4a9b1447759794995c28b8f9cc30f487116885ac0384f0e", "a9b74de8d1ed46fdaaf1ce4f", 0xffff, 0x8, 0x9, 0x0, 0x8}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x80071c, &(0x7f0000000000), 0xfb, 0x4ae, &(0x7f0000000540)="$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") r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="780000001c00b5f52abd7000fedbdf2502000000", @ANYRES32=r4, @ANYBLOB="0000050308000b003f78e60008000a000000000008000f0001000000080001"], 0x78}, 0x1, 0x0, 0x0, 0x40001}, 0x20000004) fspick(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00', 0x42, 0x0) fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000100)={0x17c04, r6, 0x6, 0x4, 0x40000}) 46.299241691s ago: executing program 3 (id=355): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x40df, 0x0, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r1, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000003c0)={0x1, 0xe0}, 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_io_uring_submit$UBLK(0x0, r0, 0x0, &(0x7f0000000140)=@ublk_get_params_sqe={0x2e, 0x0, 0x0, r5, 0x80207509, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000002c0)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = landlock_create_ruleset(&(0x7f0000000480)={0x400, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0x1) r10 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='\x00', 0x89901) r11 = open_tree(r10, &(0x7f0000000500)='\x00', 0x89901) move_mount(r11, 0x0, r10, 0x0, 0x46) syz_ublk_setup_queues(r8, r6, &(0x7f0000000300)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x200, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x10000, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000580)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}, {@errors_remount}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") r12 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f0000000200)=ANY=[]) 46.1757069s ago: executing program 3 (id=356): r0 = epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000540)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xff, @local, 0x2e98}, {0xa, 0x4e21, 0x401, @mcast2, 0x101}, r2, 0x1}}, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)="306663353a313232373a620afaf6379a248d63651c810a36c7e262304c2ae5bc4bd34c9af795b2eaa17bb738e496d87579de446dc160b65606c9b15e92b32a27e3e33d67a4f0d4698871537fefc9104409e7e966f4948d16afe0c6d7d669eb819a1a04ac8e654933b70346306b6f57", 0x6f) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mysys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640), 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newchain={0x4f8, 0x64, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x8}, {0x4, 0x4}, {0x2, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x400}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x400}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x48c, 0x2, [@TCA_ROUTE4_POLICE={0x458, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8001, 0xf, 0x53, 0x900000, 0x783, 0xb, 0x6, 0xc, 0x8, 0xfff, 0x5, 0x7fff, 0x3, 0x6d, 0xb, 0x0, 0x9, 0x3, 0x4, 0x6, 0x101, 0x9e875000, 0xfff, 0x6, 0x4, 0xc, 0x2, 0x9, 0x8, 0xb4, 0x344b, 0x3ff, 0x80000001, 0x4, 0x2, 0x8, 0xe508, 0xa77a000, 0x3b89, 0x3, 0xfb, 0x80, 0x8, 0x4, 0x0, 0x0, 0x2, 0x8, 0xfc56, 0xffffffff, 0x81, 0x8, 0x3, 0xc00000, 0x80000000, 0x3ff, 0x0, 0x1ff, 0x400, 0x9, 0x1557, 0x4, 0x7, 0x3, 0x6, 0x7, 0x2, 0x4, 0x80000001, 0x5, 0xdb1c, 0xfffffffb, 0x7, 0x4, 0x8, 0x80000000, 0x5, 0xff, 0xfffffff8, 0x8, 0x3ff, 0x1, 0x1, 0x2, 0x24d, 0x6, 0x6, 0x200, 0x1f38, 0x10001, 0x63, 0x3, 0x7, 0xfffffff9, 0x4, 0xb7, 0x8, 0x0, 0x1d, 0x7, 0xa88, 0x9, 0x5, 0x4, 0x10, 0x80, 0xfe2, 0xe, 0x0, 0xb50, 0x4, 0x1ff, 0x9a, 0x400, 0x769, 0x1, 0x6, 0x7ff, 0x0, 0xffffff01, 0x8, 0xeef0, 0x2, 0x1, 0x1, 0xd, 0x0, 0x9, 0x5, 0x8, 0x8, 0x9, 0x6, 0x10001, 0x4, 0x7f, 0x9, 0x2, 0xfffffff9, 0x3ff, 0xc, 0x4, 0x6, 0x2, 0x6, 0x200, 0xfffffd98, 0xffffffff, 0x10001, 0x10001, 0x1, 0x6, 0x4, 0x9, 0x13d, 0x7, 0x2, 0x79ec, 0x8000, 0x10001, 0x3a7b, 0x24, 0x2, 0x10001, 0x0, 0x2, 0x9, 0x300000, 0x0, 0x5, 0x5, 0x0, 0x1, 0x4fe5, 0xf, 0xded, 0x3, 0x3, 0x1c09, 0x1, 0x3, 0x7, 0x7, 0x4, 0x2, 0x3, 0x2, 0x4, 0x0, 0x83, 0xd, 0x905, 0x6e4, 0x2f, 0x1955bd1f, 0xfffffffb, 0x3, 0x3, 0x80000000, 0x1, 0xffffff00, 0xffffffff, 0x9, 0x3, 0x80000001, 0x7ff, 0x0, 0x6, 0x7ff, 0x7fff, 0x7, 0x3, 0x101, 0x9, 0x2000000, 0x1, 0x2, 0x800, 0x9, 0x6, 0x3ff, 0x1, 0x6, 0xa35, 0x1, 0x2, 0x477, 0x8c6, 0x5, 0x1ff, 0x8008, 0x6, 0x100, 0xe9, 0x4, 0x5, 0x0, 0x9, 0x9, 0x6, 0x22, 0xec5, 0x2, 0x1b5, 0x1, 0x8, 0x1, 0x1, 0x4, 0xd2f, 0x92, 0xffff, 0xff, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x1, 0x7fffffff, 0x3, 0x4, {0xff, 0x0, 0x7ff, 0x7d, 0x5, 0x4}, {0x7, 0x0, 0x3, 0xfff, 0xc, 0x9}, 0x2, 0x2, 0x4e}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4bf}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r10}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xef}, @TCA_ROUTE4_TO={0x8, 0x2, 0xfb}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xdb}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0xc}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x87}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_RATE={0x6, 0x5, {0x26, 0x5}}]}, 0x4f8}}, 0x0) r11 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r11, 0x9) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r12 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r12, 0x29, 0x6, 0xfffffffffffffffe, 0x3) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYRESHEX=r11], 0x0) 46.07383789s ago: executing program 3 (id=357): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100a1", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100ffffe0bf060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000100000056000000060000002c93000000000000c4030000000000008500000076000000b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30.694522676s ago: executing program 36 (id=357): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100a1", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100ffffe0bf060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000100000056000000060000002c93000000000000c4030000000000008500000076000000b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 29.658917285s ago: executing program 0 (id=544): io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0xff00000000000000, 0x0, 0xa1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x1100, 0x0, 0x3}]) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000180)="0bbb268dd6ffa80800030000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000200)={0x0, 0x0, 0x0}) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0xc4, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x28a1, 0x30102}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}]}}}, @IFLA_VFINFO_LIST={0x8c, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x8}}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x36c6e68a, 0xcbc, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffffc, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0xf}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x300000000}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x101, 0x6a9, 0x8, 0x8100}}, {0x14, 0x1, {0x9, 0x8d2, 0x9, 0x88a8}}]}]}]}]}, 0xc4}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 29.566002668s ago: executing program 0 (id=546): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x62000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$BLKROTATIONAL(r0, 0x127e, 0x0) ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000000000)=0x6d6c) 29.533890783s ago: executing program 0 (id=547): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = semget$private(0x0, 0x5, 0x100) semop(r1, &(0x7f0000000400)=[{0x4, 0x5, 0x1000}], 0x1) semop(r1, &(0x7f0000000440)=[{0x4, 0x0, 0x3000}], 0x1) semctl$SETVAL(r1, 0x4, 0x10, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'syz_tun\x00', &(0x7f0000000380)=@ethtool_coalesce={0x1, 0x6, 0x3e, 0x9, 0x0, 0x1, 0xffff, 0x9, 0x3ff, 0x30e, 0x5, 0x7, 0x10f, 0x7, 0x3, 0x4, 0x604, 0x2, 0xffffffae, 0x5, 0x5, 0x150, 0x3}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x20, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000180)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000240)=0x84) sendmmsg$inet_sctp(r2, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x9}, 0x8) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 29.343482564s ago: executing program 0 (id=548): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x10) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x102) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000680)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8003}, r4, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000740)={0x16, 0x98, 0xfa00, {0x0, 0x4, r4, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x2, @local, 0xffffffff}}}, 0xa0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000840)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x80000000, @mcast2, 0x2}, r4}}, 0x30) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000440)=0x10) mknodat$loop(r2, &(0x7f0000000480)='./file0\x00', 0x803, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0xf2) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1ff) userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x57, &(0x7f0000000040)=ANY=[@ANYBLOB="2801000000008dc48225000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred, @cred, @cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred, @cred, @cred], 0x46}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d00)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000d40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)) 28.003910043s ago: executing program 0 (id=560): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000040)='27', 0x2) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) 27.6116445s ago: executing program 0 (id=566): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x80000000, 0x4) (async) r1 = syz_open_dev$mtd(&(0x7f0000000040), 0x2, 0x444001) (async) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000200)={{0xb35a, 0x7, 0x8, 0xfffffff9, 0x3}, &(0x7f0000000080)=[{}, {}]}) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x11e040, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f00000003c0)={0x48, 0xa, r4, 0x0, r6}) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x401, 0x0) sendmsg$key(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x2, 0x16, 0xf, 0x0, 0x50, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in6=@empty, @in6=@private1, 0x28, 0x20, 0x10}, @sadb_key={0x19, 0x9, 0x5e8, 0x0, "cb881328eaecdf7b5f2711ef5614bf3e0e933b7b075ee71d8df0a18a4a0d74a4e81fb94853c9aee8be17b4048fcfe24d5dedcbe417f930eff0600fb126ff422cdc6a0c20a8c64a185c52317e8bc7ede601259e2f8da0a91cd849e420d99c4709f402b989ebce429691ad3f49730ccde186a249b284682c3a0faacc1953094874f5261dec24de53a91e983cba8299b8cb60a6a7ac34d952b1a59e18788798b3cac7b950010f9fe869b4ee3c2b644697b0d9d4e3d648e1e10f592399cd54"}, @sadb_key={0x20, 0x9, 0x7a8, 0x0, "4938d8501976eece361398064d7074f2d3b8ede6492b352a419a69bcd75e07adc3547fd287f7de4ec39b348361eaa579118250a9c43d0d09b40fa124875dd0614dae723a11b734ececd1c4d6e0b8912b9712a9c5cceb93ba628569d8bd47e6c690a58580b39daa4ece367a733945a6bbe4d59fd315e4c49a00487c49fd723370a2ee45b372344d6228ac349872383935d033c22d38c1791a07b0d48abd616466ac41fac8023dcf41c2ce82741d957b90ae1cad527f1b6391ec79e3f0c5732fb545ec54dce71fe5d4b915402110ca2ba92f2ef5291c65ccf62a4ba8d8f7db9398304f24b122d93fb0402ad17df40f02ce78874ce1d5"}, @sadb_key={0x6, 0x9, 0x140, 0x0, "46c1a85100d9a8c1be3c076887fc46d33a20373edf972dd57a2817f03f2a81d7ad1ad44f65fdad0c"}, @sadb_x_sec_ctx={0xa, 0x18, 0x5, 0x3, 0x46, "f74bf08e506f96a273dff883818a82f901a3097e713438a82294871bd2c5e078324f1e609fcc13a3e0c929097b809cf18159f21c8d02ac9f343ec267ef5862e7c09daf2967d1"}]}, 0x280}}, 0x800) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r7, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x7880, 0x20, 0xd4c, 0x2, {{0x2a, 0x4, 0x1, 0x1e, 0xa8, 0x68, 0x0, 0xba, 0x4, 0x0, @private=0xa010102, @multicast2, {[@lsrr={0x83, 0x23, 0xc0, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x18}, @rand_addr=0x64010100, @empty, @private=0xa010102, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}]}, @timestamp_addr={0x44, 0x2c, 0x76, 0x1, 0x2, [{@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@loopback, 0x5}, {@rand_addr=0x64010100, 0xc}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x8}]}, @timestamp_prespec={0x44, 0x44, 0x60, 0x3, 0x9, [{@broadcast, 0x8}, {@multicast2, 0x7}, {@remote, 0xffffff52}, {@remote, 0x5}, {@rand_addr=0x64010100, 0x1}, {@remote, 0x1}, {@private=0xa010102, 0x6}, {@broadcast, 0xdfd}]}]}}}}}) getpeername$packet(r7, &(0x7f0000000a00)={0x11, 0x0, 0x0}, &(0x7f0000000a40)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x29, 0x10, 0x6, 0x1, 0x20, @local, @private0, 0x10, 0x7, 0x8, 0x80000001}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000b40)={'vcan0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000bc0)={'gre0\x00', 0x0, 0x8, 0x7800, 0x7, 0x7, {{0x1e, 0x4, 0x0, 0x2d, 0x78, 0x64, 0x0, 0x78, 0x29, 0x0, @private=0xa010102, @rand_addr=0x64010102, {[@rr={0x7, 0x1b, 0x81, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @rand_addr=0x64010100, @local]}, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0xc, 0xbe, 0x0, 0x0, [0xb, 0x7675e1b4]}, @timestamp_prespec={0x44, 0x34, 0x71, 0x3, 0x8, [{@multicast2, 0x7}, {@rand_addr=0x64010100, 0x80000000}, {@rand_addr=0x64010102, 0xc}, {@broadcast, 0xa}, {@multicast2, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000e80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x154, r8, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4040010}, 0xc001) (async) r16 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000ec0), 0x6003, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r16, 0x3b89, &(0x7f0000000f40)={0x28, 0x2, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000f00)}) (async, rerun: 32) r17 = syz_open_dev$vim2m(&(0x7f0000000f80), 0x7ff, 0x2) (rerun: 32) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r7) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, r18, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x7d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008881}, 0x8080) socket$inet6(0xa, 0x1, 0x1) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000001100)={{0x1, 0x1, 0x18, r17}, './file0\x00'}) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000001140)={{0x1, 0x1, 0x18, r19}, './file0\x00'}) (async) connect$rds(r19, &(0x7f0000001180)={0x2, 0x4e24, @remote}, 0x10) 27.542713283s ago: executing program 37 (id=566): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x80000000, 0x4) (async) r1 = syz_open_dev$mtd(&(0x7f0000000040), 0x2, 0x444001) (async) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000200)={{0xb35a, 0x7, 0x8, 0xfffffff9, 0x3}, &(0x7f0000000080)=[{}, {}]}) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x11e040, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f00000003c0)={0x48, 0xa, r4, 0x0, r6}) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x401, 0x0) sendmsg$key(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x2, 0x16, 0xf, 0x0, 0x50, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in6=@empty, @in6=@private1, 0x28, 0x20, 0x10}, @sadb_key={0x19, 0x9, 0x5e8, 0x0, "cb881328eaecdf7b5f2711ef5614bf3e0e933b7b075ee71d8df0a18a4a0d74a4e81fb94853c9aee8be17b4048fcfe24d5dedcbe417f930eff0600fb126ff422cdc6a0c20a8c64a185c52317e8bc7ede601259e2f8da0a91cd849e420d99c4709f402b989ebce429691ad3f49730ccde186a249b284682c3a0faacc1953094874f5261dec24de53a91e983cba8299b8cb60a6a7ac34d952b1a59e18788798b3cac7b950010f9fe869b4ee3c2b644697b0d9d4e3d648e1e10f592399cd54"}, @sadb_key={0x20, 0x9, 0x7a8, 0x0, "4938d8501976eece361398064d7074f2d3b8ede6492b352a419a69bcd75e07adc3547fd287f7de4ec39b348361eaa579118250a9c43d0d09b40fa124875dd0614dae723a11b734ececd1c4d6e0b8912b9712a9c5cceb93ba628569d8bd47e6c690a58580b39daa4ece367a733945a6bbe4d59fd315e4c49a00487c49fd723370a2ee45b372344d6228ac349872383935d033c22d38c1791a07b0d48abd616466ac41fac8023dcf41c2ce82741d957b90ae1cad527f1b6391ec79e3f0c5732fb545ec54dce71fe5d4b915402110ca2ba92f2ef5291c65ccf62a4ba8d8f7db9398304f24b122d93fb0402ad17df40f02ce78874ce1d5"}, @sadb_key={0x6, 0x9, 0x140, 0x0, "46c1a85100d9a8c1be3c076887fc46d33a20373edf972dd57a2817f03f2a81d7ad1ad44f65fdad0c"}, @sadb_x_sec_ctx={0xa, 0x18, 0x5, 0x3, 0x46, "f74bf08e506f96a273dff883818a82f901a3097e713438a82294871bd2c5e078324f1e609fcc13a3e0c929097b809cf18159f21c8d02ac9f343ec267ef5862e7c09daf2967d1"}]}, 0x280}}, 0x800) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r7, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x7880, 0x20, 0xd4c, 0x2, {{0x2a, 0x4, 0x1, 0x1e, 0xa8, 0x68, 0x0, 0xba, 0x4, 0x0, @private=0xa010102, @multicast2, {[@lsrr={0x83, 0x23, 0xc0, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x18}, @rand_addr=0x64010100, @empty, @private=0xa010102, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}]}, @timestamp_addr={0x44, 0x2c, 0x76, 0x1, 0x2, [{@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@loopback, 0x5}, {@rand_addr=0x64010100, 0xc}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x8}]}, @timestamp_prespec={0x44, 0x44, 0x60, 0x3, 0x9, [{@broadcast, 0x8}, {@multicast2, 0x7}, {@remote, 0xffffff52}, {@remote, 0x5}, {@rand_addr=0x64010100, 0x1}, {@remote, 0x1}, {@private=0xa010102, 0x6}, {@broadcast, 0xdfd}]}]}}}}}) getpeername$packet(r7, &(0x7f0000000a00)={0x11, 0x0, 0x0}, &(0x7f0000000a40)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x29, 0x10, 0x6, 0x1, 0x20, @local, @private0, 0x10, 0x7, 0x8, 0x80000001}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000b40)={'vcan0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000bc0)={'gre0\x00', 0x0, 0x8, 0x7800, 0x7, 0x7, {{0x1e, 0x4, 0x0, 0x2d, 0x78, 0x64, 0x0, 0x78, 0x29, 0x0, @private=0xa010102, @rand_addr=0x64010102, {[@rr={0x7, 0x1b, 0x81, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @rand_addr=0x64010100, @local]}, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0xc, 0xbe, 0x0, 0x0, [0xb, 0x7675e1b4]}, @timestamp_prespec={0x44, 0x34, 0x71, 0x3, 0x8, [{@multicast2, 0x7}, {@rand_addr=0x64010100, 0x80000000}, {@rand_addr=0x64010102, 0xc}, {@broadcast, 0xa}, {@multicast2, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000e80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x154, r8, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4040010}, 0xc001) (async) r16 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000ec0), 0x6003, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r16, 0x3b89, &(0x7f0000000f40)={0x28, 0x2, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000f00)}) (async, rerun: 32) r17 = syz_open_dev$vim2m(&(0x7f0000000f80), 0x7ff, 0x2) (rerun: 32) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r7) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, r18, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x7d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008881}, 0x8080) socket$inet6(0xa, 0x1, 0x1) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000001100)={{0x1, 0x1, 0x18, r17}, './file0\x00'}) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000001140)={{0x1, 0x1, 0x18, r19}, './file0\x00'}) (async) connect$rds(r19, &(0x7f0000001180)={0x2, 0x4e24, @remote}, 0x10) 27.5399286s ago: executing program 8 (id=569): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@random="856c04e00641", @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x65, 0x0, 0x2, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) 27.467304077s ago: executing program 8 (id=572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40801, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40801, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x2000090, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="c5fe150245763d240c2b39b8262c02"]) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)="d8000000120081414e81f782db010000001d080b01008100e8fe55a10101150006001d0003600e1208002e0040001101a8001200a400014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000300)={0x48, 0x1, r5, 0x0, 0xfffffffffffffffc, 0x6}) sendmsg$802154_dgram(r2, &(0x7f0000000040)={&(0x7f0000000080)={0x24, @short={0x2, 0x1}}, 0x14, &(0x7f00000000c0)={0x0}}, 0x4) (async) sendmsg$802154_dgram(r2, &(0x7f0000000040)={&(0x7f0000000080)={0x24, @short={0x2, 0x1}}, 0x14, &(0x7f00000000c0)={0x0}}, 0x4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000540)={0xc, {"a2e3ad2109c752f91b5d520987f70e06d038e7ff7fc6e5539b3245078b089b32083b6d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6ddc4d06e00000000f9db2a7869d85864056526f889af3760fd1980572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988077b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19c51432c6f14c27693102a4ed84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdbfa629e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x1000}}, 0x1060) (async) write$UHID_INPUT(r8, &(0x7f0000000540)={0xc, {"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", 0x1000}}, 0x1060) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010824bd7000ffdbdf250c0000001800058008000100756470000c0002800800040081000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c080) 27.359374055s ago: executing program 8 (id=575): syz_open_procfs(0x0, &(0x7f0000000280)='net/rt6_stats\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x40800) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x2000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x189}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 27.275258765s ago: executing program 8 (id=579): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@bh}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0xa100, 0x80) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x38bc43, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) statx(r0, &(0x7f00000000c0)='./bus\x00', 0x4000, 0x400, &(0x7f0000000140)) 27.199500183s ago: executing program 8 (id=580): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, 0x0, &(0x7f0000000000), 0x8, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001640101ff070000000000000000000000ffff0000000000000000002002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000002b000000fc0000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000240700000000000000014000e00fc010000000000000000000000000001"], 0x104}}, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704000007000000b70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0x1005, &(0x7f00000004c0)=""/4101}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a"], 0x104}}, 0x0) (async) setpgid(r0, r0) 26.832097486s ago: executing program 8 (id=587): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) timer_create(0x0, &(0x7f0000000d40)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000d80)) (async) timer_settime(0x0, 0x0, &(0x7f0000000dc0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000e00)={0x10, 0x0, 0x1}, 0xc) (async) write(r0, &(0x7f0000000e40)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) connect$netlink(r0, &(0x7f0000000e80)=@proc={0x10, 0x0, 0x1}, 0xc) (async, rerun: 64) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000ec0)={0x0, 0x2710}, 0x10) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000f00)=0x101, 0x4) (async) write(r0, &(0x7f0000000f40)='\"', 0xfdef) (async, rerun: 64) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 64) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x6000, 0x0, &(0x7f0000000240)) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000003c0), 0xff, 0x46d, &(0x7f00000008c0)="$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") (async, rerun: 32) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0x41, 0x0) (rerun: 32) syz_open_pts(r2, 0x200) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8000, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000140)) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) (rerun: 32) write$FUSE_DIRENT(r4, 0x0, 0xff8b) (async) openat(0xffffffffffffff9c, &(0x7f000000b3c0)='./file2\x00', 0xb0002, 0x100) (async) setxattr$security_ima(&(0x7f0000005540)='./file0\x00', &(0x7f0000005580), &(0x7f00000001c0)=ANY=[@ANYBLOB="024499182bd8"], 0x31, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./bus\x00', 0x3020081, 0x0, 0x11, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file0\x00', 0x404c2, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file0\x00', 0x0) (rerun: 64) mount$bind(&(0x7f00000005c0)='.