last executing test programs:

13.273593724s ago: executing program 0 (id=268):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xe1, 0x71, 0x10, 0x1d}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001bc0)={{<r2=>r0, &(0x7f0000000000)='\x00', 0x4100, &(0x7f0000000040)={@align=0xbf, {0x4, 0x9, 0x20}}, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x1}, 0x6, &(0x7f0000001b00)=[{0x3, 0x5cd0, &(0x7f0000000140)='syzkaller\x00', &(0x7f00000006c0)="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", 0x1000, 0x28}, {0x2, 0x4, &(0x7f00000016c0)='syzkaller\x00', &(0x7f0000001700)="1ec715fe3cee1c234032cce1c675c73b9c2d88a55e86c252a470c53163852e617cb15c6ebe4c34185b836661b20164c9808576553faaf5dfd6b6b1a09d17b15682846a8d65148c31a515aa300906d27fc5ad50c9d87846a8c790b47db52771cee5e71134c7281fa184dd6b6d1deb9957413c27", 0x73}, {0x1, 0x799, &(0x7f0000001780)='\n\x00', &(0x7f00000017c0)="425c2a804590dcbc23ed8aa2506bd5cd41e84a973a660fef82d97a647182828d75525e4ba56028dac31d7432e36b7051f69db3563e83c0b3032f625a819613c7403432f2331603820c7b66bdd200b7fb90f95bb5bc6c28b9a61c87716fe162597a5f3f01101a0bafcb290a145bb27361460e7841b872f42797d46f", 0x7b, 0x4}, {0x2, 0x34, &(0x7f0000001840)='\\{!-[@#\x00', &(0x7f0000001880)="0a500982b13196670299ed1bee9d3cc79661be4715d3525b50b9f9f3a9c9c014f08b331559a5157c36b2e8f8ca7f7657fbc7d4ff9816e42d157b2bf52491bb5737d527e3ae7651ab8158341d1578c90861cc35104c91ccb6232266f63b36277176e9c0fb7085f4c2a41a07a97c6ea4920729107fa398fe6042b7027dac7846", 0x7f, 0xa}, {0x3, 0x0, &(0x7f0000001900)='-@#\x00', &(0x7f0000001940)="94c4ee591554a7daa2442e4a820ecc2e09910d67a2749d0eb1262430cb7817efe23d29a67085e5dd160db9e331830bb6dc0c6eabc7bd160a7abd5fbe15417e483b7cccd8fec1a07ba1ca83b91d3ca5f7db760e65e8d715a0146df252ba26837220d6ff2da41f90331747f8ecc1bde15f887a3f6223f916389b448adeab36636c32323a8d54e78e1cebcee6cf8d6388bc823433b8", 0x94, 0x2}, {0x2, 0x0, &(0x7f0000001a00)='$@.}\x00', &(0x7f0000001a40)="a1faaa690604bf96cf17dd9389e7438b4ff786ac8dd9d3079352e77ef3fb534d6184112568b9c437b382402357b479da571cdfa627d36c7f32d3e9149e2fc5c095f8d995d57a6a37e459a6cbeca6803c4e8354e05ba032557a936780e52924945f7bf8c6c070a6ac8f12bfe64d31552c17ee7a86f4651915105156f12cab7febea565f989a2e3590cfb11705e732c83bf0fa75eb0f", 0x95, 0x2}]})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d00)={'syztnl0\x00', &(0x7f0000001c80)={'ip6_vti0\x00', <r3=>0x0, 0x2f, 0x7, 0x9, 0x1, 0x71, @private1, @mcast1, 0x730, 0x80, 0x7fff, 0x1}})
sendto(r2, &(0x7f0000001c40)="611b2111b591c4", 0x7, 0x40000, &(0x7f0000001d40)=@ll={0x11, 0x5, r3, 0x1, 0x57, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x80)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0)

12.340370197s ago: executing program 0 (id=271):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in6=@empty, 0x0, 0x1000, 0x2, 0x0, 0x2}, {0x3, 0x5, 0x0, 0x5, 0xfffbfffffffffff6, 0x1fffffc, 0xfffffbfffffffffc, 0x8}, {0x2000000000000007, 0x0, 0x9, 0x4}, 0x4000006, 0x0, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d2, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x3500, 0x4, 0x0, 0x0, 0xffffffff, 0x80000000, 0xec0a}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) (async)
ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000001280)={0x0, 0x20000, 0x2, 0x6dd, 0x10, 0xfffffffe, 0x10, 0x3e8, 0x20, 0x37, 0x20, 0x401, &(0x7f0000000080)=[0x7], 0x1, 0x0}) (async)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f00000011c0)={[{@fat=@gid}, {@uni_xlateno}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_win95}, {@shortname_lower}, {@shortname_mixed}, {@rodir}, {@rodir}, {@shortname_win95}]}, 0x7f, 0x2cf, &(0x7f0000000680)="$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")
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f00000000c0)=0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 32)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r9=>0x0) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r11, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000007f00)={'syztnl0\x00', &(0x7f0000007e80)={'ip_vti0\x00', 0x0, 0x8000, 0x8000, 0x1, 0x3, {{0xe, 0x4, 0x2, 0x2d, 0x38, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x23, 0xffffffffffffffff, [{0x3, 0x10, "34bb2855dcecd94a32b92645dfd8"}, {0x2, 0xd, "f2327bb4c1ea1861814cc0"}]}, @end]}}}}}) (async)
sendmmsg(r7, &(0x7f000000bb00), 0x0, 0x20000000) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000)

12.119967319s ago: executing program 0 (id=277):
unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x187)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, 0x0, 0x3b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
lsm_set_self_attr(0x0, &(0x7f0000002100)={0x6a, 0x5, 0x1020, 0x1000, "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"}, 0x1020, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x50, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x254}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4068c50}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r6, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0)

10.963283581s ago: executing program 0 (id=288):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00')
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0xda, 0x80003)
r2 = getpid()
syz_pidfd_open(r2, 0x0)
fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x1, 0x2, 0x3, 0x193, r2})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x18)
r3 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0xc, 0x4007, @fd=r3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x1})
io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r7=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010800000000fedbdf250b00000008000300", @ANYRES32=r9, @ANYBLOB="2000508005000200020000000900ac0f00"], 0x3c}}, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x800, 0x40, "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", 0x9, 0x8, 0x6, 0xfc, 0xfd, 0x9, 0x80, 0x1}, r7}}, 0x120)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x804800, &(0x7f0000000100)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0x9, 0x1, 'ipvs\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000000080)='sysfs\x00', 0x110a0, 0x0)

10.839483718s ago: executing program 0 (id=292):
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) (async)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
kexec_load(0x2, 0x0, 0x0, 0x1) (async)
kexec_load(0x2, 0x0, 0x0, 0x1)
socket$inet(0x2, 0xa, 0xfffffffd) (async)
r3 = socket$inet(0x2, 0xa, 0xfffffffd)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @empty}, {0xfffffffffffffffe, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x48, {0x2, 0x0, @broadcast}, 'ip6gretap0\x00'})
close(0x3)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000280)="80ef", 0x2}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x120444c, &(0x7f0000001100)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESDEC, @ANYBLOB="a6af03000000000000006c42ac9eefc3f3304a519189b105d77c5f5267121c170995cd3bb174096f3c", @ANYBLOB="a51b7d19e69bbcb11700c2dcb2d851f79d44e9bb8469d2a5dd66597db213ade6acfaffd88afce31be876c207fb5d362b6e91010b006a4279f2d4d02752a02b76b5413c5e7cd22d3cfad489bd1b84a85aa8ad47cc69d09522d51cf5cf88cf9da13593310d5e0d03a6e17940ddd391c7796ad75f4fa75bd62cb78c43c92e61de110508c5d605a2f981314c38526ac5aac6e4445e32d7cf128b440ca715e901f8b4299226dfd9bfec7a37f3bf63af2da22cff8e27e7b7f1e1906fe520b65051ea9c14827e9cd737a6952d478ff3cb4436a913", @ANYRES32, @ANYRES16=<r4=>0xffffffffffffffff, @ANYBLOB="65e7246b78408b"], 0x0, 0x1e4, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
socket$kcm(0x11, 0x3, 0x0) (async)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000005c0), 0x4) (async)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000005c0), 0x4)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) (async)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
openat$cgroup(r7, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000001080)=ANY=[@ANYRES8=r1, @ANYRESOCT=r6, @ANYRES8=r4], 0x3, 0x3a9, &(0x7f0000001700)="$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") (async)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000001080)=ANY=[@ANYRES8=r1, @ANYRESOCT=r6, @ANYRES8=r4], 0x3, 0x3a9, &(0x7f0000001700)="$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")
syz_read_part_table(0x105b, &(0x7f0000000000)="$eJzsz7GNwjAYBeDnXJTTNdfcHCdRsQENFSswCUlJwU5MwggMQGPkoIgNgOL75MLSs9+vP7xVl/qbWmvWQ/ok30nOZcjXnP4nJWVsZ1Zr+p9Vu23ml82UrksO7UdZWssSjpfT9e857VEzlmSb3I7TfveiNQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgo90DAAD//8TFENE=")
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef51d"], 0xf8)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={<r9=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000001640)={0x14, 0x88, 0xfa00, {r9, 0x10, 0x0, @ib={0x1b, 0x8, 0x4, {"d0c478212ccafdb64a24801f2f862372"}, 0x7ee7, 0x5, 0x3}}}, 0x90) (async)
write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000001640)={0x14, 0x88, 0xfa00, {r9, 0x10, 0x0, @ib={0x1b, 0x8, 0x4, {"d0c478212ccafdb64a24801f2f862372"}, 0x7ee7, 0x5, 0x3}}}, 0x90)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000240), 0x47}, 0x40000) (async)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000240), 0x47}, 0x40000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='proc\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000080)='proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)

10.394379891s ago: executing program 0 (id=309):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0x9}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r5, 0x201, 0x400000, 0x80003, {{}, {}, {0xa, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000051)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)
getsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

10.343864993s ago: executing program 32 (id=309):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0x9}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071108a00000000001d400500000000004704000001ed00000f030000000000002c440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c3f000000315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b47623028271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r5, 0x201, 0x400000, 0x80003, {{}, {}, {0xa, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000051)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)
getsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

5.23866593s ago: executing program 4 (id=352):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb3}}) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nodiscard}, {@abort}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") (async)
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) (async)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) (async)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}]})

4.905110634s ago: executing program 4 (id=355):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x6, &(0x7f0000000100)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8, 0x100000}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa, 0x6}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x400}, 0x10}, 0x94)

4.714604834s ago: executing program 4 (id=358):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r0)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10000080)
ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000000240)="3f01b7fe5cc153dd7170038ec8819ad0edba3dfcbd2c6c3ac360e5c6fcd9222633146ea8b59aec824842c719a55493565161125595089f81907aa7d757afd6dad0cc164c5cd292ec1e34c22e4bd9205bc671505efd406c1fc43043ce6f3a00b5e33c4ca60a4e0fa332380daca805f79f07da8cfaf731f70c5b7309829994a033b2a11c96ed976b1c996b4828915b31a515acd1b4b6dd42a3e54dc4b07ae74ce5d61ed6fae3848026cb79c0062f46d41a38")
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={<r3=>0x0, @empty, @initdev}, &(0x7f0000000380)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', <r4=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)={'team0\x00', <r6=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffd}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r1)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r8, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pim6reg\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x28de}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r10, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r11, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r13 = accept4$llc(0xffffffffffffffff, &(0x7f0000000a00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000a40)=0x10, 0xc0800)
r14 = eventfd2(0x5, 0x80400)
io_cancel(0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x6, 0x5, r13, &(0x7f0000000a80)="6bd7303766c75c95e10d8b9810ac3b9de10190113ff9232058a195974995699d2dd25201b613607f8c6d9fd8bb26203fe9f8c0a35038968f2c182a19ef1cda06ecdb6e81766857e90071f9644cdc3666350f64f34f3162747140a9a0b17e7fcf25c5b9540ccb71319e2dfc456799c00d963e44f481cc034a7d0380b2203f9d52f8f5e2b39aca88a07d5dcf855187cdc802b1", 0x92, 0x400, 0x0, 0x1, r14}, &(0x7f0000000b80))
r15 = accept$inet6(r14, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000c00)=0x1c)
setsockopt$inet6_group_source_req(r15, 0x29, 0x2f, &(0x7f0000000c40)={0x1, {{0xa, 0x4e20, 0x9, @loopback, 0x7}}, {{0xa, 0x4e22, 0x7, @private1, 0x8000}}}, 0x108)
r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan3\x00', <r17=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r16, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000004}]}, 0x54}}, 0x20000081)
ioctl$FS_IOC_GETVERSION(r10, 0x80087601, &(0x7f0000000f00))
syz_genetlink_get_family_id$team(&(0x7f0000000f40), r0)
socket$nl_generic(0x10, 0x3, 0x10)

3.988043314s ago: executing program 4 (id=359):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071119400000000008510000002000000850000008c00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70)
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_open_procfs(r1, &(0x7f0000000340)='net/tcp6\x00')
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x3, @local, 0x7}}, 0xfff, 0x7}, &(0x7f0000000180)=0xdc)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f00000001c0)={0x40, 0x64737664, 0x1, @stepwise={0x0, 0xffff, 0x2, 0x100, 0xffffffff, 0x2}})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$TCFLSH(r6, 0x400455c8, 0x1)
ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0)
shmctl$IPC_RMID(r0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000630afcff000000009500000000000000c5b06f9be8a2e1d5ab57a6556f23d9952de285336511f29d76be1298ca5f9c82b67aedea7758f70850ecff23f843686d4cc34deaf22f3730410185d00a0b9d2d0abe3be5149ba47922360ac9b038f228fcc6ec56e5e690d5dacb6597a7cd0ee309ce"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000040)=""/66)

3.587705814s ago: executing program 3 (id=361):
shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000})
r1 = socket(0x29, 0x2, 0x5)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000480)={{&(0x7f0000000040)=[{0x6de8, 0x5, 0x0, {0x5, 0x400000}, 0x8, 0x8, 0x9}, {0x3, 0x1ff, 0xffffffffffffffff, {0x8000, 0x8}, 0x5, 0x676, 0x250}, {0xb3, 0x3, 0xfffffffffffffffb, {0xffffffff, 0x9}, 0x3ff, 0x3, 0x7}, {0x9, 0x8, 0xffffffffffff8c0e, {0x0, 0x100}, 0x6000000000000000, 0x1, 0x7}, {0x1, 0x6, 0x6, {0x8, 0xb}, 0x3, 0x1, 0x4}, {0xffffffffffffffff, 0x2, 0x2, {0x80000000, 0x8}, 0x80000000, 0x3, 0x1}, {0xb7, 0x8ab, 0xfff, {0x401, 0x61a7}, 0x233, 0x7, 0x8}, {0x101, 0x2, 0x7, {0x0, 0x3}, 0x3, 0x3, 0x2}], 0x8, 0x40, 0x878, 0x3}, {&(0x7f0000000240)=[{0x3}], 0x1, 0x10, 0x3, 0xb59}, {&(0x7f0000000280)=[0x0, 0x5], 0x2, 0x8, 0x3b, 0x8}, {&(0x7f00000002c0)=[{0x9, 0x5b12, 0x6, 0x4, 0x1f}, {0x80, 0x8000000000000000, 0xfffffffffffffe42, 0x0, 0x5}, {0x0, 0x4, 0x1, 0x0, 0x457}, {0x6, 0x3, 0x1, 0x9, 0x2}, {0xe7, 0x3, 0xffffffffffff8799, 0xe6, 0xffff04d9}, {0x8000, 0x9, 0x1, 0x0, 0x2}, {0x6e6, 0x800, 0x673f, 0xe17, 0x3}, {0xffff, 0x2, 0x3, 0x5, 0x2}, {0x8001, 0x2, 0x39c7afe, 0x7f, 0x3bc}], 0x9, 0x28, 0x5, 0x1}, {&(0x7f0000000440)=[0x64, 0xca], 0x2, 0x8, 0x400, 0x8}})
get_mempolicy(&(0x7f0000000500), &(0x7f0000000540), 0x8d5, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000580), 0x10c80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r2)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}}, 0x40044)
r5 = add_key$user(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)="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", 0x1000, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000001800)={'broute\x00', 0x0, 0x0, 0x0, [0x10001, 0x0, 0x5, 0x8, 0x4, 0x165d], 0x1, &(0x7f00000017c0)=[{}, {}, {}, {}], 0x0, [{}]}, 0x88)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000018c0), 0x2, 0x0)
r6 = add_key$user(&(0x7f0000001900), &(0x7f0000001940)={'syz', 0x0}, &(0x7f0000001980)="edf922df048bf6579a4b8a5de85d8e2d9a768833ed566301420be7aa7f44f4b6eff8b2f57bdc5299b820474b29499d8508421c02a8242d8e85abe2b6d29ae3d4f3f35ba3f09ccd1b44370e2b", 0x4c, 0xfffffffffffffffb)
keyctl$dh_compute(0x17, &(0x7f0000001a00)={r6, r5, r5}, &(0x7f0000001a40)=""/13, 0xd, &(0x7f0000001bc0)={&(0x7f0000001a80)={'sha384-ce\x00'}, &(0x7f0000001ac0)="7ed3b880021cf6cb02afb17957f3934dd6113f6d568b2d6170969f9579bb90a031af91690a9a3cffda9f95bb3c3cd5573b6dc34ff47771f54e9c6b8c7609b4d96613b9ae6af1487632b672734f60bd5dbe14099d662c6cbdb886e86f62f4e96c38deba26dcbd3c0520c34e6605ec694cf7f81cc376780a7263485d67a01e635c292e96d70e3a78bc0a3febc8031e51b1d9ed0d12a706c0dc4d3fd2f0b748744bda89731cb1b1579edf3bdd6a0ea1dcbad6a1a5c06d8a020a617ab55af31aafa1a7a519b721", 0xc5})
keyctl$unlink(0x9, r5, 0xfffffffffffffff8)
r7 = syz_genetlink_get_family_id$smc(&(0x7f0000001c40), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000001d80)={&(0x7f0000001c00), 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0xa0, r7, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24044804}, 0x80c0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmmsg(r8, &(0x7f00000045c0)=[{{&(0x7f0000001dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001e40)=""/191, 0xbf}, {&(0x7f0000001f00)=""/51, 0x33}, {&(0x7f0000001f40)=""/133, 0x85}], 0x3, &(0x7f0000002040)=""/227, 0xe3}, 0x7}, {{&(0x7f0000002140)=@can, 0x80, &(0x7f00000024c0)=[{&(0x7f00000021c0)=""/109, 0x6d}, {&(0x7f0000002240)=""/197, 0xc5}, {&(0x7f0000002340)=""/233, 0xe9}, {&(0x7f0000002440)=""/113, 0x71}], 0x4, &(0x7f0000002500)=""/230, 0xe6}, 0x6}, {{&(0x7f0000002600)=@xdp, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002680)=""/5, 0x5}, {&(0x7f00000026c0)=""/26, 0x1a}, {&(0x7f0000002700)=""/252, 0xfc}, {&(0x7f0000002800)=""/160, 0xa0}, {&(0x7f00000028c0)=""/64, 0x40}, {&(0x7f0000002900)=""/188, 0xbc}, {&(0x7f00000029c0)=""/227, 0xe3}, {&(0x7f0000002ac0)=""/224, 0xe0}, {&(0x7f0000002bc0)=""/200, 0xc8}], 0x9, &(0x7f0000002d80)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000003d80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003e00)=""/104, 0x68}], 0x1, &(0x7f0000003ec0)=""/23, 0x17}, 0x4}, {{&(0x7f0000003f00)=@caif=@dbg, 0x80, &(0x7f0000004440)=[{&(0x7f0000003f80)=""/94, 0x5e}, {&(0x7f0000004000)}, {&(0x7f0000004040)=""/164, 0xa4}, {&(0x7f0000004100)=""/201, 0xc9}, {&(0x7f0000004200)=""/197, 0xc5}, {&(0x7f0000004300)=""/244, 0xf4}, {&(0x7f0000004400)=""/14, 0xe}], 0x7, &(0x7f00000044c0)=""/248, 0xf8}, 0xfffffffe}], 0x5, 0x40000041, &(0x7f0000004700)={0x77359400})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004840)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000004740)="f414d3d8326cad1530d9a0eb26b6fccfa2cd11c9d065201b5f7fc38a2ce76e988a5b45764ce3d6f5422cbc58644f2681694166e27bc9d518525ec190ef3279b623e5f9ee491b18f1bb74a7a1f38deba9084d1417cd5a61760e25d836ef8123b0d9117d538f503d48bc0a3a6942395aa5a2a91de76c1f3774a32d53d7cacaee46a69ca37ce04ee7090095b9d0f74f25e86167cee88fdf3a2a97707f9c643806ff5af51309779bdcaf0c4c91c74d177612e2f9b3b639e597454ddffa5af9427b3b32a41215fc47a6ff8dc64966b95e416b4d623e951e286a4a5fc404ad86033d9c4222b8a630", 0xe5}, 0x68)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004b00)={0xffffffffffffffff, 0x0, 0x1d, 0xf1, &(0x7f00000048c0)="d05d337cb281a8569b28c0db3c1e6faedbf2abf6671c3a5b723a87bbb6", &(0x7f0000004900)=""/241, 0xfffffff9, 0x0, 0x4d, 0x42, &(0x7f0000004a00)="e810c981781ca1257d759b8543636e11f879efc06755f028d4c57d2a6d92fa384e6d760d27a25142abd9300a78b5012221be71f2996d687bb41212c1b593ee932f5fee47844ef6e32a7f2bcf1f", &(0x7f0000004a80)="df0938c7754d416a5e82e3b88bbd7bf742ed905c9e2e99ba5b13dbf6a0ba60f5b0503e43d6894b8296f76bc6f4654c716564eaafad84bdb755b851f47757574ce5ae", 0x4, 0x0, 0x1}, 0x50)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000004b80), 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000004bc0)={0x0, r3}, 0x8)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000004c80)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000004c40)={<r9=>0xffffffffffffffff}, 0x111, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000004cc0)={0x1, 0x10, 0xfa00, {&(0x7f0000004c00), r9}}, 0x18)
ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000004d00)=0x5)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000004d80)=@generic={&(0x7f0000004d40)='./file0\x00', r2}, 0x18)

