last executing test programs: 19.100137704s ago: executing program 3 (id=136): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4f, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x4008002}, 0x20010) r0 = syz_open_dev$mtd(&(0x7f0000000040), 0x46, 0x8001) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1}) 18.734495261s ago: executing program 3 (id=138): syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabb8, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000500)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x2000, 0x1, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 18.442350851s ago: executing program 3 (id=144): r0 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x17e) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) 18.359515421s ago: executing program 3 (id=146): capset(&(0x7f0000000500)={0x19971634}, &(0x7f0000000200)={0x200001, 0x200003, 0x801, 0x4, 0x7, 0x4004}) (async) capset(&(0x7f0000000500)={0x19971634}, &(0x7f0000000200)={0x200001, 0x200003, 0x801, 0x4, 0x7, 0x4004}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000200)={0x1, 0x4, "d10005", 0x36, 0xb}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd06, &(0x7f00000001c0)="040000000000000000000000380100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000074") (async) ioctl(r2, 0xc138fd06, &(0x7f00000001c0)="040000000000000000000000380100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000074") r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$setstatus(r3, 0x4, 0x800) preadv2(r3, &(0x7f0000003500)=[{&(0x7f0000000180)=""/72, 0x48}], 0x1, 0x0, 0x7b, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0xfd00) io_submit(r5, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r7, &(0x7f0000000600)="01fbe27a", 0x4, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x5, 0x2, r6, 0x0}]) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) ioctl$VT_RELDISP(r0, 0x5605) (async) ioctl$VT_RELDISP(r0, 0x5605) 17.44853235s ago: executing program 3 (id=154): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r2 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r4 = syz_open_dev$ublk_bdev(&(0x7f0000001040), 0x0, 0x8a2042) pwrite64$ublk_bdev(r4, &(0x7f0000001080)="ab3f479dafa7870924e74dcc09290e1ebb46847f73076a29884a56fd4dd8f842f7938c0cadc0cdd4624b8e5c7a5f29eae6adf8b76ad7519437241012aa6d713ac8ff2bc4d0e79281d1cbe2ed974e5b064e", 0x51, 0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc}) ioctl(r5, 0x3b8f, &(0x7f0000000180)="280000000600000001000000040000000000000000000fff00100013fd78f8") ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 17.078401764s ago: executing program 3 (id=158): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002c00)={0x3c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xd714fea5a3811cb7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb0}]}, 0x3c}}, 0x40401d4) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4000000) r3 = socket$inet(0x2, 0x2, 0x1) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r4, &(0x7f0000000000), 0x0}, 0x20) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xfffd, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="7e6d020000000000", 0x8}], 0x1, &(0x7f0000000100)=ANY=[], 0x40}, 0xee00) 17.053894405s ago: executing program 32 (id=158): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002c00)={0x3c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xd714fea5a3811cb7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb0}]}, 0x3c}}, 0x40401d4) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4000000) r3 = socket$inet(0x2, 0x2, 0x1) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r4, &(0x7f0000000000), 0x0}, 0x20) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xfffd, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="7e6d020000000000", 0x8}], 0x1, &(0x7f0000000100)=ANY=[], 0x40}, 0xee00) 8.606786482s ago: executing program 0 (id=222): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x2, 'dh\x00', 0x0, 0x2, 0x28}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000040)={0xa, {0xa, 0x5, 0x100001, 0x3ffe}}) 7.51607889s ago: executing program 0 (id=231): mmap$xdp(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x8, 0x13, 0xffffffffffffffff, 0x80000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020400) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) (fail_nth: 4) 6.540520494s ago: executing program 0 (id=236): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x2ea5, &(0x7f0000000000)={0x0, 0xfffffffd, 0x1403, 0x40, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 6.202198392s ago: executing program 0 (id=242): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r4, 0x83625fc5352ba305}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x2, 'dh\x00', 0x0, 0x2, 0x28}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000040)={0xa, {0xa, 0x5, 0x100001, 0x3ffe}}) 5.464335183s ago: executing program 1 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) inotify_rm_watch(0xffffffffffffffff, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000001028500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1}, 0xfe9e, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x57) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.061413555s ago: executing program 0 (id=248): mmap$xdp(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x8, 0x13, 0xffffffffffffffff, 0x80000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020400) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) (fail_nth: 5) 4.620390053s ago: executing program 1 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082cbd7000fedbdf256b0000000a001a0008021100000100000a00060008021100000000000a001a000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x2400c000}, 0x800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) r2 = socket$inet(0x2, 0x2, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="38000000010700004443b400000000010040000200000009003019faeaab9f0d9f947a5d7f4aca2d1c55d9691790fa4004b206703a03000000f5161ec9d87bcc8dbe3422a64685b55f376db5a1589e82f98e579fd92a64f7326862312d5e0fc2aef5af87a71ffe2aaf2d16bc69805a60ed422d79cad63129564af2befd7138b2d8c7843a5a88b4d579c9f87baebeb066535eed64a85ec0e0209876310d0d1e65d1d179e1be8ea3563389602104a0131204ff61184047bd300f659ec48e8d7feaf42c75a61da158f21a79dd4cd1c08b14dd0fd9c1cba497ad260c787754b36b5c5175be99e88c3ece669f8b98a77f8d828027260f7b22987a93dd29c0d5b29f6b8d6043df5c5236698e61bee393d94bd814764d5463d4c4050eb6acc499c0a21d96e7", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@link_local, @local, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "d79a5b", 0x0, 0x16, 0xfe, @private1, @local}}}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x24, r3, 0x1, 0x4, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa8}]}, 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/numa_balancing\x00', 0x1, 0x0) write(r9, &(0x7f0000000980)="00e1e00b3b00f2dc4d0c805a64e40ecca172df57400000", 0xfffffffffffffcb8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7, @remote, 0x3}, {0xa, 0x4e21, 0x38, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0xffffffffffffffff, 0x8}}, 0x48) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_io_uring_setup(0x5032, &(0x7f0000000540)={0x0, 0xdee1, 0x200, 0x2, 0x32}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000680)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r12, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3f00008280632b89349ee9d70f70c149d1590044bc383609e57b16784c705054b455d23f4232bb7a31a0540a59076dd06c8505a6b2ce461aa5f50a3c1de7df0c327ef4eda5f9b2422d035f1f468a13d04a94d4b9cd6252f855152466c1ef60593349e974b646e797c87694cfddaeb1694b8ce79f47a9706300f66dbd9b311cff74df0f3e9cdf920d908397bb301c5996e314e1c886d8bec3c64fc7b3e5a5f12c8d452fa06b4e98a4139483bdfce952b1b6e3fdab52d6b5729c6088487ae729895e1f95e2ccd5663b3063da9193d43edb621d2545af", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="2a003300d0000000080211000001080211000000fffffffffffff00f0404000005007606050142000300000004008e00"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002bbd7000fbdb8d5df1f92806aba6b56cd9dce0b6beefaa0a"], 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) recvmmsg(r0, &(0x7f0000005880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x20000003}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/70, 0x46}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000001980)=""/4089, 0xff9}, {&(0x7f0000001880)=""/96, 0x60}, {&(0x7f0000001340)=""/230, 0xe6}, {&(0x7f0000000400)=""/117, 0x75}], 0x6}, 0x518}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000003440)=""/227, 0xe3}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000003640)=""/180, 0xb4}, {&(0x7f0000000340)=""/129, 0x81}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/91, 0x5b}], 0x6}, 0xfffffff8}], 0x7, 0x40010000, 0x0) 4.420209414s ago: executing program 1 (id=258): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x2000) (async, rerun: 64) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x106a283, 0x0) (rerun: 64) r2 = dup(r1) (async) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x409000, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) (async, rerun: 32) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) (async, rerun: 32) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x4, 0x4) (async, rerun: 32) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (rerun: 32) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'dummy0\x00', &(0x7f00000007c0)=@ethtool_rxnfc={0x2f, 0x2, 0x3, {0x1, @hdata="41528df42e0b61cf396de69f0e08ae2c69ec6527307b1b9e28baba5858e1589e72f7f9d2ad815051772f4a50a9aaea8c581ed441", {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, 0xfff5, 0x5, [0x2, 0x83]}, @usr_ip4_spec={@multicast2, @rand_addr=0x64010101, 0x8, 0x2b, 0x1, 0x97}, {0x0, @broadcast, 0x9, 0x9, [0x5, 0x3]}, 0x6, 0x9}}}) (async, rerun: 64) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) socket$alg(0x26, 0x5, 0x0) (async) connect$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') (rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000003e00010026bd70000400000002000000040048800800018004001080baac9b3a6a1b0c21889985a895efcd9a3a"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r6, 0x0, &(0x7f0000000380)=0x53c) (async) fgetxattr(r4, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) 4.031867529s ago: executing program 0 (id=259): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a070089b4c45a10000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='10 1 0', 0x6) 1.754366182s ago: executing program 5 (id=277): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) recvmmsg(r0, &(0x7f0000005880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x20000003}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/70, 0x46}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000001980)=""/4089, 0xff9}, {&(0x7f0000001880)=""/96, 0x60}, {&(0x7f0000001340)=""/230, 0xe6}, {&(0x7f0000000400)=""/117, 0x75}], 0x6}, 0x518}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000003440)=""/227, 0xe3}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000003640)=""/180, 0xb4}, {&(0x7f0000000340)=""/129, 0x81}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/91, 0x5b}], 0x6}, 0xfffffff8}], 0x7, 0x40010000, 0x0) 1.657640551s ago: executing program 5 (id=279): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4f, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x4008002}, 0x20010) r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1, 0xfffd}) 1.556801369s ago: executing program 5 (id=283): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x128, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={r2, 0x300}, &(0x7f0000000780)=ANY=[], 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) close(0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) r6 = syz_io_uring_setup(0x96d, &(0x7f0000000540)={0x0, 0x2fe, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000680)=@IORING_OP_UNLINKAT={0x24, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x0, {0x0, r10}}) r11 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4b4b, &(0x7f0000000000)) unshare(0x26020480) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r11) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) timerfd_create(0x8, 0x80000) 1.080362249s ago: executing program 4 (id=286): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_usbip_server_init(0x1) write$usbip_server(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000001"], 0x35) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4f, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x4008002}, 0x20010) r1 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r1, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x11a, &(0x7f0000000440)="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"}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x1}}) syz_emit_ethernet(0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000021001122334455000a4242030001", @ANYRESDEC=r4], 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, r5, 0x108, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, '@[-!#{\\+\\/^+$\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x4801) 1.041043068s ago: executing program 1 (id=287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x34, 0x4, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x10, 0x8000, 0x10, 0xb29}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x34, 0x4, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x10, 0x8000, 0x10, 0xb29}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'gretap0\x00', r3, 0x10, 0x10, 0x49d2e572, 0xdb30, {{0x28, 0x4, 0x3, 0x9, 0xa0, 0x67, 0x0, 0x1, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@end, @timestamp_prespec={0x44, 0x44, 0xf, 0x3, 0x6, [{@loopback, 0x8}, {@remote, 0xfffffff9}, {@local, 0x8}, {@remote, 0x8001}, {@remote, 0x99}, {@remote, 0xee0}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@empty, 0x8001}]}, @timestamp_prespec={0x44, 0x1c, 0xc3, 0x3, 0x8, [{@multicast1, 0x66}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x6}]}, @timestamp={0x44, 0x8, 0x99, 0x0, 0x5, [0x7fffffff]}, @ssrr={0x89, 0x17, 0x18, [@rand_addr=0x64010101, @private=0xa010101, @private=0xa010102, @remote, @multicast1]}, @rr={0x7, 0xb, 0xa5, [@dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010101]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'gretap0\x00', r3, 0x10, 0x10, 0x49d2e572, 0xdb30, {{0x28, 0x4, 0x3, 0x9, 0xa0, 0x67, 0x0, 0x1, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@end, @timestamp_prespec={0x44, 0x44, 0xf, 0x3, 0x6, [{@loopback, 0x8}, {@remote, 0xfffffff9}, {@local, 0x8}, {@remote, 0x8001}, {@remote, 0x99}, {@remote, 0xee0}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@empty, 0x8001}]}, @timestamp_prespec={0x44, 0x1c, 0xc3, 0x3, 0x8, [{@multicast1, 0x66}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x6}]}, @timestamp={0x44, 0x8, 0x99, 0x0, 0x5, [0x7fffffff]}, @ssrr={0x89, 0x17, 0x18, [@rand_addr=0x64010101, @private=0xa010101, @private=0xa010102, @remote, @multicast1]}, @rr={0x7, 0xb, 0xa5, [@dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010101]}]}}}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.039203804s ago: executing program 2 (id=288): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002f00), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000080)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x44810) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040804}, 0x8c0) 976.644568ms ago: executing program 1 (id=289): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200002, 0x200000, 0x0, 0x0, 0x0, 0x5}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001dc0)=@newtfilter={0x150, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x124, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_U32_POLICE={0x4}, @TCA_U32_SEL={0x114, 0x5, {0x2, 0x0, 0x10, 0xfffa, 0xb060, 0x1ff, 0x5, 0x9, [{0x8, 0x2, 0x6, 0x1000}, {0x6, 0x917f, 0x27c7, 0x4}, {0x6, 0x9c, 0x5, 0x5}, {0x8, 0xfffffffa, 0x40c, 0x4}, {0x9, 0x1000, 0x0, 0xc}, {0x1, 0x3}, {0x4, 0x7f, 0x2, 0x25}, {0x5, 0x10, 0x0, 0x6}, {0xe34800, 0x3ff, 0x8}, {0x6, 0x40, 0x6, 0x7}, {0x101, 0x0, 0x5, 0x15}, {0x5, 0x4000, 0x10001, 0x2}, {0x8, 0xc, 0x4, 0x7}, {0x7, 0x3800, 0xfffffff2, 0x4}, {0x3ff, 0x9, 0x8, 0xff}, {0x1000, 0x171a, 0x81, 0x80000001}]}}]}}]}, 0x150}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000004fa000000000000825b440018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8a08ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xb6, 0x0, &(0x7f0000000280)="00ed2c05679588ddee792b9538f84cb6cc2e0dcd28d3e469a9b9c52df856a1a205ee8ed1929a574ed26d7dea1a40943efe202bedededb0360a2055e17345fc864bbb2dfa741c6602ab551593725fb357097468276a6d59e5e68de6a8ebb2f7192274a31c69b5c337fe609175b1fcf1714d69d77660240f7657cdbc3785b67ab525cae46c019437069fc299cf04b8bd11673eec17ab41576154ed23e461e04e822bfc1b3206d937bf6e594c36e845e446e9ea17eb7f13", 0x5, 0x0, 0x8}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 924.020375ms ago: executing program 2 (id=290): ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x1, {0x7, 0x6, "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", 0x7f, 0x7, 0x80, 0x3, 0x3, 0x80, 0x81, 0x1}, r2}}, 0x128) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000004c0)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r2, 0x1}}, 0x18) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000540)={0x0, 0x9, 0x3, &(0x7f0000000500)={0x3, "9c6e4bd01dbc8704a08ac8100db961c53c20d40d86c3cc59006824a81ed156035d"}}) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000800)={r0, 0x0, 