\x00', &(0x7f0000000600)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x40, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 26.793094729s ago: executing program 38 (id=587): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) timer_create(0x0, &(0x7f0000000d40)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000d80)) (async) timer_settime(0x0, 0x0, &(0x7f0000000dc0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000e00)={0x10, 0x0, 0x1}, 0xc) (async) write(r0, &(0x7f0000000e40)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) connect$netlink(r0, &(0x7f0000000e80)=@proc={0x10, 0x0, 0x1}, 0xc) (async, rerun: 64) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000ec0)={0x0, 0x2710}, 0x10) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000f00)=0x101, 0x4) (async) write(r0, &(0x7f0000000f40)='\"', 0xfdef) (async, rerun: 64) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 64) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x6000, 0x0, &(0x7f0000000240)) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000003c0), 0xff, 0x46d, &(0x7f00000008c0)="$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") (async, rerun: 32) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0x41, 0x0) (rerun: 32) syz_open_pts(r2, 0x200) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8000, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000140)) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) (rerun: 32) write$FUSE_DIRENT(r4, 0x0, 0xff8b) (async) openat(0xffffffffffffff9c, &(0x7f000000b3c0)='./file2\x00', 0xb0002, 0x100) (async) setxattr$security_ima(&(0x7f0000005540)='./file0\x00', &(0x7f0000005580), &(0x7f00000001c0)=ANY=[@ANYBLOB="024499182bd8"], 0x31, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./bus\x00', 0x3020081, 0x0, 0x11, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file0\x00', 0x404c2, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file0\x00', 0x0) (rerun: 64) mount$bind(&(0x7f00000005c0)='.\x00', &(0x7f0000000600)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x40, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.641799438s ago: executing program 7 (id=921): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000480)={0x0, @aes256, 0x0, @desc3}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) ioctl$MEMREADOOB(0xffffffffffffffff, 0xc0104d04, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b00), 0x0, 0x10, &(0x7f0000000b40), 0xfffffffffffffe19}, 0x42) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r4, r5, 0x9, 0x90, &(0x7f0000000140)="fea5a2c29adfc4765462387751fdd6e4d91f5291ba21cd794743d0f53333fcd301f5f91cc347fb2d09706dbc14fad0d76940bbcd0dd0fdafcd3042dc2be902ca5535ae17fc1f10a83510f2d1c211025ad2844ea7518e2abd1f7db78768cb2eaaac5cedb4b0e172238347771e014b9f73f4f9dd07c2be5c48d49a60f2ec4684b6eca8723c720ef95ea4a24917e8adf8cc", 0x9, 0x8, 0x5, 0xb5, 0x1000, 0x3, 0x1, 'syz1\x00'}) prctl$PR_GET_PDEATHSIG(0x59616d61, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x2, &(0x7f0000000380)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x1f}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) 2.28636635s ago: executing program 5 (id=923): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000340)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x2901, 0x7ffffffb, 0x7, 0x802, 0xc3ef514}, 0x41, 0x1000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x80442) r2 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000180), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000001c0)=0xcde, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000002279ddb399d35f9093d0baa064ba9493138bcc", @ANYRES16=r5, @ANYBLOB="07000000000000001fff0200000036fe018000000300e0000002060005004e22000008000600100000000600010002000000060005004e20000014000400ff010000000000000000000000000001"], 0x54}}, 0x0) write(r0, &(0x7f0000000140)='0', 0x1) 2.11198553s ago: executing program 5 (id=926): r0 = io_uring_setup(0x3c91, &(0x7f0000000080)={0x0, 0x36e4, 0x80, 0x1, 0x60}) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffff80000001, 0x162862) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000480)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0x4, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x10, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000003c0)=r4, 0x4) (async) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1022002, 0x0) r6 = dup(r5) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.079726543s ago: executing program 4 (id=928): getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendto$inet_nvme_pdu(r0, &(0x7f0000000180)=@icresp={{0x1, 0x1, 0x80, 0x4c, 0xffffffff}, 0x0, 0x0, 0x2, 0x1ff}, 0x80, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.040649043s ago: executing program 5 (id=929): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffff931, 0x3, 0x6361, 0x2, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x1, 0x0, 0x6, 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffe0, 0xb}, {0x2, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4000000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f00000000c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000100)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) unshare(0x24020400) r6 = syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff) fcntl$setlease(r7, 0x400, 0x1) r8 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r8, 0x0, 0x0, 0x0) syz_clone(0x40401000, 0x0, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40000, 0x100) sendto$packet(r0, &(0x7f0000000740)="18fc8a64dc534578695cf5ec3d55", 0xe, 0x15, &(0x7f0000000780)={0x11, 0xf5, r2, 0x1, 0x0, 0x6, @local}, 0x14) 2.035025845s ago: executing program 4 (id=930): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000008c0)={'wpan1\x00'}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x13, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044000) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x280800, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x3000006, 0x810, r3, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[], 0xe4}}, 0x2000c001) 1.957943445s ago: executing program 4 (id=932): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000140), &(0x7f00000001c0)=0x4) add_key$user(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000300), 0xc9, 0xfffffffffffffffd) mount(&(0x7f0000000340)=@filename='./mnt\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0)='ecryptfs\x00', 0x0, &(0x7f0000000400)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x80800, 0x106) getdents64(r0, &(0x7f00000004c0)=""/32, 0x20) r1 = io_uring_setup(0x5, &(0x7f0000000500)={0x0, 0x4f61, 0x2000, 0x1, 0x234}) r2 = syz_io_uring_setup(0x414f, &(0x7f00000000c0)={0x0, 0x287d, 0x0, 0x4, 0x291, 0x0, r1}, &(0x7f0000002200)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000002280)=0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000300)=[{0x2c2, 0x5, 0x78, 0xd97d}]}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r8 = syz_open_procfs(r7, &(0x7f0000000040)='net/nf_conntrack_expect\x00') r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = syz_io_uring_setup(0xf00, &(0x7f00000005c0)={0x0, 0x0, 0x10000, 0x3, 0x40055}, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f0000000700)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r11, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) bind$inet(r10, &(0x7f0000000780)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f00000007c0)=0x4, 0x4) connect$inet(r10, &(0x7f0000000800)={0x2, 0x0, @broadcast}, 0x10) read$FUSE(r10, &(0x7f00000022c0)={0x2020}, 0x2020) sendmmsg$inet(r10, &(0x7f0000004300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xfa6) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_EPOLL_WAIT={0x3b, 0xa, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, {0x0, r9}}) io_uring_enter(r2, 0x2003, 0xfffffffd, 0x9, 0x0, 0x0) 1.763439163s ago: executing program 7 (id=937): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x20f, 0x2000) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000004c0)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) r2 = userfaultfd(0x801) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000200)={{&(0x7f000037c000/0x1000)=nil, 0x1000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) fcntl$lock(0xffffffffffffffff, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x9, 0x44495658, 0x3, @discrete={0x5, 0x80000001}}) 1.615884264s ago: executing program 9 (id=940): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x20000003}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/70, 0x46}, {&(0x7f0000000340)=""/192, 0xc0}, {&(0x7f0000000440)=""/4112, 0x1010}, {&(0x7f0000001480)=""/82, 0x52}, {&(0x7f0000001500)=""/101, 0x65}, {&(0x7f0000001580)=""/244, 0xf4}, {&(0x7f0000001680)=""/58, 0x3a}], 0x7}, 0x518}], 0x4, 0x40010000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000016c0)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, [0xff000000, 0x0, 0x0, 0xff000000], [0xffffff00, 0x0, 0x0, 0xffffff00], 'veth1_to_bridge\x00', 'bridge_slave_1\x00', {}, {}, 0x62, 0x0, 0x0, 0x34}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x3ff, 0x372, 0xfff, 'pptp\x00', 'syz1\x00', {0x4}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}, [0xff], [0xff], 'erspan0\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0xfffe, 0x3, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001d80)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001e40)=ANY=[@ANYBLOB="300000003c000701000000000500000001fc0000040049800c00018006860602000000100c0002"], 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x24008004) sendmsg$NFT_BATCH(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000001b40)=0x189d, 0x1a) recvmmsg(r2, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=""/49, 0x1}, 0x10005}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001c80)=""/250}]}}], 0xaa1ff94afb1407b1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x1}]}]}, {0x0, [0x61]}}, 0x0, 0x37, 0x0, 0x8}, 0x20) 1.336099536s ago: executing program 9 (id=943): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/dynamic_debug/control\x00', 0x1, 0x0) write(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000009000000000000000600003f4931a8edde5d4e5372a5ad84b62d141d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.325355483s ago: executing program 9 (id=945): syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x2000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x189}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 1.188041266s ago: executing program 9 (id=947): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000026c0)={0x1, &(0x7f0000002700)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000002740)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000002b80)='ext4\x00', &(0x7f0000002bc0)='./file1\x00', 0x210000, &(0x7f0000002c00), 0xfc, 0x56f, &(0x7f0000002c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000031c0)='./file1\x00', 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000003200)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000003240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000003280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000003300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000003380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000033c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000003400)=0x6) r4 = mq_open(&(0x7f0000003440)='\a\x05\x00\x00', 0xa167ad740cb9a351, 0x3c, 0x0) fcntl$setflags(r4, 0x2, 0x0) pwrite64(r0, &(0x7f0000003480)='2', 0xfdef, 0x10c6b) r5 = syz_open_procfs(0x0, &(0x7f00000034c0)='clear_refs\x00') writev(r5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000003500)={0x0, 0x6}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000035c0)=ANY=[@ANYBLOB="01000000000000000000", @ANYBLOB="0c009900040000"], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x4000014) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001b00)=0x14) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000002ac0)=0x15) 1.100158419s ago: executing program 5 (id=949): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x53, &(0x7f0000000180)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x10) listen(r0, 0x0) listen(r1, 0x2) (async) listen(r1, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r5, 0x2) 1.087415347s ago: executing program 4 (id=950): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$kcm(0x23, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000004c0)=0xdf8, 0x4) write(r4, &(0x7f0000000900)="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", 0x5c5) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000f80)={0x3, 0xfffffffe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x1002, &(0x7f00000017c0)=""/4098, 0x40f00}, 0x94) 762.294697ms ago: executing program 2 (id=951): syz_open_procfs(0x0, &(0x7f0000000280)='net/rt6_stats\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x40800) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}], 0x10}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x2000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x189}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 749.685721ms ago: executing program 7 (id=952): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) r2 = fanotify_init(0x0, 0x400) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x8}, {0x0}], 0x2) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x9}) fcntl$lock(r1, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x9, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x60, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002180000ffffffff00000000"}]}, 0x60}}, 0x0) sendto$inet6(r0, &(0x7f00000009c0)="7800000019001f05b9409b0dffff000d0207be040205060506144007430005000f000000fac8388827a685a168d9a446040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x0) 749.138542ms ago: executing program 5 (id=953): r0 = socket(0x2d, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$video(&(0x7f0000000280), 0x8, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000019c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0x6, &(0x7f0000000480)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10}], &(0x7f0000001680)='GPL\x00', 0x10, 0xce, &(0x7f00000016c0)=""/206, 0x41100, 0x31, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000001a00)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001a40)=[{0x5, 0x5, 0xc, 0x9}, {0x2, 0x3, 0x10, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5, 0x6}, {0x2, 0x80000000, 0x6, 0x6}, {0x2, 0x4, 0x3, 0x1}], 0x10, 0x9}, 0x94) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000001600)=@multiplanar_userptr={0x80000001, 0xb, 0x4, 0x400, 0x0, {0x0, 0x2710}, {0x1, 0x8, 0xd8, 0x4, 0x95, 0x4, "56e4c3cd"}, 0x8, 0x2, {0x0}, 0x7aef}) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000002c0)=0x2800, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0xd2f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x44090) sendmsg$inet(r3, &(0x7f00000004c0)={0x0, 0x14, &(0x7f0000000500)=[{&(0x7f00000015c0)=' ', 0xffffff1f}], 0x1}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') pread64(r11, &(0x7f00000005c0)=""/4077, 0xfed, 0x19cb) connect$netlink(r0, &(0x7f0000000000)=@proc={0x2d, 0x0, 0x25dfdbfe, 0x8000}, 0xc) r12 = io_uring_setup(0x7725, &(0x7f0000000540)={0x0, 0xefdf, 0x1c00, 0x3, 0xd9}) r13 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f00000034c0)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r11, &(0x7f0000000180)={0x10}) 672.059345ms ago: executing program 7 (id=954): syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbb86a397cf6b907b270000080045100078006500000201907864010101ac1414bb030390780006001f47eb07ff00db1ce2d92f0e5c64010102ac1414368611000000030709a88022eba18f92010244344c01ac1e0101000000097f00dfc2d3cd64d64b0e092257cdf5c800d90000000564010102000200057f00000100000000ac1414bb0000032900007f930f4f0000000000"], 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/51, 0x33}, {&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f0000000280)=""/203, 0xcb}], 0x3) 670.056877ms ago: executing program 7 (id=955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) write$tun(0xffffffffffffffff, &(0x7f00000018c0)={@void, @val={0x3, 0x3, 0x0, 0xb9df, 0x6, 0x2}, @ipv6=@generic={0x7, 0x6, "d7060a", 0x237, 0x2b, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[@fragment={0x32, 0x0, 0xd7, 0x1, 0x0, 0xd, 0x68}, @hopopts={0x6c, 0x2, '\x00', [@pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xfd}]}, @srh={0x29, 0xa, 0x4, 0x5, 0x0, 0x18, 0x35d, [@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00']}, @routing={0x2f, 0x12, 0x2, 0x0, 0x0, [@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x16}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @mcast1, @local, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2a, 0x4, 0x4, 0x2, 0x9, 0x68, 0x1, [@empty, @ipv4={'\x00', '\xff\xff', @local}]}, @routing={0x3a, 0x8, 0x1, 0x0, 0x0, [@empty, @remote, @local, @ipv4={'\x00', '\xff\xff', @multicast2}]}], "bc45aa8d178531c38a768b67e60042e6d0ee125a9c436664aa50ab32de9334e805c37c7f8938944d078c4afa7a022dba72e05b54cb5314f894193a05b622886d569b8d1384d57b783f30c8269279093d22399340167870f7c9916b110d5252225f67f0279d5947cb3a12c120ee1e9872d3f422fd87f982571381a864f94c52d093bac3bbeaa6baabca1349abac256ef27a6a3de7ff16f57238d446ce56a449ff2d8595f808f08242bd9217c976fe09dab496911ca3c1af"}}}, 0x269) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x4}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x24}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='timerslack_ns\x00') read$char_usb(r2, &(0x7f00000008c0)=""/4096, 0x1000) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80c5}, 0xc000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x109000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0xe) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x14, 0x0, 0x200, 0x8, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008001) (async) accept4$bt_l2cap(r7, 0x0, 0x0, 0x0) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0xc1101, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000340)=0x1) (async) pwritev(r8, &(0x7f0000000380)=[{&(0x7f00000003c0)="0203", 0x2}], 0x1, 0x213, 0xb) (async) ioctl(r0, 0x6, &(0x7f0000000000)="09663a67cb0736e65cf86fb8a7a661d456b3dbde515725dcff0d322a98b966dc6a58b0e9601aa90fde4b7a9ffa32401849b4fe7d4367967e76629e0ad8f9fc1709d473b662b427f5b83105fa7c5afef6f3234a73af3fbb5b159efa441d0b77fb370a956592a26335ba329dbcb28809c85d73f79679d6e136563e63fb41bd7333f052ea5c93864e8c4151848da9530b085192fa0d630e50c9989aeb78") 669.011152ms ago: executing program 7 (id=956): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000500000000000000000000090300000000000000000000010500000004000000000000000000000300000000020000000200000000000000000000000100000d"], 0x0, 0x65}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000580)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev2(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)="08a1728db9844318ce2b340637637827a161c2ae9e90e8d56e6cbc1ac1c640825859225613e8055a6672173857ba9ec37dff9738c325", 0x36}], 0x1, 0x2, 0x6a, 0x2) connect$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400100001000130726bd70000000000064010101000000000000000000000000ff0200000000000000000000000000014e2200564e2300030200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140a0000000000000000000000000300000000000000000000000000000005000000000000000a00000000000000060000000000000000000000000000008953000000000000030000000000000000000000000000000000000000000000020000000000000003000000000000000c00000000000000020000002cbd70000000000002000100280000000000000050001200726663415c19762867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000008000000057523b5b"], 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000800)=[{0x6}]}, 0x10) bind$inet(r5, &(0x7f0000000840)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xc6, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x3, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "153e2c20706c6c460e47cb4f54c611344033aed8ba6c162ef0d68154eb3a39ba", "3d46696bcc306ff6585ec886e89b12d00dcd03eb8cb4a87738a3b2f2ef40880f55774630a7b8b6f81871857d51e01749", "ab292fb021862a006cd1e40f50a9b763d37ae55a17daa80d287ad345", {"e7da662530662bcb18acf3abfc2a7887", "90017e565337ee48958e7f4739b9bb74"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000b00)='./file0\x00', 0x5) bind$inet(r5, &(0x7f0000000940)={0x2, 0x4e20, @broadcast}, 0x10) 655.857317ms ago: executing program 5 (id=957): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x50) close(r1) (async, rerun: 64) r2 = syz_open_dev$loop(&(0x7f0000000600), 0x7, 0x180862) (async, rerun: 64) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/pm_print_times', 0x2000, 0xa9) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000002a80)={r3, 0x3, {0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef4090ebcdda37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b063cc14ad3300", [0x2002, 0x6]}}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000440)={r5, 0x0, 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000480)={r1, 0x0, &(0x7f00000004c0)=""/155}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000580)={r1, 0x0, &(0x7f0000001a80)=""/4095}, 0x20) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}, 0x3}}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000040)="24c24354976af1cb5606241c868fa3440d0d2ac171757de79306fd720a6330c62ce827f76b398e47c1efa85de030ecdd92160df166af6cd30205cd7cae3e8dc67dd25e7be8be26a6296e0bc4fe3baac38a4e", 0x52}, {&(0x7f00000000c0)="0ea16e0fc712be373e817c0891600c16964f4918c07558cd0456401fb805176aa6ce36f95009231dc8ac9621bff5d5a8bd92cac6256370c37a4794b709bd96b9eb804f48777608c288ab076d4b643d75aa2b8dfc3e1b1503737c5b8dc1e71d606eedf86a7ebdcce87639976430d345676b459188e42cfa413881030e15408acc111c09fe7f6ed629c3d8e8f78c3d5cdb59030f84c6c1eb5a16b86ddb2aa78838cab87339d0f7038d9bb2723335b7b34b6d8204b09505ebceff30f811e1157f9a3323c547715d299a07e777bb60e96354efa32efbfb29f3034f4ddf606c7138540d4615fbefdedf2827274e3682a30dfdc052f1396c", 0xf5}, {&(0x7f00000001c0)="1a028381bb2d9497133449ed41669e4f086a9617af2432e89207398db683e573edaf9918f711a6da6b2b51579e13ba8da8269468a107b3ad82c4f1eb6fb21db930138e29fe2b8783", 0x48}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000000240)="89504e79069718dc2d8e2558c92d535dc67bd75ea8f4010000000000000059e58e48ddebe93d626200cd9b303a4ea36a5c2f6ee9e0256aeb9d1b77c2fe24396c9d33a8b9e4d1b3ed8710a37fb2a6bbd031dd736b3361313798cadbd0d4b2dbd123d8f8bf15afba4ef63d2cd1bd4b83c6ed62d8100640f84702b925ec365b66b561d4dbc77b370b3dc9a02bfe9d4f8ccbaf167514b6f2fea2255c438f3d254eed88e2074af17ae520a78bde182ec9e1857d5e194fe8b20ecbf7dab24c5a37bf55f9eb5723d029bde3cfa10d214738314c4dccebd5af9a27", 0xd7}, {&(0x7f0000001840)="70fbd4f36fa69850a28f4762752adc7d3f3912246d05c06c69475aa4e10acd4e4bdc08297f3d883dc359b3c44d640b9d18ce60f8c1920ccd7ab45e5bb035787dd28864e03abd8715c3601628306caa1345d7d1e68dadc401850014223186ed0dec2ce1396667edbffd72d6", 0x6b}, {&(0x7f00000018c0)="7a0814fb30a63c6e2285d595ad1cadd2fed23c0a9b62fbbe6e78e73a58eb945de95dfbd00003fcefe8f2749b20955b26ae9e92bef9c6512a798b9f704e263bf0cde0afc64525e672b5277a0e9af4a2de6b7ec641b28a357d2c4d7501b4c0a27f334cd76dcac5687ab7f83756d1a73090f9c233141fda8442240c7d870b2afc93c7c55e", 0x83}, {&(0x7f0000001980)="01c20a1a256c70e1030a3d8a75d8bc5b299607d1c0c11f9ad0874561bdcbc4a6d69722b2aa0686518e73b94c2f97b7b095d35db4c85dee0307e10b1ee7", 0x3d}], 0x2d, 0x0, 0x0, 0x11}, 0x20000000) (async, rerun: 32) r6 = syz_open_dev$evdev(&(0x7f0000001800), 0x0, 0x8840) (rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002bc0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) (async) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'bridge0\x00'}) (async) r8 = timerfd_create(0x0, 0x0) (async) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000640), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='.