3.584424575s ago: executing program 3 (id=362):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10)
io_setup(0x5, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socketpair(0x28, 0x1, 0x28, &(0x7f0000001400))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x8001}]}]}, 0xfc}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x810)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setresuid(0x0, 0xee00, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}})

3.527487371s ago: executing program 5 (id=310):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000011006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001ac0080002008100020006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x2c0, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0xfffffe88, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x114}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x260, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7257}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x168, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb0bd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x59d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff7fff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x55de}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x480000}, @NFTA_SET_FIELD_LEN={0x1, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0x9c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xca}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10004}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2e8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000002040)=ANY=[@ANYBLOB="14000000140018000aa16200fbdbdf2d01270000"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x48004)

3.509125773s ago: executing program 3 (id=365):
r0 = socket(0x1, 0x1, 0x0) (async)
socket$kcm(0x11, 0xa, 0x300) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 64)
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000806000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000}) (async, rerun: 64)
ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'})

3.427755351s ago: executing program 5 (id=368):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r7, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', r6, 0x29, 0x8, 0x9, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8, 0x700, 0x5, 0x6}})
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "008000", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

3.412890614s ago: executing program 3 (id=369):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x3}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@deltclass={0x34, 0x29, 0xfc536f7d45af247c, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff7, 0xffff}, {0x5, 0x6}, {0xc, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_RATE={0x6, 0x5, {0x8, 0x80}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008814}, 0x2)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000001c0)={0x18, 0x1, 0x0, "14a5593b595ccb9e289f1548f12ec9745f90084a013424cf6dc99d2466980300"})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x114, 0x401, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0xa0c40, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2003010, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0xff, 0x1c5, &(0x7f0000000540)="$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")
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
timer_create(0x0, 0x0, 0xffffffffffffffff)
pread64(r5, &(0x7f0000000780)=""/226, 0xe2, 0x1ff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0)
ftruncate(r6, 0xc17a)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)='GPL\x00', 0x5, 0x49b, &(0x7f000000cf3d)=""/178, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0xfffffffffffffdfd, 0x10, 0x0, 0x17}, 0x48)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x132, 0xffffffffffffffff, 0x6ad42000)
r7 = shmget$private(0x0, 0x13000, 0x400, &(0x7f0000feb000/0x13000)=nil)
shmat(r7, &(0x7f0000ffa000/0x3000)=nil, 0x400c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x8044)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000002c0)=<r10=>0x0, &(0x7f0000000000)=<r11=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001000)={0x0, "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"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r12, 0x0, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(r8, 0x1, 0x1, 0x5, 0x0, 0x0)

3.268506953s ago: executing program 3 (id=375):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0) (async)
syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) (async, rerun: 64)
r2 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) (rerun: 64)
r3 = dup(r2)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r5=>0xee00, 0xee00}}, './file0/file0\x00'})
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@uid_lt={'uid<', r5}}, {@measure}, {@permit_directio}, {@obj_role={'obj_role', 0x3d, '!'}}, {@obj_role={'obj_role', 0x3d, 'nflog\x00'}}, {@flag='posixacl'}]}}) (async)
setns(r1, 0x24020000) (async, rerun: 64)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async, rerun: 64)
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0xc001)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async, rerun: 64)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) (async, rerun: 32)
r8 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000002e80)=@filter={'filter\x00', 0xe, 0x4, 0x176, [0x0, 0x200027c0, 0x200029ec, 0x20002b82], 0x0, 0x0, &(0x7f00000027c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x60, 0x8917, 'veth1_to_bridge\x00', 'nicvf0\x00', 'veth1_to_batadv\x00', 'veth0_to_bond\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x2, 0x4, 0x0, 0x0, "eda2aededb46cf1cd942696e782c84e94c8aadd296787439ae1c0ee400ec150796e9178168e0c3d3cf5f02b734591749de3428d7ecf71ea2fc50442b82d939e6"}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x1ee) (async)
fcntl$setstatus(r6, 0x4, 0x42000) (async)
r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r9, 0x4, 0x42000) (async)
write(r9, &(0x7f0000000100)="9fe93ffd51", 0x5) (async)
mount$9p_xen(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) (async)
read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x2020)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000040), 0x100008, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@privport}, {@nodevmap}, {@nodevmap}]}}) (async, rerun: 32)
syz_emit_ethernet(0x47, &(0x7f0000002380)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void}, {@generic={0x8906, "730c51aa1fd53b66302e452c9516afc41f5c76e83e9b1d8048c505a581a679a396f3c48f4763394bf12e107d7363e6b63fdb08a6ee"}}}, 0x0) (rerun: 32)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x3000)=nil)

2.86395346s ago: executing program 1 (id=379):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f0000000180)={0x18, 0x0, 0xb1ef06d7b0a4add4, 0x0, 0x0, 0x400})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000080)={0x28, 0x0, 0x0, r4, 0x100000000, 0xb80, 0xe})
r5 = socket$inet6(0xa, 0xa, 0xb0c)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={<r6=>0x0, 0x1, 0x0, 0xd, 0x2}, &(0x7f0000000100)=0x18)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={<r7=>0x0, 0x3}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000300)={r6, 0x6, 0x7, 0x2, 0xd4ae, 0x0, 0x3, 0x0, {r7, @in6={{0xa, 0x4e20, 0xff, @local, 0x1}}, 0x5, 0x66a5, 0xf8, 0x5, 0xaa}}, &(0x7f00000003c0)=0xb0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r8, r9, 0x1, 0x0, @void}, 0x10)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r10, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c)

2.064322837s ago: executing program 2 (id=385):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x3}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@deltclass={0x34, 0x29, 0xfc536f7d45af247c, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff7, 0xffff}, {0x5, 0x6}, {0xc, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_RATE={0x6, 0x5, {0x8, 0x80}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008814}, 0x2)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000001c0)={0x18, 0x1, 0x0, "14a5593b595ccb9e289f1548f12ec9745f90084a013424cf6dc99d2466980300"})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x114, 0x401, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0xa0c40, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2003010, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0xff, 0x1c5, &(0x7f0000000540)="$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")
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
timer_create(0x0, 0x0, 0xffffffffffffffff)
pread64(r5, &(0x7f0000000780)=""/226, 0xe2, 0x1ff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0)
ftruncate(r6, 0xc17a)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e0000001600ffff8000fdff95000000000000006884d1d9fe4c9ce4c8b7a8e93bb957f5ac915f7683352dbbdb85d8965f40a9372a85319dc353a5b7b7bf0365836f54ae60375c46827cb4d9f8a15bddba79096be7d495c19b3afaa67d2aea409ea69c67cc026d1f0d509b0055e7a371960c7eef346408d031b1249592ccc129485120730762afd7006f54bd541f8be0902162f15e7539ad6623a985526464b4539a3c1d1514fe832e9c47f1c53ca2614ff008000000000000009a86746c75adf63fe215c2b2ca38e4f62f682ef561ee6352c07f000000000000008f31663bd222d47fd495ad27124c6b0ccd410400000000000000eb2b31bb3d0bb8aebfc7ee0200000000000000f0c100e80c53d628404a42176fb1462bddb96075082e486e0d4907d5764185ce2ebfc911064c1f41425fa8fa3eb9848fb36c85ad4e23b580773e82a135107a73be0d78b5eced63b5e0ad7d6b97b8aedf0f33bc79f3a07034b54afbe4ca46e0f64222976090809c7912fa0c112ac3d25141472a7ba550d62c34abc4915fa6cbf0da8d9c3139a6d5b3c8b371c4c25c53350edc8521676bbec5ad4ed0b7eca73574fddbfbccfbed5c9da52fe13fe0d91ce27382ae93353af09acc490c6ef108867e79b444d8a46e20fb2b28a3f0cf39596c20df5e5d5846ba2db1d14e862be6327f22aa774b4dc16e7dec7093d83f211c51df5c170765dbc048f655e6d7ad1134837556d1f8f88b59ca5a26e5908f04ed3f4ec22b3d6e41e9a703bff1f2b34bdeed501a4762605edc7bcc2fcdd2fff4f65db191e5e4b8b33cc093c5e2ec369276c40aaaebd2d5b095bd3d636aa74546968b7b2f41818d03a4a6058a19ad6d96f085f057efdb575b07d3a610fb1bb82a9ce8cf39d6bac2024eb1be3c6f2a24c251728aaf71dcc7f3d01493587a880ef951461a53040a288871ae85b3b06e9ede18b1d9c18e2b100c7943c96723e4a190d3bab1fc9ebeef1024986c494bdfcee8b8a0fbb4e5b807fd27caf63eda9dfcc0d64ba6a74406aa0e1c0b0b7bb1e22fd0c910b03d52f5dc675bfb690d41edbb776e4dc22af46bf5f1edaa5a487b9f1dd0b135de877fd837dfd279b9e2"], &(0x7f0000000880)='GPL\x00', 0x5, 0x49b, &(0x7f000000cf3d)=""/178, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0xfffffffffffffdfd, 0x10, 0x0, 0x17}, 0x48)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x132, 0xffffffffffffffff, 0x6ad42000)
r7 = shmget$private(0x0, 0x13000, 0x400, &(0x7f0000feb000/0x13000)=nil)
shmat(r7, &(0x7f0000ffa000/0x3000)=nil, 0x400c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x8044)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001000)={0x0, "3efe72f3bf818ea09f4cf95d73c3ce3e8de711a7f3de0fc1cb8a24626d1d44910f2236bf9bae103e22391ea3cd172c2ac38179be234f63df3e6f5019535184ef5c39d04cc54c7bdd661cc2ff0d793bbc8433dbbb5ced195489d9389a1b55ef1389ec4f5bdceca542cc3fa739f22d94897c6b9abd311357d25e8ef7df7c43556d8f1107b003a9f87ddfc2dd335207b494877e48ec793e0995c184a0b644a16b065b3f6a987cc6bd06b7a618126a30b9e8aaa05814ca622407b092f3636481d7ab77487609081fb930df46404c837ff3e85d0cb475baf73af4f0702d828e5da37668e8d1396493ae1f100aa9c1fad6965352f36c8c09ad29fc695a266e7b0fd95de6688a99f6dea33f7432f2079339a45bb16c89d66fa2d81feebd0c42e53d9d5abfbacc40912bece541ebb43fc5e30e5724a394a841c9bfa09f08d9cd01d614546e650605921d4c55ad74479948dd4be6086d8f5a0f800461eb7633014de028d6492792cb27ad847037ad678f79e83232f138ab2f0ed350b9ab476d9c9ee41b5c4a96b28cc572f454c4c232aab45f1bc6b0c8caa19fc8c98e598c7891c9fb095ec923afd10c6306f0834d9da98892e9fd24186f446c1f87fced883ab43bcfbe54fc37d70459c049d87030494ebad22dc68cfaf694438ebc70e84a28f63c3b8905effdc87d477c1ddbab9ff5beed93a4d17819344148be913f949635156caf1e4b"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
io_uring_enter(r8, 0x1, 0x1, 0x5, 0x0, 0x0)

1.987248958s ago: executing program 2 (id=386):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500fffda0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

1.932019083s ago: executing program 2 (id=387):
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffc}, 0xfffffffffffffdd6)
socket$inet6(0xa, 0x1, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x5, 0x7, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2f}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_int(r4, 0x0, 0x31, 0x0, &(0x7f0000000080))
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4002, 0x3, 0x3, 0x2, {0xa, 0x4e23, 0x10001, @empty, 0x7fff}}}, 0x32)
ioctl$PPPIOCGL2TPSTATS(r7, 0x40047459, 0x0)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888"], 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0)
unshare(0x64000600)

1.920674934s ago: executing program 1 (id=388):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x2)
read$alg(r0, &(0x7f00000002c0)=""/71, 0x47)
syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
pread64(r0, &(0x7f0000001740)=""/4066, 0xfe2, 0x9a)

1.892065847s ago: executing program 1 (id=389):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$smackfs_ptrace(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000440)=0x91)
sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3)
r4 = socket(0x1d, 0x2, 0x6)
setsockopt$inet_int(r4, 0x6a, 0x16, 0x0, 0x0)
mlockall(0x2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r5, &(0x7f0000000000)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d410a8b089b3f363563030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8042000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r6 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
shmat(r6, &(0x7f0000ff1000/0x3000)=nil, 0x400c)
mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)
preadv2(r0, &(0x7f0000000040), 0x0, 0x0, 0x1a1, 0x10)
syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2)
syz_open_dev$loop(&(0x7f00000001c0), 0x43e0, 0x200)

1.344079404s ago: executing program 4 (id=390):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0)
sendmmsg$sock(r3, 0x0, 0x0, 0x4000)
madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000140079b0480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)

268.049914ms ago: executing program 1 (id=391):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)

267.56239ms ago: executing program 2 (id=392):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x40)
r3 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6)

81.912149ms ago: executing program 4 (id=393):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0)

81.164904ms ago: executing program 1 (id=394):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004800}, 0x20048888)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10)
listen(r1, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffff9, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0xf4c, 0x8, 0xb9, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x3, 0x9, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x6, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x2000312, 0x78, 0xea4, 0x0, 0x401, 0x7, 0x1, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0xfffffffd, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x4008000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x3, 0x40, 0x3], [0x7, 0x40a, 0x7, 0x5, 0xfffffffe, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x89, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x1fc, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12f, 0x4, 0x1, 0xc, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x1000002, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0xb, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10002, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1538, 0x200, 0xffff3441, 0x1001]}, 0x45c)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x2}, 0x10)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs'], 0x32, 0xfffffffffffffffc)
r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[<r4=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x24, 0x80000000, 0x4, 0x5274ef30, 0x80000000, 0x7ff, 0x90b4, 0x9, 0x25], 0x0, 0x1})
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004800}, 0x20048888) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) (async)
listen(r1, 0x0) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffff9, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0xf4c, 0x8, 0xb9, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x3, 0x9, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x6, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x2000312, 0x78, 0xea4, 0x0, 0x401, 0x7, 0x1, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0xfffffffd, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x4008000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x3, 0x40, 0x3], [0x7, 0x40a, 0x7, 0x5, 0xfffffffe, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x89, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x1fc, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12f, 0x4, 0x1, 0xc, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x1000002, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0xb, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10002, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1538, 0x200, 0xffff3441, 0x1001]}, 0x45c) (async)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)) (async)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x2}, 0x10) (async)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs'], 0x32, 0xfffffffffffffffc) (async)
syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) (async)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) (async)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x24, 0x80000000, 0x4, 0x5274ef30, 0x80000000, 0x7ff, 0x90b4, 0x9, 0x25], 0x0, 0x1}) (async)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async)

73.219427ms ago: executing program 5 (id=395):
r0 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r0}) (async)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000001c0)={0x1, 0x4, 0xfffffff4}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, <r1=>0xffffffffffffffff})
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e1e, @rand_addr=0x64010102}, 0x10)
statx(r1, 0x0, 0x1000, 0x10, &(0x7f0000000040))

73.046591ms ago: executing program 2 (id=396):
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, '\x00', "78cc1e7e6d811fcbdbc1a31156cbd995", "4d0c6e03", "e9671c779f9a5947"}, 0x28)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x5, @loopback}, 0x1c)

8.467622ms ago: executing program 3 (id=397):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x3}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@deltclass={0x34, 0x29, 0xfc536f7d45af247c, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff7, 0xffff}, {0x5, 0x6}, {0xc, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_RATE={0x6, 0x5, {0x8, 0x80}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008814}, 0x2)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000001c0)={0x18, 0x1, 0x0, "14a5593b595ccb9e289f1548f12ec9745f90084a013424cf6dc99d2466980300"})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x114, 0x401, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0xa0c40, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2003010, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0xff, 0x1c5, &(0x7f0000000540)="$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")
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
timer_create(0x0, 0x0, 0xffffffffffffffff)
pread64(r5, &(0x7f0000000780)=""/226, 0xe2, 0x1ff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0)
ftruncate(r6, 0xc17a)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)='GPL\x00', 0x5, 0x49b, &(0x7f000000cf3d)=""/178, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0xfffffffffffffdfd, 0x10, 0x0, 0x17}, 0x48)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x132, 0xffffffffffffffff, 0x6ad42000)
r7 = shmget$private(0x0, 0x13000, 0x400, &(0x7f0000feb000/0x13000)=nil)
shmat(r7, &(0x7f0000ffa000/0x3000)=nil, 0x400c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x8044)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001000)={0x0, "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"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
io_uring_enter(r8, 0x1, 0x1, 0x5, 0x0, 0x0)

7.902742ms ago: executing program 5 (id=398):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000240)={0xc403, {{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x88)

7.402211ms ago: executing program 2 (id=399):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
write(r0, &(0x7f0000000080)="8f5225478931f7bc89250c46d6ceb8e4c7dcc401753ca6be5ee363fd14b9def16a9cabd00ad6c4ace92cc291b7efa8be6ed9d612792c063c55fba733c4e7bb204bb037f2a72405440c61a6ab79b109e270cda8e8abb4f0d836fe4923d81e2e2c5dd9dc28016543ef96", 0x69)
r1 = syz_io_uring_setup(0x52c3, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000180)=[@ioring_restriction_register_op={0x0, 0x2}, @ioring_restriction_sqe_flags_allowed={0x2, 0x19}], 0x2)
mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x2)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff2, 0xe}, {0x0, 0x9}, {0xffe0, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0xc, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffffff}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r7, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)
read$alg(r2, &(0x7f00000002c0)=""/71, 0x47)
pread64(r2, &(0x7f0000001740)=""/4066, 0xfe2, 0x9a)

