last executing test programs: 3m7.504884655s ago: executing program 3 (id=166): semget$private(0x0, 0x3, 0x1e) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000000600)="$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") execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'pim6reg1\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x3}, {0xffffffffffffffff, 0x2, 0x2}}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) unshare(0x22020600) write$nci(r2, &(0x7f0000000340)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x0, 0x2, 0x6, 0x7}, 0x3d) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001000010600a174e4e421463000001f00000000000000000000c97c5cc55301000000000000000d000300626172650070002000020006090000000900"/78], 0x60}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000034001a80060000000200000028"], 0x54}}, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getsockopt$inet_mreqsrc(r9, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 3m6.625862688s ago: executing program 3 (id=180): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd3e, 0x25dfdbfe, {0x2, 0x0, 0x30, 0x8, 0xfc, 0x1, 0x0, 0x1, 0x5100}, [@RTA_PREFSRC={0x8, 0x7, @broadcast}, @RTA_GATEWAY={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc8c4) 3m5.582664254s ago: executing program 3 (id=185): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=") lsetxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x870499, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x804008, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x2000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x9}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file0', [{0x20, '-XwwX\xf7\xc4\xe1L\xb9\xa1\x0e\xdb\x8bj\x8c\xe7\r\bP\xd6\xf4D\x0f\xd0\xb8\xbdh-\xb3aKo~\xa7\x17\xaf\xfd\x89l\xe5\\#\x90\xbf\xba\xb7!\x8e\x17\xa0\xe2\xa5\x88O\xc7p\xdd\xf7\xd5\x17\x8d\xfb\xde>\xb5'}]}, 0x4e) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x1, 0x2, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x4800) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa39283afffe8000000000000000000000000000bbff020000000000018900907800000000fe8000000000000000000000000000bb0002122b472e41e24b11f34b608816e50000000000007dea3d3013f659c73a486d875a43fc00"], 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) 3m5.170388763s ago: executing program 3 (id=187): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x7f, 0x2c1, &(0x7f0000001880)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) gettid() (async) r0 = gettid() r1 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) (async) kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCNXCL(r3, 0x540d) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) 3m4.788210192s ago: executing program 3 (id=190): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [{0x20, '^'}, {0x20, '@,\xf9(}\xd5*}\\!]\''}, {}, {}, {}, {0x20, '%+^\'-]-}'}], 0xa, "13c4a59802e7f2cb87aca448a76a95f6c7a21cb1651638c1dd28e3f57ec2fbe8ba6b970fce9ce0605851f5de9926f464526a4bc37216ca9d75c86a56f10e2352d0b74c9ae41f7af53966c323ec12291ef0644ec37160b64a4125d5ffa9652ced11a07623efb984f888ccf68a9fb410705a547c9acb46bd8d1347ac5fd21077de2130333ad481bb9f2d0e1f1a1c2c077e37c97a59a30cc1c245cef34da01e9281aa8f2e12a424efaba5e2ae6494a0c6b5306195dde5bca80b3d01d8f893b633b142530b"}, 0xe9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) getsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000000140)=""/137, &(0x7f0000000200)=0x89) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m4.501471015s ago: executing program 3 (id=194): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='9\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4 \x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c000280080001004b000000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0xffffffff, 0x0, 0xb3550aa4ba878382}, 0x9c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f0000000300)=r6}, 0x20) 3m3.769397238s ago: executing program 32 (id=194): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='9\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4 \x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c000280080001004b000000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0xffffffff, 0x0, 0xb3550aa4ba878382}, 0x9c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f0000000300)=r6}, 0x20) 3m1.460773076s ago: executing program 1 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8000000000107}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) 3m0.520079625s ago: executing program 1 (id=225): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) syz_emit_ethernet(0xb9, &(0x7f0000000880)={@link_local, @empty, @void, {@llc={0x4, {@snap={0x1, 0x1, "17c2", "f75c05", 0xdada, "f07510db8401a3aea4a30acd3a0fdd6248fd119aefa759deceaac76005aea82cbe3415a702fe9fbe1fd1db57dee5ac74574d8681fcfcd654207b426cd6cdec444176e4f8007ff951e19e5975eb4868ccae30aa02b07c35d04722f5edc34776ab0476efad5fde4d5a68d707c2a20f6493d65d5d74bb8c716924f6b830449eb46c96b2f63fc24c42fecbdea84837f6add91a1b0943519f0150e055d50cd771658d0d6f"}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x14, 0x44, 0x621, 0xfff7fffe, 0x25dfdbff, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48015}, 0x80) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000824}, 0x4000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[], 0x1a000}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0x80000000000008, &(0x7f0000000200)="de", 0x1) getsockopt$inet_opts(r9, 0x0, 0x9, 0x0, &(0x7f0000005b80)) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4008, 0x3, 0x218, 0x0, 0x32, 0x148, 0x0, 0x148, 0x180, 0x240, 0x240, 0x180, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0x8010100, @rand_addr=0x64010102, 0xff, 0xff0000ff, 'syz_tun\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x14}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x1040, 0x224, 0x0, 0x1}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x334}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x94}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 'vlan0\x00', 'caif0\x00', {0xff}, {}, 0x2, 0x3, 0x19}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x2, 0x8, 0x2, 0x3, 0xf77}, &(0x7f0000000780)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000007c0)={r11, 0xe1d8}, &(0x7f0000000800)=0x8) 3m0.301915916s ago: executing program 1 (id=233): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) syz_emit_ethernet(0x12, &(0x7f0000007080)=ANY=[@ANYBLOB="aa0000008906"], 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf251e0000000c000600010000000100000010002f"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) 2m59.275754606s ago: executing program 1 (id=235): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x90, &(0x7f0000000680)=ANY=[@ANYBLOB="726f6469722c73686f72746e616d653d77696e6e742c666d61736b3d30303030303030303030303030303030303030363237332c6e6f6e756d7461696c00000000000000066e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c756e695f786c6174653d312c636865636b3d6e6f726d616c2c636f6465706167653d3835302c69686f72746e616d653d6c6f7765722c696f636861727365743d6370313235302c757466383d312c636865636b3d7374726963742c757466383d302c73686f72746e616d653d77696e6e742c00"], 0x3, 0x27f, &(0x7f00000009c0)="$eJzs3UFrI2UYAOB3mqRJ9JAcPInQAT14Kq2/oEUqiAVByUE9aLEpSBMKLQSqYuzJX+Av8Pd4Ef/A/oBd9rY9LDtLOpM0XSYp2U2bsvs8l3683/vO934zQ3uarz991D8+PDk7uvj9UTQaSaztxE5cJtGOtRj7M0r9/6Q8DgA8cJdZFk+zXD0Pnd/MqM2orK7deXMAwJ2Y/vu/6l4AgPvx7Xfff7W7v7/3TZo2Ivp/DTpJ5D/z+d2j+CV60Y2taMXziGwiH3/x5f5eVNORdnzSHw46o8r+j/8W1999HHFVvx2taJfXb6e5qfrhoFOL94r1d3rR/fqfaMUH5fWfldRHZz0+/Xiq/81oxX8/x0n04rDobVz/x3aafp79/ey3H0bRUX0yHHTqk7wiu3KvDwYAAAAAAAAAAAAAAAAAAAAAgLfaZjrRvnn+zvjg/znzc84HGk6dz7OVpmmW5PnX9dX4sBrVVe4dAAAAAAAAAAAAAAAAAAAAHoqz81+PD3q97ulSB+PP+kum4sXNSD0iJpHmomttLNphVIrWeknEYmvVon5VeXtyZcFdNEf9dE+TaizvESSTSHN6aiPytUaRZj6Yirzx6o24GozfruODJG6papS9JEsYZCWvX2Vm1fqrkWaxg5Lk5pzV199/rZ6z1oypJCJqk5s5/zq15d7D+/sdBAAAAAAAAAAAAAAAAAAA5K4/+i2ZvFhBQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwAtf//3+BwbAonpWTVUaDahSRFW8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAd8DLAAAA///uq2eO") r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x6, 0x1, 0x7, 0xa, 0x5, 0xf0f, 0x630, {0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x7, 0x0, 0x4, 0xd, 0x1}}, &(0x7f0000000180)=0xb0) getrlimit(0xe, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x1fd70c2246ca828f, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000940)={'gretap0\x00', 0x0, 0x7, 0x7800, 0x920, 0x4, {{0x12, 0x4, 0x3, 0x37, 0x48, 0x64, 0x0, 0x7, 0x6, 0x0, @private=0xa010101, @remote, {[@end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xde, 0x1, 0x3, [{@rand_addr=0x64010102}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x6}, {@multicast1, 0x8}, {@private=0xa010101, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x22ef}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d40)={'sit0\x00', &(0x7f0000000cc0)={'erspan0\x00', 0x0, 0x20, 0x40, 0x7fff, 0xfffffff8, {{0x10, 0x4, 0x0, 0x3a, 0x40, 0x66, 0x0, 0xc1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @generic={0x83, 0x10, "4358801c51e3047c734433d29c5f"}, @cipso={0x86, 0x18, 0x3, [{0x0, 0xb, "21412b810878253f9f"}, {0x0, 0x7, "e4d1ca6614"}]}, @end]}}}}}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000480)="05031600ffff140000004788031c09102c28a632590b0bf6ab6c26c1ed7a2254c30206e9b5ae", 0x26, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f00000000c0)={0x1d, r13}, 0x18) connect$can_j1939(r12, &(0x7f0000000140)={0x1d, r13}, 0x18) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="0c060000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="c401028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffffff080006001114fd84461d1d777690d5417cd4dc45b6ee375bd20ec79010335eb6b275601aaa827023fd55d206369c8592d179f5480a3cb7c3a062aa920182c79649d53b247c58c05be7dbb4e369db78122e541b1cd8a0d367829bb81617de1ad40f7fe6c25f2400"/178, @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400c728000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000000803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="e40102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004007f00000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004008200000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400030000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004000300050cfc0800000000000104000000ac0d07ffcd00000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000008000100", @ANYRES32=r8, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400090000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="ec00028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400810000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040004000000"], 0x60c}, 0x1, 0x0, 0x0, 0x10}, 0x40081) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x800800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 2m58.946245943s ago: executing program 1 (id=239): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001014}, 0x44004) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000885) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x58, r1, 0x405, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004c00}, 0x4040084) bind(r5, &(0x7f0000000380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80) 2m58.476310679s ago: executing program 1 (id=244): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtaction={0x60, 0x30, 0x100, 0x70bd25, 0x2000000, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x0, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfff, 0x7fffffff, 0x10000000, 0x0, 0xff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10900, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) fsync(r1) socket$nl_route(0x10, 0x3, 0x0) 2m58.405566489s ago: executing program 33 (id=244): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtaction={0x60, 0x30, 0x100, 0x70bd25, 0x2000000, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x0, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfff, 0x7fffffff, 0x10000000, 0x0, 0xff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10900, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) fsync(r1) socket$nl_route(0x10, 