\x00', &(0x7f0000000740), 0xa, &(0x7f0000001780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000700)=ANY=[], 0x2c}}, 0x40080) 619.598574ms ago: executing program 2 (id=958): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="18001a8014000200fc0c0000000000000000000000000001040037"], 0x3c}], 0x1, 0x0, 0x0, 0x20811}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b8000000020805000000000000000000050000010600024088a200000500030084000000050003000e0000000900010073797a31000000001c000480080002400000000708000240000000eb080002400000011c14000480080001400000907608000140000000072c000480080001400000000008000140000001000800014000000002080001400000000108000140000008f905000300880000001c00048008000240001311695a136b00af6c3a5e00000308000140000007a77c37afb2239971ff"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x240000c1) 543.825591ms ago: executing program 2 (id=959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)="dc", 0x1}], 0x1}, 0x48043) r4 = dup(r2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000340)=0x3, 0x4) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r6, &(0x7f0000000540)="2d76b41cfadba8c9e82b39a58fade4a1e1c7ef34f18f9ee7ea705a387831c57c3f007c87ff6a6d56a0412772be538a3a9da7d06107b64274af1202839475620c45529c8e1e684c2118de638371951ba4ff979185630a5fad24e8eac0e002159a4516f523cc596c18dea7d58a7fc7d7c536f144c2a3cd4b3c32712d9df8e06635edabc3756f4574734399c629e21514de00ca9cb5db71b1fd95c571fc14e0935bce3b828d3e9544db3e5d6dd7711292bade41db1468879a5ae363c0e350a18c2c1846c9dab94e0c296ad7ba7ddabb3090d84b7e1de1075d427e6da02193277000e89a90b611024684514dfe42ba05afb12275bd2157f049f1e59c6e3e04bdf2af1558978fd730ff32ebc982e3cb15f90d5cc35615b22eb49384b70a36e914a8639cefcf00da4188df83be0f5f20b765610a77efdb569852c0196fca2237eeed0bfac86e58d0ec211962bf22ee18dbbb0f33c591cba0e72e68de6eca4c96f29868bd2080c96f28b8e68c9a62efae50d8bdc9df9cfbf3350f4274da573ed3653f989ffddbb59f3f8c72a6b3bc7f705872d0309445e14781e888d8d1a5fb5de79c5ea573c3b0bdf4de2e4263635aab6732e3339450fceb7698309cc629ec4bff6fde7a01f182dca433a256e101d01ba88a6ff1e14d9dcaf7d8a6bce08534142561578702ded5cc1bae4bbc0d17d783729c78c1851e701cf55ae55cbe40cec2a6e60fc8db862dbebef6b8d224762518e8b2ad8c1f97bd13057d9103c55a806d5c747b4e4c68d39469a9cdc8b6d92ebd0ebc51a32371af555bfa64463122ed3055b244ca4c8ad98b9c8903fc70a3827c622bb1222e8ec47331797d592c7f0837e695e885e8e18ba748b1169318135af97b937a2fad5472590d10a356e7d2da2073cd17bd45669c65618baf849b4d15925da0dc40705ee26ce2b33b85a93651f4d264b723cc23644a94a200673b551690788c9cf637f926ba1da102172c23445cc10278fa28b81c55578e77d87151a8b423c5a5d0bfc3945028e16514837ffab181dd771ab456bde23e6b1c40830967492904622123b7ba477e1843102e0a2bb816cd6ab344135c0660d09842ca96b2e15561c551a4efefb55818da1b9208c6c7a414caf455f9510b1f2ee869bd43353b9dec4dc6cc6a49dbf1ab273a69d76c552d0ea4eb33d983b19ce04cb14473dcf2e006d5b9886de2cad58e6fa06aafa7406f12400ab9bd65f472636446dc104a1e31f4f2abdcfe94ba5cdb35ce9d4efd6ea2de3069ffae2fb4e1ed93616546f39285d4d78ead20bd35b721a51f4ebe84037f699ba4afc82ece8dfb15faa8974e2cb0e2987db498c34b78fc806e3287ec0928e14abc7701684f73032d9c791cd195357ecb579724ac51659a02512faf240ef3bc65a2ac7462d4dc9b8718d103ef5223520e0c60969e3ecac743eee57e664fe687aad5e5d474ae25ac5aa77489b592eafa00ff", 0x399) splice(r5, 0x0, r2, 0x0, 0x100000000, 0x9) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) writev(r3, &(0x7f0000000980)=[{&(0x7f0000000a40)="cd89b0b00de0128f2f24957c60b6a0b6519ce76781b8cec79d8d486b204c324233079d3416f27400aa5968ec46bbfc9bd3c3501c39ff9f364126462ac9010caa2d8653212984bb91c11f393a814a887def21bd3b6e17c7a7f9453bfbe37f26c6463f5ad48449838ff5e361e951f3018d371d85162eea3ea2340e05189e889cccfc73b162b6c06881fd5f84be7b8594739f3c2f110f121e53c60daa7b5ffb0052a6a305f31ac2d2545015f20d52bf1c88edb82fbe1ab851f052c14d075b10a1285438728aafe4d7c487ca8ef0be718d1291cf3edb00fe3693dd3968b459663284b3e054dd5b742c650bee026e4d105070b3771f5708bb5a13ad26a25e77629a3a0f3d86c86a3dcd554ef8b08200f981cf7e407793754eb9929a2565c8f618cc79f13d91b611c01eb85020836ae5e14ea7469d0d1716eb8b3d63d960d0ec3b28d3", 0x140}, {&(0x7f0000000b80)="e1", 0x1}, {&(0x7f0000000bc0)="4cf825f5dc34d1c845549399009f5b4f304ad3f71d7e22c79cc54334aaef4509c1dc0eba665fed19b48d04aec3be8c9dcf274a9d3fc20806eac053c7a3b0a4f7a5206463ad311cef81f93fbd9cdbe8b1f7aba2751186f7fa5471ee3776e0141139eaead7f7d84ef0f98139a14e619a9734a0917ed6374bcdc2984db8fddbad89286e8f68195fb73c7b85364295b1d25743fedf114445d0139f12bdd97f23fca418b3c2ed3c94d74085b840107917c683440c9afb73b1672841926fa00012d48178c18c16cb6808b3f6f34eb9d4e67e95dde3a14cc371043a3e1622d27baa6ca810d7310977aa0d3c0c813358358dadadc39a", 0xf2}, {&(0x7f0000000cc0)="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", 0x1c0}, {&(0x7f0000000e80)="fe7e703edb9121edaca48b9a92fe6de7ba64dc6911d57ef0f1946627ecd8", 0x1e}], 0x5) write$binfmt_script(r3, &(0x7f0000000ec0)={'#! ', './file1', [], 0xa, "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"}, 0x411) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0xffff4bb8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x44084) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000160001030000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 491.847694ms ago: executing program 2 (id=960): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sec\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sec/tomoyo/query\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$DM_LIST_DEVICES(r1, 0xc138fd02, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x1d8, 0x138, 0x0, 0x0, 0x11, 0x0, 0x0, {}, "3757e5ec5257164d649473bdae9e8b32cb9cebcb37078d37d8daf0c2dc6dd0fb4fc191576d92d7e20a3a501f6acae5f84ae434f71fc8d59f6fb502202ad539ac643c3972ecea9c9ec8bf7a16efb0d7cd8f1c58b149777369ce3641c0c006988dfbbbea3632d04f08ed43087d67ca33740d4c14a7136ccc5b66478a21aa6dbd0bbc58e60119108fbaf9a295e85be34252f00888a6653b34b3dc4c"}) (async) ppoll(&(0x7f0000000200)=[{r1}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRESDEC=r3, @ANYBLOB="c14d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r4, @ANYBLOB="90da4f12ee6275a3818c11810e", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x24004005}, 0x841) 413.167185ms ago: executing program 2 (id=961): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) landlock_create_ruleset(0x0, 0x0, 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 348.025405ms ago: executing program 2 (id=962): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x20f, 0x2000) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000004c0)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) r2 = userfaultfd(0x801) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000200)={{&(0x7f000037c000/0x1000)=nil, 0x1000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) fcntl$lock(0xffffffffffffffff, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x9, 0x44495658, 0x3, @discrete={0x5, 0x80000001}}) 236.848884ms ago: executing program 9 (id=963): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x5}}], [{@fowner_lt={'fowner<', r4}}, {@smackfsroot}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, '!#'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xc6&%n^\\\xb3)}):'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '^[/B,-$'}}, {@dont_appraise}, {@pcr={'pcr', 0x3d, 0x30}}]}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$P9_RLERROR(r5, &(0x7f00000002c0)={0x14, 0x7, 0x2, {0xb, 'rootcontext'}}, 0x14) write$uinput_user_dev(r5, &(0x7f0000000300)={'syz1\x00', {0x2, 0x3ff, 0x5, 0x3}, 0x1e, [0x3, 0xe31, 0x2, 0x8, 0x10000, 0x59af811e, 0xffffffff, 0x514c, 0x6de7, 0xa, 0x1, 0x5, 0x2, 0x8, 0x3, 0xd, 0x3, 0x5, 0x5, 0x0, 0x81, 0x81, 0x60, 0x5, 0x2, 0x49, 0xc, 0xfffffff7, 0x1, 0x4, 0x6b2, 0x4, 0x4, 0x10, 0x6, 0x7, 0x2, 0x1, 0x7, 0x1, 0x100, 0x8001, 0x4, 0x7, 0x4af6a8e2, 0x101, 0x4, 0x1, 0x4, 0x9, 0x8, 0x5, 0x6635, 0x2, 0x4, 0x2b, 0x9, 0x4, 0x3, 0x4, 0xe, 0x8000, 0x8, 0x3], [0xffffffff, 0x1, 0x10001, 0x9, 0x2, 0x5, 0x872a, 0x3, 0x9, 0x5ab, 0x7, 0x1, 0xfffffffa, 0x7fff, 0x73, 0x4, 0xffffffff, 0xffff, 0xa, 0x1, 0x4, 0x50da, 0x68aaa32a, 0xb, 0x2, 0x0, 0xe2, 0xfffffffe, 0x464, 0x8, 0x101, 0x36, 0x5, 0x6, 0x80000000, 0x9, 0x7, 0x800, 0xfffffff6, 0x1000, 0x5, 0xffff4019, 0xf5, 0x4, 0x4e, 0x5, 0xe0b0, 0x8, 0x4, 0x100000, 0x3, 0x4, 0x4, 0x2, 0xe2a, 0x2, 0x6af, 0x2, 0x1, 0x6a7986ff, 0x81, 0x6, 0xe7d, 0xffff], [0xd34, 0x4, 0x9, 0x9, 0x9, 0x6, 0x8001, 0x4eb0f099, 0xba, 0x76e0, 0x6, 0x9, 0xfff, 0x6, 0x7, 0x300, 0xe, 0x8, 0x7, 0x7f, 0xc, 0x4230d4d6, 0x6, 0x7, 0x3, 0x5, 0x5, 0xfffffffc, 0x1, 0x180000, 0x8, 0x4, 0x3ff, 0x6, 0x81, 0x2, 0xffffffff, 0x7fff, 0x3, 0x3, 0x1, 0x3ff, 0x951f, 0x4, 0x9, 0x5, 0x5, 0x7, 0x1, 0x9, 0x8001, 0x6, 0x0, 0x1750, 0x4, 0x800, 0x9, 0x4, 0xa3, 0xb676, 0x3ff, 0x6, 0x7ff, 0xfffffffd], [0x8, 0x401, 0x5, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0x9, 0x400, 0x4, 0xffff, 0xffff, 0x190e, 0x7, 0x5, 0xe86f, 0x10, 0x1, 0x6f, 0x3, 0x6, 0xfff, 0x9, 0x7d, 0x4, 0xfffffffd, 0x485, 0x9d0, 0x6, 0x2, 0xffff, 0x2, 0x2, 0xffffff92, 0x7f, 0x3, 0x65c, 0x6, 0x68, 0x4, 0x3, 0x80000001, 0x9, 0xc, 0x9, 0x40c7, 0x6, 0xe, 0x8ea, 0xffff, 0x1, 0xfffffc01, 0x4, 0x6, 0xe9, 0xff8, 0x66c6, 0x0, 0x4, 0x26, 0x1ff, 0x3, 0x8, 0x1ff]}, 0x45c) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={@broadcast, 0x1, 0x0, 0x40, 0x0, [{@initdev}, {}, {@loopback}, {@multicast2}]}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xb4, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x86, 0xac, "0441792d4df8e7355246c83612d606a3034ed9b29bcba1d3a3749088b09f54446b70c64c08f6f60238b62ee071879f626fcc2ac90b1dbbf7ab2c80b433229e13567d6617c3b82e77b3d37205846a51dcb3c3f5cb7d6263a04e4142bcf6ca974eae3263301420ccf2b060b96b140dd4ccac1039731e15cd55f59d223a9afedec5c21f"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x2be}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8008}, 0x20000804) r8 = io_uring_setup(0x6089, &(0x7f0000000a40)={0x0, 0x4aeb, 0x2c22, 0x0, 0x245, 0x0, r3}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000ac0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000cc0)={0x1, @in6={{0xa, 0x4e23, 0x0, @private2, 0xd}}, 0x1, 0x3, 0x0, 0x6b, 0x0, 0x7, 0x2}, &(0x7f0000000d80)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000e00)={r10, 0x1c, &(0x7f0000000dc0)=[@in6={0xa, 0x4e22, 0x7ff, @empty, 0x401}]}, &(0x7f0000000e40)=0x10) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000e80)=0x800000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000001040)={{r3}, r9, 0x0, @inherit={0x70, &(0x7f0000000fc0)={0x0, 0x5, 0x2, 0xfffffffffffffff4, {0x2c, 0x7, 0xa1, 0xc4, 0x2e}, [0xfffffffffffffc00, 0x8, 0x7f, 0xfd, 0x7]}}, @subvolid=0x6}) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000002040), 0x1002, 0x0) ioctl$XFS_IOC_INUMBERS(r11, 0x80405880, &(0x7f0000002080)={{0x1, 0x0, 0x3, 0x9, 0x2}, [{0x0, 0x8000000000000001, 0x4, 0x9}]}) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002140), r3) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, r12, 0x300, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x801) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80010}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x4c, r6, 0x404, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3ff, 0xa}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xb}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8800) cachestat(r8, &(0x7f0000002380)={0x3973, 0xe000000000}, &(0x7f00000023c0), 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x810, r5, 0x11820000) quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0) syz_io_uring_setup(0x5e2d, &(0x7f0000002400)={0x0, 0x8e6d, 0x2c28, 0x0, 0x17b}, &(0x7f0000002480), &(0x7f00000024c0), &(0x7f0000002500)) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r13, &(0x7f0000004440)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004400)={&(0x7f00000025c0)={0x1e3c, r6, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x2, 0x54}}}}, [@NL80211_ATTR_PROBE_RESP={0x33a, 0x91, "e63528b0f1f59fe4fc840f9d8b93743238bbf609be47ea7aed6f64853e1db17d50c9e4386856db1c38e9fbac0b62cc37a3c6ef4fa1bc6abd5cee3dc20bda32d7ce92a8146e44944e2ce8ea8f29fa1086f3c7cb9993775fdd5f4f3395bc45255a87e5b2fc987730900e3cebf5efa2f61f49416ccaa9e9082f62a87318bb7d658cabe07e6875336a797181f50f71642a88790de21547d4f9402875be20b26b65eaf072d75eaf3b09ddd629a7c655dbd2450f5d64aadd81c0e63c42bf5867c78f7c599f15b8ab983414b3efa26c9c12df93201964d40524341d90d4767e6a4277d8a006c365ec6d62c52d8cda6529e61ecce02dcf05443ebaa04e31bfb105fb4e546b647077f079e30d719b859042b7787ab5112f5faa2f16b720a8b04053362e6e297a2e37af2d77c4cebb8d9a7e418715ead560f957dac53f3e06db28656e49958b4244ce26e8c664c701077768469b1949ba75a28d4ac32c7787395b298bfc0df0ac5f16b96585a5b000115c22e1e2e86b9ee0fba1416852a338973c074a658e08fe2b6e0a728a15b423a230335720e3be3f2dc96a4cf4f44f0a074edc76ed332d0adb5fb70ed58eafccb37a358b914e9a31cdaf3f126be45a9329e0b4319b133ffb264acc4a7957399c6ca2b62708c7443cf339c9edb200e1335a7ff9c94f1fff8532338efa4ba866ee38526058fe99143d6d8d28c80d1ce4a23473221c3c8213db42ae75a1ddc7f6160cb2d1a9369af27cbc6741b6dc22cad03685ed6b9b92f48e1d9bdaf7d74b855e8bb1b378438f9230716f86fb7254a96b6a546a99bb500f9b0ec31de5ef34094af82006f7ec0192777b2cb7566ce8a67a45cc2e0bd5824f716a66982c2fbfb18625c4ee9dbd35c8e7b61d5da3df721515854f79d45f33b150d648517d5ea03c9fe5a29fd3820954f84ecd2a7530e704f1e5ad0a652fee7666549b0dfe9a21dc3a993148edfce0fbf9a36fd717eb35dde3626fbf5be619334c2d662670a27a2046891882ab51e454abc5d034d57adb00adb5271f1cb4b3a8c3a5696c34672482d742cce42452c92ce19b7908873a731e240eeabec643ef0bec9b1dc932a5e3468c688a4ff4624cdf788620303688190ab66f737960258f3a083568ff76cb90126d3cd297ccffbbac596223bf0f"}, @NL80211_ATTR_IE_ASSOC_RESP={0x19e, 0x80, [@preq={0x82, 0x6d, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x4, 0xdd, 0x5, @device_b, 0xff, @value=@device_b, 0x0, 0x2, 0x7, [{{0x0, 0x0, 0x1}, @device_a, 0x9}, {{}, @broadcast, 0x1}, {{0x1}, @device_b, 0x4850}, {{0x1, 0x0, 0x1}, @device_b, 0x2}, {{}, @device_a, 0x5}, {{0x1}, @device_a, 0x10}, {{0x1}, @device_a, 0x5}]}}, @chsw_timing={0x68, 0x4, {0xfffe, 0x1000}}, @random={0x6f, 0x9a, "251f43d15880d308415288de15e93fd29e44764f14dd20d99bdb2f3416ff776f6c1dbceb08a14706c3536aa98dc2b57658259a81286acc2d41fe56b277adc46ced369be7ecff41de8df01d0ab87b56584f3d4ef2c4652103e3be25ea05a64216f8f4b0760b7977bf8e16f5e0a07c55727bcea652ef3ed4226a302282bd2fafbab0f8f31e397a19b119ac0d6dfa6aaef2127af13eac9e182166a5"}, @rann={0x7e, 0x15, {{0x0, 0x77}, 0x65, 0xb, @device_b, 0x84e7, 0x4, 0x9862}}, @random={0x6, 0x38, "607a7bc3d443786d00b5cfd2b1bb3eb858b1d5f4a28e5c994c052fffe4975a2265e6f18e51324d444573a5ef1fe550e74eae2e76d947709a"}, @mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0xa1}, @tim={0x5, 0x2b, {0x2, 0x50, 0x2, "2a4d40c24bd1ae37460188efc80dd05c4c0cd7f728e4848d6f6a9e77424e35d12e7297ae33bdd6fa"}}]}, @NL80211_ATTR_PROBE_RESP={0x70b, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x1c1, 0xf, [@random={0x6, 0x12, "d2cfaed2616470dad6b3aad5a10b4fdb34d9"}, @supported_rates={0x1, 0x5, [{0x30}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}]}, @ssid={0x0, 0x6, @default_ap_ssid}, @fast_bss_trans={0x37, 0xfd, {0xe, 0x8, "af7c76dd0e48de2960462a61cd75332a", "6a86ad84ab388846d6aee10e0fe126ee30f584b4c47822dc8c349177d6cf5341", "65513be75b8a71c7837ab7daa51e19473601f84804f9674b92e6bab21062292c", [{0x1, 0x22, "f098219471abd8d904333a8a0f11f40e94d9d238b9ed7e8f9464be247078366b8c7f"}, {0x1, 0xc, "6dd04aa3f8531e12814bc515"}, {0x2, 0x19, "2558b659500ee73c7971559f8aa758ef6208c4b107d02668c8"}, {0x4, 0x11, "df43f15b0365e2fcfde5d4b17d74e56c37"}, {0x1, 0x1e, "fa48ee6d85617705a9e21aa424553334884a88797b60e94648eafa2a3787"}, {0x3, 0x25, "3316b4deda558f5749eed3a9f6092cbe72dd8c9b5d5cce9f484614d51cea4b3896f90b613d"}, {0x1}, {0x3}]}}, @preq={0x82, 0x8e, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x5, 0x3, @device_b, 0x7, @value=@broadcast, 0x2, 0x8dcb, 0xa, [{{0x0, 0x0, 0x1}, @device_b, 0x1000}, {{}, @broadcast, 0x8}, {{}, @broadcast, 0x80}, {{0x1}, @device_b, 0x4}, {{0x1, 0x0, 0x1}, @device_b, 0x3}, {{}, @device_a, 0xe}, {{0x1}, @device_a, 0x48000000}, {{0x1}, @broadcast, 0xe2}, {{0x1, 0x0, 0x1}, @device_b, 0x3ff}, {{0x0, 0x0, 0x1}, @device_b, 0x1}]}}, @gcr_ga={0xbd, 0x6, @broadcast}, @dsss={0x3, 0x1, 0xb2}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1068, 0x7f, [@measure_req={0x26, 0x1003, {0xca, 0x71, 0x0, "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"}}, @link_id={0x65, 0x12, {@random="b8333c0576b4", @device_b, @device_b}}, @ssid={0x0, 0x6, @default_ap_ssid}, @preq={0x82, 0x41, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x0, 0x35, 0x3, @broadcast, 0x161, @value=@device_b, 0x4, 0x9, 0x3, [{{0x1, 0x0, 0x1}, @device_a, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0x5}, {{}, @broadcast, 0xffffffff}]}}]}]}, 0x1e3c}, 0x1, 0x0, 0x0, 0x10}, 0x44000) 198.400097ms ago: executing program 9 (id=964): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000001580)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001600)=0x14) sendmsg$nl_route(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="9b060000003800001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r4 = socket$inet(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r5 = getpid() syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x804, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'cp950'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@uni_xlateno}, {@fat=@dmask={'dmask', 0x3d, 0x8}}, {@rodir}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@shortname_mixed}, {@shortname_mixed}, {@utf8}, {@fat=@nocase}, {@uni_xlate}, {@rodir}]}, 0x1, 0x2a6, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000600)='./file1/../file0\x00', 0x802077, 0x0, 0xfc, 0x0, &(0x7f0000000680)) sched_setscheduler(r5, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000007c0), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000800), 0x80002c1, 0x2, 0x0) memfd_create(&(0x7f0000000840)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x99\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#\xd3\xd1\xfb\x8aeco\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedpSh \xa0\xf0QI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe5\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\x00\x00\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1f, 0x0, 0x0, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x39}, 0x94) syz_mount_image$ext4(&(0x7f0000000a80)='ext4\x00', &(0x7f0000000ac0)='./file1\x00', 0x2200002, &(0x7f0000000b00), 0x1, 0x585, &(0x7f0000000b40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./proc\x00', 0x180) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001700)={'bond0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1e, 0x4, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0xd5ed, './file0/file0\x00'}}) sendmsg$nl_route(r9, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=@newlink={0x4c, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x4008010) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 134.834525ms ago: executing program 4 (id=965): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40042, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x804) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004540000000c0a090000000000000000000a0000060900020073797a31000000000900010073797a310000000028000380180000800c00018006000100d103000008000340000000010c00008008000340000000022c0000000e0a010200000000000000000a0000000900020073797a31000000000900010073797a3100"], 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 4 (id=966): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000068a000000000000041f00181801000020696c2500000000002020207ba1d8fd000000007ba1000000000000040100000400ffffb702000008001f00b703000002000020850000002effb00095"], &(0x7f0000000140)='syzkaller\x00', 0xa, 0xffa, &(0x7f0000000a40)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x11, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x140, 0xa8, 0xfeffffff, 0xa8, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'veth1_to_batadv\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x7], 