0s ago: executing program 1 (id=400):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0)={[{@noload}, {@prjquota}, {@usrjquota}, {@orlov}, {@data_writeback}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}], [{@fowner_eq}]}, 0x2, 0xbc3, &(0x7f0000001040)="$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")
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000005c0)={{r0}, 0x6, 0xff, 0x202})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
r3 = socket(0x40000000015, 0x5, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x81)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000030000008108000008000b00", @ANYRES32=r4, @ANYBLOB="0c009900080000006a0000000a00060008021100000000000a00060008021100000000000a000600ffffffffffff0000060066000b40000006006600180000000a000600ffffffffffff000004006700"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000380)=0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2, <r5=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff)
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
setxattr$security_evm(0x0, &(0x7f0000000140), &(0x7f00000001c0)=@sha1={0x1, "86f74d9b37667014c29cd113a132cc795cbd6d6f"}, 0x15, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r7, @ANYBLOB="20000280", @ANYRES32=r6, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0)
mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0)
write(r8, &(0x7f0000000800)='0', 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r5}, 0x4)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x10})

kernel console output (not intermixed with test programs):

T4716] bridge_slave_1: entered allmulticast mode
[   30.212451][ T4716] bridge_slave_1: entered promiscuous mode
[   30.236876][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.249109][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.250776][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.250859][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.251380][ T4710] bridge_slave_0: entered allmulticast mode
[   30.251825][ T4710] bridge_slave_0: entered promiscuous mode
[   30.264622][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.264720][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.264777][ T4710] bridge_slave_1: entered allmulticast mode
[   30.265210][ T4710] bridge_slave_1: entered promiscuous mode
[   30.280216][ T4716] team0: Port device team_slave_0 added
[   30.282214][ T4716] team0: Port device team_slave_1 added
[   30.290949][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.292118][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.310285][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.311733][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.312925][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.313944][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.313953][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.313967][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.324289][ T4716] hsr_slave_0: entered promiscuous mode
[   30.324677][ T4716] hsr_slave_1: entered promiscuous mode
[   30.334317][ T4710] team0: Port device team_slave_0 added
[   30.336571][ T4710] team0: Port device team_slave_1 added
[   30.356063][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.356103][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.356127][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.356844][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.356851][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.356865][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.396914][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.398348][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.399671][ T4714] bridge_slave_0: entered allmulticast mode
[   30.401205][ T4714] bridge_slave_0: entered promiscuous mode
[   30.404535][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.404590][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.404660][ T4717] bridge_slave_0: entered allmulticast mode
[   30.405107][ T4717] bridge_slave_0: entered promiscuous mode
[   30.406439][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.406458][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.406508][ T4717] bridge_slave_1: entered allmulticast mode
[   30.406970][ T4717] bridge_slave_1: entered promiscuous mode
[   30.425656][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.425736][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.425915][ T4714] bridge_slave_1: entered allmulticast mode
[   30.426341][ T4714] bridge_slave_1: entered promiscuous mode
[   30.428506][ T4710] hsr_slave_0: entered promiscuous mode
[   30.428785][ T4710] hsr_slave_1: entered promiscuous mode
[   30.428987][ T4710] debugfs: 'hsr0' already exists in 'hsr'
[   30.429032][ T4710] Cannot create hsr debugfs directory
[   30.444576][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.448975][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.460574][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.474720][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.487387][ T4714] team0: Port device team_slave_0 added
[   30.491969][ T4717] team0: Port device team_slave_0 added
[   30.492885][ T4717] team0: Port device team_slave_1 added
[   30.500265][ T4714] team0: Port device team_slave_1 added
[   30.517960][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.517992][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.518005][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.518559][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.518567][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.518581][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.529243][ T4717] hsr_slave_0: entered promiscuous mode
[   30.529537][ T4717] hsr_slave_1: entered promiscuous mode
[   30.529720][ T4717] debugfs: 'hsr0' already exists in 'hsr'
[   30.529729][ T4717] Cannot create hsr debugfs directory
[   30.552175][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.553795][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.554500][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.555105][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.555112][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.555124][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.574587][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.576107][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.577556][ T4711] bridge_slave_0: entered allmulticast mode
[   30.579198][ T4711] bridge_slave_0: entered promiscuous mode
[   30.580075][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.580094][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.580192][ T4711] bridge_slave_1: entered allmulticast mode
[   30.580617][ T4711] bridge_slave_1: entered promiscuous mode
[   30.584435][ T4714] hsr_slave_0: entered promiscuous mode
[   30.585094][ T4714] hsr_slave_1: entered promiscuous mode
[   30.585313][ T4714] debugfs: 'hsr0' already exists in 'hsr'
[   30.585323][ T4714] Cannot create hsr debugfs directory
[   30.619558][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.620889][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.648232][ T4711] team0: Port device team_slave_0 added
[   30.649065][ T4711] team0: Port device team_slave_1 added
[   30.654050][ T4716] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.658741][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.659911][ T4716] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.661378][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.669536][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.669565][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.669578][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.670328][ T4716] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.673302][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.678321][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.678333][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.678350][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.686268][ T4716] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.688653][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.705551][ T4711] hsr_slave_0: entered promiscuous mode
[   30.705891][ T4711] hsr_slave_1: entered promiscuous mode
[   30.706100][ T4711] debugfs: 'hsr0' already exists in 'hsr'
[   30.706117][ T4711] Cannot create hsr debugfs directory
[   30.733971][ T4717] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.736602][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.737055][ T4717] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.738781][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.747769][ T4717] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.750122][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.751774][ T4717] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.754128][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.756001][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.756070][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.756226][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.756262][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.782852][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.782903][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.782999][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.783033][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.790379][ T4710] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.793847][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.794226][ T4710] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.795842][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.799823][ T4710] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.802188][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.807759][ T4710] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.810137][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.831069][ T4714] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.834080][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.837321][ T4714] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.839869][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.841575][ T4714] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.844421][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.853352][ T4714] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.855660][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.859759][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.871465][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.871522][ T4714] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.871595][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.871623][ T4714] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.880388][ T1203] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.881833][ T1203] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.886320][ T1203] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.887681][ T1203] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.889179][ T1203] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.890519][ T1203] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.899332][ T4716] 8021q: adding VLAN 0 to HW filter on device team0
[   30.902209][  T831] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.902261][  T831] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.905449][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.914835][  T831] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.914877][  T831] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.931076][ T4716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.931127][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.944449][ T4711] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.946700][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.954109][ T4711] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.955488][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.956086][ T4711] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.957114][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.962196][ T4717] 8021q: adding VLAN 0 to HW filter on device team0
[   30.963530][ T4711] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.965423][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.967292][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.977119][ T1203] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.977172][ T1203] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.989200][ T4710] 8021q: adding VLAN 0 to HW filter on device team0
[   30.994834][ T1203] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.994880][ T1203] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.006823][ T1203] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.006875][ T1203] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.011674][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.036530][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.036580][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.049871][ T4714] 8021q: adding VLAN 0 to HW filter on device team0
[   31.077576][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.079641][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.091599][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.099028][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.099083][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.100209][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.100239][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.118651][ T4711] 8021q: adding VLAN 0 to HW filter on device team0
[   31.129107][ T1203] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.129175][ T1203] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.144738][ T1203] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.144794][ T1203] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.163497][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.219612][ T4716] veth0_vlan: entered promiscuous mode
[   31.235005][ T4716] veth1_vlan: entered promiscuous mode
[   31.249531][ T4716] veth0_macvtap: entered promiscuous mode
[   31.252279][ T4716] veth1_macvtap: entered promiscuous mode
[   31.263869][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.269282][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.274729][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.274942][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.275114][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.275211][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.328416][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.330096][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.346893][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.346934][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.351242][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.368211][ T4717] veth0_vlan: entered promiscuous mode
[   31.370194][ T4717] veth1_vlan: entered promiscuous mode
[   31.380622][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.398433][ T4717] veth0_macvtap: entered promiscuous mode
[   31.404389][ T4717] veth1_macvtap: entered promiscuous mode
[   31.408548][ T4716] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.415786][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.441403][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.453293][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.479502][ T4887] loop3: detected capacity change from 0 to 512
[   31.493253][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.493306][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.493565][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.493708][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.505280][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.507427][ T4710] veth0_vlan: entered promiscuous mode
[   31.510662][ T4710] veth1_vlan: entered promiscuous mode
[   31.530894][ T4887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.561918][ T4887] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   31.569283][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.569324][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.574329][ T4710] veth0_macvtap: entered promiscuous mode
[   31.581297][ T4710] veth1_macvtap: entered promiscuous mode
[   31.590656][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.592077][ T4711] veth0_vlan: entered promiscuous mode
[   31.611642][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.611675][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.627892][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.629816][ T4711] veth1_vlan: entered promiscuous mode
[   31.637513][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.638618][ T4897] netlink: 'syz.3.6': attribute type 1 has an invalid length.
[   31.645473][ T1373] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.645569][ T1373] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.653940][ T4897] vlan2: entered allmulticast mode
[   31.655172][ T4897] veth0_to_bond: entered allmulticast mode
[   31.672026][ T4714] veth0_vlan: entered promiscuous mode
[   31.694994][ T4711] veth0_macvtap: entered promiscuous mode
[   31.704233][ T4714] veth1_vlan: entered promiscuous mode
[   31.713030][   T15] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.713438][   T15] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.719241][ T4711] veth1_macvtap: entered promiscuous mode
[   31.809731][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.811796][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.811822][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.816456][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.820867][   T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.821007][   T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.821117][   T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.821267][   T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.793280][ T4712] Bluetooth: hci0: command tx timeout
[   32.793425][ T4712] Bluetooth: hci1: command tx timeout
[   32.793517][ T4712] Bluetooth: hci2: command tx timeout
[   32.793589][ T4712] Bluetooth: hci3: command tx timeout
[   32.793779][ T4722] Bluetooth: hci4: command tx timeout
[   32.809007][ T1373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.813306][ T1373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.816336][ T4714] veth0_macvtap: entered promiscuous mode
[   32.819661][ T4714] veth1_macvtap: entered promiscuous mode
[   32.840399][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.841388][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.921329][ T4904] fuse: Unknown parameter 'o�"8�Û�F�i0x0000000000000005'
[   32.989303][ T4869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.989327][ T4869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.163891][  T831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.164949][  T831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.205730][ T4869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.205771][ T4869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.262600][   T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.264177][   T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.265731][   T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.267244][   T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.280970][  T831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.287238][   T15] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.337857][ T4912] Zero length message leads to an empty skb
[   33.789011][ T4920] Injecting memory failure for pfn 0x134a01 at process virtual address 0x20001000
[   33.799606][ T4920] Memory failure: 0x134a01: recovery action for dirty LRU page: Recovered
[   35.307468][ T4723] Bluetooth: hci4: command tx timeout
[   35.307512][ T4723] Bluetooth: hci3: command tx timeout
[   35.307548][ T4723] Bluetooth: hci2: command tx timeout
[   35.307567][ T4723] Bluetooth: hci1: command tx timeout
[   35.307587][ T4723] Bluetooth: hci0: command tx timeout
[   35.537825][ T4931] sock: sock_set_timeout: `syz.0.11' (pid 4931) tries to set negative timeout
[   35.612497][   T30] audit: type=1326 audit(35.600:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4932 comm="syz.2.13" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffab3781a8 code=0x0
[   35.694321][ T4944] loop4: detected capacity change from 0 to 512
[   35.697532][ T4869] bond0: (slave bond_slave_0): interface is now down
[   35.697566][ T4869] bond0: (slave bond_slave_1): interface is now down
[   35.701824][ T4944] EXT4-fs: Ignoring removed i_version option
[   35.701868][ T4944] EXT4-fs: Ignoring removed bh option
[   35.712918][ T4869] bond0: (slave bond_slave_0): interface is now down
[   35.715572][ T4869] bond0: (slave bond_slave_1): interface is now down
[   35.716993][ T4869] bond0: now running without any active interface!
[   35.725331][ T4944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.748868][ T4944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.749099][ T4944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.798385][ T4955] loop1: detected capacity change from 0 to 8192
[   35.798786][ T4955] =======================================================
[   35.798786][ T4955] WARNING: The mand mount option has been deprecated and
[   35.798786][ T4955]          and is ignored by this kernel. Remove the mand
[   35.798786][ T4955]          option from the mount to silence this warning.
[   35.798786][ T4955] =======================================================
[   35.800339][ T4955] vfat: Unknown parameter '0x0000000000000000'
[   35.907512][ T4956] FAULT_INJECTION: forcing a failure.
[   35.907512][ T4956] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   35.907552][ T4956] CPU: 1 UID: 0 PID: 4956 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT 
[   35.907565][ T4956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   35.907572][ T4956] Call trace:
[   35.907576][ T4956]  show_stack+0x2c/0x3c (C)
[   35.907597][ T4956]  __dump_stack+0x30/0x40