0x3, 0x0) 2m51.52740251s ago: executing program 0 (id=306): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000e00)={[], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x193042, 0x80) sendfile(r0, r0, 0x0, 0x7a680000) 2m51.369301391s ago: executing program 0 (id=307): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xe, 0x1000009, 0x8, 0x2}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r2, @ANYBLOB="000000f1ffffffff8404000000000000d15fd913ee2da761342a87b42b7fd469848306842641f079166f8761f8b475dabc581e74ee2ce073d6ce05d97ab98a592fdeeb640804c93cefa1be4be47a942eb24a11111a603dfd1b506a875b47cc33c5640cada43c5dd8d4c1543eb676181fc68d807c2174ea4510c30c40c9263698038bc1a5ab9153befd4687a43d535c6e0eb71fa24c2f6d6132c5f3f8181b87565157d15b6a206d11c22399360a2f646bdf970f3e60159dbaf0b48c5031b1d5b22c826c19a4d0250d4be79cc7f3eb66cd292ff8ad94d553b4ed037907e559e772aacf7bbd2f7f1d7cf8c3"], &(0x7f0000000000)='GPL\x00'}, 0x90) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./proc\x00', 0xb4552, &(0x7f0000000080)=ANY=[], 0x0, 0x11ff, &(0x7f0000001280)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x20, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2c, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f00000000c0)=@tcp=r0}, 0x20) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000002c0)="df", 0x1}], 0x1}}], 0x1, 0x4008005) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000580)) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 2m50.845447819s ago: executing program 0 (id=312): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bc00000000000000dd0a00000000000073004800000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf251b00000008000100", @ANYRES32=r3, @ANYBLOB="0800150000000000000000000000000093cbf867480124251025ed22eff22fc1b514e361075b27f3007adc06c193de92a7cebbb1a3d625a21b12da7e4b2c52688885b3431a0b2f89097c895a4abc1084da86ced67841c5005a3c5a20ac17229dd4956a184f2d9e8fe0bead0f900bf5e6bd6cb02b0c7e449ff607e1409c8af91d49906ba9c5f31a3c23d605a5a37053d983adac35d9dd81e9cb38598d8eb80323b6e80933b957ddba41d340bb1b9a0e7335552b7ba4b82988b7aa431ebe0c157511f5fa10a7d2fef3763fbc9b86a2443ecf93c04a4aba67"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m50.648277582s ago: executing program 0 (id=314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@user_xattr}]}, 0x1, 0x4d9, &(0x7f0000000b80)="$eJzs3ctrXNUfAPDvnTR9pk1+/dVqa6vRKhYfSZM+7MKFioKggqCLuoxJWmunjTQR2hI0FanrgntxKbh05c6NqAvxD1BwKYWiQWgqCJH7ymMySSd1kkmTzwemc869595zzr3nTM69Z+40gA2rO/0nieiIiF8iojOPzk/Qnb9NTY4P3p4cH0xievrNP5Is3a3J8cEyabndjiJyuBJR+SSJ55OF+Y5evnJuoFodvljEe8fOv987mobOD5wZPjN8of/kyWNH+5490X983nZ1drXAtjrL0nrd2v/hyIF9r7x9/fXBU9ff+eGrdF97D+bri3psbmD3EbcXlOLVesm606P253Smdt3jDWV079g5J5xsamFBWJa2iEhPV3vW/zujLWZPXme8/HFLCwesqPRv05bFV09MA+tYEq0uAdAa5R/69Pq3fMU/qzT4WANuvjB70T81OT44ld0H2JJdFVWK5e0rmH93RJya+Pvz9BU191MAAFZCNrZ5umb8l6nE3uw9n+vYVcyhdEXE/yJid0T8PyL2RMR9EVna+yPigXzj6c4G8++uiS8c/1Ru1C1zk6Tjv+fmjP2m5tS/eOtqK2I7s/q3J6fPVoePFMfkcLRvSeN9S+Tx7UuLTyvNHf+lrzT/cixYFODGpvwG3cxOhgbGBpp1EG5ejdi/qV79k5mZgLQF7IuI/cvb9a4ycPbJLw8slujO9V9CE+aZpr+IeCI//xNRU/9SMjM/efnKM2dn5yfTNn6i/3jv1qgOH+ktW8VCP/587Y3F8r9T/evNZTZTev63z2//NSk6/0ry+dr2qFaHL44uP49rv3666DXNMtr/jLT9b07eyuasf3o3X3ZpYGzsYl/E5uS1LF50lq2RLu+f3fZSES/Tp/U/fKh+/99dbJPW/8GISBvxwYhdD0XEw0XZH4mIRyPi0BL1//7Fx95bov5JJHF37b8J0voP1f38m2n/Xcnc+fp5gfaoXVIv0Hbuu28Wm7dv7Pwfi4nsszaXff7dQSPlurvWDAAAAPeeSkR0RFLpycPdHVGp9PTk3+HfE9sr1ZHRsadOj3xwYSh/RqAr2ivlna7OOfdD+5KJYo95vL+4V1yuP1rcN/6sbVsW7xkcqQ61uO6w0e2Y3/+j7P+p39taXTpgxS0+j7bEowHAulDb/ystKgew+hr5Ho1rAVif6vT/lf7eGbBG1PT/q60qB7D66o3/P6qJLxj/GyHAurCw//9W5yfrgPXI7zXCxqX/w8al/8OG1NBD8k0PlA8LLJm4LGLdNFsbfsJ/owTKn4dZyby2xeySqGSBjlgDdb+bQGcjiSPi6/+cV1sTypz2mNU9Po3+ZxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABr278BAAD//+3d3fE=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.swap.current\x00', 0x275a, 0x0) ioctl(r1, 0x1, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='select \n', 0x10) write(r2, &(0x7f0000000100)='file read /etc/\\xsswd task.uid=0 exec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd607428dd00283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fe8000000000000000000000000000bb0002122b072e41e24b11f34b608816e5"], 0x0) 2m50.571125362s ago: executing program 0 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_CAPBSET_READ(0x17, 0x8000000000006) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x800000, 0x0, 0x0, 0x0, 0x0) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tcp']) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x220c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x7d4165c9) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x7) r11 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r11, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 2m50.01043821s ago: executing program 0 (id=320): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000200)=0xa, 0x4) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e28, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}], 0x1, 0x40002003, 0x0) 2m50.010278935s ago: executing program 34 (id=320): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000200)=0xa, 0x4) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e28, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}], 0x1, 0x40002003, 0x0) 2m49.661753377s ago: executing program 4 (id=321): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x10000, @remote, 0x1}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@local, 0x1, 0x2, 0xff, 0x6, 0xfc01, 0x95}, &(0x7f0000000280)=0x20) sendmsg$NFT_BATCH(r5, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={0x0, 0x50}}, 0xb61997d73b9acda) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800", 0x2}], 0x1) readv(r4, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000e40)={0x0, 0xc00, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r7, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0) 2m48.750688491s ago: executing program 4 (id=331): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000340)={0x0, {{0xa, 0xfffc, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x2, 0x42101) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsm_get_self_attr(0x69, 0x0, 0x0, 0x1) statfs(0x0, &(0x7f0000000040)=""/128) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@deltaction={0x24, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x20000854) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 2m47.341776318s ago: executing program 4 (id=336): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x2eb, @mcast2, 0xa}, 0x1c) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r2, 0x0, 0xf2, 0x40000120, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44849}, 0x0) socket(0x23, 0xa, 0x5) sendmmsg(r0, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000002c0)="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", 0x571}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4004c801) socket(0x18, 0x2, 0x37c) 2m47.158415918s ago: executing program 4 (id=337): r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x44) r3 = fanotify_init(0x2, 0x1000) fanotify_mark(r3, 0x541, 0x40000019, r2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2888004, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) chdir(&(0x7f0000000000)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x153042, 0x80) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000140)=""/188, 0xbc}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000200)=0x18) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000001c0)=0xff) pwritev2(r4, 0x0, 0x0, 0x5405, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x23d1) write$FUSE_INIT(r7, &(0x7f0000006540)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x14a4014, 0x2, 0x2, 0x81, 0x0, 0x0, 0x0, 0x102, 0xfffffffe}}, 0x50) sendfile(r4, r4, 0x0, 0x7a680000) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r8, 0x29, 0x7, 0x0, 0x20) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600), 0x141000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r9, 0x4610, &(0x7f0000000640)={0x39, 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x4, 0xa}, {0x3}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 2m47.036290423s ago: executing program 4 (id=340): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x10, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0x4}, @TCA_FLOW_MODE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000814}, 0x4004810) (fail_nth: 10) 2m46.72825407s ago: executing program 4 (id=344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) syz_emit_ethernet(0x12, &(0x7f0000007080)=ANY=[@ANYBLOB="aa0000008906"], 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf251e0000000c000600010000000100000010002f"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) 2m46.437438962s ago: executing program 35 (id=344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) syz_emit_ethernet(0x12, &(0x7f0000007080)=ANY=[@ANYBLOB="aa0000008906"], 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf251e0000000c000600010000000100000010002f"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) 2m14.016116662s ago: executing program 6 (id=559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x1000000}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x4008800) 2m13.935770441s ago: executing program 6 (id=561): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xfe, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="05170000fffe0002140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00B'], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m13.876605205s ago: executing program 6 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495dd, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000012, 0x700, 0x0, &(0x7f00000004c0)="4133c9e924380000000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa14001980080001"], 0x44}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, 0x1403, 0x300, 0x70bd2c, 0x3, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x0, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x810) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20050800) 2m13.824138014s ago: executing program 6 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000080)=@ng={0x4, 0xd, "7930cfe3e2d760"}, 0x9, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x78, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_vlan\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x69, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}]}]}]}, 0x78}}, 0x40000040) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/size\x00', 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getitimer(0x2, &(0x7f0000000640)) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000040)={0x10, 0x4f1eea2fb65a514d}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2b05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r5, 0x3a, 0x36, 0x0, 0x0) write(r1, &(0x7f0000000440)="8bce13e4ced6", 0x6) 2m13.748224361s ago: executing program 6 (id=564): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) userfaultfd(0x1) socket$packet(0x11, 0x2, 0x300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @local}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x38, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) (fail_nth: 10) 2m13.443794581s ago: executing program 6 (id=568): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) write(r0, 0x0, 0x0) (fail_nth: 6) 2m13.401042517s ago: executing program 36 (id=568): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) write(r0, 0x0, 0x0) (fail_nth: 6) 14.055327202s ago: executing program 8 (id=1492): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x2d39, &(0x7f00000004c0)={0x0, 0x8f8d, 0x0, 0x3, 0x8b}, &(0x7f0000000540), &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, r3, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="bc7eddd62a"], 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000440)={0x2, 0x2, 0x1, 0x5, 0x1, 0x0, [{0x26817ab2, 0xfcd, 0x22, '\x00', 0x100}]}) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$MEMWRITEOOB64(0xffffffffffffffff, 0xc0184d15, &(0x7f0000000140)={0x19, 0x0, 0x0, 0x0}) 12.458959273s