0xffffffffffffffff}) sendfile(r4, r1, &(0x7f0000000840)=0x9, 0x4) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x1a1a02) ioctl$UBLK_U_IO_COMMIT_AND_FETCH_REQ(r5, 0xc0107521, &(0x7f00000018c0)={0x3, 0xf95, 0x40, &(0x7f00000008c0)=@buf_4k="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"}) setsockopt$inet_int(r5, 0x0, 0x15, &(0x7f0000001940)=0x2400000, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000001980)={r0, 0x80000}) read$smackfs_ptrace(0xffffffffffffffff, &(0x7f00000019c0), 0x14) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000001a00)) io_uring_enter(r1, 0x260, 0xdb4e, 0x40, &(0x7f0000001a40)={[0x2]}, 0x8) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000001b00)={0x9d0000, 0xdd, 0x8, r3, 0x0, &(0x7f0000001ac0)={0x9c0908, 0x1, '\x00', @value=0x6}}) r7 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x8, 0x1000002, 0x12, r1, 0x20000000) r8 = mmap$IORING_OFF_PBUF_RING(0x0, 0xd, 0x2, 0x20010, r1, 0x877f08f1) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000001b40)={0x0, 0x6644, 0x2000, 0x3, 0x3d1, 0x0, r3}, &(0x7f0000001bc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1df3, 0x4000, 0x1, 0x1b3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa609, 0x1000, 0x0, 0x32c, 0x0, r3}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc14c, 0x40, 0x2, 0xc6, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a9b, 0x8000, 0x3, 0x3aa}}], 0x4, &(0x7f0000002e40)={0x2e, 0x6, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x2, 0x9dc, 0x0, &(0x7f0000001e40)=@buf_max_buf="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"}}, &(0x7f0000002ec0)) syz_io_uring_submit(r7, r8, r9, &(0x7f0000003f40)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r5, &(0x7f0000002f00)="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", &(0x7f0000003f00)="10abe3003f0a0df3716e9ee713533eb83f8ee787dc21781f65b7e7aed2ed1b1ee307bc30310e753c91757bf30f60ec299d99ae07bd9c5f22f94343998cb4443c", 0x40, 0x4010, 0x0, {0x0, 0x0, 0x1ff}}) r10 = syz_io_uring_setup(0x1a49, &(0x7f0000003fc0)={0x0, 0x22db, 0x400, 0x1, 0x1e, 0x0, r1}, &(0x7f0000004040), &(0x7f0000004080), &(0x7f00000040c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r10, 0x10, &(0x7f0000005300)={0x5, 0x0, &(0x7f0000005280)=[{&(0x7f0000004100)=""/108, 0x6c}, {&(0x7f0000004180)=""/8, 0x8}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/155, 0x9b}], &(0x7f00000052c0)=[0xc, 0x5, 0x4, 0x2, 0x96f, 0x7fffffff, 0x8, 0x1ff], 0x4}, 0x20) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000005440)={&(0x7f0000005340)="3d64b243d3dff735fa30bb9c59982b62d9be3ed08dff12571b6f44a934049bc5db9b3808b994d60e7b69e4985941f818446c061f8442a2be8ea8365c01b9493319a53d3e4055f1dafc5eb454ab41047d0395b528d5455a08aab2a21dcd973f2c7014a7424a06784c2fdb95f9f071ec5f03d32536dcf5da67896e3ced6e72d3853a48ea39f5f56c12e423f5a93736bd85ee3b9ad3f53bafcbf2510b7dc721030eb6eed01b21e4e740b9160d410ad7fed93dd989b76854fe4e13efe7dc7295cab43fc0266c6fe4101c50df09417857b30737c1880a", 0xd4, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000054c0)={&(0x7f0000005480)=[r11], 0x1, 0x400}) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000005540)=""/111) 874.154539ms ago: executing program 2 (id=291): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000140)={[{@user_xattr}, {@commit={'commit', 0x3d, 0x5}}, {@bh}, {@abort}, {@dioread_nolock}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000003c0)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x400003}]}, 0x3c}}, 0x20000018) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3cd, 0x0, {0x0, 0x2, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x12, 0x2, {0x0, 0x0, 0x5, 0x6}}]}, {0x4}, {0xc, 0x3}, {0xff18}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0xe32fa770305bfcda}, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)="c1e333", 0x3}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002ac0)="fc1c", 0x2}], 0x1}}], 0x2, 0x0) sendmsg(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="8ba3381f1fa911f274a774b5e783085be3c8d5627fb65e2a2a36ca9086f3778fa148eebef8af486a1b51d6d5e36fd556770c148794f0371abe97fbba09b938f202487341ef93694c3c8808d80c5418aeb368f46301a8b56754f3426c76efb2c03cd2bb33e1a4e4d701b8ff2e95cc5cfab50eeb2010bcd1a164130f262317", 0x7e}, {&(0x7f00000005c0)="af7d04e369c442a8ed11e23532e99657e5653a9d47ebb62606761369f25cfc516ffc6e790190be9cf0d6bb3efb1490cdfbdf2f41280aadafcbd95d8b2bdd0f6068b4839aea801d5009590f774d0c8f28242d611c603155c512fee007a9807736fc89240deb3d7fc6446ef89fd6b43d91e70d2acd60aeca4e6ac739816280564a093e95f83d908781d4d1ef5c7ea37997", 0x90}, {&(0x7f00000006c0)="d84f5fa1fb2086c09a57de9e7ac9c3993430f5be4fbf36ae06947799f932ac5fd40735414bcb0c7a04b8e1752423", 0x2e}, {&(0x7f0000000700)="f9ddcf4528377690c29a2fc3b684125da8f686796fd4a1032754cb01fd45b22ccb975111d1a2f6f74fbb7de9b18c7d971c528db0d3c5570293473f0b780d507a983760b86402607854ead13aa5a6718aef67780e9f4009d1f795ef5e61f20612", 0x60}], 0x4, &(0x7f00000007c0)=[{0xf0, 0x10a, 0x4, "a8896808e099cbd0cf81fc15351b8425a08438eb162af4d8a3424705927f41714b8d6a264723a32b87119fbb59a0ce797fe637cd07431b01167bc36ee72c6eb5d901d9dd4c23fc6249378c73bb5422c6c4c4eb8bb98e0bae47bf7c3c3d575d76b32b851e2871f9728230c70cccda5ffa0dce13bf0c1fd3951616a86040dd345ee9e85319a43b009298f42884ba1d5db209c4da4c14d217f8bb8ae2f32c294188ce8e902d2f90c11882974125d3fbd6a4bb6f9a6a2eee24bb250b833793d660c5698af5c288dc6129e96fdf5cc5d86f852cdf876edf87a8a9c7d8e9bf4b1f00a1"}, {0x58, 0x102, 0xfffffff8, "ec19aee79605f33ca40016784c5ee9a5495853c4f3afc800c990d1a4b2a33bbbcb49dffb34848c616ac0dfc8619d2c7bb123213b95e172259dfe265018f0b2abd7b50f8325da0f"}], 0x148}, 0x20000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_mark(0xffffffffffffffff, 0xe0, 0x1009, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000340)) r7 = socket(0x2, 0x3, 0x100000001) r8 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) setsockopt(r7, 0xff, 0x1, 0x0, 0x51) mmap(&(0x7f0000485000/0x3000)=nil, 0x3000, 0x0, 0x4012011, r0, 0x0) copy_file_range(r5, 0x0, r6, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 515.280907ms ago: executing program 2 (id=292): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1, 0x600}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x1d, 0x2, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x20) 452.651363ms ago: executing program 2 (id=293): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4f, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x4008002}, 0x20010) r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1, 0xfffe}) 429.502627ms ago: executing program 2 (id=294): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000140)={0x9, 0x80, 0x1850, 0x2, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x3f7f, &(0x7f0000000200)={0x0, 0x6f41, 0x800, 0x1, 0x82, 0x0, r1}, &(0x7f0000000280)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000180)=0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@errors_remount}, {@nouser_xattr}, {@stripe={'stripe', 0x3d, 0x401}}]}, 0x3, 0x79b, &(0x7f0000001200)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r2, 0x8, 0x0, 0x91a, 0x2}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000140)={0x9, 0x80, 0x1850, 0x2, 0xb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) syz_io_uring_setup(0x3f7f, &(0x7f0000000200)={0x0, 0x6f41, 0x800, 0x1, 0x82, 0x0, r1}, &(0x7f0000000280), &(0x7f0000000540), &(0x7f0000000180)) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@errors_remount}, {@nouser_xattr}, {@stripe={'stripe', 0x3d, 0x401}}]}, 0x3, 0x79b, &(0x7f0000001200)="$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") (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r2, 0x8, 0x0, 0x91a, 0x2}) (async) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) (async) 387.648617ms ago: executing program 4 (id=295): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4f, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x4008002}, 0x20010) r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1, 0xfeff}) 337.432457ms ago: executing program 4 (id=296): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e27, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r2, &(0x7f0000000240), 0x0, 0x20008000) r3 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000040)={0xa, {0xa, 0x5, 0x100001, 0x3ffe}}) 234.743591ms ago: executing program 4 (id=297): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000001d40)="222449838f2c2c0308a9e85c176cb6112207ff5ed110686e1ce2dfbe9be46aaa07fbfaf22de57845965478f101a2268f34428c63e79e19d52e35ebb5a6278be8ed8dd58615ed7ba9b2a82071e6734be4b3b2915251e288de8e501e0936bc51645a9037475e7e1083d218f5edc41a41b55669fa64a5e5f61a24016796a429920aef1eee9ba08a9ff18bfab6e87c7127194aae8ca74c846b6842a9ff373075ca301834d6ec6e87f78825f62e8e4e6e67003cfd3461aff510f7ca9aade7c3cd26bc8ad9fa7cbdb55282080a33cb2d06110e0d862a281c89d18c984223b7d18d84d2d73d913c62e18a277f510523eea162a1d6f95dc68ed2c3263ad8bf8d7711c7ea0e3563e2f2baa4c7ee390b196ed09211b5d4ad426f9c078a424f32d087ef2667702edf3475ac892ff61805760eb86c079934988918288cc41a504ab01d1319c6d68af759ae99106bf7cf3469df33badb2e35fd854b9bdf2f5247b28403bb73db53f36fe84c0850694e8ba061b6e1d69d21024a5f07189f6477077017a309ccf2f9ad542e87fbab8944b4e4d8befc7d1ecc1fa529521b4c01b37434dd321c0ecdf6af668d456196e6da0afc5dbb72dfc986ded2906b5aeb6653070b1f48baaab3298b3b51286c53d3037351b701c5bc434bd31e9a6fe5917911d4df40849ee08948a1817b69c811b1acc205721014b9d42b7bc914d9b62ce383c834e6ac8a9f70fa95d13836e504379af0aa9f2f3861973e00b5b64943388f83f94e7e565622b82c8a06fc48e50704076143b1302ebbb6d8b412b7f0b8bc095ce951ef596b94d307b061d1d83829398d3273f934e9d0f944f405ddd1e4107c213cf20c02442dddff78b98cb2789ee7d93ba3c9f1bacc96e3525240f9b5776c4b2e493b46218bde981cf47745805e36b8f0f871b9ca99003485103ccda1d1dabe306a8aff49e46baba2a6ba16cdc4ffaad3e61a517d00c1808802b770ce402536f913321a0cd63a5abe25300e7cddbd7e48f4cf398a6f001c23efe1361f8678d46a0af6e094cfac623a6fbf250ed61c74c8bc5cb1acb72b37d448ce00d430535babf935e7da45d2090268389bd13f52d9b1568355138bdc6e2ef6812d46ddcfd247d86d6d56f4eb70387c726c9cc5409ab7c47b856865303e57b222851971a0462a19143fb50193f46af175997adf3c5b610d3f91bb0c6bcd6576efa39c5e64114cbfeb0afcd4df2ea8d7f79876acfeb52d5561dc9455e3b1adbb2928ba02e0360b0c2ab917223cc5c287c8ed82e46d8551a457f4b328251230a60ca0d144788603a11685d3906f8a2cdfbed6dd0cc8aaf39949beba2512a1a927f156f5fd17465c58e9d5c55954b5ef714ec0c0378eb0d65aca13f1aaf83ca41e2d49aee055c5ef5f98d9067c68ae715277dce2a8cb2db842c9f25eb29ccc0763c1db72108a91a8a6ef78c079aeda9d628e2f96ba0b5d5709b5a8c7a4ccb0db92d39386389259e4d09f3dffc7b568a9801fee8119e04324feda322a993fbe8ed3ec58fd16d7147af8491a65f1aed1c0d21beb97ca1e624b9c2929f9892d0ebe7ecb2bc65d62049048b9ca302c07009e9dacd5a8d3f855bcecef236b9312e0e35f213bd0062ff804abacb7ff4d826db8a9030e30be0a427abd3c5974cefaf1d77a7780a98b4057d640fec388862fd573027e44ca0ad1abfafcd5ff55ccd4648f09b1a2e65a2d059cff9c8eec97258a5a35d969f5ddd753ea264aa4a25c3ca607306a03372d83bcfa12a0eb9fcf4315301c63ada8e59945bd6019627206b1eebeae2018adbd67fb98434212d7c95e3e72c2798fa071bb5e77c3f76d7981fa36dc55d25c70bcf004718924c27f01ff8bd50ca14f7043b7da4db40a29ad00e4d9578bb73e74faee4a4e1ade6e02d7fb792e4ef8fb2f1a8aa0d1d6aaf5d19028821a8ed2ef1cea25c95c8184046fcb932f77f6199c6a1836135a139ecd560d9a35f620cbf3b277a53f2d295a451757034a5d56cbbd0110a0e7bd8031141c2f8bd91fdb2e1c7fd104355b8efcf15a08c364e24c13f15fe5e7a26416d2b9d0f353944c63a51aa22e1c1e6ae506d1d335fb7d3c87a1284fe5105a5afddc31e4cf48d245845e946cd614e35f14df61c6de21ff2ecf1eece8a5b2d46152065314c4e273bb3dbc35f1216c9ce6d4e5edf3e291ddce7d84fd2576675a95e102fc38e96a076664186f8db7b817b66198bcc7cd37eaa72b159394ff6dc75f3c9d156c783ea4a902565030c608a63ae68e10a616ae562ccf679ae74027a78d170c3d219ea302dcef296b0bb9ab3246c04f6a6f7f6bc5e5a8bd69a927487dd3112a4ba83b7b6fc24a89a0d5fd711be4f9519d940b7544b6160e4d0d93bbc93e085c84de5715921e49aec9d3d9241adf069a9705cb004bac3bc6c5e79d3350d284b8f57b871781e2ad78d94fc1e977eb1ee103e6d7f4f232f8394dee9a83d80a59087264e515dfdc5dc3722f7edd140607b4dc7e663c007b49928f5276188ea09b6e5430c0cff87aa550c77828fd89155f168fda449956763a828640c2cc6699bcd33bb9c74721e77f206a57537b045a3170ee935d74c53d3fcd0e4d650aa23d01053a1804743f1a112f4cc017bc67d900273ce4af8d6ec00dafff35ca0bc6075448001758056d044ce815584e3cc0ebcf2ae3067fdc16c5567fc9ddc71823f53d2ec8ec6ab5481ab8052e259a2cb906f7d4aa4da8c6507b649afae48dd8bfd0ef23fe9e79e5cdcf6e548347fcde09e31d765e5bdad043e01744dee35e79f5f18afc6c282e4e1bd97e2ae2b00d6790d2568827c10eb78e77fc4ae3f286d5448a8aec3710800deb12feececc593dab102649f20c967307235a71ac582cf669a94381bd10b09405cdbaa65126057ab731d9d8dc85cf324b2458e97afad5fcb619fe719e6832ed9e5b91b5524b55ce1374ba08da771b54583a988a76f4f67aed601376254bedb2fba499cd43ae462486ab71d62cb193a03a20f38fe17f273eb1dbae0543c01c72349ac7d42a120a166f29bed413be3a836d3ea894a0d8bbfa9d1a1edcb62cd7187427adec60c8196dece858efaf59523545d73304b992d92618bf5a30c40228b4c7053d2b5cbc0ed3313a55e00ca154ccf119c37093bc36fa36b21f05a98fcffddad330a8250988f91bfb640f46beb93f433c397e8d409f98a3aa1fda231623c7e7ad8019c20e063a1ba3ddc28804385c4c401214bfa7f805d18b95ee97d77dffa4ebce471ee9ea6ea46a02ecf219c0c54ed97a1704cb094a87df8d59309507474075fbe67e67197d7b78080ea00bd77210bdef36943bf3835eb905412f28d869421e06cfad7ee2d7cb5ddb613e0bafadcab03dc2b26b0fdf0e9062571938ce9327d485f00763feffc017dd06f2e809b1d99832e048263ec0800ae6f28fb032aca1d530bf3a16007c3030311dc5fbf4137c58248ec14718c391cd08ac913f909636e6ea27c0bb0e9fa3b8b1de0f1f0b0fa0d7d03d1ea95ccb33b67ee5f17221abad45d844c618a002f8e3b4bd46117d915a204b2d46017b0b286fde408e0d5a1db0eebc8c50d6f36b2903275a7f0d9298cf9de73fb80adb92372a960dac6fa2853933256a493f65e8a413530bc45584823da6501c2554c189cdcd09c9af84fea272e6cc284215a17247bd480fc54170702ec04aaa1596c46dc62416cb8fb80cb63330acbdf2ed79ae937502f74dc59bef9c9c9fb317da754c710edf9871feafb57b85569ee8c7e5c710e8793eece87b19b780be00faed60b519ce897b7f35d5980d7b4d953b9df442353a03c169ab049ae73a5fb7a43090fdec53a65659b3beefc81615682d176baf6f0393256e24dfdac72a76cb96e7f9c07b51bdf5ae1b813f9a68bc0a4f28cfcbf4f28a82a42c058eda45da792d82133d1d17c07ada1d29f1c8f80cbbe55f6f67f3815f8da9e0429fe4f3f3662f3a0d0c1a8343eb6c97b269ae0cc933ebc6de0ccc8d0a92aef13c939efca3c92680299c9ab318fc8b84436f556e5e8525be4ddd7521cc408868b441eebc554978d1ae452c67876b15f909582dbeda1ca82bd0e01193e69edfc81448f645555c55faf35b2a3953aadebbb540db5ae3ae9d024919b683fbd1a242c3fe8ee59c6b69e2026da69e31b9c3e42fbb9fb3773c68046aec3d11dd397756b7e655fca1e1d13f21430b4a7b32ea420446a8fdfa0d2687186c4bb7b4d4620951799ff5d8d7d33ce67a3fc16aac6e3cb807bf4d2a7e3f95e7c9d85858b0eda7cd5ad7dd5904308df94fc6ebe51a42e6d8a7540af5049f2dfe537d5e359666de30a659fd86ddf30e22f124fc2de0bd3a867986df1bb4212dc9b0b4dc61430a679763418e39e7ed388211c33b730c14d09cd9d9674179d1c68312804f705f0df9259d8fa09b948690b9764d53725a5de2867530ab48b6206c4cd74853b1f678b891d8f614ee922783be081aa7a182fe724d4d8c2baf9e9bcbd3976e7d3517f0633df2f73b6718f36e8c06e6b05dab56a0f536d54b1dee710b644a1afe9e06fb44644e8bda5d8cd33c72210043dd5cf1740ceb26f2baa4cf4addb4c81e41c8f8862190e348a111e79bd3896b2b4036d301cedcfef684c19fc903f752b9004784d9467f987d4e156ba05af18861c3d7e6b34fdac62562849234d03e89caad4eb54771cfe1b3b2a945302bdaa713a48f4a15cdf8bc6f65a3e55ead8204c8219c159d154d93fdaab2ac2afe450272d21f5e8b9731dc0d987910bcf477044dce17382a6f772fa3e06efbf4f3a03a40ca5a7c37faee959c5c80f3e608acf7acd11c3a90827b79241167e03d78575a8c4f2e9e2b223fd5cf48da58f5808a95254a50843b15ec4a3fe4c61eb5587e5a7779b0ac33c2936145b08cc7414c0128a300e6141ae2e3f33a9486c01f4090a1a269b40004ac820d65f705b8b42c83b4e6e2bd2505cd03307c5f009fb295f7ee1bb92074bdc6fcebc6f74e1420b58a1d66fcf28996f04db29b51eeb39226aa858462d43ba494d6230fa9b619c68c8803659b4b2eae9995d7780733c3c387db8904fd9790b99e1abddbc0e9305d9c67926bf81698ab8f6dfe854738d0dbd8ed536f648fc8dda4c49abe7bea4883e4c69d6b23bfb72be67f0f2501c8f70a0ccb52e95800fe00d1b38214b87f9cfa4870fe6fd72128bcde44dc1c6a4f8f16d73d99259d9e56c10a094a94d83295b9ee3d23cbdf4986359e73be1fb73612eb1753c608216f212104ef538bb9c69c91d7d8cdcad687b9c1c15233fcea372d70b799549afd5ec89a90138f3be0b4e30ce688e46398d27c91eda296fc081e8976bc473b6669d12f6253592ed00aeadc7359f4751333a983b2a0be2852effabc90279c4a7b0243937eddd598c079d2ea17ec4199239b5e18aff310b0809c8cf29be78ccbe0c28cbf2b89b088821cc68e91884fe9cacdf61db25a71635eeda87503e70792d292cb2857788e548346e701d4d32b9663b6f9591f4d3d31e8d3d78aa3757d3851331a72f706bc9471b9a40dc748868600381d586fc0b37744ce0dbfb8d4ff84a2ff1136e6a58ab431b05fae3ca8ebf5bab1b33b6c1eadf6f547845d83fef0a005db2dd52d676a714688c7f307522b91841f59898098249333faa5cb80320229881552bfa4b056ee908dee2d262dbf3635a737ff4b0609379093c0e25b5441153382370d9ed1c361efc6511419f1416c75b6fe1c454e9d9913a6299024e1b47beed3efdd46561203e", 0xfd1, 0x1, 0x0) close(r1) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x4000000, @val=@netfilter={0x2, 0x0, 0x7, 0x1}}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x2, 0x0) r3 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000010, &(0x7f0000002080)={[{@shortname_winnt}, {@numtail}, {@shortname_win95}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@rodir}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_win95}, {@rodir}, {@utf8}, {@uni_xlate}, {@numtail}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_lower}]}, 0x7, 0x2a6, &(0x7f0000000740)="$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") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00') preadv(r9, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x8c, 0xfffffff9) open_tree(r8, &(0x7f00000004c0)='./cgroup\x00', 0x88802) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) write(r2, &(0x7f0000000180)="ff00", 0x2) accept4$x25(r2, &(0x7f0000000240)={0x9, @remote}, &(0x7f0000000300)=0x12, 0x80800) 172.558988ms ago: executing program 4 (id=298): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) (async) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) futex(0x0, 