[   35.907611][ T4956]  dump_stack_lvl+0xd8/0x12c
[   35.907621][ T4956]  dump_stack+0x1c/0x28
[   35.907631][ T4956]  should_fail_ex+0x41c/0x590
[   35.907644][ T4956]  should_fail_alloc_page+0xec/0x10c
[   35.907653][ T4956]  prepare_alloc_pages+0x194/0x4a4
[   35.907662][ T4956]  __alloc_frozen_pages_noprof+0x134/0x320
[   35.907671][ T4956]  alloc_pages_mpol+0x1ec/0x3c0
[   35.907679][ T4956]  alloc_frozen_pages_noprof+0xc4/0x10c
[   35.907688][ T4956]  alloc_pages_noprof+0x30/0x148
[   35.907696][ T4956]  get_free_pages_noprof+0x1c/0xbc
[   35.907705][ T4956]  vcs_read+0x74/0xa40
[   35.907715][ T4956]  do_loop_readv_writev+0x24c/0x3dc
[   35.907723][ T4956]  vfs_readv+0x258/0x520
[   35.907730][ T4956]  do_readv+0x134/0x2a8
[   35.907737][ T4956]  __arm64_sys_readv+0x88/0x9c
[   35.907744][ T4956]  invoke_syscall+0x98/0x244
[   35.907754][ T4956]  el0_svc_common+0xec/0x23c
[   35.907763][ T4956]  do_el0_svc+0x4c/0x5c
[   35.907772][ T4956]  el0_svc+0x64/0x260
[   35.907783][ T4956]  el0t_64_sync_handler+0x48/0x148
[   35.907793][ T4956]  el0t_64_sync+0x198/0x19c
[   36.127214][ T4949] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set
[   36.142149][ T4959] lo speed is unknown, defaulting to 1000
[   36.143535][ T4959] lo speed is unknown, defaulting to 1000
[   36.145206][ T4959] lo speed is unknown, defaulting to 1000
[   36.147222][ T4959] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   36.150921][ T4959] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   36.161102][ T4959] lo speed is unknown, defaulting to 1000
[   36.163325][ T4959] lo speed is unknown, defaulting to 1000
[   36.165653][ T4959] lo speed is unknown, defaulting to 1000
[   36.167712][ T4959] lo speed is unknown, defaulting to 1000
[   36.169317][ T4959] lo speed is unknown, defaulting to 1000
[   36.170451][ T4949] EXT4-fs (loop4): Remounting filesystem read-only
[   36.477568][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.759987][ T4975] loop4: detected capacity change from 0 to 1024
[   37.115734][ T4986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23'.
[   37.422539][ T4722] Bluetooth: hci0: command tx timeout
[   37.422778][ T4722] Bluetooth: hci1: command tx timeout
[   37.422954][ T4722] Bluetooth: hci2: command tx timeout
[   37.423105][ T4722] Bluetooth: hci3: command tx timeout
[   37.423259][ T4722] Bluetooth: hci4: command tx timeout
[   38.045680][ T4993] FAULT_INJECTION: forcing a failure.
[   38.045680][ T4993] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   38.045725][ T4993] CPU: 1 UID: 0 PID: 4993 Comm: syz.0.28 Not tainted syzkaller #0 PREEMPT 
[   38.045739][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   38.045746][ T4993] Call trace:
[   38.045750][ T4993]  show_stack+0x2c/0x3c (C)
[   38.045771][ T4993]  __dump_stack+0x30/0x40
[   38.045783][ T4993]  dump_stack_lvl+0xd8/0x12c
[   38.045793][ T4993]  dump_stack+0x1c/0x28
[   38.045803][ T4993]  should_fail_ex+0x41c/0x590
[   38.045815][ T4993]  should_fail_alloc_page+0xec/0x10c
[   38.045824][ T4993]  prepare_alloc_pages+0x194/0x4a4
[   38.045833][ T4993]  __alloc_frozen_pages_noprof+0x134/0x320
[   38.045842][ T4993]  alloc_pages_mpol+0x1ec/0x3c0
[   38.045850][ T4993]  folio_alloc_mpol_noprof+0x4c/0x248
[   38.045859][ T4993]  vma_alloc_folio_noprof+0x100/0x1dc
[   38.045868][ T4993]  vma_alloc_zeroed_movable_folio+0x74/0x88
[   38.045877][ T4993]  folio_prealloc+0x3c/0x1b0
[   38.045885][ T4993]  do_pte_missing+0x1bcc/0x2a24
[   38.045893][ T4993]  handle_mm_fault+0x14f8/0x2514
[   38.045900][ T4993]  do_page_fault+0x4b0/0xb88
[   38.045908][ T4993]  do_translation_fault+0xc4/0x114
[   38.045928][ T4993]  do_mem_abort+0x70/0x194
[   38.045939][ T4993]  el1_abort+0x50/0x74
[   38.045950][ T4993]  el1h_64_sync_handler+0xdc/0x130
[   38.045959][ T4993]  el1h_64_sync+0x6c/0x70
[   38.045967][ T4993]  __arch_copy_to_user+0xe0/0x240 (P)
[   38.045975][ T4993]  seq_read_iter+0x280/0xbe8
[   38.045986][ T4993]  proc_reg_read_iter+0x1c4/0x224
[   38.045996][ T4993]  vfs_read+0x498/0x8c8
[   38.046003][ T4993]  ksys_pread64+0x118/0x1ac
[   38.046010][ T4993]  __arm64_sys_pread64+0xa8/0xc0
[   38.046017][ T4993]  invoke_syscall+0x98/0x244
[   38.046026][ T4993]  el0_svc_common+0xec/0x23c
[   38.046036][ T4993]  do_el0_svc+0x4c/0x5c
[   38.046045][ T4993]  el0_svc+0x64/0x260
[   38.046054][ T4993]  el0t_64_sync_handler+0x48/0x148
[   38.046064][ T4993]  el0t_64_sync+0x198/0x19c
[   38.096840][ T4991] loop4: detected capacity change from 0 to 8192
[   38.098613][ T4991] vfat: Unknown parameter '0x0000000000000000'
[   38.123533][ T4997] sock: sock_set_timeout: `syz.1.30' (pid 4997) tries to set negative timeout
[   38.194083][ T5000] loop3: detected capacity change from 0 to 512
[   38.202930][ T5000] EXT4-fs: Ignoring removed i_version option
[   38.204032][ T5000] EXT4-fs: Ignoring removed bh option
[   38.214048][ T5004] netlink: 76 bytes leftover after parsing attributes in process `syz.0.31'.
[   38.227645][ T5000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.276126][ T5000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.279422][ T5000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.473259][ T5016] siw: device registration error -23
[   38.793303][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.830902][ T5018] loop3: detected capacity change from 0 to 8192
[   38.831895][ T5018] vfat: Unknown parameter '0x0000000000000000'
[   38.991551][ T5021] loop2: detected capacity change from 0 to 256
[   38.992067][ T5021] vfat: Bad value for 'shortname'
[   39.078883][ T5029] Injecting memory failure for pfn 0x135727 at process virtual address 0x20000000
[   39.105701][ T5029] Memory failure: 0x135727: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.105790][ T5029] Memory failure: 0x135727: recovery action for dirty LRU page: Recovered
[   39.105803][ T5029] Injecting memory failure for pfn 0x122714 at process virtual address 0x20001000
[   39.105874][ T5029] Memory failure: 0x122714: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.105893][ T5029] Memory failure: 0x122714: recovery action for dirty LRU page: Recovered
[   39.105901][ T5029] Injecting memory failure for pfn 0x11f661 at process virtual address 0x20002000
[   39.105944][ T5029] Memory failure: 0x11f661: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.105962][ T5029] Memory failure: 0x11f661: recovery action for dirty LRU page: Recovered
[   39.105970][ T5029] Injecting memory failure for pfn 0x135728 at process virtual address 0x20003000
[   39.106050][ T5029] Memory failure: 0x135728: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.106067][ T5029] Memory failure: 0x135728: recovery action for dirty LRU page: Recovered
[   39.106142][ T5029] Injecting memory failure for pfn 0x135729 at process virtual address 0x20004000
[   39.106185][ T5029] Memory failure: 0x135729: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.106204][ T5029] Memory failure: 0x135729: recovery action for dirty LRU page: Recovered
[   39.106214][ T5029] Injecting memory failure for pfn 0x13572a at process virtual address 0x20005000
[   39.106242][ T5029] Memory failure: 0x13572a: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.106258][ T5029] Memory failure: 0x13572a: recovery action for dirty LRU page: Recovered
[   39.106266][ T5029] Injecting memory failure for pfn 0x13572b at process virtual address 0x20006000
[   39.106292][ T5029] Memory failure: 0x13572b: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.106308][ T5029] Memory failure: 0x13572b: recovery action for dirty LRU page: Recovered
[   39.106316][ T5029] Injecting memory failure for pfn 0x13572c at process virtual address 0x20007000
[   39.106342][ T5029] Memory failure: 0x13572c: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.106357][ T5029] Memory failure: 0x13572c: recovery action for dirty LRU page: Recovered
[   39.106365][ T5029] Injecting memory failure for pfn 0x13572d at process virtual address 0x20008000
[   39.106391][ T5029] Memory failure: 0x13572d: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.106406][ T5029] Memory failure: 0x13572d: recovery action for dirty LRU page: Recovered
[   39.106413][ T5029] Injecting memory failure for pfn 0x13572e at process virtual address 0x20009000
[   39.106715][ T5029] Memory failure: 0x13572e: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.106732][ T5029] Memory failure: 0x13572e: recovery action for dirty LRU page: Recovered
[   39.106740][ T5029] Injecting memory failure for pfn 0x13572f at process virtual address 0x2000a000
[   39.106768][ T5029] Memory failure: 0x13572f: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.106784][ T5029] Memory failure: 0x13572f: recovery action for dirty LRU page: Recovered
[   39.106792][ T5029] Injecting memory failure for pfn 0x135730 at process virtual address 0x2000b000
[   39.106818][ T5029] Memory failure: 0x135730: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.106833][ T5029] Memory failure: 0x135730: recovery action for dirty LRU page: Recovered
[   39.106840][ T5029] Injecting memory failure for pfn 0x135731 at process virtual address 0x2000c000
[   39.106866][ T5029] Memory failure: 0x135731: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.106881][ T5029] Memory failure: 0x135731: recovery action for dirty LRU page: Recovered
[   39.106889][ T5029] Injecting memory failure for pfn 0x135732 at process virtual address 0x2000d000
[   39.106927][ T5029] Memory failure: 0x135732: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.106944][ T5029] Memory failure: 0x135732: recovery action for dirty LRU page: Recovered
[   39.106953][ T5029] Injecting memory failure for pfn 0x135733 at process virtual address 0x2000e000
[   39.106978][ T5029] Memory failure: 0x135733: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.106993][ T5029] Memory failure: 0x135733: recovery action for dirty LRU page: Recovered
[   39.107001][ T5029] Injecting memory failure for pfn 0x135734 at process virtual address 0x2000f000
[   39.107027][ T5029] Memory failure: 0x135734: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107042][ T5029] Memory failure: 0x135734: recovery action for dirty LRU page: Recovered
[   39.107050][ T5029] Injecting memory failure for pfn 0x135735 at process virtual address 0x20010000
[   39.107076][ T5029] Memory failure: 0x135735: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107091][ T5029] Memory failure: 0x135735: recovery action for dirty LRU page: Recovered
[   39.107098][ T5029] Injecting memory failure for pfn 0x135736 at process virtual address 0x20011000
[   39.107191][ T5029] Memory failure: 0x135736: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107219][ T5029] Memory failure: 0x135736: recovery action for dirty LRU page: Recovered
[   39.107231][ T5029] Injecting memory failure for pfn 0x135737 at process virtual address 0x20012000
[   39.107258][ T5029] Memory failure: 0x135737: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107274][ T5029] Memory failure: 0x135737: recovery action for dirty LRU page: Recovered
[   39.107282][ T5029] Injecting memory failure for pfn 0x135738 at process virtual address 0x20013000
[   39.107308][ T5029] Memory failure: 0x135738: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107323][ T5029] Memory failure: 0x135738: recovery action for dirty LRU page: Recovered
[   39.107330][ T5029] Injecting memory failure for pfn 0x135739 at process virtual address 0x20014000
[   39.107356][ T5029] Memory failure: 0x135739: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107371][ T5029] Memory failure: 0x135739: recovery action for dirty LRU page: Recovered
[   39.107378][ T5029] Injecting memory failure for pfn 0x13573a at process virtual address 0x20015000
[   39.107404][ T5029] Memory failure: 0x13573a: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107419][ T5029] Memory failure: 0x13573a: recovery action for dirty LRU page: Recovered
[   39.107426][ T5029] Injecting memory failure for pfn 0x13573b at process virtual address 0x20016000
[   39.107451][ T5029] Memory failure: 0x13573b: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107467][ T5029] Memory failure: 0x13573b: recovery action for dirty LRU page: Recovered
[   39.107474][ T5029] Injecting memory failure for pfn 0x13573c at process virtual address 0x20017000
[   39.107499][ T5029] Memory failure: 0x13573c: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107514][ T5029] Memory failure: 0x13573c: recovery action for dirty LRU page: Recovered
[   39.107522][ T5029] Injecting memory failure for pfn 0x13573d at process virtual address 0x20018000
[   39.107547][ T5029] Memory failure: 0x13573d: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107562][ T5029] Memory failure: 0x13573d: recovery action for dirty LRU page: Recovered
[   39.107569][ T5029] Injecting memory failure for pfn 0x13573e at process virtual address 0x20019000
[   39.107591][ T5029] Memory failure: 0x13573e: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107606][ T5029] Memory failure: 0x13573e: recovery action for dirty LRU page: Recovered
[   39.107612][ T5029] Injecting memory failure for pfn 0x13573f at process virtual address 0x2001a000
[   39.107634][ T5029] Memory failure: 0x13573f: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107648][ T5029] Memory failure: 0x13573f: recovery action for dirty LRU page: Recovered
[   39.107655][ T5029] Injecting memory failure for pfn 0x135740 at process virtual address 0x2001b000
[   39.107676][ T5029] Memory failure: 0x135740: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107690][ T5029] Memory failure: 0x135740: recovery action for dirty LRU page: Recovered
[   39.107697][ T5029] Injecting memory failure for pfn 0x135741 at process virtual address 0x2001c000
[   39.107780][ T5029] Memory failure: 0x135741: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107797][ T5029] Memory failure: 0x135741: recovery action for dirty LRU page: Recovered
[   39.107804][ T5029] Injecting memory failure for pfn 0x135742 at process virtual address 0x2001d000
[   39.107826][ T5029] Memory failure: 0x135742: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107840][ T5029] Memory failure: 0x135742: recovery action for dirty LRU page: Recovered
[   39.107847][ T5029] Injecting memory failure for pfn 0x135743 at process virtual address 0x2001e000
[   39.107868][ T5029] Memory failure: 0x135743: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107882][ T5029] Memory failure: 0x135743: recovery action for dirty LRU page: Recovered
[   39.107889][ T5029] Injecting memory failure for pfn 0x135744 at process virtual address 0x2001f000
[   39.107910][ T5029] Memory failure: 0x135744: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107935][ T5029] Memory failure: 0x135744: recovery action for dirty LRU page: Recovered
[   39.107942][ T5029] Injecting memory failure for pfn 0x135745 at process virtual address 0x20020000
[   39.107963][ T5029] Memory failure: 0x135745: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.107977][ T5029] Memory failure: 0x135745: recovery action for dirty LRU page: Recovered
[   39.107984][ T5029] Injecting memory failure for pfn 0x135746 at process virtual address 0x20021000
[   39.108005][ T5029] Memory failure: 0x135746: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.108019][ T5029] Memory failure: 0x135746: recovery action for dirty LRU page: Recovered
[   39.108026][ T5029] Injecting memory failure for pfn 0x13574c at process virtual address 0x20022000
[   39.108047][ T5029] Memory failure: 0x13574c: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.108061][ T5029] Memory failure: 0x13574c: recovery action for dirty LRU page: Recovered
[   39.108068][ T5029] Injecting memory failure for pfn 0x135726 at process virtual address 0x20023000
[   39.108089][ T5029] Memory failure: 0x135726: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.108102][ T5029] Memory failure: 0x135726: recovery action for dirty LRU page: Recovered
[   39.108109][ T5029] Injecting memory failure for pfn 0x135725 at process virtual address 0x20024000
[   39.108130][ T5029] Memory failure: 0x135725: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.108143][ T5029] Memory failure: 0x135725: recovery action for dirty LRU page: Recovered
[   39.108150][ T5029] Injecting memory failure for pfn 0x135724 at process virtual address 0x20025000
[   39.108228][ T5029] Memory failure: 0x135724: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.108251][ T5029] Memory failure: 0x135724: recovery action for dirty LRU page: Recovered
[   39.108261][ T5029] Injecting memory failure for pfn 0x135723 at process virtual address 0x20026000
[   39.108288][ T5029] Memory failure: 0x135723: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.108302][ T5029] Memory failure: 0x135723: recovery action for dirty LRU page: Recovered
[   39.108309][ T5029] Injecting memory failure for pfn 0x135722 at process virtual address 0x20027000
[   39.108331][ T5029] Memory failure: 0x135722: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.108345][ T5029] Memory failure: 0x135722: recovery action for dirty LRU page: Recovered
[   39.108352][ T5029] Injecting memory failure for pfn 0x135721 at process virtual address 0x20028000
[   39.108373][ T5029] Memory failure: 0x135721: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.108387][ T5029] Memory failure: 0x135721: recovery action for dirty LRU page: Recovered
[   39.108394][ T5029] Injecting memory failure for pfn 0x135720 at process virtual address 0x20029000
[   39.108415][ T5029] Memory failure: 0x135720: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.108429][ T5029] Memory failure: 0x135720: recovery action for dirty LRU page: Recovered
[   39.108436][ T5029] Injecting memory failure for pfn 0x13571f at process virtual address 0x2002a000
[   39.108457][ T5029] Memory failure: 0x13571f: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.108471][ T5029] Memory failure: 0x13571f: recovery action for dirty LRU page: Recovered
[   39.108478][ T5029] Injecting memory failure for pfn 0x13571e at process virtual address 0x2002b000
[   39.108499][ T5029] Memory failure: 0x13571e: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.108513][ T5029] Memory failure: 0x13571e: recovery action for dirty LRU page: Recovered
[   39.108520][ T5029] Injecting memory failure for pfn 0x13571d at process virtual address 0x2002c000
[   39.108541][ T5029] Memory failure: 0x13571d: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.108554][ T5029] Memory failure: 0x13571d: recovery action for dirty LRU page: Recovered
[   39.108561][ T5029] Injecting memory failure for pfn 0x13571c at process virtual address 0x2002d000
[   39.108583][ T5029] Memory failure: 0x13571c: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.108597][ T5029] Memory failure: 0x13571c: recovery action for dirty LRU page: Recovered
[   39.108604][ T5029] Injecting memory failure for pfn 0x13571b at process virtual address 0x2002e000
[   39.108625][ T5029] Memory failure: 0x13571b: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.108639][ T5029] Memory failure: 0x13571b: recovery action for dirty LRU page: Recovered
[   39.108646][ T5029] Injecting memory failure for pfn 0x13571a at process virtual address 0x2002f000
[   39.108712][ T5029] Memory failure: 0x13571a: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.108727][ T5029] Memory failure: 0x13571a: recovery action for dirty LRU page: Recovered
[   39.108734][ T5029] Injecting memory failure for pfn 0x135719 at process virtual address 0x20030000
[   39.108755][ T5029] Memory failure: 0x135719: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.108769][ T5029] Memory failure: 0x135719: recovery action for dirty LRU page: Recovered
[   39.108776][ T5029] Injecting memory failure for pfn 0x135718 at process virtual address 0x20031000
[   39.108797][ T5029] Memory failure: 0x135718: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.108868][ T5029] Memory failure: 0x135718: recovery action for dirty LRU page: Recovered
[   39.108964][ T5029] Injecting memory failure for pfn 0x135717 at process virtual address 0x20032000
[   39.108994][ T5029] Memory failure: 0x135717: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109010][ T5029] Memory failure: 0x135717: recovery action for dirty LRU page: Recovered
[   39.109018][ T5029] Injecting memory failure for pfn 0x135716 at process virtual address 0x20033000
[   39.109045][ T5029] Memory failure: 0x135716: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109060][ T5029] Memory failure: 0x135716: recovery action for dirty LRU page: Recovered
[   39.109067][ T5029] Injecting memory failure for pfn 0x135715 at process virtual address 0x20034000
[   39.109090][ T5029] Memory failure: 0x135715: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109106][ T5029] Memory failure: 0x135715: recovery action for dirty LRU page: Recovered
[   39.109113][ T5029] Injecting memory failure for pfn 0x135714 at process virtual address 0x20035000
[   39.109135][ T5029] Memory failure: 0x135714: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109149][ T5029] Memory failure: 0x135714: recovery action for dirty LRU page: Recovered
[   39.109156][ T5029] Injecting memory failure for pfn 0x135713 at process virtual address 0x20036000
[   39.109186][ T5029] Memory failure: 0x135713: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109201][ T5029] Memory failure: 0x135713: recovery action for dirty LRU page: Recovered
[   39.109208][ T5029] Injecting memory failure for pfn 0x135712 at process virtual address 0x20037000
[   39.109291][ T5029] Memory failure: 0x135712: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109307][ T5029] Memory failure: 0x135712: recovery action for dirty LRU page: Recovered
[   39.109314][ T5029] Injecting memory failure for pfn 0x135711 at process virtual address 0x20038000
[   39.109337][ T5029] Memory failure: 0x135711: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109352][ T5029] Memory failure: 0x135711: recovery action for dirty LRU page: Recovered