ago: executing program 2 (id=1499): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xffff0000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x10888) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000000000a932a63b8012b7e50000000000881a91a7f493ae5173966f7adc37fef547e45e4eff03161be6ef2f564181032bd71eeaceeafda4c22daeb915a003f9aaca4daaea0617e6ea738a8639a3fac68bd6b6ffadee77dfa14b0bb828c80264558868eaca45a62c0c4a93ce9442fcef96c7d24958cf339b56d76b4cb8736bd5dde23bb15ec2d217152fb3ece421a4165f97bfc4e4b91f4f6bdb13a96e9c6461e373c23afd0048531c27083f04189b71755affff8ac0439f305582aa1e4391053b6a280f169d54050adb2e8d6c4f0fb4a6", @ANYRES32=0x0, @ANYBLOB="1000000084e8b61a140012800b00010067656e65766500000400028008000400e1ff0000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000004c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0, r4}) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x2000000, 0x8010, r0, 0x0) 12.372201648s ago: executing program 2 (id=1501): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000340)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@nodiscard}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) lseek(0xffffffffffffffff, 0x1000000, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000100)="06ae5540a32ffc5db8e8") syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000e00)={0x17c04, r3, 0x299f25fd, 0x4000003, 0x10001, 0xfd}) 11.782833594s ago: executing program 8 (id=1502): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) r0 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r7}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001304000000000000000100000500110000000000000300000000000000000000000000000901"], 0x0, 0x4a}, 0x28) write$tun(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe800000000000000000000000000002"], 0x64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r3, &(0x7f00000004c0)='h', &(0x7f0000000580)=@tcp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r9, &(0x7f0000000640), &(0x7f0000000480)=@udp=r2, 0x1}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) execveat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1000) write$FUSE_NOTIFY_POLL(r8, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x5f04}}, 0x18) 11.112752406s ago: executing program 7 (id=1503): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60080, 0x0) r0 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) 11.112276832s ago: executing program 2 (id=1504): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000280)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x44010, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r5, r4, 0x0, 0x40001) 11.09713164s ago: executing program 5 (id=1505): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x627e, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000002964000032000000fe8000006e2c6459000000000000002f", @ANYBLOB="00000000180000ddff"], 0x40}}], 0x1, 0x40440c0) 10.654331225s ago: executing program 5 (id=1507): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000003", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250000000008000100", @ANYRES32=r3, @ANYBLOB="0c00030003000000000000000800020000000000060006"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) 9.426507986s ago: executing program 8 (id=1509): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1840, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cd, 0xffff) r2 = socket(0x400000000010, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) close(r0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1f}]}, 0x2c}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0xffffffffffffffff, 0x0) 9.425869804s ago: executing program 7 (id=1510): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_emit_ethernet(0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x7c0, &(0x7f00000002c0)={0x0, 0x455c, 0x1000, 0x3, 0x3}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r0, r1, 0x0, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x1460, 0x100, 0x0, 0xb2}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x40000, 0x2, 0x23ab, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x2, 0x81}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x21af, 0x100, 0x2, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe45b, 0x400, 0x3, 0x821a, 0x0, r0}}], 0x4, &(0x7f0000000340)={0x2e, 0x47, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r3, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x40000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 9.360216614s ago: executing program 5 (id=1511): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x152) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a45004, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 8.708633107s ago: executing program 7 (id=1512): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x2d39, &(0x7f00000004c0)={0x0, 0x8f8d, 0x0, 0x3, 0x8b}, &(0x7f0000000540), &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, r3, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="bc7eddd62a"], 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000440)={0x2, 0x2, 0x1, 0x5, 0x1, 0x0, [{0x26817ab2, 0xfcd, 0x22, '\x00', 0x100}]}) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$MEMWRITEOOB64(0xffffffffffffffff, 0xc0184d15, &(0x7f0000000140)={0x19, 0x0, 0x0, 0x0}) 8.135565014s ago: executing program 9 (id=1513): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000271) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x103}, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000000}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$smackfs_relabel_self(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x201, 0xfffffffffffffffe}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x1, 0x2, 0x5685, 0x10000000000000}) syz_open_procfs$pagemap(r2, &(0x7f00000007c0)) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x4000) clock_gettime(0x0, &(0x7f0000002240)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000002100)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/96, 0x60}, {&(0x7f0000000640)=""/217, 0xd9}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/105, 0x69}], 0x2, &(0x7f0000001900)}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000000800)=[{&(0x7f00000019c0)=""/13, 0xd}, {&(0x7f0000001a00)=""/51, 0x33}, {&(0x7f0000001a40)=""/105, 0x69}], 0x3, &(0x7f0000001cc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000001bc0), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001c40)=""/14, 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f00000022c0)=""/203, 0xcb}, {&(0x7f0000001d80)=""/150, 0x96}, {&(0x7f0000001e40)=""/67, 0x43}, {&(0x7f00000023c0)=""/230, 0xe6}], 0x4, &(0x7f0000002000)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}], 0x5, 0x40000140, &(0x7f0000002280)={r5, r6+60000000}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000400000008000000ffff000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) 8.1351518s ago: executing program 5 (id=1514): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fcntl$setlease(r0, 0x403, 0x2000000) ioctl$MEMGETINFO(r0, 0x80204d01, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r3, 0x1, 0xffffffff, 0xfffffffe, {{}, {}, {0x14, 0x19, {0x3, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r3, 0x9, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x6, 0x7, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x34}}, 0x22000080) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000047, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) setns(0xc9, 0x80) 5.633906157s ago: executing program 9 (id=1515): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000340)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@nodiscard}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) lseek(0xffffffffffffffff, 0x1000000, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000100)="06ae5540a32ffc5db8e8") syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000e00)={0x17c04, r3, 0x299f25fd, 0x4000003, 0x10001, 0xfd}) 4.676249116s ago: executing program 5 (id=1516): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000100)="b9ff030f604423", 0x0, 0xfb, 0x60006000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000304000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002c00128009000100626f6e64000000001c0002800500010005000000080002"], 0x4c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 3.525874044s ago: executing program 9 (id=1517): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8000}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x94) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000200)=0xffffffff, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x80300201, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f00000014c0)) connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000fc0)='\xdd!\x00', &(0x7f0000001000)='./file0\x00', r0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r0, 0x6, 0x1, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup=r0, r5, 0x2c, 0x18, 0x0, @void, @value=r1, @void, @void, r6}, 0x20) 3.523549514s ago: executing program 8 (id=1518): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x12, &(0x7f0000007080)=ANY=[@ANYBLOB="aa0000008906"], 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf251e0000000c000600010000000100000010002f"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x4000000000010046) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r11, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="8000308014000400915a4e309955ea11f5ac72db9b80347e24000300fba9d0566e20c08ce370deeec71c9077390d7a31695b01cacfba297179d5c6af0500020000000000140004001a7e9606c508e0580bad8c4d5b692f4d14000400762e57b68425fca0421f1275d8bcbc4e140001800800040055dd000008000100010000000c00060002000000020000006000308024000300ad79bad23bc7957347e43c853e95109cd0c6e00524000300c320bfc9b4b6b0c83e34ca996653eb09676b1987d9de8a1aa6dfb6828fbf67aa14000400dde2d76c46d9e84c78ed5b70ece2a48f0c000600030000000000000008000300"/252, @ANYRES32=r11, @ANYBLOB], 0x264}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 3.380534886s ago: executing program 2 (id=1519): socket(0x840000000002, 0x3, 0x3) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f00000000c0)={[{@dax_never}]}, 0x0, 0x248, &(0x7f0000000bc0)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r1, 0x10001) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@desc={0x1, 0x0, @desc4}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r4, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r6, r5, 0x15, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='mnt\x00', 0x0, 0x0) 3.195653781s ago: executing program 7 (id=1520): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) r4 = socket$kcm(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x2}, {{&(0x7f0000000d80)=@in={0x2, 0x0, @remote}, 0x80, 0x0}, 0x7}, {{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000003ac0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x401}, {{&(0x7f0000003f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/100, 0x64}, 0xffffffe4}], 0x4, 0x0, &(0x7f00000042c0)={0x0, 0x3938700}) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000038000b63d25a", 0xa}], 0x1}, 0x0) 3.004273674s ago: executing program 9 (id=1521): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000180000000080654d97"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, &(0x7f0000000000)={r0}) 1.855923197s ago: executing program 9 (id=1522): sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8000000000107}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xcfce, 0x3) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r4, 0x0, 0x40) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) 1.855200066s ago: executing program 2 (id=1523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.726793873s ago: executing program 5 (id=1524): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) fallocate(r1, 0x30, 0x47, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x150}}, 0x844) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:device_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x9010}, 0x4081) 1.71609266s