0x6, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0xff04, 0x0) (async) open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) (async) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000300)={0xfffffffd, {0x1, 0x0}, 0x0, 0x14}) (async) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000340)={0x1, {0x1, 0x1}, 0x1, 0x6}) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) open_tree(0xffffffffffffff9c, 0x0, 0xce8c07424292a66d) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, 0x0, 0x0) ioctl$RUN_ARRAY(r0, 0x400c0930, &(0x7f0000000380)) (async) pwrite64(r0, 0x0, 0x0, 0x1000) (async) io_setup(0x2278, 0x0) ioctl$STOP_ARRAY(r0, 0x932, 0x0) kernel console output (not intermixed with test programs): [1, 0] type 2 family 0 port 6081 - 0 [ 127.308590][ T41] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.333103][ T1196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.333113][ T1196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.341325][ T6722] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.341654][ T6722] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.353552][ T6722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.353561][ T6722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.484086][ T4740] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 127.564712][ T4426] 8021q: adding VLAN 0 to HW filter on device eth14 [ 127.730101][ T4733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.758463][ T4426] 8021q: adding VLAN 0 to HW filter on device eth15 [ 127.925443][ T6889] batman_adv: batadv0: Adding interface: syz_tun [ 127.925457][ T6889] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.925473][ T6889] batman_adv: batadv0: Interface activated: syz_tun [ 128.202314][ T6908] kernel profiling enabled (shift: 0) [ 128.233050][ T6903] bridge1: entered promiscuous mode [ 128.358961][ T6922] set_capacity_and_notify: 1 callbacks suppressed [ 128.358974][ T6922] loop5: detected capacity change from 0 to 512 [ 128.370139][ T6922] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.361: bg 0: block 7: invalid block bitmap [ 128.370160][ T6922] loop5: lost filesystem error report for type 5 error -117 [ 128.371283][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 128.371297][ C0] EXT4-fs (loop5): initial error at time 128: ext4_validate_block_bitmap:436 [ 128.371310][ C0] EXT4-fs (loop5): last error at time 128: ext4_validate_block_bitmap:436 [ 128.389071][ T6922] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 128.389089][ T6922] loop5: lost filesystem error report for type 5 error -117 [ 128.390670][ T6922] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2933: inode #11: comm syz.5.361: corrupted xattr block 95: invalid header [ 128.390691][ T6922] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 128.400546][ T6922] EXT4-fs warning (device loop5): ext4_evict_inode:288: xattr delete (err -117) [ 128.400632][ T6922] EXT4-fs (loop5): 1 orphan inode deleted [ 128.409082][ T6922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.456885][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.724670][ T6961] loop8: detected capacity change from 0 to 512 [ 128.737239][ T6961] EXT4-fs warning (device loop8): read_mmp_block:110: Error -117 while reading MMP block 12 [ 128.985210][ T6985] loop7: detected capacity change from 0 to 512 [ 128.989418][ T6985] EXT4-fs: Ignoring removed orlov option [ 128.994244][ T6985] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 128.994253][ T6985] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 129.006889][ T6985] EXT4-fs (loop7): 1 truncate cleaned up [ 129.007349][ T6985] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.029578][ T6985] EXT4-fs error (device loop7): __ext4_expand_extra_isize:6542: inode #15: comm syz.7.371: bad extra_isize 62 (inode size 256) [ 129.035658][ T6985] EXT4-fs error (device loop7): __ext4_expand_extra_isize:6542: inode #15: comm syz.7.371: bad extra_isize 62 (inode size 256) [ 129.039299][ T6985] EXT4-fs error (device loop7): __ext4_expand_extra_isize:6542: inode #15: comm syz.7.371: bad extra_isize 62 (inode size 256) [ 129.042774][ T6985] EXT4-fs error (device loop7): __ext4_expand_extra_isize:6542: inode #15: comm syz.7.371: bad extra_isize 62 (inode size 256) [ 129.128264][ T5745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.233901][ T7009] loop7: detected capacity change from 0 to 512 [ 129.234372][ T7009] EXT4-fs: Ignoring removed nobh option [ 129.247624][ T7009] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 129.247761][ T7009] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -61 [ 129.248025][ T7009] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #13: comm syz.7.373: inode has both inline data and extents flags [ 129.248043][ T7009] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 129.248249][ T7009] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.373: couldn't read orphan inode 13 (err -117) [ 129.248262][ T7009] loop7: lost filesystem error report for type 5 error -117 [ 129.250446][ T7009] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.531484][ T4740] Bluetooth: hci2: command tx timeout [ 129.597375][ T7045] syzkaller0: entered promiscuous mode [ 129.597396][ T7045] syzkaller0: entered allmulticast mode [ 130.170349][ T5745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.182695][ T7076] 9p: Bad value for 'wfdno' [ 130.183029][ T7081] fuse: fd is not a fuse device [ 130.183124][ T7079] fuse: fd is not a fuse device [ 130.193859][ T7076] loop5: detected capacity change from 0 to 512 [ 130.194201][ T7076] /dev/loop5: Can't open blockdev [ 130.214859][ T7079] __nla_validate_parse: 1 callbacks suppressed [ 130.214872][ T7079] netlink: 32 bytes leftover after parsing attributes in process `syz.0.385'. [ 130.217606][ T7077] tc_dump_action: action bad kind [ 130.310739][ T7095] netlink: 'syz.7.389': attribute type 10 has an invalid length. [ 130.327191][ T7095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.328122][ T7095] team0: Port device netdevsim1 added [ 130.339737][ T7094] netlink: 'syz.7.389': attribute type 10 has an invalid length. [ 130.362879][ T7100] cgroup: Unknown subsys name 'pcr' [ 130.365796][ T7099] cgroup: Unknown subsys name 'pcr' [ 130.396321][ T7102] loop8: detected capacity change from 0 to 512 [ 130.399301][ T7102] EXT4-fs (loop8): Test dummy encryption mode enabled [ 130.469806][ T7102] EXT4-fs (loop8): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.518301][ T7112] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 130.534211][ T6610] EXT4-fs (loop8): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 130.658845][ T7116] loop8: detected capacity change from 0 to 256 [ 130.659284][ T7116] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.839928][ T7121] netlink: 76 bytes leftover after parsing attributes in process `syz.8.396'. [ 130.893089][ T7127] lo: entered allmulticast mode [ 131.188545][ T7139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.397'. [ 131.188561][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.5.397'. [ 131.302244][ T7146] netlink: 24 bytes leftover after parsing attributes in process `syz.5.398'. [ 131.331065][ T7155] No control pipe specified [ 131.340944][ T7150] FAULT_INJECTION: forcing a failure. [ 131.340944][ T7150] name failslab, interval 1, probability 0, space 0, times 0 [ 131.340962][ T7150] CPU: 1 UID: 0 PID: 7150 Comm: syz.7.400 Tainted: G L syzkaller #0 PREEMPT [ 131.340973][ T7150] Tainted: [L]=SOFTLOCKUP [ 131.340976][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 131.340981][ T7150] Call trace: [ 131.340984][ T7150] show_stack+0x2c/0x3c (C) [ 131.340999][ T7150] __dump_stack+0x30/0x40 [ 131.341006][ T7150] dump_stack_lvl+0xd8/0x12c [ 131.341014][ T7150] dump_stack+0x1c/0x28 [ 131.341021][ T7150] should_fail_ex+0x418/0x58c [ 131.341030][ T7150] should_failslab+0xc4/0x120 [ 131.341039][ T7150] __kmalloc_cache_noprof+0x94/0x5fc [ 131.341048][ T7150] cgroup_show_path+0xac/0x5a0 [ 131.341056][ T7150] kernfs_sop_show_path+0xd4/0x114 [ 131.341067][ T7150] show_path+0x90/0xc4 [ 131.341074][ T7150] show_mountinfo+0x174/0x65c [ 131.341083][ T7150] m_show+0x6c/0x80 [ 131.341093][ T7150] seq_read_iter+0x808/0xbe8 [ 131.341101][ T7150] vfs_read+0x498/0x8c8 [ 131.341109][ T7150] ksys_read+0x12c/0x228 [ 131.341116][ T7150] __arm64_sys_read+0x84/0x98 [ 131.341124][ T7150] invoke_syscall+0x98/0x244 [ 131.341132][ T7150] el0_svc_common+0xec/0x23c [ 131.341147][ T7150] do_el0_svc+0x4c/0x5c [ 131.341155][ T7150] el0_svc+0x60/0x1d8 [ 131.341164][ T7150] el0t_64_sync_handler+0x44/0x104 [ 131.341172][ T7150] el0t_64_sync+0x198/0x19c [ 131.343604][ T7150] netlink: 104 bytes leftover after parsing attributes in process `syz.7.400'. [ 131.412899][ T7161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.478235][ T7161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.523706][ T7163] process 'syz.7.402' launched '/dev/fd/6' with NULL argv: empty string added [ 131.572225][ T7171] overlayfs: failed to resolve './cgroup': -2 [ 131.611402][ T4740] Bluetooth: hci2: command tx timeout [ 132.033988][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e88d4dcf: rx timeout, send abort [ 132.534777][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e88d4dcf: abort rx timeout. Force session deactivation [ 133.077897][ T7223] loop5: detected capacity change from 0 to 1024 [ 133.081471][ T7223] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 133.081471][ T7223] [ 133.081489][ T7223] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 133.086531][ T7223] FAULT_INJECTION: forcing a failure. [ 133.086531][ T7223] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 133.086548][ T7223] CPU: 0 UID: 0 PID: 7223 Comm: syz.5.415 Tainted: G L syzkaller #0 PREEMPT [ 133.086560][ T7223] Tainted: [L]=SOFTLOCKUP [ 133.086563][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 133.086568][ T7223] Call trace: [ 133.086571][ T7223] show_stack+0x2c/0x3c (C) [ 133.086585][ T7223] __dump_stack+0x30/0x40 [ 133.086594][ T7223] dump_stack_lvl+0xd8/0x12c [ 133.086602][ T7223] dump_stack+0x1c/0x28 [ 133.086610][ T7223] should_fail_ex+0x418/0x58c [ 133.086621][ T7223] should_fail+0x14/0x24 [ 133.086630][ T7223] should_fail_usercopy+0x20/0x30 [ 133.086640][ T7223] bpf_verifier_vlog+0x3f4/0xbc0 [ 133.086649][ T7223] __btf_verifier_log+0xe8/0x13c [ 133.086660][ T7223] __btf_verifier_log_type+0x464/0x5e4 [ 133.086670][ T7223] btf_datasec_check_meta+0x388/0x71c [ 133.086681][ T7223] btf_check_all_metas+0x294/0x84c [ 133.086691][ T7223] btf_parse_type_sec+0x104/0x1004 [ 133.086702][ T7223] btf_new_fd+0x33c/0x7a8 [ 133.086710][ T7223] bpf_btf_load+0x144/0x190 [ 133.086722][ T7223] __sys_bpf+0x7f0/0x82c [ 133.086733][ T7223] __arm64_sys_bpf+0xd0/0xec [ 133.086743][ T7223] invoke_syscall+0x98/0x244 [ 133.086752][ T7223] el0_svc_common+0xec/0x23c [ 133.086760][ T7223] do_el0_svc+0x4c/0x5c [ 133.086768][ T7223] el0_svc+0x60/0x1d8 [ 133.086776][ T7223] el0t_64_sync_handler+0x44/0x104 [ 133.086784][ T7223] el0t_64_sync+0x198/0x19c [ 133.245559][ T7232] loop5: detected capacity change from 0 to 256 [ 133.251763][ T7232] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.265821][ T7232] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.414361][ T7237] IPv6: addrconf: prefix option has invalid lifetime [ 133.466038][ T7245] loop5: detected capacity change from 0 to 512 [ 133.484621][ T7245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.539616][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.606388][ T7252] loop7: detected capacity change from 0 to 2048 [ 133.624087][ T7252] loop7: AHDI p3 [ 133.809902][ C1] vcan0: j1939_tp_rxtimer: 0x00000000094c0fae: rx timeout, send abort [ 133.848013][ T7119] lo: left allmulticast mode [ 134.566706][ T7269] loop5: detected capacity change from 0 to 512 [ 134.567915][ T7269] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.578898][ T7269] EXT4-fs (loop5): orphan cleanup on readonly fs [ 134.578912][ T7269] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 134.584907][ T7269] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.427: attempt to clear invalid blocks 2 len 1 [ 134.584925][ T7269] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 134.590322][ T7269] EXT4-fs (loop5): Remounting filesystem read-only [ 134.590801][ T7269] EXT4-fs (loop5): 1 truncate cleaned up [ 134.596038][ T7269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.607142][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.618612][ T7272] loop7: detected capacity change from 0 to 512 [ 134.623323][ T7272] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 134.690015][ T7283] netlink: 23 bytes leftover after parsing attributes in process `syz.5.431'. [ 134.697749][ T7277] ip_tables: iptables: counters copy to user failed while replacing table [ 134.765824][ T7287] loop5: detected capacity change from 0 to 512 [ 134.915294][ T7292] loop5: detected capacity change from 0 to 128 [ 135.093187][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.434'. [ 135.282261][ T7302] trusted_key: encrypted_key: insufficient parameters specified [ 135.523367][ T7313] loop7: detected capacity change from 0 to 512 [ 135.530976][ T7313] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 135.530989][ T7313] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 135.539352][ T7313] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.441: invalid indirect mapped block 4294967295 (level 0) [ 135.539438][ T7313] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 135.540566][ T7313] EXT4-fs (loop7): Remounting filesystem read-only [ 135.540700][ T7313] EXT4-fs (loop7): 1 orphan inode deleted [ 135.540709][ T7313] EXT4-fs (loop7): 1 truncate cleaned up [ 135.541144][ T7313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.580550][ T5745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.735262][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 135.735499][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 135.735509][ T30] audit: type=1326 audit(135.710:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7326 comm="syz.0.446" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb277a228 code=0x0 [ 135.791357][ T40] IPVS: starting estimator thread 0... [ 135.857154][ T7333] loop7: detected capacity change from 0 to 1024 [ 135.887364][ T7333] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.140900][ T7334] IPVS: using max 60 ests per chain, 144000 per kthread [ 136.564026][ T5745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 136.855861][ T7362] loop5: detected capacity change from 0 to 512 [ 136.880319][ T7362] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.880337][ T7362] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.898098][ T7362] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 136.914947][ T7371] overlayfs: failed to resolve './bus': -2 [ 136.925241][ T7362] EXT4-fs (loop5): 1 truncate cleaned up [ 136.926410][ T7362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.972345][ T7370] fuse: fd is not a fuse device [ 137.003112][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.085685][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.7.460'. [ 137.147876][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.5.462'. [ 137.256394][ T7395] ip_tables: iptables: counters copy to user failed while replacing table [ 137.433001][ T7413] No fuse device found [ 137.433029][ T7413] No fuse device found [ 137.433041][ T7413] No fuse device found [ 137.433052][ T7413] No fuse device found [ 137.433063][ T7413] No fuse device found [ 137.433073][ T7413] No fuse device found [ 137.433083][ T7413] No fuse device found [ 137.433092][ T7413] No fuse device found [ 137.433102][ T7413] No fuse device found [ 137.433111][ T7413] No fuse device found [ 137.495379][ T7417] netlink: 28 bytes leftover after parsing attributes in process `syz.7.470'. [ 137.575882][ T7419] loop7: detected capacity change from 0 to 128 [ 137.580011][ T7419] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.598539][ T7419] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.874150][ T7433] vfat: Unknown parameter 'uid>0000000000000000000' [ 138.041133][ T7434] overlayfs: failed to resolve './file0': -2 [ 138.128608][ T7435] overlayfs: missing 'lowerdir' [ 138.527353][ T7457] tmpfs: Unknown parameter 'þ€' [ 139.028197][ T7440] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 139.074846][ T7477] set_capacity_and_notify: 2 callbacks suppressed [ 139.074859][ T7477] loop8: detected capacity change from 0 to 512 [ 139.075940][ T7477] ext4: Unknown parameter 'appraise_type' [ 139.215213][ T7486] netlink: 24 bytes leftover after parsing attributes in process `syz.8.492'. [ 139.237243][ T7483] netlink: 'syz.7.491': attribute type 1 has an invalid length. [ 139.282202][ T7490] loop8: detected capacity change from 0 to 1024 [ 139.282616][ T7490] EXT4-fs: Ignoring removed orlov option [ 139.282911][ T7483] bond1: (slave geneve2): making interface the new active one [ 139.283340][ T7483] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 139.290803][ T7490] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.301545][ T1196] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.302685][ T1247] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.302712][ T1247] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.302731][ T1247] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.303563][ T7490] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 139.303657][ T7490] EXT4-fs (loop8): orphan cleanup on readonly fs [ 139.306307][ T7490] EXT4-fs error (device loop8): __ext4_get_inode_loc:4916: comm syz.8.493: Invalid inode table block 0 in block_group 0 [ 139.306325][ T7490] loop8: lost filesystem error report for type 5 error -117 [ 139.307602][ T7490] EXT4-fs (loop8): Remounting filesystem read-only [ 139.307618][ T7490] Quota error (device loop8): write_blk: dquota write failed [ 139.307646][ T7490] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 139.307699][ T7490] EXT4-fs (loop8): 1 truncate cleaned up [ 139.311900][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 139.311918][ C1] EXT4-fs (loop8): initial error at time 139: __ext4_get_inode_loc:4916 [ 139.311934][ C1] EXT4-fs (loop8): last error at time 139: __ext4_get_inode_loc:4916 [ 139.313067][ T7490] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.332519][ T7490] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 139.332936][ T7490] netlink: 32 bytes leftover after parsing attributes in process `syz.8.493'. [ 139.350223][ T7492] netlink: 32 bytes leftover after parsing attributes in process `syz.8.493'. [ 139.387448][ T6610] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.846688][ T7506] loop8: detected capacity change from 0 to 256 [ 140.209683][ T7519] veth3: entered promiscuous mode [ 140.209699][ T7519] veth3: entered allmulticast mode [ 140.334346][ T4740] Bluetooth: hci0: command 0x0401 tx timeout [ 140.439140][ T7543] bond1: entered allmulticast mode [ 140.439324][ T7543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.459535][ T7543] ip6gretap1: entered allmulticast mode [ 140.460002][ T7543] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 140.460137][ T7543] netlink: 14 bytes leftover after parsing attributes in process `syz.0.501'. [ 140.483613][ T7543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.512838][ T7543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.542330][ T1247] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 140.564432][ T7543] bond0 (unregistering): Released all slaves [ 140.654950][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 140.847673][ T7580] netlink: 766 bytes leftover after parsing attributes in process `syz.0.509'. [ 141.342281][ T7604] loop7: detected capacity change from 0 to 8192 [ 141.356395][ T7604] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.273749][ T7613] netlink: 48 bytes leftover after parsing attributes in process `syz.5.517'. [ 142.273776][ T7613] netlink: 48 bytes leftover after parsing attributes in process `syz.5.517'. [ 142.292079][ T7617] fuse: fd is not a fuse device [ 142.499083][ T7624] mmap: syz.0.519 (7624) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.729539][ T7650] xt_cgroup: no path or classid specified [ 142.740085][ T7630] mmap: syz.0.522 (7630): VmData 25870336 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 142.858085][ T7657] netlink: 132 bytes leftover after parsing attributes in process `syz.7.525'. [ 143.270753][ T7664] nvme_rdma: malformed address passed: 127.:4420 [ 143.668782][ T4741] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 143.670012][ T4741] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 143.670375][ T4741] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 143.670923][ T4741] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 143.671164][ T4741] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.771833][ T4733] batman_adv: batadv0: Interface deactivated: syz_tun [ 143.788538][ T4733] batman_adv: batadv0: Removing interface: syz_tun [ 143.844639][ T7687] rxe_eth0 speed is unknown, defaulting to 1000 [ 143.992540][ T7687] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.992605][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.992694][ T7687] bridge_slave_0: entered allmulticast mode [ 143.993366][ T7687] bridge_slave_0: entered promiscuous mode [ 144.001721][ T7687] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.001774][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.001838][ T7687] bridge_slave_1: entered allmulticast mode [ 144.002356][ T7687] bridge_slave_1: entered promiscuous mode [ 144.017003][ T7687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.018027][ T7687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.043033][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.050103][ T7687] team0: Port device team_slave_0 added [ 144.051077][ T7687] team0: Port device team_slave_1 added [ 144.063660][ T7687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.063669][ T7687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.063681][ T7687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.064285][ T7687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.064291][ T7687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.064303][ T7687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.088041][ T7687] hsr_slave_0: entered promiscuous mode [ 144.088364][ T7687] hsr_slave_1: entered promiscuous mode [ 144.088546][ T7687] debugfs: 'hsr0' already exists in 'hsr' [ 144.088556][ T7687] Cannot create hsr debugfs directory [ 144.118503][ T7736] IPv6: addrconf: prefix option has invalid lifetime [ 144.153764][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.208164][ T7687] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 144.209942][ T7687] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.210251][ T7687] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 144.216787][ T7687] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.217213][ T7687] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 144.218012][ T7740] loop8: detected capacity change from 0 to 256 [ 144.218140][ T7687] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.218450][ T7687] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 144.219230][ T7687] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 144.236414][ T7687] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.236442][ T7687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.236513][ T7687] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.236559][ T7687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.263324][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.276315][ T7687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.280424][ T5428] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.281621][ T5428] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.299423][ T7687] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.308910][ T1196] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.308938][ T1196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.310268][ T1196] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.310291][ T1196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.323437][ T7748] FAULT_INJECTION: forcing a failure. [ 144.323437][ T7748] name failslab, interval 1, probability 0, space 0, times 0 [ 144.323455][ T7748] CPU: 0 UID: 0 PID: 7748 Comm: syz.8.542 Tainted: G L syzkaller #0 PREEMPT [ 144.323467][ T7748] Tainted: [L]=SOFTLOCKUP [ 144.323471][ T7748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 144.323476][ T7748] Call trace: [ 144.323479][ T7748] show_stack+0x2c/0x3c (C) [ 144.323494][ T7748] __dump_stack+0x30/0x40 [ 144.323503][ T7748] dump_stack_lvl+0xd8/0x12c [ 144.323512][ T7748] dump_stack+0x1c/0x28 [ 144.323519][ T7748] should_fail_ex+0x418/0x58c [ 144.323531][ T7748] should_failslab+0xc4/0x120 [ 144.323541][ T7748] __kmalloc_noprof+0x108/0x6c8 [ 144.323551][ T7748] tomoyo_encode2+0x10c/0x330 [ 144.323560][ T7748] tomoyo_encode+0x34/0x50 [ 144.323568][ T7748] tomoyo_realpath_from_path+0x488/0x4dc [ 144.323577][ T7748] tomoyo_check_open_permission+0x1c4/0x394 [ 144.323590][ T7748] tomoyo_file_open+0x78/0xcc [ 144.323599][ T7748] security_file_open+0xbc/0x258 [ 144.323612][ T7748] do_dentry_open+0x2a8/0xfbc [ 144.323621][ T7748] vfs_open+0x44/0x2dc [ 144.323628][ T7748] path_openat+0x1084/0x18f0 [ 144.323641][ T7748] do_file_open+0x1c8/0x2e8 [ 144.323652][ T7748] do_sys_openat2+0x114/0x1e8 [ 144.323661][ T7748] do_sys_open+0xb0/0xe0 [ 144.323668][ T7748] __arm64_sys_openat+0xa8/0xc4 [ 144.323677][ T7748] invoke_syscall+0x98/0x244 [ 144.323686][ T7748] el0_svc_common+0xec/0x23c [ 144.323694][ T7748] do_el0_svc+0x4c/0x5c [ 144.323702][ T7748] el0_svc+0x60/0x1d8 [ 144.323710][ T7748] el0t_64_sync_handler+0x44/0x104 [ 144.323718][ T7748] el0t_64_sync+0x198/0x19c [ 144.323732][ T7748] ERROR: Out of memory at tomoyo_realpath_from_path. [ 144.327854][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.359892][ T7687] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.359906][ T7687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.499950][ T12] bridge_slave_1: left allmulticast mode [ 144.499969][ T12] bridge_slave_1: left promiscuous mode [ 144.500065][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.510954][ T12] bridge_slave_0: left allmulticast mode [ 144.510970][ T12] bridge_slave_0: left promiscuous mode [ 144.511041][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.600222][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.624376][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.638951][ T12] bond0 (unregistering): Released all slaves [ 144.668252][ T7687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.697957][ T12] tipc: Left network mode [ 144.747065][ T4426] 8021q: adding VLAN 0 to HW filter on device eth16 [ 144.800849][ T7804] futex_wake_op: syz.5.550 tries to shift op by 144; fix this program [ 144.801007][ T7804] FAULT_INJECTION: forcing a failure. [ 144.801007][ T7804] name failslab, interval 1, probability 0, space 0, times 0 [ 144.801023][ T7804] CPU: 0 UID: 0 PID: 7804 Comm: syz.5.550 Tainted: G L syzkaller #0 PREEMPT [ 144.801041][ T7804] Tainted: [L]=SOFTLOCKUP [ 144.801045][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 144.801050][ T7804] Call trace: [ 144.801053][ T7804] show_stack+0x2c/0x3c (C) [ 144.801070][ T7804] __dump_stack+0x30/0x40 [ 144.801081][ T7804] dump_stack_lvl+0xd8/0x12c [ 144.801090][ T7804] dump_stack+0x1c/0x28 [ 144.801098][ T7804] should_fail_ex+0x418/0x58c [ 144.801109][ T7804] should_failslab+0xc4/0x120 [ 144.801119][ T7804] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 144.801136][ T7804] __d_alloc+0x50/0x600 [ 144.801148][ T7804] d_alloc_pseudo+0x2c/0xd8 [ 144.801159][ T7804] alloc_path_pseudo+0xe8/0x1d4 [ 144.801170][ T7804] alloc_file_pseudo+0xb0/0x198 [ 144.801180][ T7804] __shmem_file_setup+0x210/0x284 [ 144.801190][ T7804] shmem_file_setup+0x40/0x54 [ 144.801197][ T7804] memfd_alloc_file+0x9c/0x2f0 [ 144.801209][ T7804] __arm64_sys_memfd_create+0x318/0x3ec [ 144.801221][ T7804] invoke_syscall+0x98/0x244 [ 144.801230][ T7804] el0_svc_common+0xec/0x23c [ 144.801238][ T7804] do_el0_svc+0x4c/0x5c [ 144.801246][ T7804] el0_svc+0x60/0x1d8 [ 144.801255][ T7804] el0t_64_sync_handler+0x44/0x104 [ 144.801263][ T7804] el0t_64_sync+0x198/0x19c [ 144.897646][ T7687] veth0_vlan: entered promiscuous mode [ 144.906821][ T7687] veth1_vlan: entered promiscuous mode [ 144.933384][ T7687] veth0_macvtap: entered promiscuous mode [ 144.937699][ T7687] veth1_macvtap: entered promiscuous mode [ 144.994385][ T7687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.999112][ T7687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.051616][ T5428] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.051753][ T5428] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.051769][ T5428] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.051783][ T5428] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.087474][ T4426] 8021q: adding VLAN 0 to HW filter on device eth17 [ 145.096723][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.096737][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.130085][ T12] hsr_slave_0: left promiscuous mode [ 145.130349][ T12] hsr_slave_1: left promiscuous mode [ 145.130783][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.131014][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.137692][ T12] veth1_macvtap: left allmulticast mode [ 145.137708][ T12] veth1_macvtap: left promiscuous mode [ 145.137730][ T12] veth0_macvtap: left promiscuous mode [ 145.137776][ T12] veth1_vlan: left promiscuous mode [ 145.137810][ T12] veth0_vlan: left promiscuous mode [ 145.255688][ T12] team0 (unregistering): Port device team_slave_1 removed [ 145.259425][ T12] team0 (unregistering): Port device team_slave_0 removed [ 145.329305][ T5428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.329324][ T5428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.350898][ T7828] binder: 7827:7828 ioctl c0306201 20001dc0 returned -14 [ 145.351002][ T7828] binder: 7827:7828 got reply transaction with no transaction stack [ 145.351016][ T7828] binder: 7827:7828 transaction reply to 0:0 failed 20/29201/-71, code 0 size 0-0 line 3156 [ 145.404331][ T7835] loop7: detected capacity change from 0 to 256 [ 145.481756][ T7835] rxe_eth0 speed is unknown, defaulting to 1000 [ 145.570405][ T7844] netlink: 56 bytes leftover after parsing attributes in process `syz.9.555'. [ 145.627559][ T4426] 8021q: adding VLAN 0 to HW filter on device eth18 [ 145.755276][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.8.557'. [ 145.765853][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.8.557'. [ 145.765928][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.8.557'. [ 145.765995][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.8.557'. [ 145.766049][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.8.557'. [ 145.766945][ T7870] rnbd_client L213: map_device: Parameters missing [ 145.771332][ T4740] Bluetooth: hci5: command tx timeout [ 145.829692][ T7876] syzkaller0: entered promiscuous mode [ 145.829707][ T7876] syzkaller0: entered allmulticast mode [ 145.872096][ T4426] 8021q: adding VLAN 0 to HW filter on device eth19 [ 146.177252][ T4830] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.245364][ T7894] __nla_validate_parse: 39 callbacks suppressed [ 146.245379][ T7894] netlink: 40 bytes leftover after parsing attributes in process `syz.5.562'. [ 146.331332][ T7898] netlink: 64 bytes leftover after parsing attributes in process `syz.5.563'. [ 146.547954][ T7918] ip_tables: iptables: counters copy to user failed while replacing table [ 146.548585][ T7919] ip_tables: iptables: counters copy to user failed while replacing table [ 146.558299][ T4741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.562462][ T4741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.564839][ T4741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.569330][ T4741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.570098][ T4741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.604889][ T7924] netlink: 'syz.5.570': attribute type 1 has an invalid length. [ 146.621148][ T7932] 9p: Bad value for 'rfdno' [ 146.631612][ T7932] netlink: 'syz.8.572': attribute type 29 has an invalid length. [ 146.633660][ T7938] FAULT_INJECTION: forcing a failure. [ 146.633660][ T7938] name failslab, interval 1, probability 0, space 0, times 0 [ 146.633680][ T7938] CPU: 0 UID: 0 PID: 7938 Comm: syz.5.573 Tainted: G L syzkaller #0 PREEMPT [ 146.633693][ T7938] Tainted: [L]=SOFTLOCKUP [ 146.633696][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 146.633702][ T7938] Call trace: [ 146.633705][ T7938] show_stack+0x2c/0x3c (C) [ 146.633717][ T7938] __dump_stack+0x30/0x40 [ 146.633726][ T7938] dump_stack_lvl+0xd8/0x12c [ 146.633734][ T7938] dump_stack+0x1c/0x28 [ 146.633742][ T7938] should_fail_ex+0x418/0x58c [ 146.633753][ T7938] should_failslab+0xc4/0x120 [ 146.633763][ T7938] kmem_cache_alloc_noprof+0x94/0x5d4 [ 146.633773][ T7938] alloc_empty_file+0x6c/0x1cc [ 146.633784][ T7938] alloc_file+0x58/0x98 [ 146.633794][ T7938] alloc_file_pseudo+0xe0/0x198 [ 146.633805][ T7938] sock_alloc_file+0xb4/0x1ac [ 146.633816][ T7938] __sys_socket+0x90/0xec [ 146.633826][ T7938] __arm64_sys_socket+0x84/0x9c [ 146.633837][ T7938] invoke_syscall+0x98/0x244 [ 146.633846][ T7938] el0_svc_common+0xec/0x23c [ 146.633854][ T7938] do_el0_svc+0x4c/0x5c [ 146.633862][ T7938] el0_svc+0x60/0x1d8 [ 146.633870][ T7938] el0t_64_sync_handler+0x44/0x104 [ 146.633878][ T7938] el0t_64_sync+0x198/0x19c [ 146.640887][ T7941] loop9: detected capacity change from 0 to 512 [ 146.647619][ T7941] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 146.647642][ T7941] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 146.649288][ T7941] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 146.649321][ T7941] System zones: 1-12 [ 146.683423][ T7941] EXT4-fs (loop9): 1 truncate cleaned up [ 146.683863][ T7941] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.746648][ T7921] rxe_eth0 speed is unknown, defaulting to 1000 [ 146.752952][ T7687] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.796498][ T7959] loop9: detected capacity change from 0 to 512 [ 146.803136][ T7959] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #11: comm syz.9.577: iget: bad extra_isize 544 (inode size 256) [ 146.803162][ T7959] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 146.804166][ T7959] EXT4-fs (loop9): Remounting filesystem read-only [ 146.804816][ T7959] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.807149][ T7960] loop8: detected capacity change from 0 to 512 [ 146.810320][ T7960] EXT4-fs: Ignoring removed bh option [ 146.810560][ T7960] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 146.810567][ T7960] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 146.835468][ T7960] EXT4-fs error (device loop8): __ext4_iget:5592: inode #11: block 2: comm syz.8.579: invalid block [ 146.835491][ T7960] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 146.836112][ T7960] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.579: couldn't read orphan inode 11 (err -117) [ 146.836137][ T7960] loop8: lost filesystem error report for type 5 error -117 [ 146.837038][ T7960] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.860240][ T6610] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 146.902103][ T7687] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.986080][ T7921] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.986140][ T7921] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.986200][ T7921] bridge_slave_0: entered allmulticast mode [ 146.986651][ T7921] bridge_slave_0: entered promiscuous mode [ 146.989197][ T7921] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.989219][ T7921] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.989276][ T7921] bridge_slave_1: entered allmulticast mode [ 146.989793][ T7921] bridge_slave_1: entered promiscuous mode [ 146.999839][ T7921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.002421][ T7921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.010226][ T7921] team0: Port device team_slave_0 added [ 147.011030][ T7921] team0: Port device team_slave_1 added [ 147.032211][ T7980] binder: 7977:7980 ioctl c0305602 200004c0 returned -22 [ 147.032265][ T7978] binder: 7977:7978 ioctl c0305602 200004c0 returned -22 [ 147.033440][ T7980] binder: 7977:7980 ioctl c058560f 20000800 returned -22 [ 147.033442][ T7978] binder: 7977:7978 ioctl c058560f 20000800 returned -22 [ 147.034674][ T7921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.034682][ T7921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.034699][ T7921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.035258][ T7921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.035264][ T7921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.035276][ T7921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.073644][ T7921] hsr_slave_0: entered promiscuous mode [ 147.073962][ T7921] hsr_slave_1: entered promiscuous mode [ 147.074169][ T7921] debugfs: 'hsr0' already exists in 'hsr' [ 147.074180][ T7921] Cannot create hsr debugfs directory [ 147.097891][ T7984] netlink: 72 bytes leftover after parsing attributes in process `syz.5.584'. [ 147.206010][ T7082] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.216231][ T7993] loop9: detected capacity change from 0 to 256 [ 147.329014][ T4740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.335781][ T4740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.336504][ T4740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.349847][ T4740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.355641][ T4740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.358993][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.673411][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.735946][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.592'. [ 147.768768][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.804291][ T8033] loop5: detected capacity change from 0 to 512 [ 147.816511][ T8033] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 147.816534][ T8033] EXT4-fs (loop5): invalid #clusters per group: 95 [ 147.852627][ T4741] Bluetooth: hci5: command tx timeout [ 147.870946][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.899629][ T7999] rxe_eth0 speed is unknown, defaulting to 1000 [ 148.086274][ T12] bridge_slave_1: left allmulticast mode [ 148.086293][ T12] bridge_slave_1: left promiscuous mode [ 148.086363][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.090691][ T12] bridge_slave_0: left allmulticast mode [ 148.090706][ T12] bridge_slave_0: left promiscuous mode [ 148.090772][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.438946][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.447316][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.455254][ T12] bond0 (unregistering): Released all slaves [ 148.479652][ T8091] pim6reg: entered allmulticast mode [ 148.485091][ T8081] pim6reg: left allmulticast mode [ 148.541884][ T7921] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 148.543036][ T7921] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 148.580205][ T7921] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 148.582434][ T7921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.582758][ T7921] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 148.584172][ T7921] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 148.643943][ T7921] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 148.645199][ T7921] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 148.650746][ T8113] FAULT_INJECTION: forcing a failure. [ 148.650746][ T8113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.650764][ T8113] CPU: 1 UID: 0 PID: 8113 Comm: syz.9.602 Tainted: G L syzkaller #0 PREEMPT [ 148.650776][ T8113] Tainted: [L]=SOFTLOCKUP [ 148.650779][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 148.650785][ T8113] Call trace: [ 148.650787][ T8113] show_stack+0x2c/0x3c (C) [ 148.650803][ T8113] __dump_stack+0x30/0x40 [ 148.650813][ T8113] dump_stack_lvl+0xd8/0x12c [ 148.650821][ T8113] dump_stack+0x1c/0x28 [ 148.650829][ T8113] should_fail_ex+0x418/0x58c [ 148.650840][ T8113] should_fail+0x14/0x24 [ 148.650849][ T8113] should_fail_usercopy+0x20/0x30 [ 148.650859][ T8113] bpf_verifier_vlog+0x478/0xbc0 [ 148.650868][ T8113] __btf_verifier_log+0xe8/0x13c [ 148.650883][ T8113] btf_verifier_log_member+0x3c0/0x718 [ 148.650893][ T8113] btf_struct_check_meta+0x394/0x5a4 [ 148.650904][ T8113] btf_check_all_metas+0x294/0x84c [ 148.650914][ T8113] btf_parse_type_sec+0x104/0x1004 [ 148.650926][ T8113] btf_new_fd+0x33c/0x7a8 [ 148.650934][ T8113] bpf_btf_load+0x144/0x190 [ 148.650946][ T8113] __sys_bpf+0x7f0/0x82c [ 148.650957][ T8113] __arm64_sys_bpf+0xd0/0xec [ 148.650968][ T8113] invoke_syscall+0x98/0x244 [ 148.650977][ T8113] el0_svc_common+0xec/0x23c [ 148.650985][ T8113] do_el0_svc+0x4c/0x5c [ 148.650993][ T8113] el0_svc+0x60/0x1d8 [ 148.651002][ T8113] el0t_64_sync_handler+0x44/0x104 [ 148.651010][ T8113] el0t_64_sync+0x198/0x19c [ 148.652943][ T4741] Bluetooth: hci0: command tx timeout [ 148.709943][ T7999] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.710008][ T7999] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.710079][ T7999] bridge_slave_0: entered allmulticast mode [ 148.710520][ T7999] bridge_slave_0: entered promiscuous mode [ 148.711488][ T7999] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.711509][ T7999] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.711561][ T7999] bridge_slave_1: entered allmulticast mode [ 148.711958][ T7999] bridge_slave_1: entered promiscuous mode [ 148.730639][ T7999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.734555][ T7999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.813933][ T7999] team0: Port device team_slave_0 added [ 148.860724][ T7999] team0: Port device team_slave_1 added [ 148.887538][ T8160] loop9: detected capacity change from 0 to 512 [ 148.896305][ T12] hsr_slave_0: left promiscuous mode [ 148.896570][ T12] hsr_slave_1: left promiscuous mode [ 148.896807][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.896818][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.897206][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.897216][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.903742][ T8160] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 148.919273][ T12] veth1_macvtap: left promiscuous mode [ 148.919302][ T12] veth0_macvtap: left promiscuous mode [ 148.919358][ T12] veth1_vlan: left promiscuous mode [ 148.919392][ T12] veth0_vlan: left promiscuous mode [ 148.920224][ T8160] loop9: detected capacity change from 0 to 512 [ 148.920807][ T8160] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 148.925409][ T8160] loop9: detected capacity change from 0 to 512 [ 148.932790][ T8160] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 149.020623][ T8160] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 149.056783][ T8169] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.062636][ T8169] EXT4-fs error (device loop7): ext4_validate_inode_bitmap:107: comm syz.7.606: Corrupt inode bitmap - block_group = 0, inode_bitmap = 3 [ 149.062938][ T8160] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 149.125274][ T8160] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 149.185625][ T8160] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 149.234290][ T8160] set_capacity_and_notify: 5 callbacks suppressed [ 149.234302][ T8160] loop9: detected capacity change from 0 to 512 [ 149.234862][ T12] team0 (unregistering): Port device team_slave_1 removed [ 149.238663][ T8160] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 149.254788][ T8160] loop9: detected capacity change from 0 to 512 [ 149.255691][ T8160] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 149.267594][ T12] team0 (unregistering): Port device team_slave_0 removed [ 149.273472][ T8160] loop9: detected capacity change from 0 to 512 [ 149.275659][ T8160] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 149.371381][ T4741] Bluetooth: hci2: command tx timeout [ 149.416615][ T7999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.416630][ T7999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.416643][ T7999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.440800][ T7999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.440810][ T7999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.440826][ T7999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.488030][ T5745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.509730][ T7921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.533607][ T7999] hsr_slave_0: entered promiscuous mode [ 149.539061][ T7999] hsr_slave_1: entered promiscuous mode [ 149.539479][ T7999] debugfs: 'hsr0' already exists in 'hsr' [ 149.539490][ T7999] Cannot create hsr debugfs directory [ 149.563431][ T7921] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.593584][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.593616][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.619032][ T1196] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.619068][ T1196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.880877][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.7.610'. [ 149.880972][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.7.610'. [ 149.902459][ T8237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.933964][ T4741] Bluetooth: hci5: command tx timeout [ 149.950195][ T7921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.055713][ T7921] veth0_vlan: entered promiscuous mode [ 150.058666][ T7921] veth1_vlan: entered promiscuous mode [ 150.068311][ T7921] veth0_macvtap: entered promiscuous mode [ 150.070094][ T7921] veth1_macvtap: entered promiscuous mode [ 150.076627][ T7921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.079376][ T7921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.083888][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.083992][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.084051][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.084103][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.135037][ T1303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.135051][ T1303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.153091][ T8278] FAULT_INJECTION: forcing a failure. [ 150.153091][ T8278] name failslab, interval 1, probability 0, space 0, times 0 [ 150.153113][ T8278] CPU: 1 UID: 0 PID: 8278 Comm: syz.7.613 Tainted: G L syzkaller #0 PREEMPT [ 150.153129][ T8278] Tainted: [L]=SOFTLOCKUP [ 150.153133][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 150.153138][ T8278] Call trace: [ 150.153146][ T8278] show_stack+0x2c/0x3c (C) [ 150.153163][ T8278] __dump_stack+0x30/0x40 [ 150.153174][ T8278] dump_stack_lvl+0xd8/0x12c [ 150.153184][ T8278] dump_stack+0x1c/0x28 [ 150.153192][ T8278] should_fail_ex+0x418/0x58c [ 150.153204][ T8278] should_failslab+0xc4/0x120 [ 150.153214][ T8278] __kvmalloc_node_noprof+0x160/0x7fc [ 150.153226][ T8278] io_alloc_cache_init+0x48/0x154 [ 150.153236][ T8278] io_ring_ctx_alloc+0x3e0/0x958 [ 150.153247][ T8278] io_uring_create+0x6c/0x830 [ 150.153259][ T8278] __arm64_sys_io_uring_setup+0x284/0x290 [ 150.153272][ T8278] invoke_syscall+0x98/0x244 [ 150.153281][ T8278] el0_svc_common+0xec/0x23c [ 150.153289][ T8278] do_el0_svc+0x4c/0x5c [ 150.153297][ T8278] el0_svc+0x60/0x1d8 [ 150.153306][ T8278] el0t_64_sync_handler+0x44/0x104 [ 150.153314][ T8278] el0t_64_sync+0x198/0x19c [ 150.184033][ T8278] netlink: 16 bytes leftover after parsing attributes in process `syz.7.613'. [ 150.184046][ T8278] netlink: 24 bytes leftover after parsing attributes in process `syz.7.613'. [ 150.192204][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.192217][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.198929][ T7999] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.208355][ T7999] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.208670][ T7999] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.209637][ T7999] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.210498][ T7999] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.220502][ T7999] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.220812][ T7999] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.225362][ T7999] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.295057][ T8299] loop4: detected capacity change from 0 to 2048 [ 150.295282][ T7999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.298680][ T7999] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.313388][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.313415][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.323349][ T8299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.332071][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.332106][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.355228][ T8304] netlink: 'syz.9.616': attribute type 1 has an invalid length. [ 150.363673][ T7999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.382912][ T8309] dlm: plock device version mismatch: kernel (1.2.0), user (1869670251.552346378.528026997) [ 150.548584][ T7921] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 150.748981][ T4741] Bluetooth: hci0: command tx timeout [ 150.792964][ T7921] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.795636][ T8339] loop5: detected capacity change from 0 to 1024 [ 150.796022][ T8339] EXT4-fs: Ignoring removed orlov option [ 150.823758][ T8339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.858221][ T7999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.858977][ T8339] EXT4-fs error (device loop5): __ext4_new_inode:1289: comm syz.5.621: failed to insert inode 15: doubly allocated? [ 150.871121][ T8339] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 150.889360][ T7999] veth0_vlan: entered promiscuous mode [ 150.892607][ T7999] veth1_vlan: entered promiscuous mode [ 150.917043][ T7999] veth0_macvtap: entered promiscuous mode [ 150.920939][ T7999] veth1_macvtap: entered promiscuous mode [ 150.926115][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.938637][ T7999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.941002][ T7999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.995738][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.995751][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.009872][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.009885][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.012020][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.012081][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.012098][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.012673][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.156221][ T8381] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20001000 [ 151.168951][ T8381] Memory failure: 0x216a31: unhandlable page. [ 151.168964][ T8381] Memory failure: 0x216a31: recovery action for reserved kernel page: Ignored [ 151.168985][ T8381] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20001000 [ 151.169111][ T8381] Memory failure: 0x216a31: Sending SIGBUS to syz.2.626:8381 due to hardware memory corruption [ 151.184831][ T8381] Memory failure: 0x216a31: recovery action for already poisoned page: Failed [ 151.184899][ T8381] Injecting memory failure for pfn 0x139bff at process virtual address 0x20001000 [ 151.196572][ T8381] Memory failure: 0x139bff: Sending SIGBUS to syz.2.626:8381 due to hardware memory corruption [ 151.201723][ T8381] Memory failure: 0x139bff: recovery action for dirty LRU page: Recovered [ 151.201747][ T8381] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20002000 [ 151.201766][ T8381] Memory failure: 0x216a31: Sending SIGBUS to syz.2.626:8381 due to hardware memory corruption [ 151.201777][ T8381] Memory failure: 0x216a31: recovery action for already poisoned page: Failed [ 151.368921][ T8410] ip_tables: iptables: counters copy to user failed while replacing table [ 151.427201][ T8415] loop5: detected capacity change from 0 to 512 [ 151.447113][ T8417] loop2: detected capacity change from 0 to 4096 [ 151.456791][ T4741] Bluetooth: hci2: command tx timeout [ 151.462867][ T8417] EXT4-fs (loop2): Test dummy encryption mode enabled [ 151.475870][ T8417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.477244][ T8415] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 151.477303][ T8415] System zones: 0-7 [ 151.477819][ T8415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.592487][ T8434] tcpci 0-0002: probe with driver tcpci failed with error -5 [ 151.595770][ T8434] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 151.650918][ T8436] overlayfs: overlapping lowerdir path [ 151.739720][ T7999] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.786029][ T8442] loop2: detected capacity change from 0 to 4096 [ 151.786754][ T8442] ext4: Unknown parameter 'noacl' [ 151.910854][ T8456] loop7: detected capacity change from 0 to 2048 [ 151.928117][ T4426] 8021q: adding VLAN 0 to HW filter on device eth1 [ 152.011429][ T4741] Bluetooth: hci5: command tx timeout [ 152.020239][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.477612][ T4426] 8021q: adding VLAN 0 to HW filter on device eth3 [ 152.530331][ T8482] loop2: detected capacity change from 0 to 4096 [ 152.532787][ T8482] EXT4-fs (loop2): Test dummy encryption mode enabled [ 152.534563][ T8482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.554737][ T7999] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.785219][ T4426] 8021q: adding VLAN 0 to HW filter on device eth0 [ 152.821919][ T4741] Bluetooth: hci0: command tx timeout [ 153.240310][ T4426] 8021q: adding VLAN 0 to HW filter on device eth2 [ 153.309549][ T8527] Soft offlining pfn 0x12336e at process virtual address 0x2016e000 [ 153.451482][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.474080][ T8576] netlink: 76 bytes leftover after parsing attributes in process `syz.7.653'. [ 153.504879][ T8557] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 153.504929][ T8557] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.506441][ T8557] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 153.506549][ T8557] EXT4-fs (loop4): orphan cleanup on readonly fs [ 153.508003][ T8557] EXT4-fs error (device loop4): ext4_read_inode_bitmap:169: comm syz.4.652: Inode bitmap for bg 0 marked uninitialized [ 153.508023][ T8557] loop4: lost filesystem error report for type 5 error -117 [ 153.509482][ T8557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.531417][ T4741] Bluetooth: hci2: command tx timeout [ 153.554719][ T8557] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 153.727607][ T8614] usb usb8: usbfs: process 8614 (syz.2.656) did not claim interface 0 before use [ 153.730246][ T8614] netlink: 48 bytes leftover after parsing attributes in process `syz.2.656'. [ 154.221948][ T7921] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.248818][ T8654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 154.305412][ T8667] overlayfs: missing 'lowerdir' [ 154.319233][ T8670] set_capacity_and_notify: 2 callbacks suppressed [ 154.319244][ T8670] loop9: detected capacity change from 0 to 1024 [ 154.325168][ T8670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.325205][ T8670] EXT4-fs: Ignoring removed bh option [ 154.327008][ T8670] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 154.337260][ T8670] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 154.346266][ T8670] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.357248][ T8675] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.660: bg 0: block 112: padding at end of block bitmap is not set [ 154.376451][ T8675] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28 [ 154.376478][ T8675] EXT4-fs (loop5): This should not happen!! Data will be lost [ 154.376478][ T8675] [ 154.376489][ T8675] EXT4-fs (loop5): Total free blocks count 0 [ 154.376496][ T8675] EXT4-fs (loop5): Free/Dirty block details [ 154.376511][ T8675] EXT4-fs (loop5): free_blocks=0 [ 154.376522][ T8675] EXT4-fs (loop5): dirty_blocks=64 [ 154.376528][ T8675] EXT4-fs (loop5): Block reservation details [ 154.376534][ T8675] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 154.398058][ T8681] loop4: detected capacity change from 0 to 512 [ 154.412645][ T8681] loop4: detected capacity change from 0 to 256 [ 154.505779][ T8687] netlink: 'syz.4.664': attribute type 1 has an invalid length. [ 154.505796][ T8687] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.664'. [ 154.832391][ T8685] overlayfs: missing 'lowerdir' [ 154.938437][ T4741] Bluetooth: hci0: command tx timeout [ 154.966787][ T8705] netlink: 52 bytes leftover after parsing attributes in process `syz.2.667'. [ 154.968824][ T8705] loop2: detected capacity change from 0 to 512 [ 155.489288][ T8705] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.489310][ T8705] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.624027][ T4741] Bluetooth: hci2: command tx timeout [ 155.839550][ T7687] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.844967][ T8705] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 155.896455][ T8705] EXT4-fs (loop2): 1 truncate cleaned up [ 155.896893][ T8705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.926226][ T7999] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.970404][ T8716] loop7: detected capacity change from 0 to 2048 [ 156.216371][ T8743] binder: 8715:8743 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 156.216392][ T8743] binder: 8715:8743 ioctl c0306201 20000800 returned -22 [ 156.237963][ T8716] loop7: p1 < > p4 [ 156.237963][ T8716] p4: [ 156.238798][ T8716] loop7: p4 size 722688 extends beyond EOD, truncated [ 156.248641][ T8716] loop7: p6 start 262464109 is beyond EOD, truncated [ 156.248657][ T8716] loop7: p7 size 2304 extends beyond EOD, truncated [ 156.286020][ T8750] input: syz0 as /devices/virtual/input/input6 [ 156.326320][ T5537] udevd[5537]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 156.327836][ T5295] udevd[5295]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 156.330222][ T8071] udevd[8071]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 156.330776][ T5294] udevd[5294]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 156.451491][ T8772] syzkaller1: entered promiscuous mode [ 156.451508][ T8772] syzkaller1: entered allmulticast mode [ 156.468396][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.519297][ T8793] netlink: 68 bytes leftover after parsing attributes in process `syz.5.678'. [ 156.532938][ T8790] loop4: detected capacity change from 0 to 512 [ 156.544223][ T8790] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.679: iget: bad i_size value: -4294967286 [ 156.544243][ T8790] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.544392][ T8790] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.679: couldn't read orphan inode 15 (err -117) [ 156.544405][ T8790] loop4: lost filesystem error report for type 5 error -117 [ 156.547550][ T8790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.574836][ T8800] loop5: detected capacity change from 0 to 512 [ 156.625778][ T8800] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.680: corrupted in-inode xattr: invalid ea_ino [ 156.625810][ T8800] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.629353][ T8800] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.680: couldn't read orphan inode 15 (err -117) [ 156.629369][ T8800] loop5: lost filesystem error report for type 5 error -117 [ 156.630122][ T8800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.649122][ T7921] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.713621][ T8811] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 156.736691][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.008014][ T8816] netlink: 196 bytes leftover after parsing attributes in process `syz.4.682'. [ 157.027382][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.684'. [ 157.038223][ T8831] netlink: 'syz.5.684': attribute type 1 has an invalid length. [ 157.039014][ T8840] FAULT_INJECTION: forcing a failure. [ 157.039014][ T8840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.039032][ T8840] CPU: 1 UID: 0 PID: 8840 Comm: syz.2.685 Tainted: G L syzkaller #0 PREEMPT [ 157.039044][ T8840] Tainted: [L]=SOFTLOCKUP [ 157.039047][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 157.039052][ T8840] Call trace: [ 157.039055][ T8840] show_stack+0x2c/0x3c (C) [ 157.039070][ T8840] __dump_stack+0x30/0x40 [ 157.039079][ T8840] dump_stack_lvl+0xd8/0x12c [ 157.039087][ T8840] dump_stack+0x1c/0x28 [ 157.039094][ T8840] should_fail_ex+0x418/0x58c [ 157.039105][ T8840] should_fail+0x14/0x24 [ 157.039114][ T8840] should_fail_usercopy+0x20/0x30 [ 157.039124][ T8840] _inline_copy_from_user+0x3c/0x174 [ 157.039136][ T8840] __sys_bpf+0x1b4/0x82c [ 157.039152][ T8840] __arm64_sys_bpf+0xd0/0xec [ 157.039163][ T8840] invoke_syscall+0x98/0x244 [ 157.039172][ T8840] el0_svc_common+0xec/0x23c [ 157.039181][ T8840] do_el0_svc+0x4c/0x5c [ 157.039189][ T8840] el0_svc+0x60/0x1d8 [ 157.039198][ T8840] el0t_64_sync_handler+0x44/0x104 [ 157.039206][ T8840] el0t_64_sync+0x198/0x19c [ 157.047910][ T8832] bond1: Unable to set up delay as MII monitoring is disabled [ 157.056031][ T8832] bond1 (unregistering): Released all slaves [ 157.112737][ T8831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.114970][ T8831] netlink: 'syz.5.684': attribute type 1 has an invalid length. [ 157.117264][ T8845] FAULT_INJECTION: forcing a failure. [ 157.117264][ T8845] name failslab, interval 1, probability 0, space 0, times 0 [ 157.117282][ T8845] CPU: 1 UID: 0 PID: 8845 Comm: syz.4.686 Tainted: G L syzkaller #0 PREEMPT [ 157.117293][ T8845] Tainted: [L]=SOFTLOCKUP [ 157.117296][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 157.117301][ T8845] Call trace: [ 157.117303][ T8845] show_stack+0x2c/0x3c (C) [ 157.117317][ T8845] __dump_stack+0x30/0x40 [ 157.117325][ T8845] dump_stack_lvl+0xd8/0x12c [ 157.117332][ T8845] dump_stack+0x1c/0x28 [ 157.117339][ T8845] should_fail_ex+0x418/0x58c [ 157.117349][ T8845] should_failslab+0xc4/0x120 [ 157.117358][ T8845] kmem_cache_alloc_node_noprof+0x98/0x604 [ 157.117367][ T8845] __alloc_skb+0x1f0/0x610 [ 157.117378][ T8845] netlink_alloc_large_skb+0xd4/0x114 [ 157.117388][ T8845] netlink_sendmsg+0x4c4/0x948 [ 157.117398][ T8845] __sock_sendmsg+0xc8/0x17c [ 157.117407][ T8845] ____sys_sendmsg+0x3d0/0x6c8 [ 157.117416][ T8845] ___sys_sendmsg+0x198/0x224 [ 157.117426][ T8845] __sys_sendmsg+0x158/0x204 [ 157.117435][ T8845] __arm64_sys_sendmsg+0x88/0x9c [ 157.117445][ T8845] invoke_syscall+0x98/0x244 [ 157.117452][ T8845] el0_svc_common+0xec/0x23c [ 157.117460][ T8845] do_el0_svc+0x4c/0x5c [ 157.117467][ T8845] el0_svc+0x60/0x1d8 [ 157.117475][ T8845] el0t_64_sync_handler+0x44/0x104 [ 157.117482][ T8845] el0t_64_sync+0x198/0x19c [ 157.118112][ T8831] netlink: 'syz.5.684': attribute type 1 has an invalid length. [ 157.118183][ T8831] netlink: 'syz.5.684': attribute type 1 has an invalid length. [ 157.118247][ T8831] netlink: 'syz.5.684': attribute type 1 has an invalid length. [ 157.118307][ T8831] netlink: 'syz.5.684': attribute type 1 has an invalid length. [ 157.118356][ T8831] netlink: 'syz.5.684': attribute type 1 has an invalid length. [ 157.118401][ T8831] netlink: 'syz.5.684': attribute type 1 has an invalid length. [ 157.118446][ T8831] netlink: 'syz.5.684': attribute type 1 has an invalid length. [ 157.130938][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.684'. [ 157.130956][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.153116][ T8832] bond1: entered allmulticast mode [ 157.158448][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.684'. [ 157.158465][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.158522][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.684'. [ 157.158531][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.158580][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.158624][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.158668][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.158707][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.158745][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.158784][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.158825][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.158862][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.158913][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.158949][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.158989][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.159025][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.159061][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.159098][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.159156][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.159198][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.159237][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.159273][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.159312][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.159348][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.159383][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.167074][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.167148][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.167198][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.167265][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.167313][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.167366][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.167407][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.169417][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.169485][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.169538][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.169584][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.169627][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.169682][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.169721][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.170502][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.170559][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.170606][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.170647][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.173831][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.173897][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.173952][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.174010][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.174060][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.174104][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.174150][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.174197][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.174255][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.177860][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.177914][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.177958][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.178001][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.178045][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.178085][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.178123][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.178170][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.178210][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.178248][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.178296][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.178334][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.178373][ T8832] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.743852][ T8888] Console: switching to colour dummy device 80x25 [ 157.755121][ T8888] Console: switching to colour frame buffer device 128x48 [ 157.991954][ T8901] device-mapper: table: 248:4: crypt: Error decoding and setting key (-EINVAL) [ 157.991970][ T8901] device-mapper: ioctl: error adding target to table [ 157.998563][ T8901] loop4: detected capacity change from 0 to 512 [ 158.032222][ T8901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.138581][ T7921] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.152497][ T8914] loop5: detected capacity change from 0 to 4096 [ 158.252289][ T8951] IPv6: Can't replace route, no match found [ 158.290738][ T874] rxe_eth0 speed is unknown, defaulting to 1000 [ 158.337654][ T8958] overlayfs: failed lookup in lower (newroot/20, name='file1', err=-40): overlapping layers [ 158.338155][ T8957] overlayfs: failed lookup in lower (newroot/20, name='file1', err=-40): overlapping layers [ 158.338302][ T8956] overlayfs: failed lookup in lower (newroot/20, name='bus', err=-40): overlapping layers [ 158.339499][ T8959] overlayfs: failed lookup in lower (newroot/20, name='file1', err=-40): overlapping layers [ 158.341089][ T8956] overlayfs: failed lookup in lower (newroot/20, name='bus', err=-40): overlapping layers [ 158.354509][ T8957] overlayfs: failed lookup in lower (newroot/20, name='bus', err=-40): overlapping layers [ 158.535401][ T8968] loop5: detected capacity change from 0 to 4096 [ 158.544938][ T8968] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 158.544958][ T8968] EXT4-fs (loop5): Test dummy encryption mode enabled [ 158.558395][ T8968] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 158.558448][ T8968] System zones: 0-5 [ 158.559410][ T8968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.596136][ T8968] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.704: bg 0: block 217: padding at end of block bitmap is not set [ 158.605624][ T8968] EXT4-fs (loop5): Remounting filesystem read-only [ 158.685061][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.696045][ T41] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 158.696061][ T41] Quota error (device loop5): write_blk: dquota write failed [ 158.696068][ T41] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 158.698930][ T8988] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 158.698950][ T8988] vhci_hcd vhci_hcd.2: default hub control req: 0506 v000d i0002 l0 [ 158.705138][ T8988] overlayfs: overlapping lowerdir path [ 158.880049][ T9008] __nla_validate_parse: 63 callbacks suppressed [ 158.880065][ T9008] netlink: 232 bytes leftover after parsing attributes in process `syz.9.714'. [ 158.880125][ T9008] netlink: 232 bytes leftover after parsing attributes in process `syz.9.714'. [ 158.880189][ T9008] netlink: 232 bytes leftover after parsing attributes in process `syz.9.714'. [ 158.880237][ T9008] netlink: 232 bytes leftover after parsing attributes in process `syz.9.714'. [ 158.880284][ T9008] netlink: 232 bytes leftover after parsing attributes in process `syz.9.714'. [ 158.897303][ T9008] netlink: 232 bytes leftover after parsing attributes in process `syz.9.714'. [ 158.897406][ T9008] netlink: 232 bytes leftover after parsing attributes in process `syz.9.714'. [ 158.897462][ T9008] netlink: 232 bytes leftover after parsing attributes in process `syz.9.714'. [ 158.897518][ T9008] netlink: 232 bytes leftover after parsing attributes in process `syz.9.714'. [ 158.897561][ T9008] netlink: 232 bytes leftover after parsing attributes in process `syz.9.714'. [ 158.909419][ T9009] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 158.909573][ T9009] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 158.909693][ T9009] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 158.909798][ T9009] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 158.909886][ T9009] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 158.910059][ T9009] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 158.911035][ T9009] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 158.911160][ T9009] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 158.916923][ T9009] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 158.917974][ T9009] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 159.027528][ T9019] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.074436][ T41] IPVS: starting estimator thread 0... [ 159.075068][ T4741] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 159.171336][ T9036] IPVS: using max 59 ests per chain, 141600 per kthread [ 159.539512][ T7687] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.699040][ T9095] set_capacity_and_notify: 3 callbacks suppressed [ 159.699054][ T9095] loop7: detected capacity change from 0 to 2048 [ 159.732703][ T9095] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.991988][ T5745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.019049][ T9125] FAULT_INJECTION: forcing a failure. [ 160.019049][ T9125] name failslab, interval 1, probability 0, space 0, times 0 [ 160.019069][ T9125] CPU: 1 UID: 0 PID: 9125 Comm: syz.5.727 Tainted: G L syzkaller #0 PREEMPT [ 160.019083][ T9125] Tainted: [L]=SOFTLOCKUP [ 160.019086][ T9125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 160.019092][ T9125] Call trace: [ 160.019095][ T9125] show_stack+0x2c/0x3c (C) [ 160.019111][ T9125] __dump_stack+0x30/0x40 [ 160.019120][ T9125] dump_stack_lvl+0xd8/0x12c [ 160.019129][ T9125] dump_stack+0x1c/0x28 [ 160.019137][ T9125] should_fail_ex+0x418/0x58c [ 160.019154][ T9125] should_failslab+0xc4/0x120 [ 160.019164][ T9125] kmem_cache_alloc_noprof+0x94/0x5d4 [ 160.019175][ T9125] alloc_empty_file+0x6c/0x1cc [ 160.019186][ T9125] path_openat+0x78/0x18f0 [ 160.019199][ T9125] do_file_open+0x1c8/0x2e8 [ 160.019211][ T9125] do_sys_openat2+0x114/0x1e8 [ 160.019219][ T9125] do_sys_open+0xb0/0xe0 [ 160.019227][ T9125] __arm64_sys_openat+0xa8/0xc4 [ 160.019236][ T9125] invoke_syscall+0x98/0x244 [ 160.019245][ T9125] el0_svc_common+0xec/0x23c [ 160.019254][ T9125] do_el0_svc+0x4c/0x5c [ 160.019262][ T9125] el0_svc+0x60/0x1d8 [ 160.019271][ T9125] el0t_64_sync_handler+0x44/0x104 [ 160.019279][ T9125] el0t_64_sync+0x198/0x19c [ 160.080211][ T9136] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 160.080228][ T9136] iwpm_mapping_info_cb: Unable to parse nlmsg [ 160.097638][ T9139] loop5: detected capacity change from 0 to 2048 [ 160.134544][ T9139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.139422][ T9150] loop9: detected capacity change from 0 to 256 [ 160.179668][ T9151] loop7: detected capacity change from 0 to 1024 [ 160.180048][ T9151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.180063][ T9151] EXT4-fs: Ignoring removed orlov option [ 160.203908][ T9151] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 160.244864][ T5745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 160.271397][ T9157] can0: slcan on ttyS3. [ 160.277629][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.277964][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.314912][ T5289] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 160.335185][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.398930][ T9191] loop5: detected capacity change from 0 to 512 [ 160.404673][ T9186] FAULT_INJECTION: forcing a failure. [ 160.404673][ T9186] name failslab, interval 1, probability 0, space 0, times 0 [ 160.404695][ T9186] CPU: 0 UID: 0 PID: 9186 Comm: syz.9.740 Tainted: G L syzkaller #0 PREEMPT [ 160.404709][ T9186] Tainted: [L]=SOFTLOCKUP [ 160.404712][ T9186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 160.404718][ T9186] Call trace: [ 160.404721][ T9186] show_stack+0x2c/0x3c (C) [ 160.404738][ T9186] __dump_stack+0x30/0x40 [ 160.404748][ T9186] dump_stack_lvl+0xd8/0x12c [ 160.404757][ T9186] dump_stack+0x1c/0x28 [ 160.404765][ T9186] should_fail_ex+0x418/0x58c [ 160.404777][ T9186] should_failslab+0xc4/0x120 [ 160.404789][ T9186] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 160.404802][ T9186] shmem_alloc_inode+0x2c/0x48 [ 160.404813][ T9186] alloc_inode+0x68/0x198 [ 160.404826][ T9186] new_inode+0x20/0x50 [ 160.404834][ T9186] shmem_get_inode+0xac/0x788 [ 160.404843][ T9186] __shmem_file_setup+0x168/0x284 [ 160.404852][ T9186] shmem_zero_setup+0x90/0x130 [ 160.404860][ T9186] mmap_region+0x15d0/0x1ff4 [ 160.404870][ T9186] do_mmap+0xb88/0x1104 [ 160.404881][ T9186] vm_mmap_pgoff+0x298/0x46c [ 160.404892][ T9186] ksys_mmap_pgoff+0xd0/0x5b4 [ 160.404903][ T9186] __arm64_sys_mmap+0x110/0x12c [ 160.404911][ T9186] invoke_syscall+0x98/0x244 [ 160.404921][ T9186] el0_svc_common+0xec/0x23c [ 160.404929][ T9186] do_el0_svc+0x4c/0x5c [ 160.404937][ T9186] el0_svc+0x60/0x1d8 [ 160.404947][ T9186] el0t_64_sync_handler+0x44/0x104 [ 160.404955][ T9186] el0t_64_sync+0x198/0x19c [ 160.473777][ T9191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.505403][ T9191] EXT4-fs warning (device loop5): ext4_begin_enable_verity:135: inode #15: comm syz.5.737: verity is only allowed on extent-based files [ 160.568781][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.003734][ T9140] can0 (unregistered): slcan off ttyS3. [ 161.239730][ T9194] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.239779][ T9194] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.247200][ T9194] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.248287][ T9194] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 161.248441][ T9194] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 161.249010][ T9194] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 161.249657][ T9194] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.249676][ T9194] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.251199][ T9194] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.261909][ T9194] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.261931][ T9194] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.262733][ T9194] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.305856][ T9301] loop4: detected capacity change from 0 to 8 [ 161.310969][ T9302] validate_nla: 57 callbacks suppressed [ 161.310981][ T9302] netlink: 'syz.9.748': attribute type 1 has an invalid length. [ 161.324675][ T9302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.339979][ T9302] bond1: (slave veth3): Enslaving as an active interface with a down link [ 161.370986][ T9302] bond1: (slave dummy0): making interface the new active one [ 161.373857][ T9302] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 161.375321][ T9302] netlink: 'syz.9.748': attribute type 10 has an invalid length. [ 161.375371][ T9302] dummy0: entered promiscuous mode [ 161.375906][ T9302] bond1: (slave dummy0): Releasing active interface [ 161.405978][ T9310] netlink: 'syz.9.748': attribute type 1 has an invalid length. [ 161.406925][ T9310] netlink: 'syz.9.748': attribute type 10 has an invalid length. [ 161.416464][ T9311] bond1: (slave veth5): Enslaving as an active interface with a down link [ 161.497651][ T9326] loop4: detected capacity change from 0 to 512 [ 161.503013][ T9326] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 161.528051][ T9331] loop4: detected capacity change from 0 to 512 [ 161.575655][ T9337] loop5: detected capacity change from 0 to 512 [ 161.606965][ T9337] EXT4-fs: Ignoring removed nobh option [ 161.607056][ T9337] /dev/loop5: Can't open blockdev [ 161.706047][ T9347] bridge0: port 3(syz_tun) entered blocking state [ 161.706293][ T9347] bridge0: port 3(syz_tun) entered disabled state [ 161.706465][ T9347] syz_tun: entered allmulticast mode [ 161.707241][ T9347] syz_tun: entered promiscuous mode [ 161.707558][ T9347] bridge0: port 3(syz_tun) entered blocking state [ 161.707594][ T9347] bridge0: port 3(syz_tun) entered forwarding state [ 161.766635][ T9350] loop5: detected capacity change from 0 to 512 [ 161.832746][ T9350] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.760: attempt to clear invalid blocks 2 len 1 [ 161.832770][ T9350] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 161.833557][ T9350] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 161.841791][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 161.841805][ C1] EXT4-fs (loop5): initial error at time 161: ext4_clear_blocks:876: inode 13 [ 161.841821][ C1] EXT4-fs (loop5): last error at time 161: ext4_mb_generate_buddy:1317 [ 161.853096][ T9350] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.760: invalid indirect mapped block 1819239214 (level 0) [ 161.853121][ T9350] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 161.856645][ T9350] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.760: invalid indirect mapped block 1819239214 (level 1) [ 161.856668][ T9350] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 161.869991][ T9350] EXT4-fs (loop5): 1 truncate cleaned up [ 161.878230][ T9350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.899098][ T9350] Injecting memory failure for pfn 0x120eab at process virtual address 0x20000000 [ 161.909625][ T9350] Memory failure: 0x120eab: Sending SIGBUS to syz.5.760:9350 due to hardware memory corruption [ 161.909668][ T9350] Memory failure: 0x120eab: recovery action for dirty LRU page: Recovered [ 161.909689][ T9350] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20001000 [ 161.909707][ T9350] Memory failure: 0x216a31: Sending SIGBUS to syz.5.760:9350 due to hardware memory corruption [ 161.909717][ T9350] Memory failure: 0x216a31: recovery action for already poisoned page: Failed [ 161.987085][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.014387][ T9375] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 162.014458][ T9375] block device autoloading is deprecated and will be removed. [ 162.272986][ T9405] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.562290][ T4741] Bluetooth: hci1: command 0x0c1a tx timeout [ 162.922027][ T7921] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.133105][ T9450] ubi0: attaching mtd0 [ 163.140442][ T9450] ubi0: scanning is finished [ 163.140464][ T9450] ubi0: empty MTD device detected [ 163.291462][ T4741] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.291495][ T4741] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.291514][ T4741] Bluetooth: hci5: command 0x0c1a tx timeout [ 163.356172][ T9450] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 163.356192][ T9450] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 163.356204][ T9450] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 163.356214][ T9450] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 163.356222][ T9450] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 163.356229][ T9450] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 163.356236][ T9450] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3858730969 [ 163.356244][ T9450] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 163.356698][ T9457] ubi0: background thread "ubi_bgt0d" started, PID 9457 [ 163.398850][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 163.416186][ T9456] batman_adv: batadv0: Adding interface: syzkaller0 [ 163.416203][ T9456] batman_adv: batadv0: Interface activated: syzkaller0 [ 163.655265][ T9469] EXT4-fs (loop5): Test dummy encryption mode enabled [ 163.667862][ T9469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.698166][ T9469] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 163.718509][ T9475] SQUASHFS error: Failed to read block 0x6ee: -5 [ 163.718523][ T9475] SQUASHFS error: Unable to read metadata cache entry [6ec] [ 163.718530][ T9475] SQUASHFS error: Unable to read inode 0x127 [ 163.747747][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.899071][ T9490] __nla_validate_parse: 71 callbacks suppressed [ 163.899086][ T9490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.783'. [ 164.199268][ T9501] netlink: 27 bytes leftover after parsing attributes in process `syz.5.786'. [ 164.310933][ T9537] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 164.310958][ T9537] EXT4-fs (loop9): Test dummy encryption mode enabled [ 164.316472][ T9537] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec0a8, mo2=0042] [ 164.316522][ T9537] System zones: 0-5 [ 164.327971][ T9537] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.350822][ T9537] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.792: bg 0: block 217: padding at end of block bitmap is not set [ 164.354174][ T9537] EXT4-fs (loop9): Remounting filesystem read-only [ 164.355380][ T9537] fs-verity (loop9, inode 15): Unknown hash algorithm number: 3 [ 164.360728][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.9.792'. [ 164.360783][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.9.792'. [ 164.424310][ T7687] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.424648][ T1303] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 164.424667][ T1303] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 164.571319][ T4741] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.736575][ T9554] net_ratelimit: 56 callbacks suppressed [ 164.736590][ T9554] openvswitch: netlink: Actions may not be safe on all matching packets [ 164.766236][ T9557] set_capacity_and_notify: 4 callbacks suppressed [ 164.766308][ T9557] loop7: detected capacity change from 0 to 512 [ 164.787680][ T9561] netlink: 60 bytes leftover after parsing attributes in process `syz.2.799'. [ 164.832529][ T9572] xt_hashlimit: Unknown mode mask 8E79, kernel too old? [ 164.866389][ T9582] xt_hashlimit: Unknown mode mask 8E79, kernel too old? [ 164.943476][ T1196] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.371497][ T4749] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.371528][ T4749] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.371599][ T4741] Bluetooth: hci5: command 0x0c1a tx timeout [ 165.451862][ T4751] Bluetooth: hci4: command 0x1003 tx timeout [ 165.451931][ T4740] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 165.768587][ T4842] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 165.798135][ T4842] batman_adv: batadv0: Removing interface: syzkaller0 [ 165.831888][ T9622] loop7: detected capacity change from 0 to 512 [ 165.839578][ T9622] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 165.846274][ T9622] EXT4-fs (loop7): orphan cleanup on readonly fs [ 165.846527][ T9622] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 165.846609][ T9622] EXT4-fs warning (device loop7): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 165.846659][ T9622] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 165.847722][ T9622] EXT4-fs error (device loop7): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 165.849447][ T9622] EXT4-fs (loop7): Remounting filesystem read-only [ 165.849860][ T9622] EXT4-fs (loop7): 1 truncate cleaned up [ 165.850304][ T9622] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.933406][ T9630] loop9: detected capacity change from 0 to 512 [ 165.933794][ T9630] EXT4-fs: Ignoring removed nobh option [ 165.933803][ T9630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.946508][ T9630] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.966868][ T9630] sctp: [Deprecated]: syz.9.814 (pid 9630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.966868][ T9630] Use struct sctp_sack_info instead [ 165.984091][ T7687] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.002308][ T5745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.042238][ T9639] loop7: detected capacity change from 0 to 8192 [ 166.133600][ T4740] Bluetooth: hci5: unexpected event 0x0f length: 84 > 4 [ 166.133624][ T4740] Bluetooth: hci5: unexpected event for opcode 0x0411 [ 166.139710][ T9646] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 166.249158][ T9653] netlink: 14 bytes leftover after parsing attributes in process `syz.5.821'. [ 166.252558][ T9653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.259117][ T9653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.296053][ T9653] bond0 (unregistering): Released all slaves [ 166.456395][ T9666] geneve2: entered promiscuous mode [ 166.521201][ T9670] loop5: detected capacity change from 0 to 512 [ 166.544060][ T9670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.547006][ T9670] EXT4-fs (loop5): shut down requested (1) [ 166.578077][ T4740] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 166.578222][ T9674] netlink: 'syz.7.828': attribute type 15 has an invalid length. [ 166.598389][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.604910][ T4740] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 166.605875][ T9674] netlink: 'syz.7.828': attribute type 15 has an invalid length. [ 166.651378][ T4740] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.756322][ T9687] input: syz1 as /devices/virtual/input/input7 [ 166.779810][ T9687] syzkaller0: entered promiscuous mode [ 166.779825][ T9687] syzkaller0: entered allmulticast mode [ 167.081783][ T30] audit: type=1326 audit(166.930:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.5.833" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8117a228 code=0x7ffc0000 [ 167.081895][ T30] audit: type=1326 audit(166.930:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.5.833" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff8117a228 code=0x7ffc0000 [ 167.081963][ T30] audit: type=1326 audit(166.930:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.5.833" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8117a228 code=0x7ffc0000 [ 167.082021][ T30] audit: type=1326 audit(166.930:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.5.833" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8115d0ec code=0x7ffc0000 [ 167.082078][ T30] audit: type=1326 audit(166.930:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.5.833" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff8117b8cc code=0x7ffc0000 [ 167.082135][ T30] audit: type=1326 audit(166.930:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.5.833" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8117a228 code=0x7ffc0000 [ 167.082218][ T30] audit: type=1326 audit(166.930:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.5.833" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff8117b8cc code=0x7ffc0000 [ 167.212830][ T9699] loop9: detected capacity change from 0 to 1024 [ 167.213306][ T9699] EXT4-fs: quotafile must be on filesystem root [ 167.267294][ T9703] netlink: 40 bytes leftover after parsing attributes in process `syz.4.836'. [ 167.307536][ T9707] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 167.330334][ T9713] loop4: detected capacity change from 0 to 1024 [ 167.336525][ T9713] EXT4-fs: quotafile must be on filesystem root [ 167.436623][ T9715] loop9: detected capacity change from 0 to 128 [ 167.519324][ T4740] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.519358][ T4740] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.696058][ T9717] loop4: detected capacity change from 0 to 128 [ 167.770776][ T9717] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 167.808554][ T9716] EXT4-fs (loop4): shut down requested (1) [ 167.844626][ T9576] nvme nvme1: rdma connection establishment failed (-512) [ 167.858820][ T9579] nvme nvme1: rdma connection establishment failed (-512) [ 167.877881][ T9710] nvme_fabrics: missing parameter 'transport=%s' [ 167.877894][ T9710] nvme_fabrics: missing parameter 'nqn=%s' [ 168.058577][ T4751] Bluetooth: hci2: unexpected subevent 0x05 length: 18 > 12 [ 168.064546][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.849'. [ 168.168006][ T9758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.852'. [ 168.402440][ T7921] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.494260][ T9764] loop9: detected capacity change from 0 to 2048 [ 168.566698][ T9764] loop9: p1 p2 p3 p4 [ 168.566698][ T9764] p1: [ 168.566774][ T9764] loop9: p1 size 67110656 extends beyond EOD, truncated [ 168.575678][ T9764] loop9: p3 size 134217728 extends beyond EOD, truncated [ 168.577513][ T9764] loop9: p4 size 4278190080 extends beyond EOD, truncated [ 168.579878][ T9764] loop9: p5 size 67110656 extends beyond EOD, truncated [ 168.580658][ T9764] loop9: p6 size 134217728 extends beyond EOD, truncated [ 168.895011][ T9802] netlink: 108 bytes leftover after parsing attributes in process `syz.5.865'. [ 168.964797][ T9810] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 169.124571][ T9827] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 169.124594][ T9827] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.125876][ T9827] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.873: invalid indirect mapped block 9 (level 0) [ 169.125897][ T9827] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 169.127883][ T9827] EXT4-fs (loop4): 1 truncate cleaned up [ 169.128334][ T9827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.157186][ T1247] IPVS: starting estimator thread 0... [ 169.159242][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.873'. [ 169.226597][ T9849] netlink: 44 bytes leftover after parsing attributes in process `syz.5.878'. [ 169.226617][ T9849] netlink: 43 bytes leftover after parsing attributes in process `syz.5.878'. [ 169.226627][ T9849] netlink: 'syz.5.878': attribute type 5 has an invalid length. [ 169.226635][ T9849] netlink: 43 bytes leftover after parsing attributes in process `syz.5.878'. [ 169.241391][ T9829] IPVS: using max 59 ests per chain, 141600 per kthread [ 169.272065][ T7921] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.300284][ T9858] binder: 9856:9858 Acquire 1 refcount change on invalid ref 0 ret -22 [ 169.300309][ T9858] binder: 9856:9858 ioctl c0306201 20000300 returned -14 [ 169.300500][ T9858] binder: 9856:9858 Acquire 1 refcount change on invalid ref 0 ret -22 [ 169.300943][ T9858] netlink: 44 bytes leftover after parsing attributes in process `syz.2.882'. [ 169.314309][ T9858] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.882: inode has both inline data and extents flags [ 169.314330][ T9858] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 169.314477][ T9858] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.882: couldn't read orphan inode 15 (err -117) [ 169.314490][ T9858] loop2: lost filesystem error report for type 5 error -117 [ 169.315264][ T9858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.316365][ T9858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.362119][ T9866] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.367661][ T9866] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 169.418740][ T9869] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 169.418763][ T9869] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.431844][ T9869] EXT4-fs (loop4): 1 truncate cleaned up [ 169.437554][ T9869] tmpfs: Bad value for 'mpol' [ 169.685030][ T9896] FAULT_INJECTION: forcing a failure. [ 169.685030][ T9896] name failslab, interval 1, probability 0, space 0, times 0 [ 169.685056][ T9896] CPU: 1 UID: 0 PID: 9896 Comm: syz.2.893 Tainted: G L syzkaller #0 PREEMPT [ 169.685071][ T9896] Tainted: [L]=SOFTLOCKUP [ 169.685075][ T9896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 169.685081][ T9896] Call trace: [ 169.685084][ T9896] show_stack+0x2c/0x3c (C) [ 169.685100][ T9896] __dump_stack+0x30/0x40 [ 169.685110][ T9896] dump_stack_lvl+0xd8/0x12c [ 169.685119][ T9896] dump_stack+0x1c/0x28 [ 169.685126][ T9896] should_fail_ex+0x418/0x58c [ 169.685137][ T9896] should_failslab+0xc4/0x120 [ 169.685154][ T9896] kmem_cache_alloc_noprof+0x94/0x5d4 [ 169.685165][ T9896] alloc_empty_file+0x6c/0x1cc [ 169.685177][ T9896] alloc_file+0x58/0x98 [ 169.685187][ T9896] alloc_file_pseudo+0xe0/0x198 [ 169.685198][ T9896] __shmem_file_setup+0x210/0x284 [ 169.685207][ T9896] shmem_zero_setup+0x90/0x130 [ 169.685215][ T9896] mmap_region+0x15d0/0x1ff4 [ 169.685224][ T9896] do_mmap+0xb88/0x1104 [ 169.685235][ T9896] vm_mmap_pgoff+0x298/0x46c [ 169.685246][ T9896] ksys_mmap_pgoff+0xd0/0x5b4 [ 169.685257][ T9896] __arm64_sys_mmap+0x110/0x12c [ 169.685265][ T9896] invoke_syscall+0x98/0x244 [ 169.685274][ T9896] el0_svc_common+0xec/0x23c [ 169.685283][ T9896] do_el0_svc+0x4c/0x5c [ 169.685291][ T9896] el0_svc+0x60/0x1d8 [ 169.685299][ T9896] el0t_64_sync_handler+0x44/0x104 [ 169.685307][ T9896] el0t_64_sync+0x198/0x19c [ 170.060581][ T9943] FAULT_INJECTION: forcing a failure. [ 170.060581][ T9943] name failslab, interval 1, probability 0, space 0, times 0 [ 170.060604][ T9943] CPU: 1 UID: 0 PID: 9943 Comm: syz.7.904 Tainted: G L syzkaller #0 PREEMPT [ 170.060616][ T9943] Tainted: [L]=SOFTLOCKUP [ 170.060620][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 170.060625][ T9943] Call trace: [ 170.060628][ T9943] show_stack+0x2c/0x3c (C) [ 170.060643][ T9943] __dump_stack+0x30/0x40 [ 170.060652][ T9943] dump_stack_lvl+0xd8/0x12c [ 170.060660][ T9943] dump_stack+0x1c/0x28 [ 170.060668][ T9943] should_fail_ex+0x418/0x58c [ 170.060679][ T9943] should_failslab+0xc4/0x120 [ 170.060689][ T9943] kmem_cache_alloc_noprof+0x94/0x5d4 [ 170.060699][ T9943] alloc_empty_file+0x6c/0x1cc [ 170.060710][ T9943] alloc_file+0x58/0x98 [ 170.060720][ T9943] alloc_file_pseudo+0xe0/0x198 [ 170.060731][ T9943] __shmem_file_setup+0x210/0x284 [ 170.060740][ T9943] shmem_zero_setup+0x90/0x130 [ 170.060748][ T9943] mmap_region+0x15d0/0x1ff4 [ 170.060757][ T9943] do_mmap+0xb88/0x1104 [ 170.060768][ T9943] vm_mmap_pgoff+0x298/0x46c [ 170.060779][ T9943] ksys_mmap_pgoff+0xd0/0x5b4 [ 170.060789][ T9943] __arm64_sys_mmap+0x110/0x12c [ 170.060798][ T9943] invoke_syscall+0x98/0x244 [ 170.060807][ T9943] el0_svc_common+0xec/0x23c [ 170.060815][ T9943] do_el0_svc+0x4c/0x5c [ 170.060823][ T9943] el0_svc+0x60/0x1d8 [ 170.060832][ T9943] el0t_64_sync_handler+0x44/0x104 [ 170.060840][ T9943] el0t_64_sync+0x198/0x19c [ 170.083894][ T9945] netlink: 'syz.7.905': attribute type 1 has an invalid length. [ 170.084310][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.7.905'. [ 170.087308][ T9945] set_capacity_and_notify: 7 callbacks suppressed [ 170.087318][ T9945] loop7: detected capacity change from 0 to 1024 [ 170.090846][ T9945] EXT4-fs: Ignoring removed nobh option [ 170.090887][ T9945] EXT4-fs: Ignoring removed bh option [ 170.091915][ T4751] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.092443][ T9945] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 170.109036][ T9942] netlink: 'syz.9.903': attribute type 10 has an invalid length. [ 170.112791][ T9945] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 170.112827][ T9945] System zones: 0-1, 3-12 [ 170.138522][ T9949] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 170.148560][ T9942] netlink: 'syz.9.903': attribute type 10 has an invalid length. [ 170.160785][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.907'. [ 170.454416][ T9963] IPVS: dh: TCP 127.0.0.1:5376 - no destination available [ 170.460675][ T9965] loop5: detected capacity change from 0 to 128 [ 170.563742][ T9982] loop5: detected capacity change from 0 to 128 [ 170.748041][ T9993] ptrace attach of ""[9994] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[9993] [ 171.004787][T10011] FAULT_INJECTION: forcing a failure. [ 171.004787][T10011] name failslab, interval 1, probability 0, space 0, times 0 [ 171.004813][T10011] CPU: 1 UID: 0 PID: 10011 Comm: syz.7.916 Tainted: G L syzkaller #0 PREEMPT [ 171.004830][T10011] Tainted: [L]=SOFTLOCKUP [ 171.004834][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 171.004840][T10011] Call trace: [ 171.004843][T10011] show_stack+0x2c/0x3c (C) [ 171.004859][T10011] __dump_stack+0x30/0x40 [ 171.004869][T10011] dump_stack_lvl+0xd8/0x12c [ 171.004878][T10011] dump_stack+0x1c/0x28 [ 171.004886][T10011] should_fail_ex+0x418/0x58c [ 171.004899][T10011] should_failslab+0xc4/0x120 [ 171.004910][T10011] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 171.004923][T10011] __d_alloc+0x50/0x600 [ 171.004935][T10011] d_alloc_pseudo+0x2c/0xd8 [ 171.004946][T10011] alloc_path_pseudo+0xe8/0x1d4 [ 171.004957][T10011] alloc_file_pseudo+0xb0/0x198 [ 171.004968][T10011] __shmem_file_setup+0x210/0x284 [ 171.004977][T10011] shmem_zero_setup+0x90/0x130 [ 171.004986][T10011] mmap_region+0x15d0/0x1ff4 [ 171.004995][T10011] do_mmap+0xb88/0x1104 [ 171.005007][T10011] vm_mmap_pgoff+0x298/0x46c [ 171.005018][T10011] ksys_mmap_pgoff+0xd0/0x5b4 [ 171.005029][T10011] __arm64_sys_mmap+0x110/0x12c [ 171.005038][T10011] invoke_syscall+0x98/0x244 [ 171.005047][T10011] el0_svc_common+0xec/0x23c [ 171.005055][T10011] do_el0_svc+0x4c/0x5c [ 171.005064][T10011] el0_svc+0x60/0x1d8 [ 171.005073][T10011] el0t_64_sync_handler+0x44/0x104 [ 171.005081][T10011] el0t_64_sync+0x198/0x19c [ 171.052218][T10015] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.310079][T10038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.368501][T10015] input: syz1 as /devices/virtual/input/input8 [ 171.456709][T10056] netlink: 'syz.5.922': attribute type 1 has an invalid length. [ 171.456726][T10056] netlink: 228 bytes leftover after parsing attributes in process `syz.5.922'. [ 171.914268][T10075] loop9: detected capacity change from 0 to 7 [ 171.996804][T10081] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 172.004418][T10083] FAULT_INJECTION: forcing a failure. [ 172.004418][T10083] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 172.004438][T10083] CPU: 1 UID: 0 PID: 10083 Comm: syz.4.928 Tainted: G L syzkaller #0 PREEMPT [ 172.004451][T10083] Tainted: [L]=SOFTLOCKUP [ 172.004454][T10083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 172.004459][T10083] Call trace: [ 172.004462][T10083] show_stack+0x2c/0x3c (C) [ 172.004477][T10083] __dump_stack+0x30/0x40 [ 172.004486][T10083] dump_stack_lvl+0xd8/0x12c [ 172.004495][T10083] dump_stack+0x1c/0x28 [ 172.004502][T10083] should_fail_ex+0x418/0x58c [ 172.004514][T10083] should_fail_alloc_page+0xec/0x10c [ 172.004524][T10083] prepare_alloc_pages+0x194/0x484 [ 172.004535][T10083] __alloc_frozen_pages_noprof+0x180/0x578 [ 172.004546][T10083] alloc_pages_mpol+0x1fc/0x3d0 [ 172.004557][T10083] alloc_frozen_pages_noprof+0xc4/0x10c [ 172.004569][T10083] alloc_pages_noprof+0x30/0x148 [ 172.004580][T10083] do_pte_missing+0xec0/0x28bc [ 172.004590][T10083] handle_mm_fault+0x14d0/0x2b58 [ 172.004599][T10083] __get_user_pages+0x82c/0x13b0 [ 172.004610][T10083] populate_vma_page_range+0x260/0x358 [ 172.004621][T10083] __mm_populate+0x204/0x328 [ 172.004632][T10083] vm_mmap_pgoff+0x358/0x46c [ 172.004642][T10083] ksys_mmap_pgoff+0xd0/0x5b4 [ 172.004653][T10083] __arm64_sys_mmap+0x110/0x12c [ 172.004662][T10083] invoke_syscall+0x98/0x244 [ 172.004670][T10083] el0_svc_common+0xec/0x23c [ 172.004679][T10083] do_el0_svc+0x4c/0x5c [ 172.004686][T10083] el0_svc+0x60/0x1d8 [ 172.004695][T10083] el0t_64_sync_handler+0x44/0x104 [ 172.004707][T10083] el0t_64_sync+0x198/0x19c [ 172.092594][T10097] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 172.092610][T10097] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 172.092618][T10097] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 172.092624][T10097] One or more global auth toks could not properly register; rc = [-22] [ 172.092641][T10097] Error validating options; rc = [-22] [ 172.163132][T10102] tmpfs: Bad value for 'mpol' [ 172.163827][T10102] fuse: Unknown parameter '8—Ì0x0000000000000003' [ 172.163898][T10101] tmpfs: Bad value for 'mpol' [ 172.163939][T10102] fuse: Unknown parameter '8—Ì0x0000000000000003' [ 172.165612][T10101] loop9: detected capacity change from 0 to 512 [ 172.174036][T10101] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 172.183399][T10101] EXT4-fs error (device loop9): ext4_get_journal_inode:5928: inode #5: comm syz.9.934: unexpected bad inode w/o EXT4_IGET_BAD [ 172.183420][T10101] loop9: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 172.184238][T10101] EXT4-fs (loop9): Remounting filesystem read-only [ 172.184302][T10101] EXT4-fs (loop9): no journal found [ 172.184308][T10101] EXT4-fs (loop9): can't get journal size [ 172.186195][T10101] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 172.186372][T10101] EXT4-fs (loop9): failed to initialize system zone (-117) [ 172.186432][T10101] EXT4-fs (loop9): mount failed [ 172.191389][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 172.191403][ C1] EXT4-fs (loop9): initial error at time 172: ext4_get_journal_inode:5928: inode 5 [ 172.191419][ C1] EXT4-fs (loop9): last error at time 172: ext4_get_journal_inode:5928: inode 5 [ 172.236293][T10108] FAULT_INJECTION: forcing a failure. [ 172.236293][T10108] name fail_futex, interval 1, probability 0, space 0, times 1 [ 172.236317][T10108] CPU: 1 UID: 0 PID: 10108 Comm: syz.9.935 Tainted: G L syzkaller #0 PREEMPT [ 172.236328][T10108] Tainted: [L]=SOFTLOCKUP [ 172.236334][T10108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 172.236339][T10108] Call trace: [ 172.236342][T10108] show_stack+0x2c/0x3c (C) [ 172.236358][T10108] __dump_stack+0x30/0x40 [ 172.236369][T10108] dump_stack_lvl+0xd8/0x12c [ 172.236378][T10108] dump_stack+0x1c/0x28 [ 172.236385][T10108] should_fail_ex+0x418/0x58c [ 172.236395][T10108] should_fail+0x14/0x24 [ 172.236403][T10108] get_futex_key+0x1ec/0x12b0 [ 172.236414][T10108] futex_wait_setup+0x58/0x674 [ 172.236421][T10108] __futex_wait+0x108/0x25c [ 172.236428][T10108] futex_wait+0x108/0x2c0 [ 172.236435][T10108] do_futex+0x320/0x378 [ 172.236445][T10108] __arm64_sys_futex+0x2e4/0x418 [ 172.236455][T10108] invoke_syscall+0x98/0x244 [ 172.236463][T10108] el0_svc_common+0xec/0x23c [ 172.236470][T10108] do_el0_svc+0x4c/0x5c [ 172.236477][T10108] el0_svc+0x60/0x1d8 [ 172.236485][T10108] el0t_64_sync_handler+0x44/0x104 [ 172.236492][T10108] el0t_64_sync+0x198/0x19c [ 172.286995][T10112] netlink: 12 bytes leftover after parsing attributes in process `syz.9.936'. [ 172.365167][T10131] tap0: tun_chr_ioctl cmd 1074025677 [ 172.365214][T10131] tap0: linktype set to 0 [ 172.366276][T10131] netlink: 'syz.9.939': attribute type 1 has an invalid length. [ 172.366933][T10131] tap0: tun_chr_ioctl cmd 1074025673 [ 172.366989][T10131] tap0: tun_chr_ioctl cmd 1074025677 [ 172.367030][T10131] tap0: linktype set to 0 [ 172.368407][T10135] netlink: 'syz.9.939': attribute type 1 has an invalid length. [ 172.411865][T10137] netlink: 'syz.9.940': attribute type 2 has an invalid length. [ 172.417075][T10137] †: entered promiscuous mode [ 172.640407][T10142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.941'. [ 172.640426][T10142] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 172.665459][T10144] loop2: detected capacity change from 0 to 8 [ 172.680432][T10144] SQUASHFS error: Unable to read directory block [631:26] [ 172.690193][T10144] SQUASHFS error: Unable to read directory block [631:26] [ 172.690967][T10144] SQUASHFS error: Unable to read directory block [631:26] [ 172.714194][T10148] loop2: detected capacity change from 0 to 256 [ 172.884075][T10154] loop9: detected capacity change from 0 to 1024 [ 172.934190][T10159] binder: 10158:10159 tried to acquire reference to desc 0, got 1 instead [ 172.934772][T10159] binder: 10158:10159 BC_FREE_BUFFER matched unreturned or currently freeing buffer at offset 0 [ 172.936968][T10159] FAULT_INJECTION: forcing a failure. [ 172.936968][T10159] name failslab, interval 1, probability 0, space 0, times 0 [ 172.936986][T10159] CPU: 1 UID: 0 PID: 10159 Comm: syz.2.948 Tainted: G L syzkaller #0 PREEMPT [ 172.936998][T10159] Tainted: [L]=SOFTLOCKUP [ 172.937002][T10159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 172.937007][T10159] Call trace: [ 172.937010][T10159] show_stack+0x2c/0x3c (C) [ 172.937026][T10159] __dump_stack+0x30/0x40 [ 172.937035][T10159] dump_stack_lvl+0xd8/0x12c [ 172.937043][T10159] dump_stack+0x1c/0x28 [ 172.937052][T10159] should_fail_ex+0x418/0x58c [ 172.937063][T10159] should_failslab+0xc4/0x120 [ 172.937073][T10159] kmem_cache_alloc_noprof+0x94/0x5d4 [ 172.937084][T10159] __kernfs_new_node+0xf0/0x7d8 [ 172.937093][T10159] kernfs_new_node+0xe8/0x130 [ 172.937100][T10159] __kernfs_create_file+0x60/0x2e0 [ 172.937109][T10159] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 172.937119][T10159] internal_create_group+0x550/0xb30 [ 172.937129][T10159] internal_create_groups+0x64/0x138 [ 172.937145][T10159] sysfs_create_groups+0x2c/0x3c [ 172.937155][T10159] device_add_attrs+0x17c/0x4e4 [ 172.937165][T10159] device_add+0x420/0x9e0 [ 172.937174][T10159] netdev_register_kobject+0x184/0x328 [ 172.937189][T10159] register_netdevice+0xd74/0x14c0 [ 172.937197][T10159] macsec_newlink+0x810/0x1184 [ 172.937210][T10159] rtnl_newlink_create+0x294/0x6b8 [ 172.937221][T10159] rtnl_newlink+0xfe4/0x138c [ 172.937231][T10159] rtnetlink_rcv_msg+0x66c/0x9bc [ 172.937241][T10159] netlink_rcv_skb+0x238/0x414 [ 172.937253][T10159] rtnetlink_rcv+0x28/0x38 [ 172.937262][T10159] netlink_unicast+0x600/0x7f8 [ 172.937273][T10159] netlink_sendmsg+0x648/0x948 [ 172.937285][T10159] __sock_sendmsg+0xc8/0x17c [ 172.937295][T10159] ____sys_sendmsg+0x3d0/0x6c8 [ 172.937307][T10159] ___sys_sendmsg+0x198/0x224 [ 172.937318][T10159] __sys_sendmsg+0x158/0x204 [ 172.937329][T10159] __arm64_sys_sendmsg+0x88/0x9c [ 172.937341][T10159] invoke_syscall+0x98/0x244 [ 172.937350][T10159] el0_svc_common+0xec/0x23c [ 172.937358][T10159] do_el0_svc+0x4c/0x5c [ 172.937366][T10159] el0_svc+0x60/0x1d8 [ 172.937375][T10159] el0t_64_sync_handler+0x44/0x104 [ 172.937383][T10159] el0t_64_sync+0x198/0x19c [ 173.274847][ T24] binder: undelivered TRANSACTION_COMPLETE [ 173.295845][ T4837] binder: undelivered transaction 27, process died. [ 173.339041][T10174] netlink: 'syz.7.952': attribute type 5 has an invalid length. [ 173.453184][T10192] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 173.947314][T10214] loop9: detected capacity change from 0 to 256 [ 174.062219][T10218] md: array md4 already has disks! [ 174.123747][T10223] bond2: (slave vlan2): making interface the new active one [ 174.124115][T10223] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 174.182748][T10220] ------------[ cut here ]------------ [ 174.182760][T10220] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0xe4/0x578, CPU#1: syz.4.966/10220 [ 174.185856][T10220] Modules linked in: [ 174.186554][T10220] CPU: 1 UID: 0 PID: 10220 Comm: syz.4.966 Tainted: G L syzkaller #0 PREEMPT [ 174.188495][T10220] Tainted: [L]=SOFTLOCKUP [ 174.189363][T10220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 174.191259][T10220] pstate: 23400005 (nzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 174.192748][T10220] pc : __alloc_frozen_pages_noprof+0xe4/0x578 [ 174.193902][T10220] lr : __alloc_frozen_pages_noprof+0xa8/0x578 [ 174.195082][T10220] sp : ffff800096f872e0 [ 174.195866][T10220] x29: ffff800096f873b0 x28: dfff800000000000 x27: ffff800096f87300 [ 174.197440][T10220] x26: 1ffff00011eac4ec x25: dfff800000000000 x24: ffff700012df0e60 [ 174.199050][T10220] x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000040dc0 [ 174.200694][T10220] x20: 0000000000000000 x19: 0000000000000012 x18: 00000000ffffffff [ 174.202284][T10220] x17: 0000000000000003 x16: ffff8000897f7000 x15: ffff800080ce843c [ 174.203753][T10220] x14: 0000000000000001 x13: 0000000000000005 x12: 0000000000000000 [ 174.205246][T10220] x11: 0000000000000000 x10: ffff700012df0e69 x9 : 0000000000000001 [ 174.206752][T10220] x8 : ffff80008ae88000 x7 : 0000000000000000 x6 : ffff800080167974 [ 174.208237][T10220] x5 : ffff0000de081c58 x4 : 0000000000000000 x3 : 0000000000000020 [ 174.209756][T10220] x2 : 0000000000000008 x1 : 0000000000000000 x0 : ffff800096f87320 [ 174.211360][T10220] Call trace: [ 174.212031][T10220] __alloc_frozen_pages_noprof+0xe4/0x578 (P) [ 174.213263][T10220] alloc_pages_mpol+0x1fc/0x3d0 [ 174.214275][T10220] alloc_frozen_pages_noprof+0xc4/0x10c [ 174.215375][T10220] ___kmalloc_large_node+0x74/0x158 [ 174.216411][T10220] __kmalloc_large_node_noprof+0x2c/0x8c [ 174.217526][T10220] __kmalloc_noprof+0x3f0/0x6c8 [ 174.218483][T10220] setup_conf+0x1d4/0xba0 [ 174.219357][T10220] raid1_run+0x120/0x8b8 [ 174.220194][T10220] md_run+0xb10/0x19e8 [ 174.220986][T10220] do_md_run+0x4c/0x4e4 [ 174.221791][T10220] md_ioctl+0x1bf8/0x23d4 [ 174.222650][T10220] blkdev_ioctl+0x574/0x904 [ 174.223530][T10220] __arm64_sys_ioctl+0x154/0x1cc [ 174.224526][T10220] invoke_syscall+0x98/0x244 [ 174.225451][T10220] el0_svc_common+0xec/0x23c [ 174.226378][T10220] do_el0_svc+0x4c/0x5c [ 174.227101][T10220] el0_svc+0x60/0x1d8 [ 174.227813][T10220] el0t_64_sync_handler+0x44/0x104 [ 174.228743][T10220] el0t_64_sync+0x198/0x19c [ 174.229619][T10220] irq event stamp: 318 [ 174.230426][T10220] hardirqs last enabled at (317): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 174.232433][T10220] hardirqs last disabled at (318): [] el1_brk64+0x20/0x54 [ 174.234099][T10220] softirqs last enabled at (220): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 174.236096][T10220] softirqs last disabled at (218): [] fpsimd_restore_current_state+0x44/0x9c8 [ 174.238090][T10220] ---[ end trace 0000000000000000 ]--- [ 174.262116][T10223] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 174.296521][T10223] infiniband syz0: set active [ 174.296536][T10223] infiniband syz0: added bond0 [ 174.341102][T10223] RDS/IB: syz0: added [ 174.341128][T10223] smc: adding ib device syz0 with port count 1 [ 174.341146][T10223] smc: ib device syz0 port 1 has no pnetid [ 174.608417][T10220] md: pers->run() failed ... [ 174.608591][T10219] md: could not open device unknown-block(1,9). [ 174.608611][T10219] md: error, md_import_device() returned -16 [ 174.608715][T10225] md: md4 stopped. [ 174.705819][T10218] md: invalid raid superblock magic on ram8 [ 174.705833][T10218] md: ram8 does not have a valid v0.90 superblock, not importing! [ 174.705861][T10218] md: md_import_device returned -22