[   39.109359][ T5029] Injecting memory failure for pfn 0x135710 at process virtual address 0x20039000
[   39.109381][ T5029] Memory failure: 0x135710: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109395][ T5029] Memory failure: 0x135710: recovery action for dirty LRU page: Recovered
[   39.109402][ T5029] Injecting memory failure for pfn 0x13570f at process virtual address 0x2003a000
[   39.109423][ T5029] Memory failure: 0x13570f: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109437][ T5029] Memory failure: 0x13570f: recovery action for dirty LRU page: Recovered
[   39.109444][ T5029] Injecting memory failure for pfn 0x13570e at process virtual address 0x2003b000
[   39.109466][ T5029] Memory failure: 0x13570e: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109480][ T5029] Memory failure: 0x13570e: recovery action for dirty LRU page: Recovered
[   39.109486][ T5029] Injecting memory failure for pfn 0x13570d at process virtual address 0x2003c000
[   39.109508][ T5029] Memory failure: 0x13570d: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109522][ T5029] Memory failure: 0x13570d: recovery action for dirty LRU page: Recovered
[   39.109529][ T5029] Injecting memory failure for pfn 0x13570c at process virtual address 0x2003d000
[   39.109551][ T5029] Memory failure: 0x13570c: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109565][ T5029] Memory failure: 0x13570c: recovery action for dirty LRU page: Recovered
[   39.109571][ T5029] Injecting memory failure for pfn 0x13570b at process virtual address 0x2003e000
[   39.109596][ T5029] Memory failure: 0x13570b: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109610][ T5029] Memory failure: 0x13570b: recovery action for dirty LRU page: Recovered
[   39.109616][ T5029] Injecting memory failure for pfn 0x13570a at process virtual address 0x2003f000
[   39.109646][ T5029] Memory failure: 0x13570a: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109660][ T5029] Memory failure: 0x13570a: recovery action for dirty LRU page: Recovered
[   39.109667][ T5029] Injecting memory failure for pfn 0x135709 at process virtual address 0x20040000
[   39.109688][ T5029] Memory failure: 0x135709: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109702][ T5029] Memory failure: 0x135709: recovery action for dirty LRU page: Recovered
[   39.109709][ T5029] Injecting memory failure for pfn 0x135708 at process virtual address 0x20041000
[   39.109730][ T5029] Memory failure: 0x135708: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109743][ T5029] Memory failure: 0x135708: recovery action for dirty LRU page: Recovered
[   39.109750][ T5029] Injecting memory failure for pfn 0x135707 at process virtual address 0x20042000
[   39.109773][ T5029] Memory failure: 0x135707: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109786][ T5029] Memory failure: 0x135707: recovery action for dirty LRU page: Recovered
[   39.109793][ T5029] Injecting memory failure for pfn 0x135706 at process virtual address 0x20043000
[   39.109814][ T5029] Memory failure: 0x135706: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109829][ T5029] Memory failure: 0x135706: recovery action for dirty LRU page: Recovered
[   39.109836][ T5029] Injecting memory failure for pfn 0x135705 at process virtual address 0x20044000
[   39.109857][ T5029] Memory failure: 0x135705: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.109871][ T5029] Memory failure: 0x135705: recovery action for dirty LRU page: Recovered
[   39.109877][ T5029] Injecting memory failure for pfn 0x135704 at process virtual address 0x20045000
[   39.110024][ T5029] Memory failure: 0x135704: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110051][ T5029] Memory failure: 0x135704: recovery action for dirty LRU page: Recovered
[   39.110060][ T5029] Injecting memory failure for pfn 0x135703 at process virtual address 0x20046000
[   39.110092][ T5029] Memory failure: 0x135703: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110107][ T5029] Memory failure: 0x135703: recovery action for dirty LRU page: Recovered
[   39.110113][ T5029] Injecting memory failure for pfn 0x135702 at process virtual address 0x20047000
[   39.110135][ T5029] Memory failure: 0x135702: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110150][ T5029] Memory failure: 0x135702: recovery action for dirty LRU page: Recovered
[   39.110157][ T5029] Injecting memory failure for pfn 0x135701 at process virtual address 0x20048000
[   39.110186][ T5029] Memory failure: 0x135701: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110202][ T5029] Memory failure: 0x135701: recovery action for dirty LRU page: Recovered
[   39.110209][ T5029] Injecting memory failure for pfn 0x135700 at process virtual address 0x20049000
[   39.110231][ T5029] Memory failure: 0x135700: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110245][ T5029] Memory failure: 0x135700: recovery action for dirty LRU page: Recovered
[   39.110300][ T5029] Injecting memory failure for pfn 0x1224ff at process virtual address 0x2004a000
[   39.110339][ T5029] Memory failure: 0x1224ff: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110354][ T5029] Memory failure: 0x1224ff: recovery action for dirty LRU page: Recovered
[   39.110361][ T5029] Injecting memory failure for pfn 0x1224fe at process virtual address 0x2004b000
[   39.110383][ T5029] Memory failure: 0x1224fe: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110397][ T5029] Memory failure: 0x1224fe: recovery action for dirty LRU page: Recovered
[   39.110404][ T5029] Injecting memory failure for pfn 0x1224fd at process virtual address 0x2004c000
[   39.110426][ T5029] Memory failure: 0x1224fd: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110440][ T5029] Memory failure: 0x1224fd: recovery action for dirty LRU page: Recovered
[   39.110447][ T5029] Injecting memory failure for pfn 0x1224fc at process virtual address 0x2004d000
[   39.110469][ T5029] Memory failure: 0x1224fc: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110483][ T5029] Memory failure: 0x1224fc: recovery action for dirty LRU page: Recovered
[   39.110489][ T5029] Injecting memory failure for pfn 0x1224fb at process virtual address 0x2004e000
[   39.110510][ T5029] Memory failure: 0x1224fb: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110524][ T5029] Memory failure: 0x1224fb: recovery action for dirty LRU page: Recovered
[   39.110531][ T5029] Injecting memory failure for pfn 0x1224fa at process virtual address 0x2004f000
[   39.110553][ T5029] Memory failure: 0x1224fa: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110567][ T5029] Memory failure: 0x1224fa: recovery action for dirty LRU page: Recovered
[   39.110574][ T5029] Injecting memory failure for pfn 0x1224f9 at process virtual address 0x20050000
[   39.110596][ T5029] Memory failure: 0x1224f9: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110610][ T5029] Memory failure: 0x1224f9: recovery action for dirty LRU page: Recovered
[   39.110617][ T5029] Injecting memory failure for pfn 0x1224f8 at process virtual address 0x20051000
[   39.110638][ T5029] Memory failure: 0x1224f8: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110652][ T5029] Memory failure: 0x1224f8: recovery action for dirty LRU page: Recovered
[   39.110659][ T5029] Injecting memory failure for pfn 0x1224f7 at process virtual address 0x20052000
[   39.110680][ T5029] Memory failure: 0x1224f7: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110693][ T5029] Memory failure: 0x1224f7: recovery action for dirty LRU page: Recovered
[   39.110700][ T5029] Injecting memory failure for pfn 0x1224f6 at process virtual address 0x20053000
[   39.110721][ T5029] Memory failure: 0x1224f6: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110735][ T5029] Memory failure: 0x1224f6: recovery action for dirty LRU page: Recovered
[   39.110742][ T5029] Injecting memory failure for pfn 0x1224f5 at process virtual address 0x20054000
[   39.110763][ T5029] Memory failure: 0x1224f5: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110776][ T5029] Memory failure: 0x1224f5: recovery action for dirty LRU page: Recovered
[   39.110783][ T5029] Injecting memory failure for pfn 0x1224f4 at process virtual address 0x20055000
[   39.110803][ T5029] Memory failure: 0x1224f4: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110817][ T5029] Memory failure: 0x1224f4: recovery action for dirty LRU page: Recovered
[   39.110824][ T5029] Injecting memory failure for pfn 0x1224f3 at process virtual address 0x20056000
[   39.110844][ T5029] Memory failure: 0x1224f3: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110858][ T5029] Memory failure: 0x1224f3: recovery action for dirty LRU page: Recovered
[   39.110865][ T5029] Injecting memory failure for pfn 0x1224f2 at process virtual address 0x20057000
[   39.110885][ T5029] Memory failure: 0x1224f2: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110899][ T5029] Memory failure: 0x1224f2: recovery action for dirty LRU page: Recovered
[   39.110906][ T5029] Injecting memory failure for pfn 0x1224f1 at process virtual address 0x20058000
[   39.110938][ T5029] Memory failure: 0x1224f1: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.110952][ T5029] Memory failure: 0x1224f1: recovery action for dirty LRU page: Recovered
[   39.110958][ T5029] Injecting memory failure for pfn 0x1224f0 at process virtual address 0x20059000
[   39.110979][ T5029] Memory failure: 0x1224f0: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111049][ T5029] Memory failure: 0x1224f0: recovery action for dirty LRU page: Recovered
[   39.111062][ T5029] Injecting memory failure for pfn 0x1224ef at process virtual address 0x2005a000
[   39.111084][ T5029] Memory failure: 0x1224ef: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111098][ T5029] Memory failure: 0x1224ef: recovery action for dirty LRU page: Recovered
[   39.111104][ T5029] Injecting memory failure for pfn 0x1224ee at process virtual address 0x2005b000
[   39.111126][ T5029] Memory failure: 0x1224ee: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111140][ T5029] Memory failure: 0x1224ee: recovery action for dirty LRU page: Recovered
[   39.111147][ T5029] Injecting memory failure for pfn 0x1224ed at process virtual address 0x2005c000
[   39.111172][ T5029] Memory failure: 0x1224ed: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111189][ T5029] Memory failure: 0x1224ed: recovery action for dirty LRU page: Recovered
[   39.111198][ T5029] Injecting memory failure for pfn 0x1224ec at process virtual address 0x2005d000
[   39.111220][ T5029] Memory failure: 0x1224ec: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111234][ T5029] Memory failure: 0x1224ec: recovery action for dirty LRU page: Recovered
[   39.111241][ T5029] Injecting memory failure for pfn 0x1224eb at process virtual address 0x2005e000
[   39.111261][ T5029] Memory failure: 0x1224eb: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111275][ T5029] Memory failure: 0x1224eb: recovery action for dirty LRU page: Recovered
[   39.111282][ T5029] Injecting memory failure for pfn 0x1224ea at process virtual address 0x2005f000
[   39.111365][ T5029] Memory failure: 0x1224ea: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111379][ T5029] Memory failure: 0x1224ea: recovery action for dirty LRU page: Recovered
[   39.111386][ T5029] Injecting memory failure for pfn 0x1224e9 at process virtual address 0x20060000
[   39.111408][ T5029] Memory failure: 0x1224e9: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111423][ T5029] Memory failure: 0x1224e9: recovery action for dirty LRU page: Recovered
[   39.111429][ T5029] Injecting memory failure for pfn 0x1224e8 at process virtual address 0x20061000
[   39.111451][ T5029] Memory failure: 0x1224e8: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111465][ T5029] Memory failure: 0x1224e8: recovery action for dirty LRU page: Recovered
[   39.111472][ T5029] Injecting memory failure for pfn 0x1224e7 at process virtual address 0x20062000
[   39.111493][ T5029] Memory failure: 0x1224e7: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111507][ T5029] Memory failure: 0x1224e7: recovery action for dirty LRU page: Recovered
[   39.111514][ T5029] Injecting memory failure for pfn 0x1224e6 at process virtual address 0x20063000
[   39.111535][ T5029] Memory failure: 0x1224e6: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111549][ T5029] Memory failure: 0x1224e6: recovery action for dirty LRU page: Recovered
[   39.111556][ T5029] Injecting memory failure for pfn 0x1224e5 at process virtual address 0x20064000
[   39.111577][ T5029] Memory failure: 0x1224e5: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111591][ T5029] Memory failure: 0x1224e5: recovery action for dirty LRU page: Recovered
[   39.111597][ T5029] Injecting memory failure for pfn 0x1224e4 at process virtual address 0x20065000
[   39.111619][ T5029] Memory failure: 0x1224e4: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111633][ T5029] Memory failure: 0x1224e4: recovery action for dirty LRU page: Recovered
[   39.111639][ T5029] Injecting memory failure for pfn 0x1224e3 at process virtual address 0x20066000
[   39.111660][ T5029] Memory failure: 0x1224e3: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111674][ T5029] Memory failure: 0x1224e3: recovery action for dirty LRU page: Recovered
[   39.111680][ T5029] Injecting memory failure for pfn 0x1224e2 at process virtual address 0x20067000
[   39.111702][ T5029] Memory failure: 0x1224e2: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111715][ T5029] Memory failure: 0x1224e2: recovery action for dirty LRU page: Recovered
[   39.111722][ T5029] Injecting memory failure for pfn 0x1224e1 at process virtual address 0x20068000
[   39.111744][ T5029] Memory failure: 0x1224e1: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111757][ T5029] Memory failure: 0x1224e1: recovery action for dirty LRU page: Recovered
[   39.111764][ T5029] Injecting memory failure for pfn 0x1224e0 at process virtual address 0x20069000
[   39.111786][ T5029] Memory failure: 0x1224e0: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111800][ T5029] Memory failure: 0x1224e0: recovery action for dirty LRU page: Recovered
[   39.111807][ T5029] Injecting memory failure for pfn 0x1224df at process virtual address 0x2006a000
[   39.111828][ T5029] Memory failure: 0x1224df: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111842][ T5029] Memory failure: 0x1224df: recovery action for dirty LRU page: Recovered
[   39.111848][ T5029] Injecting memory failure for pfn 0x1224de at process virtual address 0x2006b000
[   39.111869][ T5029] Memory failure: 0x1224de: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111883][ T5029] Memory failure: 0x1224de: recovery action for dirty LRU page: Recovered
[   39.111890][ T5029] Injecting memory failure for pfn 0x1224dd at process virtual address 0x2006c000
[   39.111911][ T5029] Memory failure: 0x1224dd: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111934][ T5029] Memory failure: 0x1224dd: recovery action for dirty LRU page: Recovered
[   39.111942][ T5029] Injecting memory failure for pfn 0x1224dc at process virtual address 0x2006d000
[   39.111962][ T5029] Memory failure: 0x1224dc: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.111976][ T5029] Memory failure: 0x1224dc: recovery action for dirty LRU page: Recovered
[   39.111983][ T5029] Injecting memory failure for pfn 0x1224db at process virtual address 0x2006e000
[   39.112004][ T5029] Memory failure: 0x1224db: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.112017][ T5029] Memory failure: 0x1224db: recovery action for dirty LRU page: Recovered
[   39.112024][ T5029] Injecting memory failure for pfn 0x1224da at process virtual address 0x2006f000
[   39.112046][ T5029] Memory failure: 0x1224da: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.112062][ T5029] Memory failure: 0x1224da: recovery action for dirty LRU page: Recovered
[   39.112069][ T5029] Injecting memory failure for pfn 0x1224d9 at process virtual address 0x20070000
[   39.112153][ T5029] Memory failure: 0x1224d9: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.112172][ T5029] Memory failure: 0x1224d9: recovery action for dirty LRU page: Recovered
[   39.112180][ T5029] Injecting memory failure for pfn 0x1224d8 at process virtual address 0x20071000
[   39.112211][ T5029] Memory failure: 0x1224d8: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.112226][ T5029] Memory failure: 0x1224d8: recovery action for dirty LRU page: Recovered
[   39.112233][ T5029] Injecting memory failure for pfn 0x1224d7 at process virtual address 0x20072000
[   39.112255][ T5029] Memory failure: 0x1224d7: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.112270][ T5029] Memory failure: 0x1224d7: recovery action for dirty LRU page: Recovered
[   39.112276][ T5029] Injecting memory failure for pfn 0x1224d6 at process virtual address 0x20073000
[   39.112298][ T5029] Memory failure: 0x1224d6: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.112312][ T5029] Memory failure: 0x1224d6: recovery action for dirty LRU page: Recovered
[   39.112319][ T5029] Injecting memory failure for pfn 0x1224d5 at process virtual address 0x20074000
[   39.121082][ T5029] Memory failure: 0x1224d5: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.121121][ T5029] Memory failure: 0x1224d5: recovery action for dirty LRU page: Recovered
[   39.121133][ T5029] Injecting memory failure for pfn 0x1224d4 at process virtual address 0x20075000
[   39.121171][ T5029] Memory failure: 0x1224d4: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.121190][ T5029] Memory failure: 0x1224d4: recovery action for dirty LRU page: Recovered
[   39.121199][ T5029] Injecting memory failure for pfn 0x1224d3 at process virtual address 0x20076000
[   39.121228][ T5029] Memory failure: 0x1224d3: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.121245][ T5029] Memory failure: 0x1224d3: recovery action for dirty LRU page: Recovered
[   39.121252][ T5029] Injecting memory failure for pfn 0x1224d2 at process virtual address 0x20077000
[   39.121276][ T5029] Memory failure: 0x1224d2: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.123285][ T5029] Memory failure: 0x1224d2: recovery action for dirty LRU page: Recovered
[   39.123303][ T5029] Injecting memory failure for pfn 0x1224d1 at process virtual address 0x20078000
[   39.123362][ T5029] Memory failure: 0x1224d1: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.123380][ T5029] Memory failure: 0x1224d1: recovery action for dirty LRU page: Recovered
[   39.123388][ T5029] Injecting memory failure for pfn 0x1224d0 at process virtual address 0x20079000
[   39.123418][ T5029] Memory failure: 0x1224d0: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.123434][ T5029] Memory failure: 0x1224d0: recovery action for dirty LRU page: Recovered
[   39.123441][ T5029] Injecting memory failure for pfn 0x1224cf at process virtual address 0x2007a000
[   39.123466][ T5029] Memory failure: 0x1224cf: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.123481][ T5029] Memory failure: 0x1224cf: recovery action for dirty LRU page: Recovered
[   39.123489][ T5029] Injecting memory failure for pfn 0x1224ce at process virtual address 0x2007b000
[   39.123512][ T5029] Memory failure: 0x1224ce: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.123526][ T5029] Memory failure: 0x1224ce: recovery action for dirty LRU page: Recovered
[   39.123533][ T5029] Injecting memory failure for pfn 0x1224cd at process virtual address 0x2007c000
[   39.123555][ T5029] Memory failure: 0x1224cd: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.123570][ T5029] Memory failure: 0x1224cd: recovery action for dirty LRU page: Recovered
[   39.123577][ T5029] Injecting memory failure for pfn 0x1224cc at process virtual address 0x2007d000
[   39.123598][ T5029] Memory failure: 0x1224cc: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.123613][ T5029] Memory failure: 0x1224cc: recovery action for dirty LRU page: Recovered
[   39.123620][ T5029] Injecting memory failure for pfn 0x1224cb at process virtual address 0x2007e000
[   39.123641][ T5029] Memory failure: 0x1224cb: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.123655][ T5029] Memory failure: 0x1224cb: recovery action for dirty LRU page: Recovered
[   39.123662][ T5029] Injecting memory failure for pfn 0x1224ca at process virtual address 0x2007f000
[   39.123683][ T5029] Memory failure: 0x1224ca: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.123697][ T5029] Memory failure: 0x1224ca: recovery action for dirty LRU page: Recovered
[   39.123704][ T5029] Injecting memory failure for pfn 0x1224c9 at process virtual address 0x20080000
[   39.123727][ T5029] Memory failure: 0x1224c9: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.123741][ T5029] Memory failure: 0x1224c9: recovery action for dirty LRU page: Recovered
[   39.123747][ T5029] Injecting memory failure for pfn 0x1224c8 at process virtual address 0x20081000
[   39.123771][ T5029] Memory failure: 0x1224c8: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.123785][ T5029] Memory failure: 0x1224c8: recovery action for dirty LRU page: Recovered
[   39.123792][ T5029] Injecting memory failure for pfn 0x1224c7 at process virtual address 0x20082000
[   39.123813][ T5029] Memory failure: 0x1224c7: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.123827][ T5029] Memory failure: 0x1224c7: recovery action for dirty LRU page: Recovered
[   39.123834][ T5029] Injecting memory failure for pfn 0x1224c6 at process virtual address 0x20083000
[   39.123855][ T5029] Memory failure: 0x1224c6: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.123869][ T5029] Memory failure: 0x1224c6: recovery action for dirty LRU page: Recovered
[   39.123876][ T5029] Injecting memory failure for pfn 0x1224c5 at process virtual address 0x20084000
[   39.123897][ T5029] Memory failure: 0x1224c5: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.128434][ T5029] Memory failure: 0x1224c5: recovery action for dirty LRU page: Recovered