ago: executing program 8 (id=1525): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000440)) recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000500)=""/98, 0x62}, {&(0x7f0000000580)=""/97, 0x61}, {&(0x7f0000000600)=""/234, 0xea}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/39, 0x27}], 0x5}, 0x40000100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() r2 = signalfd4(r0, &(0x7f0000000180)={[0x8]}, 0x8, 0x40000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000380)={0x1, 0x6}, 0x4) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="5001", @ANYRES8=r4, @ANYRES64=r6], 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa4000d707010000080020007500feff0000820095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0xf1, &(0x7f0000000240)=""/241, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) timer_create(0x3, 0x0, 0x0) listen(r7, 0x9) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.694646158s ago: executing program 7 (id=1526): r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000003080)={0x0, 0x0, 0x6, &(0x7f0000000080)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x80, 0x0, &(0x7f0000000340)="cd0000000400000000000000206de50bf792ff5299c506b6884e3b1824740375b7fe3d98e386618000b63ad1fd4b4df15821f030e4bf4cdb8bc66883e6d94e24e42990afb4bf3d120844cbfb318174b6ca60d370dfaacc952f4dc5a9d8998eaec3907198092e430cf30a4311a6fdd9612a5294abd4c55ff96cad0baa9ed4c79b", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.580867241s ago: executing program 2 (id=1527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}}, 0x90) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r1) r4 = syz_io_uring_setup(0x2d5b, &(0x7f0000000540)={0x0, 0x8000e543, 0x400, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_emit_ethernet(0xe2, &(0x7f0000000840)={@remote, @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x4e22, 0xc0, 0x0, @opaque="b75f2f0d47963e7468df2a4d229c559476a0cb3dd8f1ddeec6f0ce4b986810b93d1b3e9739021f61917568eac2c1200979faafb7acfed6add9bf75e1a089fdc52dd18caab9a058f5e47b154b78aae90ad6f97bec8a48b0751ef4d48fa7d427d2a9020fe33552ac29caae255c8af6cf04500c767ce1dee9d52e32c11c34f637373d2f92ee47a82928636760bb5bca28846852ac4cae2271e7f0c275b97771a06dd32c53907c65d917e7eba59377140fd987af1fc116f68376"}}}}}, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r3, @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e31000000240032"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000280)="6695a0f9151ca5b88e58d7ed2cb9621ba506ebca60af7b2abde66ecab499734d7693c4f15db3bc0c725f7940c1334c7347e38dd06a5ad65047f30a406b80c3c20fd20c79e22be24873c7b3481c6aafa83cdf9c7773d6d999ee9fb02996345839f9c1a5deeb37e35b3fdd7331eb86a65d2e110a0a1dcf229d690e53c4c97c46cf76b33ff8f97bd006b1c8094332eea1ee25f51b761a1a33eae9c272d82ef3f8b4f0a80bfca36cf50b74224114b9da3f15484c1005a2bde958b3c2612e95f6ec1cf8b376eb9338c777fc440e0d556e2b4dedbf62d273d42e481fa8553341c2", 0xde}, {&(0x7f00000005c0)="a8cbf41fe59ac3c98d1f045b77c08970ab8b46042342c2a5acfe50730cf492b1efdb926b24c5964e0ab218cff25c94c43ebbeafd6e8091575299da1e6b5e7038bd7854e9a7ff06aa7e601d012f060dfb2d49e1debf0e6fb375ae20446c41b1695c6f8817a627568709c4e426d68b5173f2b4fc1440697a1af9954a691cab9e7f5eb51c6006fb001852e0c1a04bdf99aa166aba9ebca373b3966c", 0x9a}, {&(0x7f0000000700)="ebe20a0da85de10fe8193d55d3f4a51c1a7a162272699357587525a8c1831748916cfcf09ce3648150f889d9882c383b6e281de334d2969e6fda39cceb26326247d0957ee0f50a34229b65db8e789eab9f9738b2f08e06f3ca2480057d867c06af9a8b5d0db776172621c27a7e36d1fa34b47ef92c975b01025aa0c930faef1d78d023f1947953d6df2be5799432774b6808e5df944ba1dbaf08a0141b79c57588f9149e2d99a4e433e826329854d6280bebab20f0f4ecec5633f6f227fefb1d0d2cbb26d4769c93ef08478bcb5ca8a964ea10d49b070fd208a3a130ae9762aeb4f1e713ecca18baf9f7d2f1e7c204cc3751a46b2916cbdc", 0xf8}], 0x3) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r10, &(0x7f0000000080)=[{&(0x7f0000000000)="ef5e39aa2c97d7223f0d", 0xa}, {&(0x7f0000000400)="3993e1e68f64eef404a0dda208", 0xd}], 0x2) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10c11084}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r9, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x24}}, 0x40000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 59.019871ms ago: executing program 9 (id=1528): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000340)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@nodiscard}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) lseek(0xffffffffffffffff, 0x1000000, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000100)="06ae5540a32ffc5db8e8") syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000e00)={0x17c04, r3, 0x299f25fd, 0x4000003, 0x10001, 0xfd}) 58.354372ms ago: executing program 7 (id=1529): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x10000, @remote, 0x1}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@local, 0x1, 0x2, 0xff, 0x6, 0xfc01, 0x95}, &(0x7f0000000280)=0x20) sendmsg$NFT_BATCH(r5, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={0x0, 0x50}}, 0xb61997d73b9acda) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800", 0x2}], 0x1) readv(r4, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000e40)={0x0, 0x4000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r7, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0) 0s ago: executing program 8 (id=1530): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) unshare(0x22060600) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setxattr$incfs_metadata(&(0x7f0000000100)='./sys/class/rnbd-client/ctl/map_device\x00', &(0x7f0000000180), &(0x7f00000002c0)="7fc92110a1b4d7e311c782fb72960daae30ceb6bbe2e5d4921ce9e83160ab5ba55cbbb96f2", 0x25, 0x1) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000006800010027bd7000fdffff7f00000000000000000c000200010000001500000024000c8008000200030000000600010000800000eaff0000dc0000000800030004000000060003000065"], 0x50}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000500)={&(0x7f0000000280)}) write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[], 0x0, 0x34}, 0x28) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x6c, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xfffc, 0x0, 0x8, 0x5, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MIN_RATE64={0x4}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}]}, 0x9c}}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x80, 0x10, 0x5, 0x4, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}, @end, @cipso={0x86, 0x6, 0x2}, @generic={0x83, 0xf, "2032a60783bd3ca3fe1fe1d892"}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@delqdisc={0x44, 0x25, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xffe0, 0xd}, {0x3, 0x11abd81f08baee2a}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x444}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8001}, @TCA_STAB={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) cachestat(r3, &(0x7f00000001c0)={0x800, 0x100}, 0x0, 0xee) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x4, 0x7, 0x1}) kernel console output (not intermixed with test programs): entered promiscuous mode [ 133.965696][ T8738] veth1_virt_wifi: entered promiscuous mode [ 133.967365][ T8738] veth0_virt_wifi: entered promiscuous mode [ 133.970397][ T8738] virt_wifi0: entered promiscuous mode [ 133.986304][ T8738] vlan0: entered promiscuous mode [ 133.987606][ T8738] vlan1: entered promiscuous mode [ 133.993233][ T8738] macvlan0: entered promiscuous mode [ 134.021685][ T8738] macvlan1: entered promiscuous mode [ 134.024090][ T8738] ipvlan0: entered promiscuous mode [ 134.027129][ T8738] ipvlan1: entered promiscuous mode [ 134.052172][ T8738] macvtap0: entered promiscuous mode [ 134.053380][ T8738] macsec0: entered promiscuous mode [ 134.055130][ T8738] geneve0: entered promiscuous mode [ 134.056057][ T8738] geneve1: entered promiscuous mode [ 134.072861][ T8738] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 134.082511][ T8738] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 134.086193][ T8738] netdevsim netdevsim7 netdevsim2: entered promiscuous mode [ 134.101467][ T8738] netdevsim netdevsim7 netdevsim3: entered promiscuous mode [ 134.103011][ T8738] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 134.103074][ T8738] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 134.107579][ T8738] bridge1: entered promiscuous mode [ 134.109091][ T8738] vxlan0: entered promiscuous mode [ 134.114203][ T8738] bridge2: entered promiscuous mode [ 134.120425][ T8738] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 134.120566][ T8738] gre1: entered promiscuous mode [ 134.120897][ T8738] bridge3: entered promiscuous mode [ 134.192665][ T7943] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.192718][ T7943] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.195839][ T7943] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.195975][ T7943] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.196131][ T7943] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.196300][ T7943] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.196557][ T7943] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.196753][ T7943] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.477015][ T8757] loop8: detected capacity change from 0 to 512 [ 134.487162][ T8757] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.798: bg 0: block 5: invalid block bitmap [ 134.487201][ T8757] loop8: lost filesystem error report for type 5 error -117 [ 134.488340][ T8757] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 134.488355][ T8757] loop8: lost filesystem error report for type 5 error -117 [ 134.488473][ T8757] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.798: invalid indirect mapped block 3 (level 2) [ 134.488487][ T8757] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.488649][ T8757] EXT4-fs (loop8): 1 orphan inode deleted [ 134.488659][ T8757] EXT4-fs (loop8): 1 truncate cleaned up [ 134.489137][ T8757] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.531180][ T6489] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.587014][ T8771] geneve2: entered promiscuous mode [ 134.631872][ T8777] netlink: 'syz.8.808': attribute type 10 has an invalid length. [ 134.645951][ T8777] syz_tun: entered promiscuous mode [ 134.666381][ T8777] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 134.667421][ T8782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.668325][ T8782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.049075][ T8797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.049282][ T8797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.274850][ T8815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.275040][ T8815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.279677][ T8815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.283201][ T8815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.504559][ T8824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.507101][ T8824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.421417][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.421674][ T8856] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.528547][ T8856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.532345][ T8863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.532551][ T8863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.538530][ T8856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.678426][ T8856] bond1: left allmulticast mode [ 136.678466][ T8856] bond1: left promiscuous mode [ 136.721872][ T7943] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.722795][ T3060] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.722814][ T3060] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.722830][ T3060] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.855326][ T8880] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 136.869228][ T8880] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 136.869432][ T8880] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 136.962794][ T8890] netlink: 'syz.2.848': attribute type 11 has an invalid length. [ 136.964572][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'. [ 