0x80, 0x0, 0x0, 0x0, 0xb0090199) getpid() (async) r0 = getpid() socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x1f8c) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0xe, 0x1, 0x1, "a90000eaffffffde4832c305070000000000000040080000faffffff8200", 0x4c314356}) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000040)={r2, r3}) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x10374a2, 0x0) 161.870948ms ago: executing program 5 (id=299): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4008005}, 0x24004000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newroute={0x38, 0x18, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x100, 0x0, 0x1}]}}]}, 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80)={0x1, 0x0, [{0x0, 0x106, &(0x7f0000002700)=""/262}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28) r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4801) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 116.816881ms ago: executing program 5 (id=300): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000080)=':$/\x00', 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}]}, 0x2c}}, 0x0) listen(r0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000080000000000000009000000731107000000000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x80043, 0x0) ioctl$TCFLSH(r8, 0x540b, 0x8000000000000001) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x110c}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@deltfilter={0x8cc, 0x2d, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xf, 0x5}, {0xd, 0xffff}, {0xf, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x87c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xe}}, @TCA_BASIC_POLICE={0x870, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7e, 0x2, 0xffff, 0xffffffff, 0x81, {0x7, 0x1, 0x8, 0x6b00, 0xa, 0x10}, {0xb, 0x2, 0xf00, 0x1, 0x1}, 0x8, 0x7, 0x7ff}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0x5, 0x0, 0xfffffffe, 0x8, 0xfffffff9, 0xffffffff, 0x1, 0x80000000, 0x0, 0x5, 0x5172, 0x7fff, 0xcdb6, 0x4, 0x8000, 0x2, 0xe, 0xe, 0x7ff, 0x5, 0x0, 0x9, 0xd9f, 0x401, 0x0, 0x8f, 0x6, 0x9d, 0x6, 0x81, 0x90a8, 0xf7a, 0x3, 0x4, 0xd, 0xc99, 0x30, 0x7, 0x8, 0x10, 0x8, 0x2, 0x4, 0x4, 0x2, 0x8, 0x4, 0x1000000, 0x2, 0x5, 0x2, 0x1, 0x8000, 0x200, 0x610, 0x5, 0x7f, 0x4, 0xffffffff, 0x2, 0xfff, 0x4, 0x1, 0xfffff5bf, 0x6, 0xee39, 0x5, 0x540e, 0x8, 0x9, 0x7, 0x101, 0x7fff, 0x7, 0x10000, 0x100, 0x50000, 0x8, 0xcf8, 0x7, 0x6, 0x401, 0x6, 0xfffffffb, 0x5, 0x0, 0x2, 0x8, 0x3, 0x2, 0x0, 0x7fffffff, 0x9, 0x5, 0x4, 0x9, 0x7fffffff, 0x5, 0x0, 0x8, 0xce3, 0xd38, 0x3ff, 0x7, 0x0, 0x8, 0x98, 0x98, 0xcc, 0x3, 0x8000, 0x2, 0x1000, 0x6, 0x6, 0xff, 0x5, 0x50c, 0x3, 0x7db4, 0x41b3, 0x0, 0xc, 0x80, 0xe, 0x0, 0xc, 0xcfbb, 0x1, 0x2c, 0xfffffff9, 0x2, 0x7, 0x0, 0x8000, 0x7ff, 0x9c, 0x4, 0xc8, 0xffff, 0xfffffffc, 0x2, 0x6, 0x7, 0xfffffffb, 0x1a0, 0x80000001, 0x39db, 0x7b, 0xfffff000, 0xa0, 0x8c, 0x6, 0xd, 0x6, 0x5, 0x1, 0xf, 0x6, 0x400, 0x6, 0xffffffff, 0x6, 0x6, 0x5, 0x4, 0x3779, 0x6, 0x7, 0x8, 0x4eb1395, 0x7, 0x9, 0x6, 0x4, 0x8000, 0x3, 0x4, 0xa6, 0x1, 0x3, 0x800, 0x2, 0x9, 0xa8e, 0x4, 0x81, 0x7, 0x200, 0x6, 0x8, 0xd, 0x0, 0xa9b, 0x91, 0x9, 0x2a1a, 0x2, 0x2, 0x2, 0x9, 0x2adb33c4, 0x3, 0x1, 0x8, 0x87f7, 0x9, 0x6a66, 0x4, 0x6, 0x80, 0xf, 0x0, 0x9, 0x3943, 0xc22, 0x8, 0x2, 0x5, 0x2, 0x8001, 0x8001, 0x4, 0x6, 0xfffffffd, 0x6, 0x5, 0x1, 0x1, 0x10, 0x8, 0xb38, 0x9, 0xfffffff8, 0xff, 0x8, 0x3, 0x1, 0x3, 0x3, 0x2, 0x3, 0x8, 0x1, 0x8001, 0x0, 0x1, 0x9d, 0x6d9, 0x5, 0x0, 0x5, 0x1ff, 0x200]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcdc, 0xf, 0xf, 0x2, 0xc, 0x0, 0x100, 0x9, 0xfffffffa, 0x2, 0xb902, 0x9, 0x3, 0x10, 0x2, 0x8001, 0xfffffffb, 0x3, 0x2, 0x6, 0x6, 0x9, 0x10000, 0x9, 0x6, 0x7fffffff, 0xffff, 0xff, 0xb, 0x6, 0x8, 0x6e8c, 0x6, 0x6, 0x0, 0x43a, 0x20080, 0x8, 0x7a, 0x3, 0x87, 0x5, 0x9, 0x4, 0x5db, 0x2, 0x7ff, 0x1, 0xa, 0xfff, 0x7, 0xfffffffc, 0x8, 0x9, 0x5, 0x5, 0xcacb180, 0xce, 0x9, 0xf7, 0x1, 0x8, 0x1, 0x5, 0xe, 0x5166437b, 0x8, 0x3, 0x6, 0x100, 0x9, 0x1ff, 0xfffff872, 0x32, 0x5, 0x0, 0x7, 0x18, 0xfffffffb, 0x10001, 0x6, 0x9d9d, 0x3, 0x0, 0x6, 0xe564, 0x7246, 0x3, 0x6, 0x100, 0xff, 0x0, 0x8, 0x16df73dc, 0xde4, 0x0, 0xf158, 0xfffffffa, 0x8c, 0x7, 0x1b, 0x8, 0x6, 0x9, 0x1, 0x3, 0x6, 0x6, 0xa7, 0x1c0, 0x85, 0x4, 0x4, 0x5, 0xc0000000, 0x8, 0xb5ac, 0x8000, 0xb55, 0x996d, 0x7, 0x2, 0x0, 0x3, 0x1, 0x7, 0x8, 0x2, 0x4, 0x4, 0xff, 0x1a7d, 0x6, 0x1, 0xffffff80, 0x6, 0xffff, 0x80, 0x2, 0x4, 0x400, 0x6, 0x6, 0xa, 0x9, 0xfffffff8, 0xfffffff2, 0x7, 0x0, 0xffff, 0xa, 0x5, 0x3, 0x2, 0x80, 0x2, 0x1000, 0x80000000, 0xffff, 0x100, 0x1, 0x7, 0x1, 0x4, 0x800, 0x1, 0xff, 0x10001, 0x40, 0x3, 0xb, 0x771d, 0x1, 0x1, 0x3ff, 0x2, 0x7, 0x101, 0x8001, 0x8, 0x3, 0xffff, 0x1000, 0x7, 0xc, 0x3, 0xfffffff9, 0x6, 0x8, 0x1, 0x2, 0x2a1c7ebc, 0xd883, 0x5, 0x5, 0xfffffffa, 0x8b, 0x101, 0x800, 0x7ff, 0xdf3, 0x8000, 0x0, 0x0, 0x14200, 0x3, 0x2, 0x2, 0x0, 0x80, 0x2, 0xfffffff8, 0x1, 0x2, 0x1d39, 0xc1, 0x9e5, 0x7f0, 0xfab, 0x51c0, 0x0, 0x1, 0xe1, 0x9, 0x3ff, 0x6, 0x2, 0x5, 0x1, 0x80, 0xffffffff, 0xddd, 0xfffffff8, 0x0, 0xffff, 0x10, 0x4, 0x0, 0xa, 0x100, 0xffff, 0x3, 0x7, 0x4e2, 0xd, 0x10, 0x200, 0x8, 0x400, 0x7fffffff, 0x16a, 0x7f, 0x9, 0xffff421e, 0x7, 0x10000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}]}}, @TCA_RATE={0x6, 0x5, {0xf3, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x6, 0xe}}, @TCA_CHAIN={0x8, 0xb, 0x80000080}]}, 0x8cc}, 0x1, 0x0, 0x0, 0x800}, 0x24000004) r9 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000040)=0x20) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a06050045ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 56.111858ms ago: executing program 4 (id=301): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt(r0, 0x1, 0x9, &(0x7f0000000140)=""/226, &(0x7f0000000240)=0xe2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000a80)={{[0x8, 0x4, 0x730, 0x2]}, 0x0, 0x1, 0x0, 0x0, &(0x7f0000000ac0)=[{{@_ha_fsid={[0x7, 0x9ec9]}, {0xfff, 0xc00, 0x2000, 0x1ff}}, 0x9, 0x0, 'G\x91\x87\xb7\x14\xa35\xaa\xc9\xe7\x84F\x9e{z\xa3\xf1\x06'}, {{@align=0x7fffffff, {0x8, 0x5, 0x8001, 0x9}}, 0x1, 0x0, '\x00'}, {{@align=0x4f3, {0x9, 0x5, 0x5, 0x2}}, 0x0, 0x0, '.$.\\)\xcb,\x00'}, {{@align=0x800000000000000, {0x4, 0xf01, 0x3, 0x7}}, 0x5, 0x0, '\x85\xba\xa1t\xf0\xcb\x11B'}, {{@_ha_fsid={[0x1, 0x3]}, {0x7fff, 0x4, 0x8, 0x3}}, 0xa80a, 0x0, '!#}/\xcb/*\x00'}, {{@_ha_fsid={[0xf, 0xf03]}, {0x5, 0x9, 0x10000, 0x444}}, 0x6, 0x0, '^%/[/}\x00'}]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x5460, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc4}}) sendmsg$inet_sctp(r1, &(0x7f0000000900)={&(0x7f0000000280)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000880)=[{&(0x7f00000002c0)="b520c0f1cd6cd755e01f5daa145a88d43808ec8d8a34f9dcb51c3306f3f403973b0d41fa5e2ca2a59cd57c40e41e2df7a62565ae75802ae42530aec2eb0225fa4db7b048f027791514636b082b5839bddb4ec4ae45b86657e91c9c3bd742b74dd65512ea4634d5207d2faf68a5c7a09ebee98f7854307cf01e7e33b2679a3c8314fae5afd502b256d6910a9592012a188a3b33a37e3eee64d6cfe8e70c663bc43f735a19e88a4694b8ad6bff56ca9894532de471b9801c954f846e82eb2efa3bd24580736aa2c8c8efd041905badf18ea67276f41f79499f40fdae2a1938bf19d6fc3102795ab11644518041e65513", 0xef}, {&(0x7f00000003c0)="fda5bee08f78658beb7256e33ec4738e2a67b2cfea5e37256f9e27f164a7eb58e4da1469d0c708b90f2b9d85784e49d757d59843549a898f9e34ff0d1b15c4852dec55b8e2997e7d3ef72ecd19bb8c27f38b5c06ef75e98266e3acfa6340f4231c507cb48000746d96e626367a9960e1c535a1b8581962d0578629c549d2c784e21df485a6e704cb61cc7c29b55f9c09121184b01413a4dc12ffed9ee7237ba6c599393173ab81eb79c2d5df97c529482448668f0aaf9bff6b4fbda7ef0d4ba71ed358a4caaefb37cd1cc4d90a3819251715306823a3f2595f7f3f43f586f25971a2f9ae2895ebb8431259277b883f6794", 0xf1}, {&(0x7f00000004c0)="4557823778a635b9603c559a5993561beff01084941999735b7779d63cb897deb1d19bffc2227a00cf731fed64bab37fe57e269c5b9acd141845d326d812cdc76a5a35a94387921bb1a8ebad8c35ac690439c251b3902312af951b441a4df61acc14db6314d857f10d127e3349aa04de62525ecca485495ae91960b514eabd53096120d117aa41ae0bb3a24c6f506a9a950e", 0x92}, {&(0x7f0000000580)="4a7a2d5d84df087f404a972a42bd800c45eba9205c8502b78791af943944539efd01139935db2befb5c0b347870eedf3a51b0e9c7313eef66901cde7f3cc383b429175f4c6625d9165082ec448ddaa9f73e46577c822a89d6c46ac594122260bc6197cc60980d70946a4ab04ff26f54dd613833f05c4720a13371ff71c266b1e840d717d9fafafb4411e9db0a79d7c83eae43108aea45e48f638b47400550a81ae50753ca1b99f60cf5d7c47d54f672cb647bfa3bfb74a1af88c1666aa57e4d45dbf513487a51caf06905d7f498b429299e63690318719", 0xd7}, {&(0x7f0000000680)="869331a0c6d56abb95b581a1a89bfc79ef3d9a78ce6acc77ad02d571458f28548d1a121a2ffdb530b9fd548af9", 0x2d}, {&(0x7f00000006c0)="be351e9dd4cad658954221090cf5d4f82c30a8c0fb773a120465ad83788d148d80257ebcab364bf864538e58f87b6b6a40b3bbf4a4d419db95a8fc54d923982159e74ac423be6408da47bc4a447a86eaae15c9143e761b9c9ac414d134b9211d5ac0fd1d3425f965019f41af45704377185686eba0b822b5ab48684de8ba71a241cf931c92badc2bfc7fc847ce830ce6e94babdf", 0x94}, {&(0x7f0000000780)="c4ee6a21d3bc74785f5b576659b489c0f145fb2efb2a41597d8611328d937986ddc248e2264b424b8bd26ee9e1cf8a0a161f8e8922feb005227f4e90cd1f5c2c0d41ae0a08c4d181", 0x48}, {&(0x7f0000000800)="2e3162e8506a8b09d56e05634e7b5f6e6337d36838e190f3d6fb4a575defbee750bc5eb78fd0e162e802172fcf7099f8f86f5064eee9072b5d66245aeceec4410c0bd4d4cf2b2017e3e1cd2292f2f0d3844a61307fa6e2", 0x57}], 0x8, 0x0, 0x0, 0xc0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e26, 0x80000001, @remote, 0x3}], 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xbff, 0x58b, 0x3}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffffff77}}}, &(0x7f0000000180)=0x84) socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='io\x00') socket(0x10, 0x803, 0x0) socket(0x15, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) socket$kcm(0x2d, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x80d, &(0x7f00000005c0)={[{@nodelalloc}, {@dioread_nolock}, {@data_err_ignore}, {@inlinecrypt}, {@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@dioread_lock}]}, 0x1, 0x490, &(0x7f0000000c00)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0xfffffd31) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket(0xa, 0x3, 0x3a) socket(0x40000000015, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x10000}}, 0xa) 41.299413ms ago: executing program 1 (id=302): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0x6, 0xfff3}}}, 0x24}}, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x20642, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x801c581f, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$setsig(r1, 0xa, 0x31) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) pselect6(0x40, &(0x7f0000000080)={0x9, 0x3, 0x7ff, 0x6, 0x8, 0x2, 0x5, 0x401}, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1768, &(0x7f0000000200)={0x0, 0x34f9, 0x20, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 5 (id=303): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x2ea5, &(0x7f0000000000)={0x0, 0xfffffffd, 0x1403, 0x40, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (fail_nth: 1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 28.788280][ T4692] cgroup: Unknown subsys name 'net' [ 28.927946][ T4692] cgroup: Unknown subsys name 'cpuset' [ 28.929956][ T4692] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.099068][ T4692] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 31.018673][ T4717] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.018791][ T4719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.019092][ T4717] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.019685][ T4719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.019941][ T4719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.020119][ T4719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.020432][ T4719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.020648][ T4719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.021350][ T4717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.021647][ T4717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.021792][ T4717] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.022347][ T4719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.022678][ T4719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.022909][ T4719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.024021][ T4712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.024168][ T4712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.024429][ T4712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.024740][ T4712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.024949][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.031187][ T4712] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.031621][ T4712] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.038232][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.038288][ T4720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.047474][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.047775][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.342527][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.344345][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.345734][ T4708] bridge_slave_0: entered allmulticast mode [ 31.347463][ T4708] bridge_slave_0: entered promiscuous mode [ 31.365882][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.365954][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.366059][ T4708] bridge_slave_1: entered allmulticast mode [ 31.366652][ T4708] bridge_slave_1: entered promiscuous mode [ 31.389162][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.390165][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.397701][ T4708] team0: Port device team_slave_0 added [ 31.411001][ T4708] team0: Port device team_slave_1 added [ 31.434371][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.434402][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.434432][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.441335][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.441346][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.441365][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.475431][ T4708] hsr_slave_0: entered promiscuous mode [ 31.475861][ T4708] hsr_slave_1: entered promiscuous mode [ 31.506302][ T4702] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.506414][ T4702] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.506991][ T4702] bridge_slave_0: entered allmulticast mode [ 31.507442][ T4702] bridge_slave_0: entered promiscuous mode [ 31.530278][ T4702] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.530356][ T4702] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.530457][ T4702] bridge_slave_1: entered allmulticast mode [ 31.530905][ T4702] bridge_slave_1: entered promiscuous mode [ 31.574373][ T4702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.582323][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.582418][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.582527][ T4714] bridge_slave_0: entered allmulticast mode [ 31.582983][ T4714] bridge_slave_0: entered promiscuous mode [ 31.584401][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.584432][ T4704] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.584498][ T4704] bridge_slave_0: entered allmulticast mode [ 31.584928][ T4704] bridge_slave_0: entered promiscuous mode [ 31.586739][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.586763][ T4704] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.586862][ T4704] bridge_slave_1: entered allmulticast mode [ 31.587779][ T4704] bridge_slave_1: entered promiscuous mode [ 31.591609][ T4703] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.591631][ T4703] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.591714][ T4703] bridge_slave_0: entered allmulticast mode [ 31.592185][ T4703] bridge_slave_0: entered promiscuous mode [ 31.593983][ T4702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.597789][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.597844][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.597904][ T4714] bridge_slave_1: entered allmulticast mode [ 31.598359][ T4714] bridge_slave_1: entered promiscuous mode [ 31.609743][ T4703] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.609797][ T4703] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.610049][ T4703] bridge_slave_1: entered allmulticast mode [ 31.610490][ T4703] bridge_slave_1: entered promiscuous mode [ 31.617614][ T4703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.618537][ T4703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.640356][ T4703] team0: Port device team_slave_0 added [ 31.641084][ T4702] team0: Port device team_slave_0 added [ 31.641873][ T4702] team0: Port device team_slave_1 added [ 31.645615][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.649870][ T4704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.653084][ T4704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.655612][ T4703] team0: Port device team_slave_1 added [ 31.660668][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.668687][ T4702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.670267][ T4702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.670310][ T4702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.680471][ T4703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.680499][ T4703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.680798][ T4703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.685458][ T4714] team0: Port device team_slave_0 added [ 31.689937][ T4702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.689960][ T4702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.689988][ T4702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.696579][ T4704] team0: Port device team_slave_0 added [ 31.697400][ T4704] team0: Port device team_slave_1 added [ 31.703280][ T4703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.703312][ T4703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.703326][ T4703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.711039][ T4714] team0: Port device team_slave_1 added [ 31.715328][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.715559][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.715584][ T4704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.722585][ T4703] hsr_slave_0: entered promiscuous mode [ 31.722952][ T4703] hsr_slave_1: entered promiscuous mode [ 31.723159][ T4703] debugfs: 'hsr0' already exists in 'hsr' [ 31.723200][ T4703] Cannot create hsr debugfs directory [ 31.730445][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.730474][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.730489][ T4704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.738803][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.738831][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.738842][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.739651][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.739663][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.739674][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.764917][ T4714] hsr_slave_0: entered promiscuous mode [ 31.765214][ T4714] hsr_slave_1: entered promiscuous mode [ 31.765395][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 31.765405][ T4714] Cannot create hsr debugfs directory [ 31.771126][ T4702] hsr_slave_0: entered promiscuous mode [ 31.771417][ T4702] hsr_slave_1: entered promiscuous mode [ 31.771595][ T4702] debugfs: 'hsr0' already exists in 'hsr' [ 31.771605][ T4702] Cannot create hsr debugfs directory [ 31.799312][ T4704] hsr_slave_0: entered promiscuous mode [ 31.799644][ T4704] hsr_slave_1: entered promiscuous mode [ 31.799834][ T4704] debugfs: 'hsr0' already exists in 'hsr' [ 31.799843][ T4704] Cannot create hsr debugfs directory [ 31.834712][ T4708] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.838331][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.840294][ T4708] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.843109][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.862135][ T4708] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.864715][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.876272][ T4708] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.879179][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.906806][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.906876][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.907051][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.907088][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.926374][ T4714] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.929560][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.933163][ T4714] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.935570][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.935895][ T4714] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.938629][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.940466][ T4714] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.942932][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.962075][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.962131][ T4714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.962208][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.962242][ T4714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.976980][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.983037][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.984829][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.991170][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.992646][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.999475][ T4702] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.002239][ T4702] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.002551][ T4702] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.004999][ T4702] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.012847][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.013050][ T4702] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.014975][ T4702] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.015268][ T4702] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.018070][ T4702] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.028240][ T4703] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.029391][ T4703] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.029690][ T4703] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.032080][ T4703] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.037966][ T4703] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.039695][ T4703] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.041817][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.041873][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.048833][ T4703] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.051513][ T4703] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.053904][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.053958][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.085640][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.091449][ T4704] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.097448][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.099297][ T4704] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.101946][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.105495][ T4704] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.109114][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.118509][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.122989][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.123043][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.128036][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.128084][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.136989][ T4704] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.139948][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.152368][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.178178][ T4702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.194476][ T4703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.214792][ T4703] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.219398][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.219454][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.221911][ T4702] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.226171][ T4704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.233455][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.233512][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.237114][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.237155][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.258651][ T4704] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.264947][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.280140][ T4702] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.280182][ T4702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.286986][ T4703] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.287019][ T4703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.292418][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.292478][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.295351][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.295419][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.297701][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.297723][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.346229][ T4708] veth0_vlan: entered promiscuous mode [ 32.360881][ T4708] veth1_vlan: entered promiscuous mode [ 32.382293][ T4708] veth0_macvtap: entered promiscuous mode [ 32.388392][ T4708] veth1_macvtap: entered promiscuous mode [ 32.394000][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.397534][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.432609][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.476587][ T1189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.478617][ T1189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.480585][ T1189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.482439][ T1189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.502691][ T4714] veth0_vlan: entered promiscuous mode [ 32.505990][ T4714] veth1_vlan: entered promiscuous mode [ 32.536303][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.536346][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.543825][ T4714] veth0_macvtap: entered promiscuous mode [ 32.546171][ T4714] veth1_macvtap: entered promiscuous mode [ 32.561390][ T4702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.563407][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.563453][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.564806][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.574168][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.578411][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.578565][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.578628][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.578678][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.612766][ T4703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.622488][ T4704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.641161][ T4708] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.654029][ T4704] veth0_vlan: entered promiscuous mode [ 32.672408][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.672437][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.676035][ T4703] veth0_vlan: entered promiscuous mode [ 32.698396][ T4704] veth1_vlan: entered promiscuous mode [ 32.704429][ T4703] veth1_vlan: entered promiscuous mode [ 32.710246][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.710287][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.722110][ T4703] veth0_macvtap: entered promiscuous mode [ 32.724777][ T4703] veth1_macvtap: entered promiscuous mode [ 32.736033][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.744615][ T4704] veth0_macvtap: entered promiscuous mode [ 32.750738][ T4704] veth1_macvtap: entered promiscuous mode [ 32.754004][ T4702] veth0_vlan: entered promiscuous mode [ 32.759149][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.763682][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.764800][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.768005][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.768204][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.768267][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.768621][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.785184][ T4702] veth1_vlan: entered promiscuous mode [ 32.797862][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.797918][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.797955][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.797979][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.816998][ T4888] overlayfs: failed lookup in lower (newroot/1, name='file0', err=-40): overlapping layers [ 32.822789][ T4888] loop3: detected capacity change from 0 to 512 [ 32.830555][ T4888] overlayfs: failed lookup in lower (newroot/1, name='file0', err=-40): overlapping layers [ 32.832841][ T4888] overlayfs: failed lookup in lower (newroot/1, name='file0', err=-40): overlapping layers [ 32.853019][ T4888] overlayfs: failed lookup in lower (newroot/1, name='file0', err=-40): overlapping layers [ 32.853952][ T4702] veth0_macvtap: entered promiscuous mode [ 32.864168][ T4702] veth1_macvtap: entered promiscuous mode [ 32.871107][ T1189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.871139][ T1189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.895043][ T4702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.902017][ T4702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.923716][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.923756][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.954894][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.954929][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.961529][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.961564][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.982678][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.982714][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.002511][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.002547][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.017923][ T138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.018460][ T138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.018626][ T138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.027033][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.057005][ T4711] Bluetooth: hci3: command tx timeout [ 33.057117][ T4711] Bluetooth: hci1: command tx timeout [ 33.072689][ T4905] loop3: detected capacity change from 0 to 512 [ 33.090176][ T4905] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 33.110610][ T4900] loop0: detected capacity change from 0 to 512 [ 33.113322][ T4905] EXT4-fs (loop3): 1 truncate cleaned up [ 33.114018][ T4905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.120427][ T4900] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 33.182877][ T4711] Bluetooth: hci0: command tx timeout [ 33.183178][ T4711] Bluetooth: hci2: command tx timeout [ 33.183343][ T4718] Bluetooth: hci4: command tx timeout [ 34.255204][ T4922] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12'. [ 34.256224][ T4923] IPVS: length: 41 != 24 [ 34.350292][ T4925] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15'. [ 34.395006][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.444045][ T4931] loop0: detected capacity change from 0 to 512 [ 34.548989][ T4938] FAULT_INJECTION: forcing a failure. [ 34.548989][ T4938] name failslab, interval 1, probability 0, space 0, times 1 [ 34.549022][ T4938] CPU: 1 UID: 0 PID: 4938 Comm: syz.4.19 Not tainted syzkaller #0 PREEMPT [ 34.549038][ T4938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 34.549044][ T4938] Call trace: [ 34.549047][ T4938] show_stack+0x2c/0x3c (C) [ 34.549067][ T4938] __dump_stack+0x30/0x40 [ 34.549079][ T4938] dump_stack_lvl+0xd8/0x12c [ 34.549091][ T4938] dump_stack+0x1c/0x28 [ 34.549102][ T4938] should_fail_ex+0x41c/0x590 [ 34.549115][ T4938] should_failslab+0xc4/0x120 [ 34.549128][ T4938] kmem_cache_alloc_noprof+0x94/0x5d4 [ 34.549142][ T4938] skb_clone+0x1ac/0x320 [ 34.549153][ T4938] __netlink_deliver_tap+0x364/0x6f4 [ 34.549164][ T4938] netlink_deliver_tap+0x1d8/0x1dc [ 34.549174][ T4938] netlink_unicast+0x5dc/0x7f8 [ 34.549182][ T4938] netlink_sendmsg+0x648/0x948 [ 34.549192][ T4938] __sock_sendmsg+0xc8/0x17c [ 34.549200][ T4938] ____sys_sendmsg+0x3d0/0x6c8 [ 34.549210][ T4938] ___sys_sendmsg+0x198/0x224 [ 34.549220][ T4938] __sys_sendmsg+0x158/0x204 [ 34.549229][ T4938] __arm64_sys_sendmsg+0x88/0x9c [ 34.549239][ T4938] invoke_syscall+0x98/0x244 [ 34.549251][ T4938] el0_svc_common+0xec/0x23c [ 34.549262][ T4938] do_el0_svc+0x4c/0x5c [ 34.549273][ T4938] el0_svc+0x64/0x260 [ 34.549284][ T4938] el0t_64_sync_handler+0x44/0x104 [ 34.549294][ T4938] el0t_64_sync+0x198/0x19c [ 34.869272][ T4941] loop0: detected capacity change from 0 to 2048 [ 34.884281][ T4945] FAULT_INJECTION: forcing a failure. [ 34.884281][ T4945] name failslab, interval 1, probability 0, space 0, times 0 [ 34.884329][ T4945] CPU: 1 UID: 0 PID: 4945 Comm: syz.4.20 Not tainted syzkaller #0 PREEMPT [ 34.884351][ T4945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 34.884358][ T4945] Call trace: [ 34.884361][ T4945] show_stack+0x2c/0x3c (C) [ 34.884385][ T4945] __dump_stack+0x30/0x40 [ 34.884399][ T4945] dump_stack_lvl+0xd8/0x12c [ 34.884410][ T4945] dump_stack+0x1c/0x28 [ 34.884422][ T4945] should_fail_ex+0x41c/0x590 [ 34.884435][ T4945] should_failslab+0xc4/0x120 [ 34.884448][ T4945] kmem_cache_alloc_noprof+0x94/0x5d4 [ 34.884460][ T4945] security_inode_alloc+0x40/0x304 [ 34.884469][ T4945] inode_init_always_gfp+0x704/0xbac [ 34.884481][ T4945] alloc_inode+0x9c/0x198 [ 34.884491][ T4945] sock_alloc+0x4c/0x204 [ 34.884500][ T4945] __sock_create+0x108/0x670 [ 34.884508][ T4945] __sys_socket_create+0xc0/0x11c [ 34.884517][ T4945] __sys_socket+0x44/0xec [ 34.884525][ T4945] __arm64_sys_socket+0x84/0x9c [ 34.884534][ T4945] invoke_syscall+0x98/0x244 [ 34.884546][ T4945] el0_svc_common+0xec/0x23c [ 34.884557][ T4945] do_el0_svc+0x4c/0x5c [ 34.884568][ T4945] el0_svc+0x64/0x260 [ 34.884579][ T4945] el0t_64_sync_handler+0x44/0x104 [ 34.884589][ T4945] el0t_64_sync+0x198/0x19c [ 34.884946][ T4945] socket: no more sockets [ 34.891102][ T4933] Injecting memory failure for pfn 0x135a03 at process virtual address 0x20003000 [ 34.904296][ T4933] Memory failure: 0x135a03: recovery action for dirty LRU page: Recovered [ 34.908191][ T4939] Injecting memory failure for pfn 0x136a00 at process virtual address 0x20000000 [ 34.908666][ T4939] Memory failure: 0x136a00: Sending SIGBUS to syz.3.14:4939 due to hardware memory corruption [ 34.908709][ T4939] Memory failure: 0x136a00: Sending SIGBUS to syz.3.14:4939 due to hardware memory corruption [ 34.908723][ T4939] Memory failure: 0x136a00: recovery action for unsplit thp: Failed [ 34.954034][ T4941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 34.959556][ T4941] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.967869][ T4949] FAULT_INJECTION: forcing a failure. [ 34.967869][ T4949] name failslab, interval 1, probability 0, space 0, times 0 [ 34.967907][ T4949] CPU: 0 UID: 0 PID: 4949 Comm: syz.1.21 Not tainted syzkaller #0 PREEMPT [ 34.967921][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 34.967929][ T4949] Call trace: [ 34.967933][ T4949] show_stack+0x2c/0x3c (C) [ 34.967954][ T4949] __dump_stack+0x30/0x40 [ 34.967967][ T4949] dump_stack_lvl+0xd8/0x12c [ 34.967979][ T4949] dump_stack+0x1c/0x28 [ 34.967990][ T4949] should_fail_ex+0x41c/0x590 [ 34.968003][ T4949] should_failslab+0xc4/0x120 [ 34.968016][ T4949] __kmalloc_cache_noprof+0x94/0x5fc [ 34.968025][ T4949] tipc_topsrv_queue_evt+0xe8/0x258 [ 34.968035][ T4949] tipc_sub_send_event+0x2f4/0x664 [ 34.968045][ T4949] tipc_sub_report_overlap+0x1a0/0x284 [ 34.968054][ T4949] tipc_nametbl_insert_publ+0x9fc/0xe44 [ 34.968064][ T4949] tipc_nametbl_publish+0xc0/0x1e4 [ 34.968073][ T4949] tipc_sk_publish+0x17c/0x380 [ 34.968086][ T4949] tipc_sk_join+0x2d8/0x508 [ 34.968094][ T4949] tipc_setsockopt+0x570/0x7c0 [ 34.968102][ T4949] do_sock_setsockopt+0x1f0/0x330 [ 34.968113][ T4949] __sys_setsockopt+0x104/0x170 [ 34.968122][ T4949] __arm64_sys_setsockopt+0xc8/0xe4 [ 34.968132][ T4949] invoke_syscall+0x98/0x244 [ 34.968144][ T4949] el0_svc_common+0xec/0x23c [ 34.968155][ T4949] do_el0_svc+0x4c/0x5c [ 34.968166][ T4949] el0_svc+0x64/0x260 [ 34.968176][ T4949] el0t_64_sync_handler+0x44/0x104 [ 34.968186][ T4949] el0t_64_sync+0x198/0x19c [ 35.001715][ T4951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 35.075019][ T4955] capability: warning: `syz.1.24' uses deprecated v2 capabilities in a way that may be insecure [ 35.137201][ T4718] Bluetooth: hci1: command tx timeout [ 35.137257][ T4718] Bluetooth: hci3: command tx timeout [ 35.241453][ T4720] Bluetooth: hci4: command tx timeout [ 35.241620][ T4720] Bluetooth: hci2: command tx timeout [ 35.241968][ T4720] Bluetooth: hci0: command tx timeout [ 35.273697][ T4959] warning: `syz.1.