[   39.128452][ T5029] Injecting memory failure for pfn 0x1224c4 at process virtual address 0x20085000
[   39.128554][ T5029] Memory failure: 0x1224c4: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.128575][ T5029] Memory failure: 0x1224c4: recovery action for dirty LRU page: Recovered
[   39.128584][ T5029] Injecting memory failure for pfn 0x1224c3 at process virtual address 0x20086000
[   39.130548][ T5029] Memory failure: 0x1224c3: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.130576][ T5029] Memory failure: 0x1224c3: recovery action for dirty LRU page: Recovered
[   39.130586][ T5029] Injecting memory failure for pfn 0x1224c2 at process virtual address 0x20087000
[   39.130621][ T5029] Memory failure: 0x1224c2: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.130637][ T5029] Memory failure: 0x1224c2: recovery action for dirty LRU page: Recovered
[   39.130646][ T5029] Injecting memory failure for pfn 0x1224c1 at process virtual address 0x20088000
[   39.130670][ T5029] Memory failure: 0x1224c1: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.130685][ T5029] Memory failure: 0x1224c1: recovery action for dirty LRU page: Recovered
[   39.130693][ T5029] Injecting memory failure for pfn 0x1224c0 at process virtual address 0x20089000
[   39.130716][ T5029] Memory failure: 0x1224c0: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.130730][ T5029] Memory failure: 0x1224c0: recovery action for dirty LRU page: Recovered
[   39.130737][ T5029] Injecting memory failure for pfn 0x1224bf at process virtual address 0x2008a000
[   39.130760][ T5029] Memory failure: 0x1224bf: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.130774][ T5029] Memory failure: 0x1224bf: recovery action for dirty LRU page: Recovered
[   39.130781][ T5029] Injecting memory failure for pfn 0x1224be at process virtual address 0x2008b000
[   39.130803][ T5029] Memory failure: 0x1224be: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.130817][ T5029] Memory failure: 0x1224be: recovery action for dirty LRU page: Recovered
[   39.130824][ T5029] Injecting memory failure for pfn 0x1224bd at process virtual address 0x2008c000
[   39.130845][ T5029] Memory failure: 0x1224bd: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.130859][ T5029] Memory failure: 0x1224bd: recovery action for dirty LRU page: Recovered
[   39.130866][ T5029] Injecting memory failure for pfn 0x1224bc at process virtual address 0x2008d000
[   39.130887][ T5029] Memory failure: 0x1224bc: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.130901][ T5029] Memory failure: 0x1224bc: recovery action for dirty LRU page: Recovered
[   39.130908][ T5029] Injecting memory failure for pfn 0x1224bb at process virtual address 0x2008e000
[   39.130945][ T5029] Memory failure: 0x1224bb: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.130960][ T5029] Memory failure: 0x1224bb: recovery action for dirty LRU page: Recovered
[   39.130967][ T5029] Injecting memory failure for pfn 0x1224ba at process virtual address 0x2008f000
[   39.130989][ T5029] Memory failure: 0x1224ba: Sending SIGBUS to syz.2.37:5029 due to hardware memory corruption
[   39.131003][ T5029] Memory failure: 0x1224ba: recovery action for dirty LRU page: Recovered
[   39.186116][ T5039] virt_wifi0 speed is unknown, defaulting to 1000
[   39.186146][ T5039] virt_wifi0 speed is unknown, defaulting to 1000
[   39.186992][ T5039] virt_wifi0 speed is unknown, defaulting to 1000
[   39.197979][ T5039] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   39.218540][ T5041] FAULT_INJECTION: forcing a failure.
[   39.218540][ T5041] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   39.218558][ T5041] CPU: 1 UID: 0 PID: 5041 Comm: syz.1.41 Not tainted syzkaller #0 PREEMPT 
[   39.218567][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   39.218572][ T5041] Call trace:
[   39.218575][ T5041]  show_stack+0x2c/0x3c (C)
[   39.218594][ T5041]  __dump_stack+0x30/0x40
[   39.218604][ T5041]  dump_stack_lvl+0xd8/0x12c
[   39.218613][ T5041]  dump_stack+0x1c/0x28
[   39.218623][ T5041]  should_fail_ex+0x41c/0x590
[   39.218634][ T5041]  should_fail+0x14/0x24
[   39.218643][ T5041]  should_fail_usercopy+0x20/0x30
[   39.218649][ T5041]  _copy_to_iter+0x18c/0x10f8
[   39.218658][ T5041]  seq_read_iter+0x9f0/0xbe8
[   39.218669][ T5041]  proc_reg_read_iter+0x1c4/0x224
[   39.218679][ T5041]  vfs_read+0x498/0x8c8
[   39.218686][ T5041]  ksys_pread64+0x118/0x1ac
[   39.218692][ T5041]  __arm64_sys_pread64+0xa8/0xc0
[   39.218699][ T5041]  invoke_syscall+0x98/0x244
[   39.218709][ T5041]  el0_svc_common+0xec/0x23c
[   39.218718][ T5041]  do_el0_svc+0x4c/0x5c
[   39.218727][ T5041]  el0_svc+0x64/0x260
[   39.218738][ T5041]  el0t_64_sync_handler+0x48/0x148
[   39.218748][ T5041]  el0t_64_sync+0x198/0x19c
[   39.230092][ T5039] virt_wifi0 speed is unknown, defaulting to 1000
[   39.230508][ T5039] virt_wifi0 speed is unknown, defaulting to 1000
[   39.239594][ T5039] virt_wifi0 speed is unknown, defaulting to 1000
[   39.240015][ T5039] virt_wifi0 speed is unknown, defaulting to 1000
[   39.248925][ T5039] virt_wifi0 speed is unknown, defaulting to 1000
[   39.315220][ T5046] netlink: 'syz.0.42': attribute type 10 has an invalid length.
[   39.348011][ T5046] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.350463][ T5046] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   39.443613][ T4723] Bluetooth: hci4: command tx timeout
[   39.443636][ T4723] Bluetooth: hci3: command tx timeout
[   39.443652][ T4723] Bluetooth: hci2: command tx timeout
[   39.443665][ T4723] Bluetooth: hci1: command tx timeout
[   39.443678][ T4723] Bluetooth: hci0: command tx timeout
[   39.447895][ T5056] syz.4.45 uses obsolete (PF_INET,SOCK_PACKET)
[   39.456440][ T5054] loop2: detected capacity change from 0 to 512
[   39.456796][ T5054] EXT4-fs: Ignoring removed i_version option
[   39.456812][ T5054] EXT4-fs: Ignoring removed bh option
[   39.507682][ T5054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.570366][ T5054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.570532][ T5054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.676302][ T5068] loop4: detected capacity change from 0 to 256
[   39.680690][ T5068] vfat: Bad value for 'shortname'
[   39.704794][ T5065] loop1: detected capacity change from 0 to 8192
[   39.705118][ T5065] vfat: Unknown parameter '0x0000000000000000'
[   39.718284][ T5070] netlink: 72 bytes leftover after parsing attributes in process `syz.3.49'.
[   39.729582][ T5068] loop4: detected capacity change from 0 to 512
[   39.742167][ T5068] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   39.742182][ T5068] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   39.763170][ T5068] EXT4-fs (loop4): 1 truncate cleaned up
[   39.763641][ T5068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.828839][ T5068] EXT4-fs (loop4): shut down requested (2)
[   39.835627][ T5070] loop3: detected capacity change from 0 to 4096
[   39.843547][ T5068] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[   39.850510][ T5070] ext4: Unknown parameter 'rootcontext'
[   39.912060][ T5070] overlayfs: workdir and upperdir must be separate subtrees
[   39.914111][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.961341][ T5075] vhci_hcd vhci_hcd.2: invalid port number 96
[   39.961378][ T5075] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7
[   40.038035][ T5080] lo speed is unknown, defaulting to 1000
[   40.039953][ T5080] virt_wifi0 speed is unknown, defaulting to 1000
[   40.056032][ T5083] FAULT_INJECTION: forcing a failure.
[   40.056032][ T5083] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   40.056073][ T5083] CPU: 1 UID: 0 PID: 5083 Comm: syz.3.54 Not tainted syzkaller #0 PREEMPT 
[   40.056085][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   40.056091][ T5083] Call trace:
[   40.056095][ T5083]  show_stack+0x2c/0x3c (C)
[   40.056115][ T5083]  __dump_stack+0x30/0x40
[   40.056127][ T5083]  dump_stack_lvl+0xd8/0x12c
[   40.056137][ T5083]  dump_stack+0x1c/0x28
[   40.056146][ T5083]  should_fail_ex+0x41c/0x590
[   40.056157][ T5083]  should_fail+0x14/0x24
[   40.056170][ T5083]  should_fail_usercopy+0x20/0x30
[   40.056177][ T5083]  simple_read_from_buffer+0xc4/0x238
[   40.056188][ T5083]  proc_fail_nth_read+0x1a8/0x248
[   40.056196][ T5083]  vfs_read+0x230/0x8c8
[   40.056203][ T5083]  ksys_read+0x12c/0x228
[   40.056209][ T5083]  __arm64_sys_read+0x84/0x98
[   40.056216][ T5083]  invoke_syscall+0x98/0x244
[   40.056226][ T5083]  el0_svc_common+0xec/0x23c
[   40.056235][ T5083]  do_el0_svc+0x4c/0x5c
[   40.056244][ T5083]  el0_svc+0x64/0x260
[   40.056255][ T5083]  el0t_64_sync_handler+0x48/0x148
[   40.056265][ T5083]  el0t_64_sync+0x198/0x19c
[   40.157671][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.164560][ T5088] tipc: Started in network mode
[   40.164604][ T5088] tipc: Node identity aaaaaaaaaa34, cluster identity 4711
[   40.164779][ T5088] tipc: Enabled bearer <eth:macvlan0>, priority 2
[   40.205842][ T5095] vfat: Unknown parameter '0x0000000000000000'
[   40.319949][ T5108] vfat: Bad value for 'shortname'
[   40.521728][ T5119] netlink: 112 bytes leftover after parsing attributes in process `syz.2.66'.
[   40.610552][ T5131] netlink: 'syz.2.70': attribute type 2 has an invalid length.
[   40.636395][ T5129] syzkaller0: entered promiscuous mode
[   40.636425][ T5129] syzkaller0: entered allmulticast mode
[   40.981798][ T5141] Injecting memory failure for pfn 0x13aa01 at process virtual address 0x20001000
[   41.700764][ T5150] capability: warning: `syz.3.77' uses 32-bit capabilities (legacy support in use)
[   41.705506][ T5149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   41.718885][ T5148] netlink: 'syz.4.78': attribute type 1 has an invalid length.
[   41.718923][ T5148] netlink: 'syz.4.78': attribute type 2 has an invalid length.
[   41.727837][ T5141] Memory failure: 0x13aa01: recovery action for dirty LRU page: Recovered
[   41.728281][ T4812] tipc: Node number set to 10398378
[   41.762930][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   41.788198][ T5156] set_capacity_and_notify: 4 callbacks suppressed
[   41.802303][ T5156] loop2: detected capacity change from 0 to 2048
[   41.827424][ T5140] loop0: detected capacity change from 0 to 256
[   41.829120][ T5140] vfat: Bad value for 'shortname'
[   41.926697][ T5156] loop2: detected capacity change from 0 to 8192
[   41.927051][ T5156] vfat: Unknown parameter '0x0000000000000000'
[   42.009127][ T5177] loop4: detected capacity change from 0 to 8192
[   42.011395][ T5177] vfat: Unknown parameter '0x0000000000000000'
[   42.688388][ T5206] loop1: detected capacity change from 0 to 256
[   42.691425][ T5206] vfat: Bad value for 'shortname'
[   42.806148][ T5200] Injecting memory failure for pfn 0x13ae01 at process virtual address 0x20001000
[   43.686006][ T5200] Memory failure: 0x13ae01: recovery action for dirty LRU page: Recovered
[   43.778851][ T5223] loop2: detected capacity change from 0 to 128
[   43.871851][ T5229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'.
[   43.930734][ T1462] bond0: (slave bond_slave_0): interface is now down
[   43.933130][ T1462] bond0: (slave bond_slave_1): interface is now down
[   43.952467][ T4921] bond0: (slave bond_slave_0): interface is now down
[   43.952498][ T4921] bond0: (slave bond_slave_1): interface is now down
[   43.956614][ T4921] bond0: now running without any active interface!
[   43.967567][ T5237] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received
[   44.022842][ T5233] loop3: detected capacity change from 0 to 8192
[   44.023240][ T5233] vfat: Unknown parameter '0x0000000000000000'
[   44.398283][ T5266] capability: warning: `syz.0.112' uses deprecated v2 capabilities in a way that may be insecure
[   44.686116][ T5280] Injecting memory failure for pfn 0x11f001 at process virtual address 0x20001000
[   44.716973][ T5280] Memory failure: 0x11f001: recovery action for dirty LRU page: Recovered
[   45.310158][ T5279] loop4: detected capacity change from 0 to 2048
[   45.382218][ T5286] netlink: 312 bytes leftover after parsing attributes in process `syz.2.117'.
[   45.384203][ T5286] netlink: 'syz.2.117': attribute type 1 has an invalid length.
[   45.466184][ T5279]  loop4: p1 p3
[   45.466184][ T5279]  p1: <netbsd:bad subpartition - ignored
[   45.466184][ T5279]  >
[   45.466327][ T5279] loop4: p1 size 16779263 extends beyond EOD, truncated
[   45.489271][ T5279] loop4: p3 start 3036741376 is beyond EOD, truncated
[   45.559191][ T5279] lo speed is unknown, defaulting to 1000
[   45.562966][ T5279] virt_wifi0 speed is unknown, defaulting to 1000
[   45.607986][ T5298] netlink: 15 bytes leftover after parsing attributes in process `syz.1.119'.
[   45.636749][ T5296] loop2: detected capacity change from 0 to 8192
[   45.637093][ T5296] vfat: Unknown parameter '0x0000000000000000'
[   45.709924][ T5302] loop3: detected capacity change from 0 to 2048
[   45.729438][ T5172] udevd[5172]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   45.756964][ T5311] FAULT_INJECTION: forcing a failure.
[   45.756964][ T5311] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   45.757002][ T5311] CPU: 0 UID: 0 PID: 5311 Comm: syz.2.120 Not tainted syzkaller #0 PREEMPT 
[   45.757016][ T5311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   45.757023][ T5311] Call trace:
[   45.757026][ T5311]  show_stack+0x2c/0x3c (C)
[   45.757044][ T5311]  __dump_stack+0x30/0x40
[   45.757056][ T5311]  dump_stack_lvl+0xd8/0x12c
[   45.757066][ T5311]  dump_stack+0x1c/0x28
[   45.757075][ T5311]  should_fail_ex+0x41c/0x590
[   45.757086][ T5311]  should_fail+0x14/0x24
[   45.757095][ T5311]  should_fail_usercopy+0x20/0x30
[   45.757102][ T5311]  vcs_read+0x72c/0xa40
[   45.757112][ T5311]  do_loop_readv_writev+0x24c/0x3dc
[   45.757121][ T5311]  vfs_readv+0x258/0x520
[   45.757128][ T5311]  do_readv+0x134/0x2a8
[   45.757135][ T5311]  __arm64_sys_readv+0x88/0x9c
[   45.757142][ T5311]  invoke_syscall+0x98/0x244
[   45.757156][ T5311]  el0_svc_common+0xec/0x23c
[   45.757166][ T5311]  do_el0_svc+0x4c/0x5c
[   45.757175][ T5311]  el0_svc+0x64/0x260
[   45.757186][ T5311]  el0t_64_sync_handler+0x48/0x148
[   45.757196][ T5311]  el0t_64_sync+0x198/0x19c
[   45.757624][ T5302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.769500][ T5302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.907022][ T5325] bond1: entered promiscuous mode
[   45.908536][ T5325] 8021q: adding VLAN 0 to HW filter on device bond1
[   45.988549][ T5335] vfat: Unknown parameter '��������00000000000000000000000����'
[   46.057830][ T5335] fuse: Unknown parameter '�����00000000000000000000'
[   46.375346][ T5342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'.
[   46.375856][ T5342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'.
[   46.376017][ T5342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'.
[   46.376245][ T5342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'.
[   46.384365][ T5342] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   46.406329][ T5342] EXT4-fs error (device loop4): __ext4_iget:5533: inode #11: block 2: comm syz.4.128: invalid block
[   46.406410][ T5342] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   46.409370][ T5342] EXT4-fs (loop4): Remounting filesystem read-only
[   47.105917][ T5342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.115031][ T5349] Injecting memory failure for pfn 0x15be01 at process virtual address 0x20001000
[   47.118544][ T5349] Memory failure: 0x15be01: recovery action for dirty LRU page: Recovered
[   47.312455][ T5355] netlink: 'syz.1.132': attribute type 1 has an invalid length.
[   47.313970][ T5355] netlink: 'syz.1.132': attribute type 2 has an invalid length.
[   47.362697][ T5356] set_capacity_and_notify: 2 callbacks suppressed
[   47.362739][ T5356] loop0: detected capacity change from 0 to 4096
[   47.379069][ T5358] netlink: 'syz.1.134': attribute type 1 has an invalid length.
[   47.429465][ T5356] EXT4-fs: Mount option(s) incompatible with ext2
[   47.464300][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.576500][   T40] bond0: (slave bond_slave_0): interface is now down
[   47.576541][   T40] bond0: (slave bond_slave_1): interface is now down
[   47.576565][   T40] bond0: (slave batadv0): interface is now down
[   47.586547][ T5377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'.
[   47.592554][ T4921] bond0: (slave bond_slave_0): interface is now down
[   47.592584][ T4921] bond0: (slave bond_slave_1): interface is now down
[   47.592598][ T4921] bond0: (slave batadv0): interface is now down
[   47.593980][ T4921] bond0: now running without any active interface!
[   47.653003][ T5381] IPVS: set_ctl: invalid protocol: 4 172.20.20.10:22
[   47.661328][ T5383] loop1: detected capacity change from 0 to 128
[   47.672296][ T5383] FAT-fs (loop1): unable to read boot sector
[   47.744886][ T5387] loop7: detected capacity change from 0 to 7
[   47.752628][ T5387] Dev loop7: unable to read RDB block 7
[   47.752667][ T5387]  loop7: unable to read partition table
[   47.752741][ T5387] loop7: partition table beyond EOD, truncated
[   47.752752][ T5387] loop_reread_partitions: partition scan of loop7 (���������S�jV�	���%�`��ր����) failed (rc=-5)
[   47.760723][    C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[   47.760781][    C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[   48.589130][ T5390] Injecting memory failure for pfn 0x13a801 at process virtual address 0x20001000
[   48.832712][ T5390] Memory failure: 0x13a801: recovery action for dirty LRU page: Recovered
[   48.924129][ T5400] mmap: syz.4.148 (5400) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   48.936870][ T5398] loop3: detected capacity change from 0 to 4096
[   48.937246][ T5398] EXT4-fs: inline encryption not supported
[   48.947325][ T5398] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   48.947357][ T5398] EXT4-fs (loop3): Test dummy encryption mode enabled
[   48.953323][ T5398] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[   48.953398][ T5398] System zones: 0-5
[   48.956556][ T5398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.965941][ T5398] process 'syz.3.147' launched './file3' with NULL argv: empty string added
[   49.059421][ T5404] loop2: detected capacity change from 0 to 8192
[   49.059794][ T5404] vfat: Unknown parameter '00000000000000000003'
[   49.082883][ T5418] pimreg: tun_chr_ioctl cmd 2148553947
[   49.130625][ T5420] loop1: detected capacity change from 0 to 1024
[   49.131035][ T5420] EXT4-fs: Ignoring removed nomblk_io_submit option
[   49.165828][ T5422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'.
[   49.167591][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'.
[   49.169073][ T5420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.173310][ T5418] pimreg: tun_chr_ioctl cmd 1075343108
[   49.210710][ T5422] C: renamed from veth1_to_team (while UP)
[   49.213528][ T5422] netlink: 'syz.2.156': attribute type 1 has an invalid length.
[   49.215160][ T5422] netlink: 'syz.2.156': attribute type 4 has an invalid length.
[   49.216530][ T5422] netlink: 100 bytes leftover after parsing attributes in process `syz.2.156'.
[   49.218128][ T5422] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   49.228037][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.241104][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.357800][ T5440] loop0: detected capacity change from 0 to 1024
[   49.544715][ T5447] autofs4:pid:5447:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(132950.527), cmd(0xc018937d)
[   49.544773][ T5447] autofs4:pid:5447:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937d)
[   49.676120][ T5446] Injecting memory failure for pfn 0x15c401 at process virtual address 0x20001000
[   49.679861][ T5446] Memory failure: 0x15c401: recovery action for dirty LRU page: Recovered
[   50.581178][ T5464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'.
[   50.670047][ T5467] loop2: detected capacity change from 0 to 8192
[   50.676110][ T5467] vfat: Unknown parameter '0x0000000000000000'
[   50.681229][ T5472] binder: 5470:5472 ioctl c0306201 20000080 returned -14
[   50.681740][ T5474] binder: BINDER_SET_CONTEXT_MGR already set
[   50.681762][ T5474] binder: 5470:5474 ioctl 4018620d 20000040 returned -16
[   50.682867][ T5473] binder: 5470:5473 got transaction to invalid handle, 1
[   50.682903][ T5473] binder: 5470:5473 cannot find target node
[   50.682931][ T5473] binder: 5470:5473 transaction call to 0:0 failed 3/29201/-22, code 0 size 112-24 line 3252
[   50.683052][ T5472] binder: 5470:5472 ioctl c0306201 200003c0 returned -14
[   50.685089][ T5472] netlink: 'syz.0.172': attribute type 1 has an invalid length.
[   50.696445][ T5472] 8021q: adding VLAN 0 to HW filter on device bond1
[   50.710947][ T4345] binder: undelivered TRANSACTION_ERROR: 29201
[   50.814819][ T5484] loop3: detected capacity change from 0 to 256
[   51.200839][ T4838] IPVS: starting estimator thread 0...
[   51.288433][ T5514] syz.1.183 (5514): drop_caches: 0
[   51.289097][ T5514] openvswitch: netlink: Actions may not be safe on all matching packets
[   51.289265][ T5514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.183'.
[   51.289754][ T5515] netlink: 40 bytes leftover after parsing attributes in process `syz.1.183'.
[   51.292524][ T5506] IPVS: using max 60 ests per chain, 144000 per kthread
[   52.025374][ T5518] Injecting memory failure for pfn 0x15c601 at process virtual address 0x20001000
[   52.268770][ T5518] Memory failure: 0x15c601: recovery action for dirty LRU page: Recovered
[   52.315472][ T5531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'.
[   52.317373][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'.
[   52.334785][ T5529] loop2: detected capacity change from 0 to 8192
[   52.339718][ T5529] vfat: Unknown parameter '0x0000000000000000'
[   52.454574][ T5542] loop1: detected capacity change from 0 to 2048
[   52.481895][ T5547] loop0: detected capacity change from 0 to 256