136.966702][ T8890] netlink: 'syz.2.848': attribute type 11 has an invalid length. [ 136.968279][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'. [ 137.103817][ T8896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.104010][ T8896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.341709][ T50] Bluetooth: hci3: Malformed LE Event: 0x0d [ 138.365399][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 138.365440][ T30] audit: type=1800 audit(138.340:1093): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 138.370629][ T30] audit: type=1800 audit(138.340:1094): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 138.385914][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.387757][ T30] audit: type=1800 audit(138.360:1095): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 138.394208][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.635073][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.639198][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.889477][ T30] audit: type=1800 audit(138.860:1096): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 139.253157][ T30] audit: type=1800 audit(139.230:1097): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 139.269967][ T30] audit: type=1800 audit(139.240:1098): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 139.298781][ T30] audit: type=1800 audit(139.270:1099): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 139.500214][ T8928] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 139.660382][ T30] audit: type=1800 audit(139.630:1100): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143485 res=0 errno=0 [ 139.666071][ T30] audit: type=1800 audit(139.640:1101): pid=4707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=143501 res=0 errno=0 [ 139.670989][ T30] audit: type=1800 audit(139.640:1102): pid=4707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=143504 res=0 errno=0 [ 139.775529][ T8934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.777679][ T8934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.791766][ T8936] loop2: detected capacity change from 0 to 512 [ 139.794164][ T8936] EXT4-fs (loop2): Test dummy encryption mode enabled [ 139.797669][ T8936] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.863: inode has both inline data and extents flags [ 139.797714][ T8936] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 139.798103][ T8936] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.863: couldn't read orphan inode 15 (err -117) [ 139.798131][ T8936] loop2: lost filesystem error report for type 5 error -117 [ 139.798740][ T8936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.260849][ T8942] overlay: Unknown parameter 'fsuuid' [ 140.711060][ T8946] loop5: detected capacity change from 0 to 512 [ 140.790236][ T8946] EXT4-fs (loop5): Test dummy encryption mode enabled [ 140.798508][ T8950] FAULT_INJECTION: forcing a failure. [ 140.798508][ T8950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.801011][ T8950] CPU: 1 UID: 0 PID: 8950 Comm: syz.8.866 Not tainted syzkaller #0 PREEMPT [ 140.801033][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 140.801039][ T8950] Call trace: [ 140.801043][ T8950] show_stack+0x2c/0x3c (C) [ 140.801068][ T8950] __dump_stack+0x30/0x40 [ 140.801082][ T8950] dump_stack_lvl+0xd8/0x12c [ 140.801095][ T8950] dump_stack+0x1c/0x28 [ 140.801106][ T8950] should_fail_ex+0x41c/0x590 [ 140.801115][ T8950] should_fail+0x14/0x24 [ 140.801123][ T8950] should_fail_usercopy+0x20/0x30 [ 140.801131][ T8950] _inline_copy_from_user+0x3c/0x174 [ 140.801145][ T8950] copy_msghdr_from_user+0xb8/0x194 [ 140.801157][ T8950] ___sys_sendmsg+0x14c/0x224 [ 140.801168][ T8950] __sys_sendmsg+0x158/0x204 [ 140.801180][ T8950] __arm64_sys_sendmsg+0x88/0x9c [ 140.801191][ T8950] invoke_syscall+0x98/0x244 [ 140.801203][ T8950] el0_svc_common+0xec/0x23c [ 140.801215][ T8950] do_el0_svc+0x4c/0x5c [ 140.801227][ T8950] el0_svc+0x64/0x260 [ 140.801238][ T8950] el0t_64_sync_handler+0x44/0x104 [ 140.801248][ T8950] el0t_64_sync+0x198/0x19c [ 140.879739][ T8951] overlayfs: missing 'lowerdir' [ 140.995680][ T8946] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.865: inode has both inline data and extents flags [ 140.995721][ T8946] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 140.995863][ T8946] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.865: couldn't read orphan inode 15 (err -117) [ 140.995881][ T8946] loop5: lost filesystem error report for type 5 error -117 [ 140.996414][ T8946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.127883][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.632748][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.7.870'. [ 142.201515][ T5650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.324764][ T8970] loop9: detected capacity change from 0 to 512 [ 142.345666][ T8970] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 142.345752][ T8970] System zones: 0-2, 18-18, 34-34 [ 142.347190][ T8970] EXT4-fs (loop9): 1 orphan inode deleted [ 142.347656][ T8970] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.357450][ T8995] netlink: 20 bytes leftover after parsing attributes in process `syz.5.876'. [ 142.369220][ T8995] netlink: 20 bytes leftover after parsing attributes in process `syz.5.876'. [ 142.478096][ T9001] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 142.481905][ T9001] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 142.481980][ T9001] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 142.502603][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.116902][ T9029] futex_wake_op: syz.2.890 tries to shift op by 144; fix this program [ 143.155561][ T9032] xt_hashlimit: size too large, truncated to 1048576 [ 143.245883][ T9039] loop8: detected capacity change from 0 to 8 [ 143.248708][ T9039] Dev loop8: unable to read RDB block 8 [ 143.249861][ T9039] loop8: unable to read partition table [ 143.250978][ T9039] loop8: partition table beyond EOD, truncated [ 143.252412][ T9039] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 143.519562][ T4350] Dev loop8: unable to read RDB block 8 [ 143.520911][ T4350] loop8: unable to read partition table [ 143.520990][ T4350] loop8: partition table beyond EOD, truncated [ 143.529389][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 143.529429][ T30] audit: type=1800 audit(143.500:1150): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 143.548057][ T30] audit: type=1800 audit(143.520:1151): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 143.563224][ T30] audit: type=1800 audit(143.540:1152): pid=9048 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.896" name="map_device" dev="sysfs" ino=19806 res=0 errno=0 [ 143.568776][ T9050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.569202][ T9050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.630528][ T9052] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 143.631022][ T9052] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 143.631070][ T9052] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 143.637481][ T30] audit: type=1800 audit(143.610:1153): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143816 res=0 errno=0 [ 143.715082][ T9054] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.898'. [ 143.716784][ T9054] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.898'. [ 144.111279][ T30] audit: type=1800 audit(144.080:1154): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 144.126335][ T9060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.130281][ T9060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.144640][ T30] audit: type=1800 audit(144.120:1155): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 144.568390][ T30] audit: type=1800 audit(144.540:1156): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 144.615551][ T30] audit: type=1800 audit(144.590:1157): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 144.635220][ T9069] loop9: detected capacity change from 0 to 512 [ 144.638260][ T9069] EXT4-fs: Ignoring removed nobh option [ 144.642645][ T9069] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 144.657361][ T9069] EXT4-fs (loop9): 1 truncate cleaned up [ 144.660277][ T9069] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.700217][ T30] audit: type=1800 audit(144.670:1158): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 144.714890][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.783889][ T30] audit: type=1800 audit(144.700:1159): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 145.171769][ T9085] loop5: detected capacity change from 0 to 256 [ 145.445199][ T9093] netlink: 'syz.5.912': attribute type 1 has an invalid length. [ 145.490020][ T9093] bond3: (slave veth0_to_bond): making interface the new active one [ 145.493399][ T9093] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 145.516497][ T9093] macvlan2: entered promiscuous mode [ 145.516534][ T9093] macvlan2: entered allmulticast mode [ 145.517440][ T9093] bond3: entered promiscuous mode [ 145.517450][ T9093] veth0_to_bond: entered promiscuous mode [ 145.519042][ T9093] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 145.543058][ T9093] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 145.601996][ T9093] bond3: left promiscuous mode [ 145.602038][ T9093] veth0_to_bond: left promiscuous mode [ 145.605955][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.608303][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.667581][ T9098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.669673][ T9098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.875777][ T9102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.875967][ T9102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.095542][ T9108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.097922][ T9108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.137413][ T9110] netlink: 'syz.8.919': attribute type 1 has an invalid length. [ 146.145258][ T9110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.149321][ T9110] syz_tun: left promiscuous mode [ 146.151987][ T9110] bond0: (slave syz_tun): Releasing backup interface [ 146.185091][ T9110] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 146.213977][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.218634][ T9117] netlink: 'syz.9.921': attribute type 2 has an invalid length. [ 146.222243][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.424672][ T9121] fuse: Bad value for 'fd' [ 146.566698][ T9121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.568530][ T9121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.515556][ T9143] nvme_fabrics: unknown parameter or missing value '#! »›¦1ÝÖæ³R¹Û?