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 35.510184][ T4963] netlink: 'syz.0.26': attribute type 4 has an invalid length. [ 35.514420][ T4963] loop0: detected capacity change from 0 to 512 [ 35.522888][ T4963] ======================================================= [ 35.522888][ T4963] WARNING: The mand mount option has been deprecated and [ 35.522888][ T4963] and is ignored by this kernel. Remove the mand [ 35.522888][ T4963] option from the mount to silence this warning. [ 35.522888][ T4963] ======================================================= [ 35.537091][ T4963] EXT4-fs: Ignoring removed i_version option [ 35.544130][ T4963] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 35.550289][ T4963] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 35.550358][ T4963] System zones: 1-12 [ 35.550486][ T4963] EXT4-fs (loop0): orphan cleanup on readonly fs [ 35.551621][ T4963] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.26: invalid indirect mapped block 12 (level 1) [ 35.551681][ T4963] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 35.555715][ T4963] EXT4-fs (loop0): Remounting filesystem read-only [ 35.555898][ T4963] EXT4-fs (loop0): 1 truncate cleaned up [ 35.564574][ T4963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 35.602024][ T4963] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.26: error -EUCLEAN reading directory block [ 35.607960][ T4963] fuse: Bad value for 'fd' [ 35.610630][ T4963] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.26: error -EUCLEAN reading directory block [ 35.612533][ T4963] fuse: Bad value for 'fd' [ 35.614086][ T4966] loop3: detected capacity change from 0 to 128 [ 35.624694][ T4966] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.712339][ T4704] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 36.071878][ T4978] loop1: detected capacity change from 0 to 256 [ 36.449838][ T4708] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.499259][ T4990] loop3: detected capacity change from 0 to 512 [ 36.505053][ T4990] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.531151][ T4990] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec01c, mo2=0102] [ 36.531224][ T4990] System zones: 0-2, 18-18, 34-35 [ 36.535962][ T4990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.555717][ T4990] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.32: invalid fast symlink length 10 [ 36.598320][ T4995] loop4: detected capacity change from 0 to 512 [ 36.605338][ T4995] EXT4-fs (loop4): Test dummy encryption mode enabled [ 36.612008][ T4995] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 36.614943][ T4995] System zones: 1-2, 4-12, 8-8 [ 36.617329][ T4995] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.34: iget: bad i_size value: 38620345925642 [ 36.617377][ T4995] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 36.621178][ T4995] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.34: couldn't read orphan inode 15 (err -117) [ 36.621270][ T4995] loop4: lost filesystem error report for type 5 error -117 [ 36.627639][ T4995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.644687][ T4702] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.663011][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.702500][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.702576][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.702829][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.702863][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.703057][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.703099][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.705366][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.705391][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.705467][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.705487][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.705559][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.705578][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.705637][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.705654][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.705672][ T4999] ldm_validate_partition_table(): Disk read failed. [ 36.705719][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.705738][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.706465][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.706496][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.714256][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.714280][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.714370][ T4999] Dev loop7: unable to read RDB block 0 [ 36.714619][ T4999] loop7: unable to read partition table [ 36.714692][ T4999] loop7: partition table beyond EOD, truncated [ 36.714701][ T4999] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 36.715767][ T4999] ldm_validate_partition_table(): Disk read failed. [ 36.719358][ T4999] Dev loop7: unable to read RDB block 0 [ 36.719658][ T4999] loop7: unable to read partition table [ 36.719731][ T4999] loop7: partition table beyond EOD, truncated [ 36.781607][ T5005] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 36.783556][ T5005] unable to read xattr id index table [ 36.867393][ T5005] SQUASHFS error: zlib decompression failed, data probably corrupt [ 36.867438][ T5005] SQUASHFS error: Failed to read block 0x9b: -5 [ 36.867448][ T5005] SQUASHFS error: Unable to read metadata cache entry [99] [ 36.867457][ T5005] SQUASHFS error: Unable to read inode 0x127 [ 36.874909][ T5004] Zero length message leads to an empty skb [ 36.881600][ T5005] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.886560][ T5005] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.886587][ T5005] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.889219][ T5005] EXT4-fs (loop3): 1 truncate cleaned up [ 36.889747][ T5005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.896345][ T5004] capability: warning: `syz.4.35' uses 32-bit capabilities (legacy support in use) [ 36.909464][ T5005] EXT4-fs error (device loop3): __ext4_expand_extra_isize:6537: inode #12: comm syz.3.36: bad extra_isize 62 (inode size 256) [ 37.011107][ T5015] process 'syz.1.38' launched '/dev/fd/3' with NULL argv: empty string added [ 37.148076][ T5005] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.36: invalid fast symlink length 39 [ 37.174787][ T5005] Injecting memory failure for pfn 0x1213cb at process virtual address 0x20000000 [ 37.184125][ T5005] Memory failure: 0x1213cb: Sending SIGBUS to syz.3.36:5005 due to hardware memory corruption [ 37.184198][ T5005] Memory failure: 0x1213cb: recovery action for dirty LRU page: Recovered [ 37.184214][ T5005] Injecting memory failure for pfn 0x1213ca at process virtual address 0x20001000 [ 37.184265][ T5005] Memory failure: 0x1213ca: Sending SIGBUS to syz.3.36:5005 due to hardware memory corruption [ 37.184284][ T5005] Memory failure: 0x1213ca: recovery action for dirty LRU page: Recovered [ 37.184293][ T5005] Injecting memory failure for pfn 0x121876 at process virtual address 0x20002000 [ 37.184322][ T5005] Memory failure: 0x121876: Sending SIGBUS to syz.3.36:5005 due to hardware memory corruption [ 37.184338][ T5005] Memory failure: 0x121876: recovery action for dirty LRU page: Recovered [ 37.184358][ T5005] Injecting memory failure for pfn 0x218eff at process virtual address 0x20003000 [ 37.184367][ T5005] Memory failure: 0x218eff: unhandlable page. [ 37.184373][ T5005] Memory failure: 0x218eff: recovery action for reserved kernel page: Ignored [ 37.216581][ T4718] Bluetooth: hci3: command tx timeout [ 37.216621][ T4718] Bluetooth: hci1: command tx timeout [ 37.235318][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.296634][ T4720] Bluetooth: hci2: command tx timeout [ 37.296681][ T4720] Bluetooth: hci4: command tx timeout [ 37.305722][ T5022] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.328746][ T5024] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.329139][ T5024] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.371175][ T5027] Unsupported ieee802154 address type: 0 [ 37.404066][ T5028] tmpfs: Bad value for 'mpol' [ 37.613202][ T5024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.618335][ T5024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.807605][ T138] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.807662][ T138] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.807696][ T138] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.807716][ T138] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.138955][ T4702] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.208664][ T5071] netlink: 56 bytes leftover after parsing attributes in process `syz.4.54'. [ 38.252751][ T5069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.55'. [ 38.252800][ T5069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.55'. [ 38.305035][ T5079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 38.311898][ T5079] set_capacity_and_notify: 4 callbacks suppressed [ 38.313662][ T5079] loop4: detected capacity change from 0 to 256 [ 38.316064][ T5079] vfat: Unknown parameter 'r' [ 38.328512][ T5081] sch_tbf: peakrate 2048 is lower than or equals to rate 17006904472301849741 ! [ 38.377539][ T5081] loop1: detected capacity change from 0 to 512 [ 38.383326][ T5081] EXT4-fs (loop1): Test dummy encryption mode enabled [ 38.387129][ T5081] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.59: inode has both inline data and extents flags [ 38.387163][ T5081] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.387273][ T5081] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.59: couldn't read orphan inode 15 (err -117) [ 38.387286][ T5081] loop1: lost filesystem error report for type 5 error -117 [ 38.393785][ T5081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.397213][ T5081] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 38.441260][ T5081] fscrypt: AES-256-XTS using blk-crypto-fallback [ 38.696649][ T4718] Bluetooth: hci0: command tx timeout [ 38.882699][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.927783][ T5105] loop2: detected capacity change from 0 to 512 [ 38.929777][ T5105] EXT4-fs: Ignoring removed nobh option [ 38.932969][ T5103] random: crng reseeded on system resumption [ 38.949576][ T5105] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 38.950500][ T5105] EXT4-fs (loop2): Remounting filesystem read-only [ 38.951537][ T5105] EXT4-fs (loop2): 1 truncate cleaned up [ 38.955379][ T5105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.973313][ T5105] EXT4-fs (loop2): shut down requested (1) [ 39.020269][ T4703] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.022813][ T5109] loop3: detected capacity change from 0 to 1024 [ 39.041386][ T5109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.430072][ T5122] loop2: detected capacity change from 0 to 8192 [ 39.431378][ T4718] Bluetooth: hci1: command tx timeout [ 39.431474][ T4711] Bluetooth: hci4: command tx timeout [ 39.431520][ T4711] Bluetooth: hci2: command tx timeout [ 39.431571][ T4720] Bluetooth: hci3: command tx timeout [ 39.441787][ T5123] netlink: 60 bytes leftover after parsing attributes in process `syz.1.70'. [ 39.474400][ T5124] netlink: 68 bytes leftover after parsing attributes in process `syz.1.70'. [ 39.509263][ T5122] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.944264][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.214068][ T5144] loop1: detected capacity change from 0 to 128 [ 40.262378][ T5144] netlink: 'syz.1.74': attribute type 1 has an invalid length. [ 40.262413][ T5144] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.74'. [ 40.275203][ T5144] netlink: 44 bytes leftover after parsing attributes in process `syz.1.74'. [ 40.275236][ T5144] tipc: Enabling of bearer rejected, media not registered [ 40.412070][ T5149] syz.1.76 uses obsolete (PF_INET,SOCK_PACKET) [ 40.414100][ T5157] loop4: detected capacity change from 0 to 1024 [ 40.414510][ T5157] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.414530][ T5157] EXT4-fs: Ignoring removed oldalloc option [ 40.418503][ T5161] loop3: detected capacity change from 0 to 512 [ 40.443516][ T5157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.454205][ T5161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.464369][ T5157] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.79: bg 0: block 112: padding at end of block bitmap is not set [ 40.470748][ T5171] FAULT_INJECTION: forcing a failure. [ 40.470748][ T5171] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.470788][ T5171] CPU: 1 UID: 0 PID: 5171 Comm: syz.0.81 Tainted: G L syzkaller #0 PREEMPT [ 40.470804][ T5171] Tainted: [L]=SOFTLOCKUP [ 40.470808][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 40.470815][ T5171] Call trace: [ 40.470818][ T5171] show_stack+0x2c/0x3c (C) [ 40.470841][ T5171] __dump_stack+0x30/0x40 [ 40.470852][ T5171] dump_stack_lvl+0xd8/0x12c [ 40.470862][ T5171] dump_stack+0x1c/0x28 [ 40.470872][ T5171] should_fail_ex+0x41c/0x590 [ 40.470883][ T5171] should_fail+0x14/0x24 [ 40.470892][ T5171] should_fail_usercopy+0x20/0x30 [ 40.470902][ T5171] _inline_copy_from_user+0x3c/0x174 [ 40.470912][ T5171] ucma_create_id+0xe4/0x32c [ 40.470920][ T5171] ucma_write+0x25c/0x2b8 [ 40.470928][ T5171] do_loop_readv_writev+0x24c/0x3dc [ 40.470936][ T5171] vfs_writev+0x2c8/0x630 [ 40.470943][ T5171] do_writev+0x134/0x2a8 [ 40.470950][ T5171] __arm64_sys_writev+0x88/0x9c [ 40.470960][ T5171] invoke_syscall+0x98/0x244 [ 40.470970][ T5171] el0_svc_common+0xec/0x23c [ 40.470980][ T5171] do_el0_svc+0x4c/0x5c [ 40.470989][ T5171] el0_svc+0x64/0x260 [ 40.470999][ T5171] el0t_64_sync_handler+0x44/0x104 [ 40.471007][ T5171] el0t_64_sync+0x198/0x19c [ 40.568457][ T5173] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 40.640139][ T12] IPVS: starting estimator thread 0... [ 40.825719][ T5184] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 40.826096][ T5184] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 40.826121][ T5184] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.826121][ T5184] [ 40.826136][ T5184] EXT4-fs (loop3): Total free blocks count 0 [ 40.826149][ T5184] EXT4-fs (loop3): Free/Dirty block details [ 40.826165][ T5184] EXT4-fs (loop3): free_blocks=65280 [ 40.826180][ T5184] EXT4-fs (loop3): dirty_blocks=33 [ 40.826191][ T5184] EXT4-fs (loop3): Block reservation details [ 40.826202][ T5184] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 40.826934][ T5184] Injecting memory failure for pfn 0x135993 at process virtual address 0x20001000 [ 40.845686][ T5184] Memory failure: 0x135993: Sending SIGBUS to syz.3.71:5184 due to hardware memory corruption [ 40.845742][ T5184] Memory failure: 0x135993: recovery action for dirty LRU page: Recovered [ 40.845758][ T5184] Injecting memory failure for pfn 0x13599c at process virtual address 0x20002000 [ 40.845825][ T5184] Memory failure: 0x13599c: Sending SIGBUS to syz.3.71:5184 due to hardware memory corruption [ 40.845846][ T5184] Memory failure: 0x13599c: recovery action for dirty LRU page: Recovered [ 40.845856][ T5184] Injecting memory failure for pfn 0x120156 at process virtual address 0x20003000 [ 40.845885][ T5184] Memory failure: 0x120156: Sending SIGBUS to syz.3.71:5184 due to hardware memory corruption [ 40.845902][ T5184] Memory failure: 0x120156: recovery action for dirty LRU page: Recovered [ 40.882825][ T4702] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.928939][ T5185] IPVS: using max 46 ests per chain, 110400 per kthread [ 40.990576][ T5197] loop4: detected capacity change from 0 to 2048 [ 41.198533][ T5225] FAULT_INJECTION: forcing a failure. [ 41.198533][ T5225] name failslab, interval 1, probability 0, space 0, times 0 [ 41.201090][ T5225] CPU: 1 UID: 0 PID: 5225 Comm: syz.1.92 Tainted: G L syzkaller #0 PREEMPT [ 41.201119][ T5225] Tainted: [L]=SOFTLOCKUP [ 41.201124][ T5225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.201131][ T5225] Call trace: [ 41.201136][ T5225] show_stack+0x2c/0x3c (C) [ 41.201157][ T5225] __dump_stack+0x30/0x40 [ 41.201169][ T5225] dump_stack_lvl+0xd8/0x12c [ 41.201179][ T5225] dump_stack+0x1c/0x28 [ 41.201189][ T5225] should_fail_ex+0x41c/0x590 [ 41.201200][ T5225] should_failslab+0xc4/0x120 [ 41.201211][ T5225] __kmalloc_cache_noprof+0x94/0x5fc [ 41.201219][ T5225] ucma_alloc_ctx+0x5c/0x2f0 [ 41.201229][ T5225] ucma_create_id+0x1d8/0x32c [ 41.201237][ T5225] ucma_write+0x25c/0x2b8 [ 41.201244][ T5225] do_loop_readv_writev+0x24c/0x3dc [ 41.201253][ T5225] vfs_writev+0x2c8/0x630 [ 41.201259][ T5225] do_writev+0x134/0x2a8 [ 41.201266][ T5225] __arm64_sys_writev+0x88/0x9c [ 41.201277][ T5225] invoke_syscall+0x98/0x244 [ 41.201287][ T5225] el0_svc_common+0xec/0x23c [ 41.201296][ T5225] do_el0_svc+0x4c/0x5c [ 41.201306][ T5225] el0_svc+0x64/0x260 [ 41.201315][ T5225] el0t_64_sync_handler+0x44/0x104 [ 41.201324][ T5225] el0t_64_sync+0x198/0x19c [ 41.529378][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.539665][ T5228] 9p: Bad value for 'wfdno' [ 41.549050][ T5228] nvme_fabrics: missing parameter 'transport=%s' [ 41.677876][ T5235] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 41.715241][ T49] IPVS: starting estimator thread 0... [ 41.937560][ T5238] IPVS: using max 43 ests per chain, 103200 per kthread [ 42.352917][ T5249] FAULT_INJECTION: forcing a failure. [ 42.352917][ T5249] name failslab, interval 1, probability 0, space 0, times 0 [ 42.352952][ T5249] CPU: 0 UID: 0 PID: 5249 Comm: syz.0.99 Tainted: G L syzkaller #0 PREEMPT [ 42.352965][ T5249] Tainted: [L]=SOFTLOCKUP [ 42.352968][ T5249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 42.352974][ T5249] Call trace: [ 42.352976][ T5249] show_stack+0x2c/0x3c (C) [ 42.352996][ T5249] __dump_stack+0x30/0x40 [ 42.353008][ T5249] dump_stack_lvl+0xd8/0x12c [ 42.353020][ T5249] dump_stack+0x1c/0x28 [ 42.353031][ T5249] should_fail_ex+0x41c/0x590 [ 42.353045][ T5249] should_failslab+0xc4/0x120 [ 42.353058][ T5249] kmem_cache_alloc_noprof+0x94/0x5d4 [ 42.353071][ T5249] do_getname+0x48/0x234 [ 42.353082][ T5249] getname_flags+0x2c/0x3c [ 42.353090][ T5249] do_sys_openat2+0xd0/0x1e8 [ 42.353115][ T5249] do_sys_open+0xb0/0xe0 [ 42.353126][ T5249] __arm64_sys_openat+0xa8/0xc4 [ 42.353137][ T5249] invoke_syscall+0x98/0x244 [ 42.353149][ T5249] el0_svc_common+0xec/0x23c [ 42.353160][ T5249] do_el0_svc+0x4c/0x5c [ 42.353172][ T5249] el0_svc+0x64/0x260 [ 42.353182][ T5249] el0t_64_sync_handler+0x44/0x104 [ 42.353192][ T5249] el0t_64_sync+0x198/0x19c [ 42.537220][ T5263] netlink: 224 bytes leftover after parsing attributes in process `syz.0.104'. [ 42.537357][ T5263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.104'. [ 42.628807][ T5271] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 42.719992][ T5277] loop0: detected capacity change from 0 to 128 [ 42.986467][ T5277] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.006714][ T5282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 43.101980][ T5285] 0x000000000000-0x00000000004f : "" [ 43.105720][ T5285] ftl_cs: FTL header corrupt! [ 43.413445][ T4704] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.532512][ T5304] FAULT_INJECTION: forcing a failure. [ 43.532512][ T5304] name failslab, interval 1, probability 0, space 0, times 0 [ 43.535105][ T5304] CPU: 1 UID: 0 PID: 5304 Comm: syz.2.116 Tainted: G L syzkaller #0 PREEMPT [ 43.535124][ T5304] Tainted: [L]=SOFTLOCKUP [ 43.535128][ T5304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 43.535134][ T5304] Call trace: [ 43.535137][ T5304] show_stack+0x2c/0x3c (C) [ 43.535161][ T5304] __dump_stack+0x30/0x40 [ 43.535177][ T5304] dump_stack_lvl+0xd8/0x12c [ 43.535187][ T5304] dump_stack+0x1c/0x28 [ 43.535197][ T5304] should_fail_ex+0x41c/0x590 [ 43.535208][ T5304] should_failslab+0xc4/0x120 [ 43.535219][ T5304] __kmalloc_cache_noprof+0x94/0x5fc [ 43.535227][ T5304] __rdma_create_id+0x78/0x6a8 [ 43.535237][ T5304] rdma_create_user_id+0x88/0xc8 [ 43.535247][ T5304] ucma_create_id+0x218/0x32c [ 43.535255][ T5304] ucma_write+0x25c/0x2b8 [ 43.535263][ T5304] do_loop_readv_writev+0x24c/0x3dc [ 43.535271][ T5304] vfs_writev+0x2c8/0x630 [ 43.535278][ T5304] do_writev+0x134/0x2a8 [ 43.535285][ T5304] __arm64_sys_writev+0x88/0x9c [ 43.535295][ T5304] invoke_syscall+0x98/0x244 [ 43.535305][ T5304] el0_svc_common+0xec/0x23c [ 43.535315][ T5304] do_el0_svc+0x4c/0x5c [ 43.535324][ T5304] el0_svc+0x64/0x260 [ 43.535334][ T5304] el0t_64_sync_handler+0x44/0x104 [ 43.535342][ T5304] el0t_64_sync+0x198/0x19c [ 43.937231][ T5310] loop1: detected capacity change from 0 to 512 [ 46.153716][ T5316] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 46.305372][ T867] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 46.307741][ T867] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 46.309469][ T867] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 46.311174][ T867] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 46.312849][ T867] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 46.323884][ T867] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 47.040914][ T5355] FAULT_INJECTION: forcing a failure. [ 47.040914][ T5355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.043640][ T5355] CPU: 1 UID: 0 PID: 5355 Comm: syz.1.129 Tainted: G L syzkaller #0 PREEMPT [ 47.043660][ T5355] Tainted: [L]=SOFTLOCKUP [ 47.043663][ T5355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 47.043669][ T5355] Call trace: [ 47.043673][ T5355] show_stack+0x2c/0x3c (C) [ 47.043697][ T5355] __dump_stack+0x30/0x40 [ 47.043709][ T5355] dump_stack_lvl+0xd8/0x12c [ 47.043719][ T5355] dump_stack+0x1c/0x28 [ 47.043729][ T5355] should_fail_ex+0x41c/0x590 [ 47.043740][ T5355] should_fail+0x14/0x24 [ 47.043749][ T5355] should_fail_usercopy+0x20/0x30 [ 47.043759][ T5355] _inline_copy_to_user+0x3c/0x158 [ 47.043770][ T5355] ucma_create_id+0x2a0/0x32c [ 47.043778][ T5355] ucma_write+0x25c/0x2b8 [ 47.043786][ T5355] do_loop_readv_writev+0x24c/0x3dc [ 47.043795][ T5355] vfs_writev+0x2c8/0x630 [ 47.043801][ T5355] do_writev+0x134/0x2a8 [ 47.043808][ T5355] __arm64_sys_writev+0x88/0x9c [ 47.043819][ T5355] invoke_syscall+0x98/0x244 [ 47.043836][ T5355] el0_svc_common+0xec/0x23c [ 47.043850][ T5355] do_el0_svc+0x4c/0x5c [ 47.043862][ T5355] el0_svc+0x64/0x260 [ 47.043871][ T5355] el0t_64_sync_handler+0x44/0x104 [ 47.043880][ T5355] el0t_64_sync+0x198/0x19c [ 47.109779][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.111808][ T5362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.124'. [ 47.114013][ T24] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 47.132956][ T5358] netlink: 128 bytes leftover after parsing attributes in process `syz.1.130'. [ 47.196714][ T5368] loop2: detected capacity change from 0 to 256 [ 47.210596][ T5364] fido_id[5364]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.0002/report_descriptor': No such device [ 47.354334][ T5374] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 47.356344][ T5129] IPVS: starting estimator thread 0... [ 47.438827][ T5381] loop2: detected capacity change from 0 to 128 [ 47.446629][ T5377] IPVS: using max 59 ests per chain, 141600 per kthread [ 47.456317][ T5381] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.767559][ T5389] 0x000000000000-0x00000000004f : "" [ 47.773015][ T5389] ftl_cs: FTL header corrupt! [ 47.830726][ T5392] ip6t_hbh: unknown flags 38 [ 47.927694][ T5403] FAULT_INJECTION: forcing a failure. [ 47.927694][ T5403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.927734][ T5403] CPU: 0 UID: 0 PID: 5403 Comm: syz.0.140 Tainted: G L syzkaller #0 PREEMPT [ 47.927750][ T5403] Tainted: [L]=SOFTLOCKUP [ 47.927755][ T5403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 47.927761][ T5403] Call trace: [ 47.927765][ T5403] show_stack+0x2c/0x3c (C) [ 47.927784][ T5403] __dump_stack+0x30/0x40 [ 47.927798][ T5403] dump_stack_lvl+0xd8/0x12c [ 47.927814][ T5403] dump_stack+0x1c/0x28 [ 47.927825][ T5403] should_fail_ex+0x41c/0x590 [ 47.927839][ T5403] should_fail+0x14/0x24 [ 47.927849][ T5403] should_fail_usercopy+0x20/0x30 [ 47.927861][ T5403] _inline_copy_from_user+0x3c/0x174 [ 47.927873][ T5403] ucma_write+0x13c/0x2b8 [ 47.927881][ T5403] do_loop_readv_writev+0x24c/0x3dc [ 47.927890][ T5403] vfs_writev+0x2c8/0x630 [ 47.927897][ T5403] do_writev+0x134/0x2a8 [ 47.927903][ T5403] __arm64_sys_writev+0x88/0x9c [ 47.927914][ T5403] invoke_syscall+0x98/0x244 [ 47.927924][ T5403] el0_svc_common+0xec/0x23c [ 47.927934][ T5403] do_el0_svc+0x4c/0x5c [ 47.927943][ T5403] el0_svc+0x64/0x260 [ 47.927953][ T5403] el0t_64_sync_handler+0x44/0x104 [ 47.927961][ T5403] el0t_64_sync+0x198/0x19c [ 48.102475][ T5409] netlink: 'syz.0.143': attribute type 5 has an invalid length. [ 48.104195][ T5409] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.143'. [ 48.113493][ T5409] loop0: detected capacity change from 0 to 1024 [ 48.117359][ T5409] EXT4-fs: Ignoring removed orlov option [ 48.123978][ T5409] EXT4-fs (loop0): bad geometry: block count 1024 exceeds size of device (512 blocks) [ 48.296016][ T4703] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.000720][ T5437] netlink: 260 bytes leftover after parsing attributes in process `syz.0.152'. [ 49.042625][ T5415] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 49.338390][ T5449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 49.340611][ T5449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.156'. [ 49.473790][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 49.557642][ T4720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 49.586247][ T4720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 49.587562][ T5461] loop4: detected capacity change from 0 to 128 [ 49.590019][ T4720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 49.595012][ T4720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 49.597314][ T4720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.605877][ T5461] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.725642][ T5473] FAULT_INJECTION: forcing a failure. [ 49.725642][ T5473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.725678][ T5473] CPU: 0 UID: 0 PID: 5473 Comm: syz.0.163 Tainted: G L syzkaller #0 PREEMPT [ 49.725694][ T5473] Tainted: [L]=SOFTLOCKUP [ 49.725698][ T5473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 49.725704][ T5473] Call trace: [ 49.725707][ T5473] show_stack+0x2c/0x3c (C) [ 49.725728][ T5473] __dump_stack+0x30/0x40 [ 49.725743][ T5473] dump_stack_lvl+0xd8/0x12c [ 49.725753][ T5473] dump_stack+0x1c/0x28 [ 49.725763][ T5473] should_fail_ex+0x41c/0x590 [ 49.725774][ T5473] should_fail+0x14/0x24 [ 49.725783][ T5473] should_fail_usercopy+0x20/0x30 [ 49.725793][ T5473] simple_read_from_buffer+0xc4/0x238 [ 49.725804][ T5473] proc_fail_nth_read+0x1a8/0x248 [ 49.725819][ T5473] vfs_read+0x230/0x8c8 [ 49.725831][ T5473] ksys_read+0x12c/0x228 [ 49.725842][ T5473] __arm64_sys_read+0x84/0x98 [ 49.725852][ T5473] invoke_syscall+0x98/0x244 [ 49.725863][ T5473] el0_svc_common+0xec/0x23c [ 49.725872][ T5473] do_el0_svc+0x4c/0x5c [ 49.725882][ T5473] el0_svc+0x64/0x260 [ 49.725891][ T5473] el0t_64_sync_handler+0x44/0x104 [ 49.725899][ T5473] el0t_64_sync+0x198/0x19c [ 49.955851][ T5477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.161'. [ 49.962157][ T5477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 49.964730][ T5477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 50.103094][ T4918] bridge_slave_1: left allmulticast mode [ 50.103148][ T4918] bridge_slave_1: left promiscuous mode [ 50.103614][ T4918] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.105670][ T4918] bridge_slave_0: left allmulticast mode [ 50.105688][ T4918] bridge_slave_0: left promiscuous mode [ 50.105755][ T4918] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.212364][ T4918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.219994][ T5500] loop0: detected capacity change from 0 to 512 [ 50.221250][ T5500] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.235028][ T5500] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.166: corrupted in-inode xattr: e_value size too large [ 50.235071][ T5500] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.238083][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 50.238097][ C0] EXT4-fs (loop0): initial error at time 306: ext4_iget_extra_inode:5210: inode 15 [ 50.238115][ C0] EXT4-fs (loop0): last error at time 306: ext4_iget_extra_inode:5210: inode 15 [ 50.246105][ T5500] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.166: couldn't read orphan inode 15 (err -117) [ 50.246139][ T5500] loop0: lost filesystem error report for type 5 error -117 [ 50.249675][ T5500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.258817][ T4918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.268563][ T4918] bond0 (unregistering): Released all slaves [ 50.566026][ T5504] loop2: detected capacity change from 0 to 1024 [ 50.568131][ T4718] Bluetooth: hci1: command 0x0401 tx timeout [ 50.574949][ T5504] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 50.575030][ T5504] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 50.577018][ T4704] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.577483][ T5504] EXT4-fs (loop2): invalid journal inode [ 50.591564][ T4702] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.204629][ T5543] netlink: 'syz.2.175': attribute type 16 has an invalid length. [ 51.220180][ T5543] loop2: detected capacity change from 0 to 512 [ 51.226411][ T4918] hsr_slave_0: left promiscuous mode [ 51.230014][ T4918] hsr_slave_1: left promiscuous mode [ 51.230954][ T4918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.231637][ T5543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.239347][ T4918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.240574][ T5543] Illegal XDP return value 4294967274 on prog (id 28) dev N/A, expect packet loss! [ 51.323569][ T5550] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.175: bg 0: block 306: padding at end of block bitmap is not set [ 51.428493][ T4918] team0 (unregistering): Port device team_slave_1 removed [ 51.440078][ T4918] team0 (unregistering): Port device team_slave_0 removed [ 51.697381][ T4718] Bluetooth: hci3: command tx timeout [ 51.823435][ T4394] 8021q: adding VLAN 0 to HW filter on device eth0 [ 51.868898][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.870877][ T5458] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.872865][ T5458] bridge_slave_0: entered allmulticast mode [ 51.877617][ T5458] bridge_slave_0: entered promiscuous mode [ 51.879149][ T4703] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.882228][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.882897][ T5458] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.882965][ T5458] bridge_slave_1: entered allmulticast mode [ 51.883480][ T5458] bridge_slave_1: entered promiscuous mode [ 51.920022][ T5458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.925981][ T5458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.964830][ T5458] team0: Port device team_slave_0 added [ 51.965804][ T5458] team0: Port device team_slave_1 added [ 52.039200][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.039230][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.039243][ T5458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.039756][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.039763][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.039775][ T5458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.072136][ T5458] hsr_slave_0: entered promiscuous mode [ 52.072523][ T5458] hsr_slave_1: entered promiscuous mode [ 52.315351][ T4918] IPVS: stop unused estimator thread 0... [ 52.431984][ T5576] netlink: 'syz.1.180': attribute type 21 has an invalid length. [ 52.433736][ T5576] __nla_validate_parse: 7 callbacks suppressed [ 52.434952][ T5576] netlink: 164 bytes leftover after parsing attributes in process `syz.1.180'. [ 52.492968][ T5458] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 52.499867][ T5458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.505297][ T5458] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 52.509624][ T5458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.511860][ T5458] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 52.515747][ T5458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.520831][ T5458] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.525403][ T5458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.552323][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.552369][ T5458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.552462][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.552500][ T5458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.571142][ T4394] 8021q: adding VLAN 0 to HW filter on device eth1 [ 52.618656][ T5458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.624181][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.624509][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.699713][ T5458] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.703876][ T4918] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.703930][ T4918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.708566][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.708610][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.051496][ T5595] loop0: detected capacity change from 0 to 32768 [ 53.111551][ T5595] loop0: unable to read partition table [ 53.113547][ T5595] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 53.544310][ T4394] 8021q: adding VLAN 0 to HW filter on device eth2 [ 54.581388][ T5458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.618578][ T4718] Bluetooth: hci3: command tx timeout [ 54.909331][ T5653] FAULT_INJECTION: forcing a failure. [ 54.909331][ T5653] name failslab, interval 1, probability 0, space 0, times 0 [ 54.909369][ T5653] CPU: 1 UID: 0 PID: 5653 Comm: syz.2.191 Tainted: G L syzkaller #0 PREEMPT [ 54.909385][ T5653] Tainted: [L]=SOFTLOCKUP [ 54.909390][ T5653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 54.909396][ T5653] Call trace: [ 54.909399][ T5653] show_stack+0x2c/0x3c (C) [ 54.909419][ T5653] __dump_stack+0x30/0x40 [ 54.909432][ T5653] dump_stack_lvl+0xd8/0x12c [ 54.909444][ T5653] dump_stack+0x1c/0x28 [ 54.909455][ T5653] should_fail_ex+0x41c/0x590 [ 54.909468][ T5653] should_failslab+0xc4/0x120 [ 54.909481][ T5653] __kmalloc_cache_noprof+0x94/0x5fc [ 54.909490][ T5653] shrinker_alloc+0x68/0x97c [ 54.909501][ T5653] sget_fc+0xb90/0x14e8 [ 54.909511][ T5653] vfs_get_super+0x40/0x148 [ 54.909520][ T5653] get_tree_nodev+0x2c/0x3c [ 54.909529][ T5653] proc_get_tree+0x28/0x38 [ 54.909542][ T5653] vfs_get_tree+0x90/0x28c [ 54.909551][ T5653] fc_mount+0x24/0xac [ 54.909561][ T5653] do_new_mount+0x2a4/0x538 [ 54.909571][ T5653] path_mount+0x5f0/0xa88 [ 54.909581][ T5653] do_mount+0xe8/0x148 [ 54.909592][ T5653] __arm64_sys_mount+0x33c/0x388 [ 54.909602][ T5653] invoke_syscall+0x98/0x244 [ 54.909614][ T5653] el0_svc_common+0xec/0x23c [ 54.909626][ T5653] do_el0_svc+0x4c/0x5c [ 54.909637][ T5653] el0_svc+0x64/0x260 [ 54.909647][ T5653] el0t_64_sync_handler+0x44/0x104 [ 54.909657][ T5653] el0t_64_sync+0x198/0x19c [ 55.010113][ T5663] loop4: detected capacity change from 0 to 512 [ 55.011770][ T5458] veth0_vlan: entered promiscuous mode [ 55.023929][ T5458] veth1_vlan: entered promiscuous mode [ 55.037912][ T5663] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.192: Attempting to read directory block (0) that is past i_size (256) [ 55.037953][ T5663] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 55.046131][ T5663] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 55.054609][ T5458] veth0_macvtap: entered promiscuous mode [ 55.064100][ T5663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.065104][ T5458] veth1_macvtap: entered promiscuous mode [ 55.075080][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.085934][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.091433][ T5669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'. [ 55.091471][ T5669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'. [ 55.098955][ T4702] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.127957][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.128135][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.128188][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.128209][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.149626][ T4394] 8021q: adding VLAN 0 to HW filter on device eth3 [ 55.210311][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.210346][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.222659][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.222685][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.308485][ T5680] FAULT_INJECTION: forcing a failure. [ 55.308485][ T5680] name failslab, interval 1, probability 0, space 0, times 0 [ 55.308553][ T5680] CPU: 1 UID: 0 PID: 5680 Comm: syz.4.194 Tainted: G L syzkaller #0 PREEMPT [ 55.308569][ T5680] Tainted: [L]=SOFTLOCKUP [ 55.308572][ T5680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 55.308577][ T5680] Call trace: [ 55.308580][ T5680] show_stack+0x2c/0x3c (C) [ 55.308600][ T5680] __dump_stack+0x30/0x40 [ 55.308611][ T5680] dump_stack_lvl+0xd8/0x12c [ 55.308621][ T5680] dump_stack+0x1c/0x28 [ 55.308630][ T5680] should_fail_ex+0x41c/0x590 [ 55.308641][ T5680] should_failslab+0xc4/0x120 [ 55.308652][ T5680] __kmalloc_cache_node_noprof+0x98/0x618 [ 55.308660][ T5680] __get_vm_area_node+0x188/0x32c [ 55.308669][ T5680] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 55.308677][ T5680] __vmalloc_node_noprof+0xec/0x14c [ 55.308685][ T5680] __vmalloc_noprof+0x64/0x8c [ 55.308693][ T5680] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 55.308703][ T5680] bpf_prog_alloc+0x48/0x110 [ 55.308710][ T5680] bpf_prog_load+0x5e0/0x1554 [ 55.308719][ T5680] __sys_bpf+0x7d4/0x82c [ 55.308727][ T5680] __arm64_sys_bpf+0xd0/0xec [ 55.308734][ T5680] invoke_syscall+0x98/0x244 [ 55.308744][ T5680] el0_svc_common+0xec/0x23c [ 55.308754][ T5680] do_el0_svc+0x4c/0x5c [ 55.308763][ T5680] el0_svc+0x64/0x260 [ 55.308773][ T5680] el0t_64_sync_handler+0x44/0x104 [ 55.308781][ T5680] el0t_64_sync+0x198/0x19c [ 55.308906][ T5680] syz.4.194: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 55.309088][ T5680] CPU: 1 UID: 0 PID: 5680 Comm: syz.4.194 Tainted: G L syzkaller #0 PREEMPT [ 55.309100][ T5680] Tainted: [L]=SOFTLOCKUP [ 55.309102][ T5680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 55.309106][ T5680] Call trace: [ 55.309108][ T5680] show_stack+0x2c/0x3c (C) [ 55.309120][ T5680] __dump_stack+0x30/0x40 [ 55.309133][ T5680] dump_stack_lvl+0xd8/0x12c [ 55.309142][ T5680] dump_stack+0x1c/0x28 [ 55.309152][ T5680] warn_alloc+0x1c4/0x1d8 [ 55.309163][ T5680] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 55.309172][ T5680] __vmalloc_node_noprof+0xec/0x14c [ 55.309180][ T5680] __vmalloc_noprof+0x64/0x8c [ 55.309188][ T5680] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 55.309197][ T5680] bpf_prog_alloc+0x48/0x110 [ 55.309205][ T5680] bpf_prog_load+0x5e0/0x1554 [ 55.309214][ T5680] __sys_bpf+0x7d4/0x82c [ 55.309222][ T5680] __arm64_sys_bpf+0xd0/0xec [ 55.309229][ T5680] invoke_syscall+0x98/0x244 [ 55.309239][ T5680] el0_svc_common+0xec/0x23c [ 55.309249][ T5680] do_el0_svc+0x4c/0x5c [ 55.309258][ T5680] el0_svc+0x64/0x260 [ 55.309267][ T5680] el0t_64_sync_handler+0x44/0x104 [ 55.309275][ T5680] el0t_64_sync+0x198/0x19c [ 55.309298][ T5680] Mem-Info: [ 55.309340][ T5680] active_anon:50 inactive_anon:13771 isolated_anon:0 [ 55.309340][ T5680] active_file:2654 inactive_file:7121 isolated_file:0 [ 55.309340][ T5680] unevictable:768 dirty:803 writeback:4 [ 55.309340][ T5680] slab_reclaimable:9044 slab_unreclaimable:86817 [ 55.309340][ T5680] mapped:38153 shmem:9553 pagetables:1015 [ 55.309340][ T5680] sec_pagetables:0 bounce:0 [ 55.309340][ T5680] kernel_misc_reclaimable:0 [ 55.309340][ T5680] free:1472254 free_pcp:8411 free_cma:7616 [ 55.309386][ T5680] Node 0 active_anon:200kB inactive_anon:55084kB active_file:10616kB inactive_file:28484kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:152612kB dirty:3212kB writeback:16kB shmem:38212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9092kB pagetables:4060kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 55.309434][ T5680] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 55.309508][ T5680] lowmem_reserve[]: 0 0 3650 3650 3650 [ 55.309703][ T5680] Node 0 Normal free:2811128kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:200kB inactive_anon:55084kB active_file:10616kB inactive_file:28484kB unevictable:3072kB writepending:3228kB zspages:0kB present:5242880kB managed:3738144kB mlocked:0kB bounce:0kB free_pcp:33644kB local_pcp:28328kB free_cma:0kB [ 55.309776][ T5680] lowmem_reserve[]: 0 0 0 0 0 [ 55.309961][ T5680] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 55.310482][ T5680] Node 0 Normal: 72*4kB (U) 3*8kB (UME) 2*16kB (UM) 315*32kB (UME) 45*64kB (UME) 30*128kB (UME) 30*256kB (UME) 10*512kB (ME) 2*1024kB (UM) 3*2048kB (UME) 677*4096kB (M) = 2811128kB [ 55.311190][ T5680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 55.311224][ T5680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 55.311257][ T5680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 55.311289][ T5680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 55.311320][ T5680] 19323 total pagecache pages [ 55.311349][ T5680] 0 pages in swap cache [ 55.311378][ T5680] Free swap = 124996kB [ 55.311406][ T5680] Total swap = 124996kB [ 55.311435][ T5680] 2097152 pages RAM [ 55.311463][ T5680] 0 pages HighMem/MovableOnly [ 55.311491][ T5680] 392568 pages reserved [ 55.311520][ T5680] 8192 pages cma reserved [ 55.311548][ T5680] 9 pages hwpoisoned [ 56.139350][ T5715] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 56.188363][ T5704] tmpfs: Unknown parameter 'mpl' [ 56.533833][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000a7a76d58: rx timeout, send abort [ 56.747927][ T4718] Bluetooth: hci3: command tx timeout [ 57.033900][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000c5a5e395: rx timeout, send abort [ 57.034289][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000a7a76d58: abort rx timeout. Force session deactivation [ 57.056025][ T5748] FAULT_INJECTION: forcing a failure. [ 57.056025][ T5748] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 57.056168][ T5748] CPU: 0 UID: 0 PID: 5748 Comm: syz.0.210 Tainted: G L syzkaller #0 PREEMPT [ 57.056185][ T5748] Tainted: [L]=SOFTLOCKUP [ 57.056189][ T5748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 57.056195][ T5748] Call trace: [ 57.056198][ T5748] show_stack+0x2c/0x3c (C) [ 57.056216][ T5748] __dump_stack+0x30/0x40 [ 57.056227][ T5748] dump_stack_lvl+0xd8/0x12c [ 57.056237][ T5748] dump_stack+0x1c/0x28 [ 57.056246][ T5748] should_fail_ex+0x41c/0x590 [ 57.056257][ T5748] should_fail_alloc_page+0xec/0x10c [ 57.056268][ T5748] prepare_alloc_pages+0x194/0x484 [ 57.056276][ T5748] __alloc_frozen_pages_noprof+0x180/0x648 [ 57.056283][ T5748] alloc_pages_mpol+0x1fc/0x3d0 [ 57.056291][ T5748] alloc_frozen_pages_noprof+0xc4/0x10c [ 57.056299][ T5748] alloc_pages_noprof+0x30/0x148 [ 57.056307][ T5748] get_free_pages_noprof+0x1c/0xbc [ 57.056314][ T5748] __kasan_populate_vmalloc+0x48/0x1d0 [ 57.056324][ T5748] alloc_vmap_area+0xdf4/0x13e8 [ 57.056332][ T5748] __get_vm_area_node+0x210/0x32c [ 57.056339][ T5748] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 57.056348][ T5748] __vmalloc_node_noprof+0xec/0x14c [ 57.056356][ T5748] __vmalloc_noprof+0x64/0x8c [ 57.056364][ T5748] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 57.056373][ T5748] bpf_prog_alloc+0x48/0x110 [ 57.056381][ T5748] bpf_prog_load+0x5e0/0x1554 [ 57.056389][ T5748] __sys_bpf+0x7d4/0x82c [ 57.056397][ T5748] __arm64_sys_bpf+0xd0/0xec [ 57.056404][ T5748] invoke_syscall+0x98/0x244 [ 57.056414][ T5748] el0_svc_common+0xec/0x23c [ 57.056427][ T5748] do_el0_svc+0x4c/0x5c [ 57.056438][ T5748] el0_svc+0x64/0x260 [ 57.056448][ T5748] el0t_64_sync_handler+0x44/0x104 [ 57.056456][ T5748] el0t_64_sync+0x198/0x19c [ 57.370319][ T5755] loop4: detected capacity change from 0 to 512 [ 57.373703][ T5755] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 57.383766][ T5755] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 57.388509][ T5755] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.391049][ T5755] Quota error (device loop4): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 57.394375][ T5755] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.398769][ T5755] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 57.400472][ T5755] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #16: comm syz.4.213: iget: immutable or append flags not allowed on symlinks [ 57.400508][ T5755] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 57.404754][ T5755] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.213: couldn't read orphan inode 16 (err -117) [ 57.406742][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 57.406755][ C0] EXT4-fs (loop4): initial error at time 313: ext4_orphan_get:1403: inode 16 [ 57.406775][ C0] EXT4-fs (loop4): last error at time 313: ext4_orphan_get:1403: inode 16 [ 57.414344][ T5755] loop4: lost filesystem error report for type 5 error -117 [ 57.417714][ T5755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.427463][ T5755] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.448394][ T5764] nvme nvme1: rdma_resolve_addr failed (-19). [ 57.486394][ T5764] nvme nvme1: rdma_resolve_addr failed (-19). [ 57.533967][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000c5a5e395: abort rx timeout. Force session deactivation [ 57.538248][ T5772] lo speed is unknown, defaulting to 1000 [ 57.540558][ T5772] lo speed is unknown, defaulting to 1000 [ 57.542731][ T5772] lo speed is unknown, defaulting to 1000 [ 57.569901][ T5765] vlan2: entered promiscuous mode [ 57.569935][ T5765] bridge0: entered promiscuous mode [ 57.595447][ T5772] infiniband syz0: set active [ 57.596280][ T10] lo speed is unknown, defaulting to 1000 [ 57.597659][ T5772] infiniband syz0: added lo [ 57.861029][ T5772] RDS/IB: syz0: added [ 57.865481][ T5772] smc: adding ib device syz0 with port count 1 [ 57.865539][ T5772] smc: ib device syz0 port 1 has no pnetid [ 57.870973][ T867] lo speed is unknown, defaulting to 1000 [ 57.873103][ T5772] lo speed is unknown, defaulting to 1000 [ 57.975448][ T5772] lo speed is unknown, defaulting to 1000 [ 58.020698][ T5786] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 58.053192][ T12] IPVS: starting estimator thread 0... [ 58.308485][ T5790] IPVS: using max 43 ests per chain, 103200 per kthread [ 58.373043][ T5794] overlay: ./file0 is not a directory [ 58.376076][ T5772] lo speed is unknown, defaulting to 1000 [ 58.529868][ T5804] loop2: detected capacity change from 0 to 512 [ 58.552503][ T5804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.556803][ T5804] EXT4-fs warning (device loop2): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 58.579119][ T5772] lo speed is unknown, defaulting to 1000 [ 58.602371][ T4703] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.677128][ T5772] lo speed is unknown, defaulting to 1000 [ 59.047557][ T4718] Bluetooth: hci3: command tx timeout [ 59.095886][ T5821] loop5: detected capacity change from 0 to 256 [ 59.227232][ T5827] FAULT_INJECTION: forcing a failure. [ 59.227232][ T5827] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.227297][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: syz.0.231 Tainted: G L syzkaller #0 PREEMPT [ 59.227316][ T5827] Tainted: [L]=SOFTLOCKUP [ 59.227320][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 59.227325][ T5827] Call trace: [ 59.227329][ T5827] show_stack+0x2c/0x3c (C) [ 59.227348][ T5827] __dump_stack+0x30/0x40 [ 59.227359][ T5827] dump_stack_lvl+0xd8/0x12c [ 59.227369][ T5827] dump_stack+0x1c/0x28 [ 59.227378][ T5827] should_fail_ex+0x41c/0x590 [ 59.227389][ T5827] should_fail_alloc_page+0xec/0x10c [ 59.227401][ T5827] prepare_alloc_pages+0x194/0x484 [ 59.227408][ T5827] __alloc_frozen_pages_noprof+0x180/0x648 [ 59.227416][ T5827] __alloc_pages_noprof+0x18/0x100 [ 59.227423][ T5827] alloc_pages_bulk_noprof+0x610/0x7d8 [ 59.227434][ T5827] __kasan_populate_vmalloc+0xc0/0x1d0 [ 59.227443][ T5827] alloc_vmap_area+0xdf4/0x13e8 [ 59.227451][ T5827] __get_vm_area_node+0x210/0x32c [ 59.227459][ T5827] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 59.227467][ T5827] __vmalloc_node_noprof+0xec/0x14c [ 59.227475][ T5827] __vmalloc_noprof+0x64/0x8c [ 59.227483][ T5827] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 59.227492][ T5827] bpf_prog_alloc+0x48/0x110 [ 59.227500][ T5827] bpf_prog_load+0x5e0/0x1554 [ 59.227509][ T5827] __sys_bpf+0x7d4/0x82c [ 59.227517][ T5827] __arm64_sys_bpf+0xd0/0xec [ 59.227524][ T5827] invoke_syscall+0x98/0x244 [ 59.227534][ T5827] el0_svc_common+0xec/0x23c [ 59.227544][ T5827] do_el0_svc+0x4c/0x5c [ 59.227553][ T5827] el0_svc+0x64/0x260 [ 59.227562][ T5827] el0t_64_sync_handler+0x44/0x104 [ 59.227571][ T5827] el0t_64_sync+0x198/0x19c [ 59.488600][ T5829] netlink: 16 bytes leftover after parsing attributes in process `syz.5.232'. [ 59.525536][ T5829] overlay: filesystem on ./bus not supported [ 60.015714][ T5833] loop4: detected capacity change from 0 to 512 [ 60.016116][ T5833] EXT4-fs: Ignoring removed bh option [ 60.020745][ T5833] EXT4-fs: Mount option(s) incompatible with ext2 [ 60.027611][ T5831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.234'. [ 60.027643][ T5831] FAULT_INJECTION: forcing a failure. [ 60.027643][ T5831] name failslab, interval 1, probability 0, space 0, times 0 [ 60.027671][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz.1.234 Tainted: G L syzkaller #0 PREEMPT [ 60.027686][ T5831] Tainted: [L]=SOFTLOCKUP [ 60.027690][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 60.027695][ T5831] Call trace: [ 60.027698][ T5831] show_stack+0x2c/0x3c (C) [ 60.027719][ T5831] __dump_stack+0x30/0x40 [ 60.027732][ T5831] dump_stack_lvl+0xd8/0x12c [ 60.027744][ T5831] dump_stack+0x1c/0x28 [ 60.027755][ T5831] should_fail_ex+0x41c/0x590 [ 60.027768][ T5831] should_failslab+0xc4/0x120 [ 60.027781][ T5831] __kmalloc_cache_noprof+0x94/0x5fc [ 60.027789][ T5831] nfnl_err_add+0x68/0x194 [ 60.027802][ T5831] nfnetlink_rcv+0xb68/0x16ec [ 60.027821][ T5831] netlink_unicast+0x600/0x7f8 [ 60.027831][ T5831] netlink_sendmsg+0x648/0x948 [ 60.027840][ T5831] __sock_sendmsg+0xc8/0x17c [ 60.027850][ T5831] ____sys_sendmsg+0x3d0/0x6c8 [ 60.027860][ T5831] ___sys_sendmsg+0x198/0x224 [ 60.027870][ T5831] __sys_sendmsg+0x158/0x204 [ 60.027879][ T5831] __arm64_sys_sendmsg+0x88/0x9c [ 60.027888][ T5831] invoke_syscall+0x98/0x244 [ 60.027900][ T5831] el0_svc_common+0xec/0x23c [ 60.027912][ T5831] do_el0_svc+0x4c/0x5c [ 60.027923][ T5831] el0_svc+0x64/0x260 [ 60.027933][ T5831] el0t_64_sync_handler+0x44/0x104 [ 60.027943][ T5831] el0t_64_sync+0x198/0x19c [ 60.096181][ T5833] netlink: 'syz.4.235': attribute type 3 has an invalid length. [ 60.096216][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.235'. [ 60.096317][ T5833] netlink: 'syz.4.235': attribute type 3 has an invalid length. [ 60.096332][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.235'. [ 60.160876][ T5838] loop2: detected capacity change from 0 to 512 [ 60.161272][ T5838] ext4: Unknown parameter 'obj_type' [ 60.163810][ T5838] netlink: 80 bytes leftover after parsing attributes in process `syz.2.237'. [ 60.163860][ T5838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.237'. [ 60.163874][ T5838] tipc: MTU too low for tipc bearer [ 60.298506][ T5845] netlink: 'syz.1.239': attribute type 1 has an invalid length. [ 60.307159][ T5845] bond1: entered promiscuous mode [ 60.308851][ T5845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.325467][ T5846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.331491][ T5846] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 60.331577][ T5846] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 60.332031][ T5846] bond1: (slave gre1): Opening slave failed [ 60.390565][ T30] audit: type=1326 audit(316.351:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5856 comm="syz.4.243" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed792a8 code=0x0 [ 61.011312][ T5867] Console: switching to colour dummy device 80x25 [ 61.108222][ T5867] Console: switching to colour frame buffer device 128x48 [ 61.465386][ T5870] loop2: detected capacity change from 0 to 1024 [ 61.465828][ T5870] EXT4-fs: Invalid want_extra_isize 11 [ 61.587224][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.247'. [ 61.686776][ T5895] FAULT_INJECTION: forcing a failure. [ 61.686776][ T5895] name failslab, interval 1, probability 0, space 0, times 0 [ 61.686839][ T5895] CPU: 1 UID: 0 PID: 5895 Comm: syz.0.248 Tainted: G L syzkaller #0 PREEMPT [ 61.686858][ T5895] Tainted: [L]=SOFTLOCKUP [ 61.686861][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 61.686866][ T5895] Call trace: [ 61.686869][ T5895] show_stack+0x2c/0x3c (C) [ 61.686889][ T5895] __dump_stack+0x30/0x40 [ 61.686900][ T5895] dump_stack_lvl+0xd8/0x12c [ 61.686910][ T5895] dump_stack+0x1c/0x28 [ 61.686919][ T5895] should_fail_ex+0x41c/0x590 [ 61.686930][ T5895] should_failslab+0xc4/0x120 [ 61.686942][ T5895] __kmalloc_node_noprof+0x10c/0x6e4 [ 61.686949][ T5895] __vmalloc_node_range_noprof+0x43c/0xe9c [ 61.686958][ T5895] __vmalloc_node_noprof+0xec/0x14c [ 61.686966][ T5895] __vmalloc_noprof+0x64/0x8c [ 61.686974][ T5895] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 61.686984][ T5895] bpf_prog_alloc+0x48/0x110 [ 61.686992][ T5895] bpf_prog_load+0x5e0/0x1554 [ 61.687000][ T5895] __sys_bpf+0x7d4/0x82c [ 61.687008][ T5895] __arm64_sys_bpf+0xd0/0xec [ 61.687016][ T5895] invoke_syscall+0x98/0x244 [ 61.687025][ T5895] el0_svc_common+0xec/0x23c [ 61.687035][ T5895] do_el0_svc+0x4c/0x5c [ 61.687044][ T5895] el0_svc+0x64/0x260 [ 61.687054][ T5895] el0t_64_sync_handler+0x44/0x104 [ 61.687063][ T5895] el0t_64_sync+0x198/0x19c [ 61.931140][ T5899] FAULT_INJECTION: forcing a failure. [ 61.931140][ T5899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.931183][ T5899] CPU: 0 UID: 0 PID: 5899 Comm: syz.2.251 Tainted: G L syzkaller #0 PREEMPT [ 61.931197][ T5899] Tainted: [L]=SOFTLOCKUP [ 61.931201][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 61.931207][ T5899] Call trace: [ 61.931211][ T5899] show_stack+0x2c/0x3c (C) [ 61.931228][ T5899] __dump_stack+0x30/0x40 [ 61.931239][ T5899] dump_stack_lvl+0xd8/0x12c [ 61.931249][ T5899] dump_stack+0x1c/0x28 [ 61.931259][ T5899] should_fail_ex+0x41c/0x590 [ 61.931270][ T5899] should_fail+0x14/0x24 [ 61.931279][ T5899] should_fail_usercopy+0x20/0x30 [ 61.931289][ T5899] _inline_copy_from_user+0x3c/0x174 [ 61.931300][ T5899] copy_msghdr_from_user+0xb8/0x194 [ 61.931309][ T5899] ___sys_recvmsg+0x11c/0x1f4 [ 61.931318][ T5899] do_recvmmsg+0x288/0x7d4 [ 61.931326][ T5899] __sys_recvmmsg+0x1e0/0x270 [ 61.931334][ T5899] __arm64_sys_recvmmsg+0xe0/0x108 [ 61.931342][ T5899] invoke_syscall+0x98/0x244 [ 61.931352][ T5899] el0_svc_common+0xec/0x23c [ 61.931362][ T5899] do_el0_svc+0x4c/0x5c [ 61.931371][ T5899] el0_svc+0x64/0x260 [ 61.931381][ T5899] el0t_64_sync_handler+0x44/0x104 [ 61.931389][ T5899] el0t_64_sync+0x198/0x19c [ 62.010605][ T5914] netlink: 20 bytes leftover after parsing attributes in process `syz.5.252'. [ 62.062964][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'. [ 62.198073][ T5929] openvswitch: netlink: IP tunnel dst address not specified [ 62.569783][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.576321][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 62.594883][ T5948] mmap: syz.2.256 (5948) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.783367][ T5946] alloc_netdev: Unable to allocate device with zero queues [ 62.788443][ T5957] binder: 5956:5957 IncRefs 0 refcount change on invalid ref -2 ret -22 [ 62.800626][ T5957] binder: 5956:5957 got transaction to invalid handle, 1 [ 62.800702][ T5957] binder: 5956:5957 cannot find target node [ 62.800720][ T5957] binder: 5956:5957 transaction call to 0:0 failed 4/29201/-22, code 0 size 72-0 line 3252 [ 62.800867][ T5957] binder: 5956:5957 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 62.800880][ T5957] binder: 5957 RLIMIT_NICE not set [ 62.903338][ T5967] binder: 5956:5967 got transaction to invalid handle, 1 [ 62.903375][ T5967] binder: 5956:5967 cannot find target node [ 62.903404][ T5967] binder: 5956:5967 transaction call to 0:0 failed 5/29201/-22, code 0 size 0-0 line 3252 [ 63.593791][ T4801] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.593834][ T4801] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.639942][ T5978] FAULT_INJECTION: forcing a failure. [ 63.639942][ T5978] name failslab, interval 1, probability 0, space 0, times 0 [ 63.639980][ T5978] CPU: 1 UID: 0 PID: 5978 Comm: syz.2.266 Tainted: G L syzkaller #0 PREEMPT [ 63.639994][ T5978] Tainted: [L]=SOFTLOCKUP [ 63.639997][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 63.640003][ T5978] Call trace: [ 63.640006][ T5978] show_stack+0x2c/0x3c (C) [ 63.640028][ T5978] __dump_stack+0x30/0x40 [ 63.640041][ T5978] dump_stack_lvl+0xd8/0x12c [ 63.640053][ T5978] dump_stack+0x1c/0x28 [ 63.640064][ T5978] should_fail_ex+0x41c/0x590 [ 63.640077][ T5978] should_failslab+0xc4/0x120 [ 63.640090][ T5978] __kmalloc_cache_noprof+0x94/0x5fc [ 63.640099][ T5978] fsnotify_alloc_group+0x80/0x284 [ 63.640109][ T5978] do_inotify_init+0x64/0x408 [ 63.640119][ T5978] __arm64_sys_inotify_init1+0x40/0x54 [ 63.640133][ T5978] invoke_syscall+0x98/0x244 [ 63.640146][ T5978] el0_svc_common+0xec/0x23c [ 63.640157][ T5978] do_el0_svc+0x4c/0x5c [ 63.640169][ T5978] el0_svc+0x64/0x260 [ 63.640179][ T5978] el0t_64_sync_handler+0x44/0x104 [ 63.640189][ T5978] el0t_64_sync+0x198/0x19c [ 63.721731][ T5981] FAULT_INJECTION: forcing a failure. [ 63.721731][ T5981] name failslab, interval 1, probability 0, space 0, times 0 [ 63.725513][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.2.267 Tainted: G L syzkaller #0 PREEMPT [ 63.725544][ T5981] Tainted: [L]=SOFTLOCKUP [ 63.725549][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 63.725555][ T5981] Call trace: [ 63.725559][ T5981] show_stack+0x2c/0x3c (C) [ 63.725582][ T5981] __dump_stack+0x30/0x40 [ 63.725596][ T5981] dump_stack_lvl+0xd8/0x12c [ 63.725608][ T5981] dump_stack+0x1c/0x28 [ 63.725619][ T5981] should_fail_ex+0x41c/0x590 [ 63.725630][ T5981] should_failslab+0xc4/0x120 [ 63.725642][ T5981] kmem_cache_alloc_node_noprof+0x98/0x604 [ 63.725656][ T5981] __alloc_skb+0x1f0/0x610 [ 63.725666][ T5981] netlink_dump+0x190/0xb6c [ 63.725675][ T5981] netlink_recvmsg+0x4f0/0x868 [ 63.725683][ T5981] sock_recvmsg+0xd4/0x170 [ 63.725690][ T5981] ____sys_recvmsg+0x1b8/0x608 [ 63.725699][ T5981] ___sys_recvmsg+0x16c/0x1f4 [ 63.725707][ T5981] do_recvmmsg+0x288/0x7d4 [ 63.725715][ T5981] __sys_recvmmsg+0x1e0/0x270 [ 63.725724][ T5981] __arm64_sys_recvmmsg+0xe0/0x108 [ 63.725732][ T5981] invoke_syscall+0x98/0x244 [ 63.725742][ T5981] el0_svc_common+0xec/0x23c [ 63.725752][ T5981] do_el0_svc+0x4c/0x5c [ 63.725761][ T5981] el0_svc+0x64/0x260 [ 63.725771][ T5981] el0t_64_sync_handler+0x44/0x104 [ 63.725779][ T5981] el0t_64_sync+0x198/0x19c [ 64.508141][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.508196][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.509645][ T26] cfg80211: failed to load regulatory.db [ 64.673494][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.274'. [ 64.682267][ T6003] FAULT_INJECTION: forcing a failure. [ 64.682267][ T6003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.685712][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.2.275 Tainted: G L syzkaller #0 PREEMPT [ 64.685735][ T6003] Tainted: [L]=SOFTLOCKUP [ 64.685740][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 64.685746][ T6003] Call trace: [ 64.685750][ T6003] show_stack+0x2c/0x3c (C) [ 64.685774][ T6003] __dump_stack+0x30/0x40 [ 64.685788][ T6003] dump_stack_lvl+0xd8/0x12c [ 64.685800][ T6003] dump_stack+0x1c/0x28 [ 64.685816][ T6003] should_fail_ex+0x41c/0x590 [ 64.685830][ T6003] should_fail+0x14/0x24 [ 64.685841][ T6003] should_fail_usercopy+0x20/0x30 [ 64.685853][ T6003] _inline_copy_from_user+0x3c/0x188 [ 64.685864][ T6003] memdup_user+0x78/0xec [ 64.685872][ T6003] __arm64_sys_kexec_load+0x188/0x1d4 [ 64.685882][ T6003] invoke_syscall+0x98/0x244 [ 64.685894][ T6003] el0_svc_common+0xec/0x23c [ 64.685906][ T6003] do_el0_svc+0x4c/0x5c [ 64.685917][ T6003] el0_svc+0x64/0x260 [ 64.685928][ T6003] el0t_64_sync_handler+0x44/0x104 [ 64.685938][ T6003] el0t_64_sync+0x198/0x19c [ 64.872748][ T6014] loop4: detected capacity change from 0 to 256 [ 64.873233][ T6014] vfat: Unknown parameter 'c' [ 64.909345][ T6019] 0x000000000000-0x00000000004f : "" [ 64.925415][ T6019] ftl_cs: FTL header corrupt! [ 64.979224][ T6023] loop4: detected capacity change from 0 to 2048 [ 65.020251][ T6023] Alternate GPT is invalid, using primary GPT. [ 65.020307][ T6023] loop4: p1 p2 p3 [ 65.092436][ T6023] tipc: Can't bind to reserved service type 1 [ 65.444505][ T6037] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 65.444532][ T6037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 65.450189][ T6037] vhci_hcd vhci_hcd.0: Device attached [ 65.455054][ T6038] vhci_hcd: unknown pdu 1 [ 65.461004][ T138] vhci_hcd vhci_hcd.4: stop threads [ 65.461033][ T138] vhci_hcd vhci_hcd.4: release socket [ 65.461078][ T138] vhci_hcd vhci_hcd.4: disconnect device [ 65.503422][ T6025] udevd[6025]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 65.506111][ T4694] udevd[4694]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 65.510607][ T4910] udevd[4910]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 65.687920][ T6057] loop2: detected capacity change from 0 to 512 [ 65.689789][ T6057] EXT4-fs: Ignoring removed bh option [ 65.691367][ T6057] EXT4-fs: Mount option(s) incompatible with ext2 [ 65.699578][ T6057] netlink: 'syz.2.291': attribute type 3 has an invalid length. [ 65.699615][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.291'. [ 65.699683][ T6057] netlink: 'syz.2.291': attribute type 3 has an invalid length. [ 65.699691][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.291'. [ 66.070482][ T6063] 0x000000000000-0x00000000004f : "" [ 66.072439][ T6063] ftl_cs: FTL header corrupt! [ 66.133025][ T6066] loop2: detected capacity change from 0 to 2048 [ 66.133380][ T6066] ext4: Unknown parameter 'nouser_xattr' [ 66.174582][ T6069] 0x000000000000-0x00000000004f : "" [ 66.179783][ T6069] ftl_cs: FTL header corrupt! [ 66.204632][ T6071] loop2: detected capacity change from 0 to 2048 [ 66.205035][ T6071] ext4: Unknown parameter 'nouser_xattr' [ 66.282229][ T138] IPVS: starting estimator thread 0... [ 66.328701][ T6082] loop4: detected capacity change from 0 to 256 [ 66.406568][ T6080] IPVS: using max 44 ests per chain, 105600 per kthread [ 66.551890][ T6103] loop4: detected capacity change from 0 to 512 [ 66.566125][ T6109] FAULT_INJECTION: forcing a failure. [ 66.566125][ T6109] name failslab, interval 1, probability 0, space 0, times 0 [ 66.569905][ T6109] CPU: 1 UID: 0 PID: 6109 Comm: syz.5.303 Tainted: G L syzkaller #0 PREEMPT [ 66.569932][ T6109] Tainted: [L]=SOFTLOCKUP [ 66.569937][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 66.569944][ T6109] Call trace: [ 66.569949][ T6109] show_stack+0x2c/0x3c (C) [ 66.569968][ T6109] __dump_stack+0x30/0x40 [ 66.569982][ T6109] dump_stack_lvl+0xd8/0x12c [ 66.569994][ T6109] dump_stack+0x1c/0x28 [ 66.570004][ T6109] should_fail_ex+0x41c/0x590 [ 66.570016][ T6109] should_failslab+0xc4/0x120 [ 66.570027][ T6109] __kmalloc_noprof+0x108/0x6c8 [ 66.570035][ T6109] __memcg_list_lru_alloc+0x1c4/0x4e8 [ 66.570043][ T6109] memcg_list_lru_alloc+0xc4/0xf8 [ 66.570050][ T6109] zswap_store+0x5f8/0x1cd8 [ 66.570058][ T6109] swap_writeout+0x774/0x1468 [ 66.570068][ T6109] shrink_folio_list+0x25d4/0x41bc [ 66.570077][ T6109] reclaim_folio_list+0xec/0x6dc [ 66.570085][ T6109] reclaim_pages+0x3d0/0x4ac [ 66.570092][ T6109] madvise_cold_or_pageout_pte_range+0x19c8/0x2234 [ 66.570103][ T6109] walk_pgd_range+0xad0/0x1850 [ 66.570112][ T6109] __walk_page_range+0x150/0x60c [ 66.570122][ T6109] walk_page_range_vma_unsafe+0x2c0/0x368 [ 66.570131][ T6109] walk_page_range_vma+0x80/0x98 [ 66.570140][ T6109] madvise_vma_behavior+0x2684/0x3370 [ 66.570150][ T6109] madvise_walk_vmas+0x4c8/0x9bc [ 66.570160][ T6109] madvise_do_behavior+0x5f0/0x7c0 [ 66.570169][ T6109] do_madvise+0x28c/0x2f0 [ 66.570178][ T6109] __arm64_sys_madvise+0xac/0xc8 [ 66.570187][ T6109] invoke_syscall+0x98/0x244 [ 66.570197][ T6109] el0_svc_common+0xec/0x23c [ 66.570207][ T6109] do_el0_svc+0x4c/0x5c [ 66.570216][ T6109] el0_svc+0x64/0x260 [ 66.570226][ T6109] el0t_64_sync_handler+0x44/0x104 [ 66.570234][ T6109] el0t_64_sync+0x198/0x19c [ 66.580592][ T6103] EXT4-fs (loop4): orphan cleanup on readonly fs [ 66.609203][ T6103] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.301: EA inode 11 has unexpected i_nlink=0 ref_count=7168870745731235840 [ 66.614718][ T6103] loop4: lost filesystem error report for type 5 error -117 [ 66.616224][ T6103] EXT4-fs (loop4): 1 orphan inode deleted [ 66.617896][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 66.617912][ C1] EXT4-fs (loop4): initial error at time 322: ext4_xattr_inode_iget:473 [ 66.617924][ C1] EXT4-fs (loop4): last error at time 322: ext4_xattr_inode_iget:473 [ 66.623604][ T6103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 66.626703][ T26] ------------[ cut here ]------------ [ 66.626711][ T26] WARNING: fs/ext4/ext4_jbd2.c:83 at ext4_journal_check_start+0x1e4/0x230, CPU#1: kworker/1:1/26 [ 66.629910][ T26] Modules linked in: [ 66.630718][ T26] CPU: 1 UID: 0 PID: 26 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT [ 66.632845][ T26] Tainted: [L]=SOFTLOCKUP [ 66.633674][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 66.635598][ T26] Workqueue: events ext4_ea_inode_work [ 66.636668][ T26] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 66.638123][ T26] pc : ext4_journal_check_start+0x1e4/0x230 [ 66.639214][ T26] lr : ext4_journal_check_start+0x1e4/0x230 [ 66.640326][ T26] sp : ffff80008ee57840 [ 66.641102][ T26] x29: ffff80008ee57840 x28: 0000000000000000 x27: dfff800000000000 [ 66.642626][ T26] x26: ffff800088bf7ec8 x25: 0000000000000000 x24: 1fffe0001aa65081 [ 66.644163][ T26] x23: 1fffe0001aa654cf x22: ffff0000d532a678 x21: dfff800000000000 [ 66.645748][ T26] x20: 0000000070830001 x19: ffff0000d532a000 x18: 0000000000000000 [ 66.647276][ T26] x17: 0000000000000007 x16: 0000000100000000 x15: 0000000300000003 [ 66.648750][ T26] x14: 0000000000000000 x13: 000000000000054c x12: 0000000000000003 [ 66.650271][ T26] x11: 000000000000000c x10: 0000000000000003 x9 : 0000000000000000 [ 66.652031][ T26] x8 : 0000000000000000 x7 : ffff800081043ac0 x6 : 0000000000000008 [ 66.653733][ T26] x5 : 0000000000000000 x4 : 000000000000001a x3 : ffff800080ff2dd8 [ 66.655417][ T26] x2 : 0000000000000001 x1 : ffff0000c1b79d80 x0 : 0000000000000000 [ 66.657117][ T26] Call trace: [ 66.657792][ T26] ext4_journal_check_start+0x1e4/0x230 (P) [ 66.659007][ T26] __ext4_journal_start_sb+0x190/0x8f4 [ 66.660188][ T26] ext4_evict_inode+0x580/0xf4c [ 66.661179][ T26] evict+0x4c0/0x74c [ 66.661976][ T26] iput+0x8f0/0xc2c [ 66.662798][ T26] ext4_ea_inode_work+0x78/0xa8 [ 66.663829][ T26] process_scheduled_works+0x91c/0x1250 [ 66.665007][ T26] worker_thread+0x798/0xbd0 [ 66.665963][ T26] kthread+0x304/0x3d4 [ 66.666789][ T26] ret_from_fork+0x10/0x20 [ 66.667722][ T26] irq event stamp: 88700 [ 66.668506][ T26] hardirqs last enabled at (88699): [] _raw_spin_unlock_irq+0x30/0x80 [ 66.670311][ T26] hardirqs last disabled at (88700): [] el1_brk64+0x20/0x54 [ 66.671910][ T26] softirqs last enabled at (86868): [] wg_packet_decrypt_worker+0x980/0xa00 [ 66.673783][ T26] softirqs last disabled at (86866): [] wg_packet_decrypt_worker+0x63c/0xa00 [ 66.675668][ T26] ---[ end trace 0000000000000000 ]--- [ 66.967213][ T5946] netdevsim netdevsim10: probe with driver netdevsim failed with error -12 [ 67.325380][ T4702] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.