[   52.488633][ T5547] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   52.494450][ T5542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.564528][ T5547] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   52.564568][ T5547] FAT-fs (loop0): Filesystem has been set read-only
[   52.564700][ T5547] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   52.564726][ T5547] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   52.565085][ T5547] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   52.565116][ T5547] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   52.680588][ T5559] input: syz0 as /devices/virtual/input/input3
[   53.264946][ T5571] Injecting memory failure for pfn 0x15b201 at process virtual address 0x20001000
[   53.283656][ T5571] Memory failure: 0x15b201: recovery action for dirty LRU page: Recovered
[   53.875760][ T5574] tipc: Started in network mode
[   53.875807][ T5574] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711
[   53.875846][ T5574] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   54.067767][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.277546][ T5586] lo speed is unknown, defaulting to 1000
[   54.281723][ T5586] virt_wifi0 speed is unknown, defaulting to 1000
[   54.472368][ T5586] loop3: detected capacity change from 0 to 512
[   54.597482][ T5586] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.203: invalid block
[   54.597757][ T5586] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   54.602372][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   54.602404][    C1] EXT4-fs (loop3): initial error at time 54: ext4_get_branch:178: inode 11: block 4294967295
[   54.602446][    C1] EXT4-fs (loop3): last error at time 54: ext4_get_branch:178: inode 11: block 4294967295
[   54.612997][ T5586] EXT4-fs (loop3): Remounting filesystem read-only
[   54.614251][ T5586] EXT4-fs (loop3): 2 truncates cleaned up
[   54.619616][ T5586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.111185][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.246811][ T5598] loop1: detected capacity change from 0 to 512
[   55.256080][ T5598] EXT4-fs (loop1): orphan cleanup on readonly fs
[   55.269453][ T5598] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.208: bg 0: block 63: padding at end of block bitmap is not set
[   55.269564][ T5598] loop1: lost filesystem error report for type 5 error -117
[   55.270912][ T5598] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.208: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[   55.270930][ T5598] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   55.280017][ T5598] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.208: ea_inode dec ref err=-117
[   55.280258][ T5598] EXT4-fs (loop1): 1 orphan inode deleted
[   55.280686][ T5598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   55.338781][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.417823][ T5606] loop3: detected capacity change from 0 to 512
[   55.448893][ T5606] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.210: iget: bad extra_isize 90 (inode size 256)
[   55.448937][ T5606] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   55.449134][ T5606] EXT4-fs (loop3): Remounting filesystem read-only
[   55.449193][ T5606] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   55.449206][ T5606] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[   55.449249][ T5606] EXT4-fs (loop3): 1 orphan inode deleted
[   55.449740][ T5606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.496642][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.595826][ T5617] loop2: detected capacity change from 0 to 8192
[   55.597496][ T5617] vfat: Unknown parameter '0x0000000000000000'
[   56.324628][ T5621] Injecting memory failure for pfn 0x15da01 at process virtual address 0x20001000
[   56.586789][ T5621] Memory failure: 0x15da01: recovery action for dirty LRU page: Recovered
[   56.600090][ T5625] file system registered
[   56.850254][ T5641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.218'.
[   57.858310][ T5647] tipc: Can't bind to reserved service type 1
[   57.909751][   T30] audit: type=1326 audit(57.900:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5657 comm="syz.2.229" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab3781a8 code=0x0
[   57.924422][ T5652] tipc: Started in network mode
[   57.924460][ T5652] tipc: Node identity 3658ef69f7c1, cluster identity 4711
[   57.924561][ T5652] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   57.930643][ T5650] tipc: Resetting bearer <eth:syzkaller0>
[   57.936434][ T5650] tipc: Disabling bearer <eth:syzkaller0>
[   58.009420][ T5666] syzkaller0: entered promiscuous mode
[   58.009461][ T5666] syzkaller0: entered allmulticast mode
[   58.710848][ T5669] Injecting memory failure for pfn 0x15b001 at process virtual address 0x20001000
[   58.948150][ T5678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.234'.
[   58.950129][ T5669] Memory failure: 0x15b001: recovery action for dirty LRU page: Recovered
[   58.958104][ T5678] veth0: entered promiscuous mode
[   58.981769][ T5678] veth0: left promiscuous mode
[   59.013182][ T5682] fuse: blksize only supported for fuseblk
[   59.076287][ T5690] loop1: detected capacity change from 0 to 2048
[   59.080162][ T5690] ext4: Unknown parameter 'nouser_xattr'
[   59.194886][ T5694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.236'.
[   59.984936][ T5703] bridge0: port 3(syz_tun) entered blocking state
[   59.985014][ T5703] bridge0: port 3(syz_tun) entered disabled state
[   59.985234][ T5703] syz_tun: entered allmulticast mode
[   59.990047][ T5703] syz_tun: entered promiscuous mode
[   59.992378][ T5703] bridge0: port 3(syz_tun) entered blocking state
[   59.992432][ T5703] bridge0: port 3(syz_tun) entered forwarding state
[   60.018516][ T5703] netlink: 'syz.4.242': attribute type 1 has an invalid length.
[   60.028724][ T5703] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   60.199471][ T5718] syzkaller0: entered promiscuous mode
[   60.199510][ T5718] syzkaller0: entered allmulticast mode
[   60.270114][ T5725] loop1: detected capacity change from 0 to 128
[   60.272488][ T5725] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   60.282834][ T5725] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   60.988088][ T5728] Injecting memory failure for pfn 0x15de01 at process virtual address 0x20001000
[   61.245936][ T5728] Memory failure: 0x15de01: recovery action for dirty LRU page: Recovered
[   61.294010][ T5741] loop4: detected capacity change from 0 to 512
[   61.296903][ T5741] EXT4-fs: inline encryption not supported
[   61.308746][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   61.320025][ T5741] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   61.335993][ T5741] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.254: corrupted in-inode xattr: e_value size too large
[   61.336048][ T5741] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   61.343585][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   61.343633][    C1] EXT4-fs (loop4): initial error at time 61: ext4_iget_extra_inode:5180: inode 15
[   61.343685][    C1] EXT4-fs (loop4): last error at time 61: ext4_iget_extra_inode:5180: inode 15
[   61.362814][ T5741] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.254: couldn't read orphan inode 15 (err -117)
[   61.362860][ T5741] loop4: lost filesystem error report for type 5 error -117
[   61.366376][ T5741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.439006][ T5752] netlink: 64 bytes leftover after parsing attributes in process `syz.2.258'.
[   61.454317][ T5756] tmpfs: Bad value for 'mpol'
[   61.525761][ T5759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.256'.
[   62.330207][ T5764] syzkaller0: entered promiscuous mode
[   62.331511][ T5764] syzkaller0: entered allmulticast mode
[   62.349543][ T5762] can: request_module (can-proto-5) failed.
[   62.373404][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.402523][ T5766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.263'.
[   63.235436][ T5782] Injecting memory failure for pfn 0x15ec01 at process virtual address 0x20001000
[   63.479290][ T5782] Memory failure: 0x15ec01: recovery action for dirty LRU page: Recovered
[   63.528505][ T5798] loop0: detected capacity change from 0 to 256
[   63.592825][ T5798] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR
[   63.697185][ T5846] tipc: Cannot configure node identity twice
[   63.729391][ T5857] syzkaller0: entered promiscuous mode
[   63.730601][ T5857] syzkaller0: entered allmulticast mode
[   63.751188][ T5883] loop2: detected capacity change from 0 to 256
[   63.752983][ T5883] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   63.761903][ T5881] tipc: Subscription rejected, illegal request
[   63.769244][ T5883] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   63.786819][ T4812] kernel read not supported for file /usb/devices (pid: 4812 comm: kworker/0:4)
[   63.964394][ T5897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.277'.
[   64.563689][ T1597] ieee802154 phy0 wpan0: encryption failed: -22
[   64.565289][ T1597] ieee802154 phy1 wpan1: encryption failed: -22
[   64.738401][ T5898] loop8: detected capacity change from 0 to 1
[   64.745576][ T5898] Dev loop8: unable to read RDB block 1
[   64.747054][ T5898]  loop8: unable to read partition table
[   64.748732][ T5898] loop8: partition table beyond EOD, truncated
[   64.748745][ T5898] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[   64.771834][ T5900] Injecting memory failure for pfn 0x136ef1 at process virtual address 0x20000000
[   64.840309][ T1865] cfg80211: failed to load regulatory.db
[   64.847823][ T5907] loop2: detected capacity change from 0 to 8
[   64.852318][ T5900] Memory failure: 0x136ef1: Sending SIGBUS to syz.4.284:5900 due to hardware memory corruption
[   64.852381][ T5900] Memory failure: 0x136ef1: recovery action for dirty LRU page: Recovered
[   64.852417][ T5900] Injecting memory failure for pfn 0x219260 at process virtual address 0x20001000
[   64.864132][ T5907] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[   64.864172][ T5907] unable to read xattr id index table
[   64.866944][ T5900] Memory failure: 0x219260: unhandlable page.
[   64.866975][ T5900] Memory failure: 0x219260: recovery action for get hwpoison page: Ignored
[   64.867764][ T5910] loop0: detected capacity change from 0 to 4096
[   64.874313][ T5907] SQUASHFS error: zlib decompression failed, data probably corrupt
[   64.874358][ T5907] SQUASHFS error: Failed to read block 0x9b: -5
[   64.874382][ T5907] SQUASHFS error: Unable to read metadata cache entry [99]
[   64.874396][ T5907] SQUASHFS error: Unable to read inode 0x127
[   64.875814][ T5910] EXT4-fs (loop0): Test dummy encryption mode enabled
[   64.888544][ T5910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.897778][ T5910] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[   64.905601][ T5910] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce"
[   64.964470][ T4717] EXT4-fs error (device loop0): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /61/file1/file0/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[   64.985340][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.137305][ T5937] syzkaller0: entered promiscuous mode
[   65.137344][ T5937] syzkaller0: entered allmulticast mode
[   65.209252][ T5947] gretap0: entered promiscuous mode
[   65.317805][ T5966] fuse: Bad value for 'fd'
[   65.403826][ T5974] tipc: Started in network mode
[   65.403872][ T5974] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[   65.405155][ T5974] tipc: Enabled bearer <eth:batadv0>, priority 10
[   65.406646][ T5974] loop1: detected capacity change from 0 to 128
[   65.459118][ T5829] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.505530][ T4723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   65.506424][ T4723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   65.506936][ T4723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   65.509930][ T4723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   65.510378][ T4723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   65.512027][ T5980] syzkaller0: entered promiscuous mode
[   65.512040][ T5980] syzkaller0: entered allmulticast mode
[   65.547063][ T5829] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.622770][ T5829] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.634176][ T5982] lo speed is unknown, defaulting to 1000
[   65.634563][ T5982] virt_wifi0 speed is unknown, defaulting to 1000
[   65.695442][ T5998] loop2: detected capacity change from 0 to 8192
[   65.724516][ T5829] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.750741][ T6008] loop1: detected capacity change from 0 to 512
[   65.758809][ T6008] EXT4-fs (loop1): orphan cleanup on readonly fs
[   65.760451][ T6008] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.319: bg 0: block 63: padding at end of block bitmap is not set
[   65.768037][ T6008] loop1: lost filesystem error report for type 5 error -117
[   65.768633][ T6008] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.319: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[   65.773093][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   65.773108][    C0] EXT4-fs (loop1): initial error at time 65: ext4_validate_block_bitmap:441
[   65.773120][    C0] EXT4-fs (loop1): last error at time 65: ext4_validate_block_bitmap:441
[   65.778965][ T6008] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   65.779615][ T6008] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.319: ea_inode dec ref err=-117
[   65.784082][ T6008] EXT4-fs (loop1): 1 orphan inode deleted
[   65.786748][ T6008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   65.842554][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.883440][ T5829] bridge_slave_1: left allmulticast mode
[   65.883492][ T5829] bridge_slave_1: left promiscuous mode
[   65.883996][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.889975][ T5829] bridge_slave_0: left allmulticast mode
[   65.890006][ T5829] bridge_slave_0: left promiscuous mode
[   65.890125][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.923122][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'.
[   65.975561][ T5829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   66.005619][ T5829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   66.043688][ T5829] bond0 (unregistering): (slave batadv0): Releasing backup interface
[   66.063772][ T5829] bond0 (unregistering): Released all slaves
[   66.066232][ T5829] bond1 (unregistering): Released all slaves
[   66.080554][ T6020] vlan2: entered allmulticast mode
[   66.080588][ T6020] macsec0: entered allmulticast mode
[   66.080718][ T6020] veth1_macvtap: entered allmulticast mode
[   66.081119][ T6020] batman_adv: batadv0: Adding interface: vlan2
[   66.081126][ T6020] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.081139][ T6020] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[   66.110205][ T6028] Bluetooth: MGMT ver 1.23
[   66.122305][ T6028] random: crng reseeded on system resumption
[   66.129458][ T5829] tipc: Disabling bearer <eth:macvlan0>
[   66.131379][ T5829] tipc: Left network mode
[   66.165649][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.170858][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.172323][ T5982] bridge_slave_0: entered allmulticast mode
[   66.174342][ T5982] bridge_slave_0: entered promiscuous mode
[   66.181327][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.182773][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.184360][ T5982] bridge_slave_1: entered allmulticast mode
[   66.186023][ T5982] bridge_slave_1: entered promiscuous mode
[   66.207267][ T5982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.211911][ T6019] loop1: detected capacity change from 0 to 8192
[   66.217069][ T6019] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   66.225879][ T5982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.229075][ T6037] syzkaller0: entered promiscuous mode
[   66.229129][ T6037] syzkaller0: entered allmulticast mode
[   66.316638][ T5982] team0: Port device team_slave_0 added
[   66.317502][ T5982] team0: Port device team_slave_1 added
[   66.331885][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.333398][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.338748][ T5982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.341589][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.345876][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.345932][ T5982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.403937][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0
[   66.426061][ T5982] hsr_slave_0: entered promiscuous mode
[   66.426529][ T5982] hsr_slave_1: entered promiscuous mode
[   66.427375][ T5982] debugfs: 'hsr0' already exists in 'hsr'
[   66.427390][ T5982] Cannot create hsr debugfs directory
[   66.510230][ T6059] lo speed is unknown, defaulting to 1000
[   66.510627][ T6059] virt_wifi0 speed is unknown, defaulting to 1000
[   66.533393][   T30] audit: type=1326 audit(66.428:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6066 comm="syz.2.331" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab3781a8 code=0x0
[   66.640437][ T1865] tipc: Node number set to 8432298
[   66.653944][ T5829] hsr_slave_0: left promiscuous mode
[   66.655558][ T5829] hsr_slave_1: left promiscuous mode
[   66.656285][ T5829] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.656306][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.657576][ T5829] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.657588][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.677843][ T5829] veth1_macvtap: left promiscuous mode
[   66.677905][ T5829] veth0_macvtap: left promiscuous mode
[   66.677957][ T5829] veth1_vlan: left promiscuous mode
[   66.678036][ T5829] veth0_vlan: left promiscuous mode
[   66.739785][ T6077] Injecting memory failure for pfn 0x136e9d at process virtual address 0x20001000
[   67.575609][ T6077] Memory failure: 0x136e9d: recovery action for dirty LRU page: Recovered
[   67.575651][ T6077] Injecting memory failure for pfn 0x136e9c at process virtual address 0x20002000
[   67.576692][ T6077] Memory failure: 0x136e9c: recovery action for dirty LRU page: Recovered
[   67.576723][ T6077] Injecting memory failure for pfn 0x136e9b at process virtual address 0x20003000
[   67.576786][ T6077] Memory failure: 0x136e9b: recovery action for dirty LRU page: Recovered
[   67.679655][ T4723] Bluetooth: hci4: command tx timeout
[   67.707793][ T6091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'.
[   67.707893][ T6091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'.
[   67.707965][ T6091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'.
[   67.708022][ T6091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'.
[   67.708086][ T6091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'.
[   67.708140][ T6091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'.
[   67.708197][ T6091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'.
[   67.708260][ T6091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'.
[   67.708312][ T6091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'.
[   67.708364][ T6091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'.
[   67.810131][ T6100] Injecting memory failure for pfn 0x1366b8 at process virtual address 0x20001000
[   68.665056][ T6100] Memory failure: 0x1366b8: recovery action for dirty LRU page: Recovered
[   68.665100][ T6100] Injecting memory failure for pfn 0x135fc5 at process virtual address 0x20002000
[   68.665505][ T6100] Memory failure: 0x135fc5: recovery action for dirty LRU page: Recovered
[   68.665520][ T6100] Injecting memory failure for pfn 0x135686 at process virtual address 0x20003000
[   68.665560][ T6100] Memory failure: 0x135686: recovery action for dirty LRU page: Recovered
[   68.697475][ T5829] team0 (unregistering): Port device team_slave_1 removed
[   68.706898][ T5829] team0 (unregistering): Port device team_slave_0 removed
[   68.855497][ T1504] lo speed is unknown, defaulting to 1000
[   68.857105][ T1504] infiniband syz0: ib_query_port failed (-19)
[   68.859111][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1
[   68.918887][ T6105] syzkaller0: entered promiscuous mode
[   68.920118][ T6105] syzkaller0: entered allmulticast mode
[   69.330878][ T5982] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   69.392139][ T5982] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   69.395305][ T5982] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   69.415545][ T5982] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   69.417526][ T5982] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   69.417933][ T6138] IPVS: set_ctl: invalid protocol: 209 172.20.20.44:20002
[   69.423055][ T5982] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   69.425037][ T5982] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   69.430022][ T5982] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   69.492852][ T6150] Injecting memory failure for pfn 0x13701b at process virtual address 0x20001000
[   69.885832][ T4723] Bluetooth: hci4: command tx timeout
[   70.334499][ T6150] Memory failure: 0x13701b: recovery action for dirty LRU page: Recovered
[   70.334540][ T6150] Injecting memory failure for pfn 0x13a080 at process virtual address 0x20002000
[   70.339232][ T6160] fuse: Bad value for 'user_id'
[   70.339243][ T6160] fuse: Bad value for 'user_id'
[   70.341628][ T6150] Memory failure: 0x13a080: recovery action for dirty LRU page: Recovered
[   70.341663][ T6150] Injecting memory failure for pfn 0x13a1fe at process virtual address 0x20003000
[   70.344923][ T6150] Memory failure: 0x13a1fe: recovery action for dirty LRU page: Recovered
[   70.363914][ T5982] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.384254][ T5982] 8021q: adding VLAN 0 to HW filter on device team0
[   70.390107][ T4399] 8021q: adding VLAN 0 to HW filter on device eth2
[   70.409508][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.409562][ T5876] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.432822][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.432875][ T5876] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.444016][ T6165] loop1: detected capacity change from 0 to 512
[   70.444392][ T6165] EXT4-fs: Ignoring removed i_version option
[   70.444417][ T6165] ext4: Unknown parameter 'euid<00000000000000000000'
[   70.567371][ T6175] loop2: detected capacity change from 0 to 256
[   70.826788][ T6207] syzkaller0: entered promiscuous mode
[   70.826833][ T6207] syzkaller0: entered allmulticast mode
[   70.858816][ T5982] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.918926][ T4399] 8021q: adding VLAN 0 to HW filter on device eth3
[   70.987298][ T6226] loop2: detected capacity change from 0 to 512
[   70.993866][ T6226] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[   71.040037][ T5982] veth0_vlan: entered promiscuous mode
[   71.060749][ T5982] veth1_vlan: entered promiscuous mode
[   71.096566][ T5982] veth0_macvtap: entered promiscuous mode
[   71.103743][ T5982] veth1_macvtap: entered promiscuous mode
[   71.120518][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.128896][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.151527][ T5829] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.152079][ T5829] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.152108][ T5829] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.152127][ T5829] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.178749][ T5829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.178782][ T5829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.872981][ T6241] Injecting memory failure for pfn 0x15dc01 at process virtual address 0x20001000
[   72.111110][ T6241] Memory failure: 0x15dc01: recovery action for dirty LRU page: Recovered
[   72.142976][ T4723] Bluetooth: hci4: command tx timeout
[   72.195029][ T5866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.195066][ T5866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.324526][ T6271] loop1: detected capacity change from 0 to 256
[   72.365958][ T6277] syzkaller0: entered promiscuous mode
[   72.367142][ T6277] syzkaller0: entered allmulticast mode
[   72.373669][ T6271] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152)
[   72.373712][ T6271] FAT-fs (loop1): Filesystem has been set read-only
[   72.374601][ T6271] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152)
[   72.379496][ T6271] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152)
[   72.379546][ T6271] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152)
[   72.379575][ T6271] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152)
[   72.379590][ T6271] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152)
[   72.380275][ T6273] netlink: 'syz.1.366': attribute type 142 has an invalid length.
[   72.467896][ T6281] tipc: Started in network mode
[   72.467934][ T6281] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[   72.468007][ T6281] tipc: Enabled bearer <eth:batadv0>, priority 10
[   72.471845][ T6281] loop3: detected capacity change from 0 to 128
[   72.529165][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.529207][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.533717][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.533756][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.540326][ T6301] tipc: Resetting bearer <eth:batadv0>
[   72.548795][ T6301] tipc: Disabling bearer <eth:batadv0>
[   73.569237][ T4836] tipc: Node number set to 8432298
[   73.681279][ T6329] loop2: detected capacity change from 0 to 128
[   73.696744][ T6329] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   73.738847][ T4710] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   73.775673][ T6333] tipc: Enabled bearer <eth:batadv0>, priority 10
[   73.778264][ T6333] loop2: detected capacity change from 0 to 128
[   73.920951][ T6343] loop1: detected capacity change from 0 to 512
[   73.939839][ T6343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.056575][ T6347] virt_wifi0 speed is unknown, defaulting to 1000
[   74.356731][ T4723] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   74.358462][ T4723] Bluetooth: hci4: command tx timeout
[   75.283487][ T4836] tipc: Node number set to 4227858433
[   75.401565][ T6353] Injecting memory failure for pfn 0x15b601 at process virtual address 0x20001000
[   75.539740][ T6353] Memory failure: 0x15b601: recovery action for dirty LRU page: Recovered
[   75.551268][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.754617][ T6360] trusted_key: encrypted_key: master key parameter is missing
[   75.816939][ T6376] loop2: detected capacity change from 0 to 128
[   75.824829][ T6372] tipc: Enabling of bearer <eth:batadv0> rejected, already enabled
[   75.826326][ T6372] loop3: detected capacity change from 0 to 128
[   75.833671][ T6377] EXT4-fs: Ignoring removed orlov option
[   75.834860][ T6377] ext3: Unknown parameter 'fowner'
[   75.853179][ T6376] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   75.869505][ T6377] set_capacity_and_notify: 1 callbacks suppressed
[   75.869567][ T6377] loop1: detected capacity change from 0 to 256
[   75.916137][ T6376] 
[   75.916636][ T6376] ======================================================
[   75.917952][ T6376] WARNING: possible circular locking dependency detected
[   75.919184][ T6376] syzkaller #0 Not tainted
[   75.919991][ T6376] ------------------------------------------------------
[   75.921287][ T6376] syz.2.399/6376 is trying to acquire lock:
[   75.922323][ T6376] ffff0000f35a80c0 (&ei->xattr_sem){++++}-{4:4}, at: ext4_xattr_set_handle+0x134/0xde4
[   75.924108][ T6376] 
[   75.924108][ T6376] but task is already holding lock:
[   75.925411][ T6376] ffff0000d8320c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc54
[   75.927189][ T6376] 
[   75.927189][ T6376] which lock already depends on the new lock.
[   75.927189][ T6376] 
[   75.929057][ T6376] 
[   75.929057][ T6376] the existing dependency chain (in reverse order) is:
[   75.930650][ T6376] 
[   75.930650][ T6376] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[   75.932126][ T6376]        percpu_down_read_internal+0x5c/0x294
[   75.933190][ T6376]        ext4_writepages+0x170/0x2dc
[   75.934102][ T6376]        do_writepages+0x284/0x47c
[   75.935006][ T6376]        __writeback_single_inode+0x140/0x1880
[   75.936100][ T6376]        writeback_single_inode+0x400/0xb20
[   75.937210][ T6376]        write_inode_now+0x170/0x208
[   75.938161][ T6376]        iput+0x7cc/0xc2c
[   75.938967][ T6376]        ext4_xattr_block_set+0x1460/0x21e8
[   75.940037][ T6376]        ext4_expand_extra_isize_ea+0xaf4/0x1384
[   75.941204][ T6376]        __ext4_expand_extra_isize+0x2a4/0x378
[   75.942287][ T6376]        __ext4_mark_inode_dirty+0x394/0x828
[   75.943327][ T6376]        ext4_evict_inode+0x798/0xfb8
[   75.944233][ T6376]        evict+0x4c0/0x74c
[   75.944945][ T6376]        iput+0x8f0/0xc2c
[   75.945645][ T6376]        ext4_process_orphan+0x24c/0x2c0
[   75.946697][ T6376]        ext4_orphan_cleanup+0x7d4/0xd20
[   75.947721][ T6376]        ext4_fill_super+0x4628/0x4e14
[   75.948694][ T6376]        get_tree_bdev_flags+0x388/0x43c
[   75.949626][ T6376]        get_tree_bdev+0x2c/0x3c
[   75.950443][ T6376]        ext4_get_tree+0x28/0x38
[   75.951329][ T6376]        vfs_get_tree+0x90/0x28c
[   75.952172][ T6376]        fc_mount+0x24/0xac
[   75.952911][ T6376]        do_new_mount+0x2a4/0x538
[   75.953769][ T6376]        path_mount+0x5f0/0xa88
[   75.954569][ T6376]        do_mount+0xe8/0x148
[   75.955396][ T6376]        __arm64_sys_mount+0x33c/0x388
[   75.956338][ T6376]        invoke_syscall+0x98/0x244
[   75.957218][ T6376]        el0_svc_common+0xec/0x23c
[   75.958074][ T6376]        do_el0_svc+0x4c/0x5c
[   75.958873][ T6376]        el0_svc+0x64/0x260
[   75.959641][ T6376]        el0t_64_sync_handler+0x48/0x148
[   75.960640][ T6376]        el0t_64_sync+0x198/0x19c
[   75.961494][ T6376] 
[   75.961494][ T6376] -> #0 (&ei->xattr_sem){++++}-{4:4}:
[   75.962864][ T6376]        __lock_acquire+0x17c0/0x2ebc
[   75.963822][ T6376]        lock_acquire+0x140/0x364
[   75.964681][ T6376]        down_write+0x50/0xc0
[   75.965492][ T6376]        ext4_xattr_set_handle+0x134/0xde4
[   75.966514][ T6376]        ext4_initxattrs+0xa8/0x11c
[   75.967419][ T6376]        security_inode_init_security+0x244/0x370
[   75.968531][ T6376]        ext4_init_security+0x44/0x58
[   75.969448][ T6376]        __ext4_new_inode+0x286c/0x3308
[   75.970405][ T6376]        ext4_ext_migrate+0x564/0xc54
[   75.970531][ T6394] loop5: detected capacity change from 0 to 1024
[   75.970862][ T6394] EXT4-fs: Ignoring removed nobh option
[   75.973315][ T6376]        ext4_ioctl+0x1e14/0x4430
[   75.974168][ T6376]        __arm64_sys_ioctl+0x154/0x1cc
[   75.975103][ T6376]        invoke_syscall+0x98/0x244
[   75.975315][ T6394] EXT4-fs: Ignoring removed orlov option
[   75.976899][ T6376]        el0_svc_common+0xec/0x23c
[   75.977777][ T6376]        do_el0_svc+0x4c/0x5c
[   75.978561][ T6376]        el0_svc+0x64/0x260
[   75.979291][ T6376]        el0t_64_sync_handler+0x48/0x148
[   75.980216][ T6376]        el0t_64_sync+0x198/0x19c
[   75.981075][ T6376] 
[   75.981075][ T6376] other info that might help us debug this:
[   75.981075][ T6376] 
[   75.982827][ T6376]  Possible unsafe locking scenario:
[   75.982827][ T6376] 
[   75.984102][ T6376]        CPU0                    CPU1
[   75.985075][ T6376]        ----                    ----
[   75.985994][ T6376]   lock(&sbi->s_writepages_rwsem);
[   75.986904][ T6376]                                lock(&ei->xattr_sem);
[   75.988112][ T6376]                                lock(&sbi->s_writepages_rwsem);
[   75.989359][ T6376]   lock(&ei->xattr_sem);
[   75.990081][ T6376] 
[   75.990081][ T6376]  *** DEADLOCK ***
[   75.990081][ T6376] 
[   75.991505][ T6376] 3 locks held by syz.2.399/6376:
[   75.992433][ T6376]  #0: ffff0000d754a450 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0xdc
[   75.994173][ T6376]  #1: ffff0000f3664e80 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: ext4_ioctl+0x1e0c/0x4430
[   75.996015][ T6376]  #2: ffff0000d8320c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc54
[   75.997868][ T6376] 
[   75.997868][ T6376] stack backtrace:
[   75.998914][ T6376] CPU: 0 UID: 0 PID: 6376 Comm: syz.2.399 Not tainted syzkaller #0 PREEMPT 
[   76.000398][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   76.002111][ T6376] Call trace:
[   76.002672][ T6376]  show_stack+0x2c/0x3c (C)
[   76.003419][ T6376]  __dump_stack+0x30/0x40
[   76.004142][ T6376]  dump_stack_lvl+0xd8/0x12c
[   76.004937][ T6376]  dump_stack+0x1c/0x28
[   76.005641][ T6376]  print_circular_bug+0x328/0x330
[   76.006462][ T6376]  check_noncircular+0x158/0x174
[   76.007347][ T6376]  __lock_acquire+0x17c0/0x2ebc
[   76.008159][ T6376]  lock_acquire+0x140/0x364
[   76.008962][ T6376]  down_write+0x50/0xc0
[   76.009641][ T6376]  ext4_xattr_set_handle+0x134/0xde4
[   76.010581][ T6376]  ext4_initxattrs+0xa8/0x11c
[   76.011334][ T6376]  security_inode_init_security+0x244/0x370
[   76.012363][ T6376]  ext4_init_security+0x44/0x58
[   76.013150][ T6376]  __ext4_new_inode+0x286c/0x3308
[   76.014009][ T6376]  ext4_ext_migrate+0x564/0xc54
[   76.014853][ T6376]  ext4_ioctl+0x1e14/0x4430
[   76.015645][ T6376]  __arm64_sys_ioctl+0x154/0x1cc
[   76.016537][ T6376]  invoke_syscall+0x98/0x244
[   76.017314][ T6376]  el0_svc_common+0xec/0x23c
[   76.018123][ T6376]  do_el0_svc+0x4c/0x5c
[   76.018813][ T6376]  el0_svc+0x64/0x260
[   76.019512][ T6376]  el0t_64_sync_handler+0x48/0x148
[   76.020404][ T6376]  el0t_64_sync+0x198/0x19c
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[   76.032209][ T6394] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   76.084455][ T6394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.117552][ T6389] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.171075][ T6375] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   76.261520][ T6381] bridge0: port 3(syz_tun) entered disabled state
[   76.265448][ T6381] syz_tun (unregistering): left allmulticast mode
[   76.266263][ T6381] syz_tun (unregistering): left promiscuous mode
[   76.266297][ T6381] bridge0: port 3(syz_tun) entered disabled state
[   76.463971][ T5866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.572830][ T5866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.691296][ T5866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.766688][ T5866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.875221][ T5866] bridge_slave_1: left allmulticast mode
[   76.875252][ T5866] bridge_slave_1: left promiscuous mode
[   76.875321][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.877752][ T5866] bridge_slave_0: left allmulticast mode
[   76.877763][ T5866] bridge_slave_0: left promiscuous mode
[   76.877827][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.913068][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.938895][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.981815][ T5866] bond0 (unregistering): Released all slaves
[   76.983273][ T5866] bond1 (unregistering): Released all slaves
[   77.045770][ T5866] tipc: Left network mode
[   77.077259][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4
[   77.212095][ T4399] 8021q: adding VLAN 0 to HW filter on device eth6
[   77.276759][ T5866] hsr_slave_0: left promiscuous mode
[   77.277867][ T5866] hsr_slave_1: left promiscuous mode
[   77.278212][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.278225][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.281512][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.282830][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.292404][ T5866] veth1_macvtap: left promiscuous mode
[   77.293504][ T5866] veth0_macvtap: left promiscuous mode
[   77.294624][ T5866] veth1_vlan: left promiscuous mode
[   77.295593][ T5866] veth0_vlan: left promiscuous mode
[   77.366988][ T5866] team0 (unregistering): Port device team_slave_1 removed
[   77.369312][ T5866] team0 (unregistering): Port device team_slave_0 removed
[   77.398207][ T4399] 8021q: adding VLAN 0 to HW filter on device eth5
[   77.507701][ T4399] 8021q: adding VLAN 0 to HW filter on device eth7
[   77.761263][ T5866] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.848401][ T5866] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.901821][ T5866] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.967110][ T5866] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.118493][ T5866] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.176931][ T5866] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.179397][ T4399] 8021q: adding VLAN 0 to HW filter on device eth8
[   78.229110][ T5866] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.270346][ T4399] 8021q: adding VLAN 0 to HW filter on device eth9
[   78.305842][ T5866] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.372327][ T4399] 8021q: adding VLAN 0 to HW filter on device eth10
[   78.421533][ T5866] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.483985][ T4399] 8021q: adding VLAN 0 to HW filter on device eth11
[   78.487556][ T5866] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.553221][ T5866] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.584718][ T4399] 8021q: adding VLAN 0 to HW filter on device eth12
[   78.594613][ T5866] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.680993][ T5866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.697351][ T4399] 8021q: adding VLAN 0 to HW filter on device eth13
[   78.704811][ T5866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.790852][ T5866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.795303][ T4399] 8021q: adding VLAN 0 to HW filter on device eth15
[   78.835081][ T5866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.900710][ T4399] 8021q: adding VLAN 0 to HW filter on device eth14
[   78.942814][ T5866] bridge_slave_1: left allmulticast mode
[   78.942846][ T5866] bridge_slave_1: left promiscuous mode
[   78.942934][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.950862][ T5866] bridge_slave_0: left allmulticast mode
[   78.950886][ T5866] bridge_slave_0: left promiscuous mode
[   78.950963][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.959158][ T5866] bridge_slave_1: left allmulticast mode
[   78.960609][ T5866] bridge_slave_1: left promiscuous mode
[   78.961768][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.964439][ T5866] bridge_slave_0: left allmulticast mode
[   78.964465][ T5866] bridge_slave_0: left promiscuous mode
[   78.964523][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.973696][ T5866] bridge_slave_1: left allmulticast mode
[   78.973729][ T5866] bridge_slave_1: left promiscuous mode
[   78.973802][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.977484][ T5866] bridge_slave_0: left allmulticast mode
[   78.977508][ T5866] bridge_slave_0: left promiscuous mode
[   78.977558][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.981802][ T5866] bridge_slave_1: left allmulticast mode
[   78.986954][ T5866] bridge_slave_1: left promiscuous mode
[   78.992716][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.995424][ T5866] bridge_slave_0: left allmulticast mode
[   78.996489][ T5866] bridge_slave_0: left promiscuous mode
[   78.997685][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.062459][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.069989][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.072401][ T5866] bond0 (unregistering): Released all slaves
[   79.096744][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.109275][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.123269][ T5866] bond0 (unregistering): Released all slaves
[   79.142449][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.166794][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.209879][ T5866] bond0 (unregistering): Released all slaves
[   79.211276][ T5866] bond1 (unregistering): Released all slaves
[   79.213366][ T5866] bond2 (unregistering): Released all slaves
[   79.231550][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.275445][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.285610][ T5866] bond0 (unregistering): Released all slaves
[   79.287331][ T4399] 8021q: adding VLAN 0 to HW filter on device eth16
[   79.340525][ T5866] tipc: Disabling bearer <eth:batadv0>
[   79.341721][ T5866] tipc: Left network mode
[   79.342800][ T5866] tipc: Left network mode
[   79.343719][ T5866] tipc: Disabling bearer <eth:batadv0>
[   79.344822][ T5866] tipc: Left network mode
[   79.392380][ T4399] 8021q: adding VLAN 0 to HW filter on device eth19
[   79.504934][ T4399] 8021q: adding VLAN 0 to HW filter on device eth17
[   79.608835][ T4399] 8021q: adding VLAN 0 to HW filter on device eth18
[   79.713116][ T4399] 8021q: adding VLAN 0 to HW filter on device eth20
[   79.805421][ T4399] 8021q: adding VLAN 0 to HW filter on device eth22
[   79.908663][ T4399] 8021q: adding VLAN 0 to HW filter on device eth23
[   79.995521][ T4399] 8021q: adding VLAN 0 to HW filter on device eth21
[   80.155302][ T5866] hsr_slave_0: left promiscuous mode
[   80.156702][ T5866] hsr_slave_1: left promiscuous mode
[   80.157946][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.159266][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.159570][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.159578][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.164529][ T5866] hsr_slave_0: left promiscuous mode
[   80.165475][ T5866] hsr_slave_1: left promiscuous mode
[   80.165743][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.165755][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.168974][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.168995][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.173217][ T5866] hsr_slave_0: left promiscuous mode
[   80.174248][ T5866] hsr_slave_1: left promiscuous mode
[   80.176164][ T5866] hsr_slave_0: left promiscuous mode
[   80.177126][ T5866] hsr_slave_1: left promiscuous mode
[   80.177353][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.177363][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.178334][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.178342][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.184787][ T5866] batman_adv: batadv0: Removing interface: vlan2
[   80.192920][ T5866] veth1_macvtap: left promiscuous mode
[   80.192952][ T5866] veth0_macvtap: left promiscuous mode
[   80.192999][ T5866] veth1_vlan: left promiscuous mode
[   80.193028][ T5866] veth0_vlan: left promiscuous mode
[   80.198049][ T5866] veth1_macvtap: left promiscuous mode
[   80.198074][ T5866] veth0_macvtap: left promiscuous mode
[   80.198117][ T5866] veth1_vlan: left promiscuous mode
[   80.198143][ T5866] veth0_vlan: left promiscuous mode
[   80.201951][ T5866] veth1_macvtap: left promiscuous mode
[   80.201975][ T5866] veth0_macvtap: left promiscuous mode
[   80.202009][ T5866] veth1_vlan: left promiscuous mode
[   80.202034][ T5866] veth0_vlan: left promiscuous mode
[   80.206101][ T5866] veth1_macvtap: left allmulticast mode
[   80.206119][ T5866] veth1_macvtap: left promiscuous mode
[   80.206135][ T5866] veth0_macvtap: left promiscuous mode
[   80.206174][ T5866] veth1_vlan: left promiscuous mode
[   80.206203][ T5866] veth0_vlan: left promiscuous mode
[   80.353957][ T5866] team0 (unregistering): Port device team_slave_1 removed
[   80.356732][ T5866] team0 (unregistering): Port device team_slave_0 removed
[   80.425941][ T5866] team0 (unregistering): Port device team_slave_1 removed
[   80.428162][ T5866] team0 (unregistering): Port device team_slave_0 removed
[   80.490741][ T5866] team0 (unregistering): Port device team_slave_1 removed
[   80.492963][ T5866] team0 (unregistering): Port device team_slave_0 removed
[   80.555083][ T5866] team0 (unregistering): Port device team_slave_1 removed
[   80.557299][ T5866] team0 (unregistering): Port device team_slave_0 removed
[   81.596303][ T5866] IPVS: stop unused estimator thread 0...