¾Ó&nâ¶õ%²ßõƒºë“~ˆÜì[6=pÍŠyz\UÔj@5NãfåWÎrs„)ìq²‰' in ctrl creation request [ 147.547308][ T9143] nvme nvme1: failed to connect socket: -111 [ 148.287570][ T9147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.290636][ T9147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.496543][ T26] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 148.513915][ T26] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 148.553594][ T9171] fuse: Bad value for 'fd' [ 148.699298][ T9171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.700871][ T9171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.488714][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 149.488751][ T30] audit: type=1800 audit(149.460:1195): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144705 res=0 errno=0 [ 149.498323][ T30] audit: type=1800 audit(149.470:1196): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144720 res=0 errno=0 [ 149.510800][ T30] audit: type=1800 audit(149.480:1197): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 149.519520][ T30] audit: type=1800 audit(149.490:1198): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 149.545662][ T30] audit: type=1800 audit(149.520:1199): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 149.572499][ T30] audit: type=1800 audit(149.550:1200): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 149.586387][ T30] audit: type=1800 audit(149.560:1201): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=144707 res=0 errno=0 [ 149.775282][ T30] audit: type=1800 audit(149.750:1202): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 149.809044][ T30] audit: type=1800 audit(149.780:1203): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 149.826277][ T30] audit: type=1800 audit(149.800:1204): pid=4709 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144740 res=0 errno=0 [ 149.870201][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.946'. [ 151.044712][ T9210] loop0: [ 151.530254][ T50] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 151.551838][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.959'. [ 151.662331][ T9240] netlink: 11575 bytes leftover after parsing attributes in process `syz.8.965'. [ 151.747424][ T9250] netlink: 'syz.8.970': attribute type 2 has an invalid length. [ 151.747459][ T9250] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.970'. [ 151.747835][ T9250] nbd: must specify at least one socket [ 151.951141][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.9.969'. [ 152.556208][ T9277] overlayfs: failed to clone upperpath [ 153.562305][ T9285] overlayfs: missing 'workdir' [ 153.788584][ T9284] netlink: 20 bytes leftover after parsing attributes in process `syz.5.982'. [ 153.844909][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.845104][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.924271][ T9295] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.017752][ T9296] overlayfs: failed to resolve './file2': -2 [ 154.403882][ T9300] loop5: detected capacity change from 0 to 512 [ 154.405615][ T9300] EXT4-fs: inline encryption not supported [ 154.425485][ T9300] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 154.427822][ T9300] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.986: invalid indirect mapped block 2683928664 (level 1) [ 154.430646][ T9300] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 154.431134][ T9300] EXT4-fs (loop5): 1 truncate cleaned up [ 154.433333][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 154.433348][ C0] EXT4-fs (loop5): initial error at time 154: ext4_free_branches:1023: inode 13 [ 154.433370][ C0] EXT4-fs (loop5): last error at time 154: ext4_free_branches:1023: inode 13 [ 154.439643][ T9300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.502724][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 154.504217][ T30] audit: type=1800 audit(154.480:1278): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 154.522433][ T30] audit: type=1800 audit(154.500:1279): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 154.543183][ T30] audit: type=1800 audit(154.520:1280): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 154.885615][ T30] audit: type=1800 audit(154.860:1281): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 154.915089][ T30] audit: type=1800 audit(154.890:1282): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 155.020254][ T9323] loop9: detected capacity change from 0 to 512 [ 155.036183][ T30] audit: type=1800 audit(155.010:1283): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 155.044995][ T9323] EXT4-fs (loop9): Test dummy encryption mode enabled [ 155.052035][ T9323] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.994: inode has both inline data and extents flags [ 155.054878][ T9323] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 155.055063][ T9323] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.994: couldn't read orphan inode 15 (err -117) [ 155.060171][ T9323] loop9: lost filesystem error report for type 5 error -117 [ 155.061586][ C1] EXT4-fs (loop9): error count since last fsck: 2 [ 155.061612][ C1] EXT4-fs (loop9): initial error at time 155: ext4_orphan_get:1399: inode 15 [ 155.061650][ C1] EXT4-fs (loop9): last error at time 155: ext4_orphan_get:1404 [ 155.068992][ T9323] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.000429][ T30] audit: type=1800 audit(155.970:1284): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 156.018625][ T5650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.316954][ T30] audit: type=1800 audit(156.290:1285): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 156.338086][ T30] audit: type=1800 audit(156.310:1286): pid=9338 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.998" name="map_device" dev="sysfs" ino=19806 res=0 errno=0 [ 156.341419][ T30] audit: type=1804 audit(156.310:1287): pid=4707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="udevd" name="/sys/devices/virtual/block/loop5/uevent" dev="sysfs" ino=16390 res=1 errno=0 [ 156.411179][ T9342] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 156.415016][ T9342] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 156.417167][ T9342] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 156.513555][ T9343] overlayfs: missing 'workdir' [ 156.710750][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.920528][ T9361] loop7: detected capacity change from 0 to 512 [ 156.921302][ T9361] EXT4-fs: inline encryption not supported [ 156.928743][ T9363] overlayfs: failed to clone upperpath [ 156.930261][ T9361] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 156.932646][ T9361] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1005: invalid indirect mapped block 2683928664 (level 1) [ 156.994258][ T9361] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 156.994956][ T9361] EXT4-fs (loop7): 1 truncate cleaned up [ 157.001191][ T9361] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.008179][ T9367] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.734337][ T9374] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 158.138418][ T6311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.273308][ T9387] 9p: Bad value for 'rfdno' [ 158.566596][ T9397] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1013'. [ 158.569392][ T9399] loop8: detected capacity change from 0 to 512 [ 158.571079][ T9399] EXT4-fs (loop8): Test dummy encryption mode enabled [ 158.575616][ T9399] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1014: inode has both inline data and extents flags [ 158.575658][ T9399] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.578670][ T9399] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1014: couldn't read orphan inode 15 (err -117) [ 158.579439][ T9399] loop8: lost filesystem error report for type 5 error -117 [ 158.581556][ T9399] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.184132][ T9406] overlayfs: missing 'lowerdir' [ 159.190014][ T9406] overlay: Unknown parameter 'fsuuid' [ 159.546124][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 159.546159][ T30] audit: type=1800 audit(159.520:1323): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 159.644634][ T9418] overlayfs: missing 'workdir' [ 159.873729][ T30] audit: type=1800 audit(159.850:1324): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 159.883040][ T30] audit: type=1800 audit(159.860:1325): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 159.896631][ T30] audit: type=1800 audit(159.870:1326): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 160.192942][ T30] audit: type=1800 audit(160.170:1327): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 160.218771][ T6489] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.238460][ T30] audit: type=1800 audit(160.210:1328): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 160.282496][ T30] audit: type=1800 audit(160.250:1329): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 160.303052][ T30] audit: type=1800 audit(160.280:1330): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 160.697986][ T30] audit: type=1800 audit(160.670:1331): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 160.782842][ T30] audit: type=1800 audit(160.760:1332): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 160.827043][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1028'. [ 161.646904][ T9465] loop7: detected capacity change from 0 to 512 [ 161.648835][ T9465] EXT4-fs (loop7): Test dummy encryption mode enabled [ 161.654160][ T9465] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1032: inode has both inline data and extents flags [ 161.657387][ T9465] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 161.657988][ T9465] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1032: couldn't read orphan inode 15 (err -117) [ 161.659951][ T9465] loop7: lost filesystem error report for type 5 error -117 [ 161.662861][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 161.662874][ C0] EXT4-fs (loop7): initial error at time 161: ext4_orphan_get:1399: inode 15 [ 161.662892][ C0] EXT4-fs (loop7): last error at time 161: ext4_orphan_get:1404 [ 161.681397][ T9465] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.693961][ T9469] 9p: Bad value for 'rfdno' [ 161.766697][ T9475] loop9: detected capacity change from 0 to 2048 [ 161.784968][ T9475] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.801122][ T9475] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 161.801154][ T9475] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 161.802328][ T9475] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 161.966623][ T9481] overlayfs: missing 'lowerdir' [ 162.057091][ T9479] overlay: Unknown parameter 'fsuuid' [ 162.580734][ T9486] loop5: detected capacity change from 0 to 512 [ 162.588043][ T9486] EXT4-fs: inline encryption not supported [ 162.592213][ T9486] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 162.594599][ T9486] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1037: invalid indirect mapped block 2683928664 (level 1) [ 162.594643][ T9486] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 162.598473][ T9486] EXT4-fs (loop5): 1 truncate cleaned up [ 162.601593][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 162.601604][ C1] EXT4-fs (loop5): initial error at time 162: ext4_free_branches:1023: inode 13 [ 162.601621][ C1] EXT4-fs (loop5): last error at time 162: ext4_free_branches:1023: inode 13 [ 162.609899][ T9486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.775629][ T6311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.267086][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.356208][ T9499] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1040'. [ 163.517786][ T9503] loop9: detected capacity change from 0 to 512 [ 163.521985][ T9503] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 163.530872][ T9503] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.1042: invalid indirect mapped block 4294967295 (level 0) [ 163.530918][ T9503] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 163.531596][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 163.531610][ C0] EXT4-fs (loop9): initial error at time 163: ext4_free_branches:1023: inode 16 [ 163.531631][ C0] EXT4-fs (loop9): last error at time 163: ext4_free_branches:1023: inode 16 [ 163.541087][ T9503] EXT4-fs (loop9): Remounting filesystem read-only [ 163.541228][ T9503] EXT4-fs (loop9): 1 orphan inode deleted [ 163.541238][ T9503] EXT4-fs (loop9): 1 truncate cleaned up [ 163.546967][ T9503] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.560035][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.687927][ T5650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.989149][ T9513] binder: 9512:9513 ioctl c0306201 20000080 returned -14 [ 164.060415][ T9525] loop7: detected capacity change from 0 to 512 [ 164.064039][ T9525] EXT4-fs (loop7): Test dummy encryption mode enabled [ 164.084805][ T9525] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1050: inode has both inline data and extents flags [ 164.087649][ T9525] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.088116][ T9525] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1050: couldn't read orphan inode 15 (err -117) [ 164.090826][ T9525] loop7: lost filesystem error report for type 5 error -117 [ 164.092539][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 164.092551][ C0] EXT4-fs (loop7): initial error at time 164: ext4_orphan_get:1399: inode 15 [ 164.092566][ C0] EXT4-fs (loop7): last error at time 164: ext4_orphan_get:1404 [ 164.106395][ T9525] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.384474][ T9532] overlayfs: missing 'lowerdir' [ 164.389922][ T9532] overlay: Unknown parameter 'fsuuid' [ 165.137784][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 165.137825][ T30] audit: type=1800 audit(165.110:1355): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 165.145633][ T30] audit: type=1800 audit(165.120:1356): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 165.167679][ T9539] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1053'. [ 165.225089][ T30] audit: type=1800 audit(165.140:1357): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 165.659146][ T30] audit: type=1800 audit(165.620:1358): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 165.713033][ T6311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.728969][ T30] audit: type=1800 audit(165.700:1359): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 165.759654][ T30] audit: type=1800 audit(165.730:1360): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 165.844547][ T9554] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.174998][ T30] audit: type=1800 audit(166.150:1361): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 166.214543][ T30] audit: type=1800 audit(166.190:1362): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 166.264139][ T30] audit: type=1800 audit(166.240:1363): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 166.518596][ T30] audit: type=1800 audit(166.490:1364): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1064" name="map_device" dev="sysfs" ino=19806 res=0 errno=0 [ 166.580269][ T9575] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 166.583530][ T9575] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 166.583601][ T9575] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 166.729557][ T9580] loop7: detected capacity change from 0 to 2048 [ 166.822607][ T9586] loop8: detected capacity change from 0 to 512 [ 166.824268][ T9586] EXT4-fs: inline encryption not supported [ 166.828888][ T9586] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 166.829743][ T9586] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1067: invalid indirect mapped block 2683928664 (level 1) [ 166.830524][ T9586] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 166.831532][ T9586] EXT4-fs (loop8): 1 truncate cleaned up [ 166.833752][ T9586] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.919273][ T9580] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.929871][ T9580] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 166.931987][ T9580] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 166.934411][ T9580] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 167.176997][ T6311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.224431][ T9595] loop7: detected capacity change from 0 to 512 [ 167.226414][ T9595] EXT4-fs (loop7): Test dummy encryption mode enabled [ 167.228139][ T9595] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1068: inode has both inline data and extents flags [ 167.228155][ T9595] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 167.228243][ T9595] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1068: couldn't read orphan inode 15 (err -117) [ 167.228256][ T9595] loop7: lost filesystem error report for type 5 error -117 [ 167.228835][ T9595] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.410016][ T9602] overlayfs: missing 'lowerdir' [ 167.426984][ T9603] overlayfs: failed to clone upperpath [ 167.922594][ T9610] overlayfs: missing 'lowerdir' [ 167.987146][ T9611] overlay: Unknown parameter 'fsuuid' [ 168.245156][ T6489] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.339469][ T9622] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 168.339869][ T9622] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 168.339933][ T9622] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 168.957630][ T6311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.650276][ T9653] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 169.650397][ T9653] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 169.934966][ T9659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1088'. [ 169.936865][ T9660] loop7: detected capacity change from 0 to 512 [ 169.938615][ T9660] EXT4-fs: inline encryption not supported [ 169.948088][ T9660] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 169.950456][ T9660] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1089: invalid indirect mapped block 2683928664 (level 1) [ 169.954646][ T9660] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 169.955260][ T9660] EXT4-fs (loop7): 1 truncate cleaned up [ 169.957056][ T9661] loop5: detected capacity change from 0 to 2048 [ 169.960509][ T9660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.965336][ T9665] 9p: Bad value for 'rfdno' [ 170.046030][ T9661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.057357][ T9661] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 170.059321][ T9661] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 170.059348][ T9661] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 170.436521][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 170.436560][ T30] audit: type=1800 audit(170.410:1389): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 170.527202][ T30] audit: type=1800 audit(170.500:1390): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 170.540665][ T30] audit: type=1800 audit(170.510:1391): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.1093" name="map_device" dev="sysfs" ino=19806 res=0 errno=0 [ 170.555652][ T5650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.629224][ T9681] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 170.815061][ T30] audit: type=1800 audit(170.750:1392): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1089" name="file0" dev="loop7" ino=13 res=0 errno=0 [ 170.845633][ T30] audit: type=1800 audit(170.790:1393): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145821 res=0 errno=0 [ 170.851801][ T30] audit: type=1800 audit(170.820:1394): pid=4707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=145837 res=0 errno=0 [ 170.856107][ T9683] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 170.881923][ T30] audit: type=1800 audit(170.860:1395): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 170.887981][ T30] audit: type=1800 audit(170.860:1396): pid=4707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=145840 res=0 errno=0 [ 170.888038][ T30] audit: type=1800 audit(170.860:1397): pid=4707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=145839 res=0 errno=0 [ 170.888060][ T30] audit: type=1800 audit(170.860:1398): pid=4707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=145838 res=0 errno=0 [ 170.894454][ T9683] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 170.894501][ T9683] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 170.965398][ T6311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.000323][ T9694] loop5: detected capacity change from 0 to 512 [ 171.000661][ T9694] EXT4-fs: inline encryption not supported [ 171.229837][ T9694] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 171.236991][ T9694] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1097: invalid indirect mapped block 2683928664 (level 1) [ 171.237031][ T9694] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 171.241147][ T9694] EXT4-fs (loop5): 1 truncate cleaned up [ 171.246608][ T9694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.077903][ T5650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.210697][ T9719] loop8: detected capacity change from 0 to 512 [ 172.213520][ T9719] EXT4-fs (loop8): Test dummy encryption mode enabled [ 172.217735][ T9719] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1103: inode has both inline data and extents flags [ 172.217787][ T9719] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 172.218261][ T9719] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1103: couldn't read orphan inode 15 (err -117) [ 172.218282][ T9719] loop8: lost filesystem error report for type 5 error -117 [ 172.219122][ T9719] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.295192][ T9722] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 172.295310][ T9722] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 172.740451][ T9727] overlayfs: failed to resolve './file1': -2 [ 173.100966][ T9733] loop9: detected capacity change from 0 to 512 [ 173.114904][ T9733] EXT4-fs: inline encryption not supported [ 173.133641][ T9733] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 173.135891][ T9733] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1106: invalid indirect mapped block 2683928664 (level 1) [ 173.139209][ T9733] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 173.139606][ T9733] EXT4-fs (loop9): 1 truncate cleaned up [ 173.141752][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 173.141766][ C1] EXT4-fs (loop9): initial error at time 173: ext4_free_branches:1023: inode 13 [ 173.141785][ C1] EXT4-fs (loop9): last error at time 173: ext4_free_branches:1023: inode 13 [ 173.151994][ T9733] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.816877][ T9747] binder: 9745:9747 ioctl c0306201 0 returned -14 [ 173.901953][ T6489] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.920951][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1111'. [ 174.313067][ T9758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.313262][ T9758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.349149][ T9759] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 174.349577][ T9759] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 174.349620][ T9759] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 174.443427][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.849930][ T9776] netlink: 16255 bytes leftover after parsing attributes in process `syz.7.1118'. [ 174.877396][ T9779] loop7: detected capacity change from 0 to 2048 [ 174.896291][ T9779] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.908309][ T9779] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 174.910428][ T9779] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 174.913973][ T9779] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 174.946518][ T6311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.050025][ T9786] loop5: detected capacity change from 0 to 512 [ 175.054624][ T9786] EXT4-fs (loop5): Test dummy encryption mode enabled [ 175.059356][ T9786] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1121: inode has both inline data and extents flags [ 175.059412][ T9786] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 175.060385][ T9786] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1121: couldn't read orphan inode 15 (err -117) [ 175.060407][ T9786] loop5: lost filesystem error report for type 5 error -117 [ 175.061157][ T9786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.346192][ T9789] overlayfs: failed to resolve './file1': -2 [ 175.964478][ T9794] syzkaller1: entered promiscuous mode [ 175.964515][ T9794] syzkaller1: entered allmulticast mode [ 176.073468][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 176.073501][ T30] audit: type=1800 audit(176.010:1436): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 176.163481][ T30] audit: type=1800 audit(176.110:1437): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 176.163613][ T30] audit: type=1800 audit(176.110:1438): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 176.170738][ T9800] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1124'. [ 176.194848][ T9800] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1124'. [ 176.198343][ T5650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.214823][ T30] audit: type=1800 audit(176.190:1439): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 176.236893][ T30] audit: type=1800 audit(176.210:1440): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 176.248245][ T30] audit: type=1800 audit(176.220:1441): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 176.257587][ T30] audit: type=1800 audit(176.230:1442): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 176.263034][ T9806] loop7: detected capacity change from 0 to 512 [ 176.263639][ T9803] loop9: detected capacity change from 0 to 512 [ 176.263979][ T9803] EXT4-fs: inline encryption not supported [ 176.268946][ T9806] EXT4-fs (loop7): Test dummy encryption mode enabled [ 176.269976][ T9803] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 176.271929][ T9803] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1127: invalid indirect mapped block 2683928664 (level 1) [ 176.271950][ T9803] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 176.274902][ T9803] EXT4-fs (loop9): 1 truncate cleaned up [ 176.278080][ T9806] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1128: inode has both inline data and extents flags [ 176.278109][ T9806] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 176.281158][ T9803] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.283224][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 176.283234][ C1] EXT4-fs (loop7): initial error at time 176: ext4_orphan_get:1399: inode 15 [ 176.283249][ C1] EXT4-fs (loop7): last error at time 176: ext4_orphan_get:1399: inode 15 [ 176.285892][ T9812] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.1130'. [ 176.296816][ T9806] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1128: couldn't read orphan inode 15 (err -117) [ 176.296854][ T9806] loop7: lost filesystem error report for type 5 error -117 [ 176.303254][ T9806] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.307821][ T9814] loop5: detected capacity change from 0 to 2048 [ 176.309433][ T30] audit: type=1800 audit(176.280:1443): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 176.317595][ T30] audit: type=1800 audit(176.290:1444): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 176.324565][ T30] audit: type=1800 audit(176.300:1445): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 176.408039][ T9814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.418750][ T9814] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 176.418780][ T9814] overlayfs: failed to verify index dir 'upper' xattr [ 176.418799][ T9814] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 176.707677][ T5650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.220964][ T9831] overlay: Unknown parameter 'fsuuid' [ 177.332981][ T9830] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 177.333098][ T9830] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 177.602152][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.748003][ T9840] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 177.748121][ T9840] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 178.013012][ T6311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.252025][ T9848] loop9: detected capacity change from 0 to 512 [ 178.256623][ T9848] EXT4-fs (loop9): Test dummy encryption mode enabled [ 178.260655][ T9848] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.1139: inode has both inline data and extents flags [ 178.269081][ T9848] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.269477][ T9848] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1139: couldn't read orphan inode 15 (err -117) [ 178.273997][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 178.274012][ C1] EXT4-fs (loop9): initial error at time 178: ext4_orphan_get:1399: inode 15 [ 178.274032][ C1] EXT4-fs (loop9): last error at time 178: ext4_orphan_get:1399: inode 15 [ 178.279942][ T9848] loop9: lost filesystem error report for type 5 error -117 [ 178.281503][ T9848] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.291167][ T9852] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1138'. [ 178.352595][ T9852] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1138'. [ 178.732453][ T9854] overlayfs: failed to resolve './file1': -2 [ 178.922726][ T9859] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1140'. [ 178.929944][ T9859] loop7: detected capacity change from 0 to 512 [ 178.958965][ T9859] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.969843][ T9856] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1140: bg 0: block 67: padding at end of block bitmap is not set [ 178.976869][ T9856] EXT4-fs (loop7): Remounting filesystem read-only [ 178.976996][ T9856] EXT4-fs (loop7): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 179.380724][ T4731] Bluetooth: hci0: command 0x0406 tx timeout [ 179.400416][ T9873] loop8: detected capacity change from 0 to 2048 [ 179.405756][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.425666][ T9873] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.459068][ T9873] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 179.465664][ T9873] overlayfs: failed to verify index dir 'upper' xattr [ 179.465686][ T9873] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 179.488623][ T9878] loop9: detected capacity change from 0 to 512 [ 179.490467][ T9878] EXT4-fs: inline encryption not supported [ 179.494041][ T9878] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 179.495949][ T9878] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1145: invalid indirect mapped block 2683928664 (level 1) [ 179.495980][ T9878] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 179.499288][ T9878] EXT4-fs (loop9): 1 truncate cleaned up [ 179.499774][ T9878] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.848850][ T6489] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.239755][ T6311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.350176][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.435504][ T9904] overlayfs: failed to clone upperpath [ 180.603457][ T9903] loop9: detected capacity change from 0 to 512 [ 180.605616][ T9903] EXT4-fs: inline encryption not supported [ 180.615548][ T9903] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 180.617537][ T9903] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1153: invalid indirect mapped block 2683928664 (level 1) [ 180.617575][ T9903] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 180.621043][ T9903] EXT4-fs (loop9): 1 truncate cleaned up [ 180.622186][ T9903] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.210839][ T9921] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1157'. [ 181.216396][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 181.216421][ T30] audit: type=1800 audit(181.180:1468): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 181.216451][ T30] audit: type=1800 audit(181.190:1469): pid=9913 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.1153" name="file0" dev="loop9" ino=13 res=0 errno=0 [ 181.488523][ T9921] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1157'. [ 181.549239][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.577961][ T30] audit: type=1800 audit(181.550:1470): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 181.836701][ T30] audit: type=1800 audit(181.810:1471): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 182.548575][ T30] audit: type=1800 audit(182.520:1472): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 182.648579][ T30] audit: type=1800 audit(182.620:1473): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 182.744588][ T30] audit: type=1800 audit(182.720:1474): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 182.748358][ T30] audit: type=1800 audit(182.720:1475): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 182.773419][ T30] audit: type=1800 audit(182.750:1476): pid=9958 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1168" name="map_device" dev="sysfs" ino=19806 res=0 errno=0 [ 182.854347][ T9961] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 182.857595][ T9961] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 182.857642][ T9961] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 182.881686][ T30] audit: type=1800 audit(182.830:1477): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146752 res=0 errno=0 [ 183.252016][ T9969] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1171'. [ 183.254109][ T9969] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1171'. [ 184.167984][T10003] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.412709][T10038] loop5: detected capacity change from 0 to 2048 [ 185.426466][T10038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.431064][T10038] FAULT_INJECTION: forcing a failure. [ 185.431064][T10038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.432798][T10038] CPU: 0 UID: 0 PID: 10038 Comm: syz.5.1187 Not tainted syzkaller #0 PREEMPT [ 185.432818][T10038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 185.432823][T10038] Call trace: [ 185.432827][T10038] show_stack+0x2c/0x3c (C) [ 185.432847][T10038] __dump_stack+0x30/0x40 [ 185.432859][T10038] dump_stack_lvl+0xd8/0x12c [ 185.432868][T10038] dump_stack+0x1c/0x28 [ 185.432878][T10038] should_fail_ex+0x41c/0x590 [ 185.432886][T10038] should_fail+0x14/0x24 [ 185.432892][T10038] should_fail_usercopy+0x20/0x30 [ 185.432900][T10038] _inline_copy_from_user+0x3c/0x174 [ 185.432908][T10038] kstrtouint_from_user+0xcc/0x174 [ 185.432916][T10038] proc_fail_nth_write+0x9c/0x234 [ 185.432925][T10038] vfs_write+0x2a4/0xa0c [ 185.432932][T10038] ksys_write+0x12c/0x228 [ 185.432939][T10038] __arm64_sys_write+0x84/0x98 [ 185.432946][T10038] invoke_syscall+0x98/0x244 [ 185.432956][T10038] el0_svc_common+0xec/0x23c [ 185.432965][T10038] do_el0_svc+0x4c/0x5c [ 185.432975][T10038] el0_svc+0x64/0x260 [ 185.432984][T10038] el0t_64_sync_handler+0x44/0x104 [ 185.432992][T10038] el0t_64_sync+0x198/0x19c [ 185.649202][T10041] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 185.664882][ T5650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.932594][T10053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1192'. [ 185.944531][T10053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1192'. [ 186.417748][T10067] overlayfs: failed to clone upperpath [ 186.636655][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 186.636696][ T30] audit: type=1800 audit(186.610:1495): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 186.662118][T10073] loop5: detected capacity change from 0 to 512 [ 186.665023][T10073] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.676708][ T30] audit: type=1800 audit(186.650:1496): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 186.681437][T10073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.999140][T10080] netlink: 15487 bytes leftover after parsing attributes in process `syz.9.1198'. [ 187.010665][T10073] EXT4-fs error (device loop5): ext4_get_first_dir_block:3537: inode #12: comm syz.5.1197: Attempting to read directory block (0) that is past i_size (3) [ 187.015557][ T30] audit: type=1800 audit(186.980:1497): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 187.029203][ T30] audit: type=1800 audit(187.000:1498): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 187.079278][T10086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1202'. [ 187.187227][ T5650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.373172][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.373233][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.446523][ T30] audit: type=1800 audit(187.420:1499): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 188.404908][ T30] audit: type=1800 audit(188.370:1500): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 188.474154][ T30] audit: type=1800 audit(188.420:1501): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 188.474210][ T30] audit: type=1800 audit(188.430:1502): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 188.492823][T10125] netlink: 15487 bytes leftover after parsing attributes in process `syz.5.1211'. [ 188.588225][T10132] overlayfs: failed to clone upperpath [ 188.737233][ T30] audit: type=1800 audit(188.500:1503): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 188.800018][ T30] audit: type=1800 audit(188.770:1504): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 188.806043][T10138] binder: 10137:10138 BC_INCREFS_DONE u0000000000000000 no match [ 188.813035][T10136] loop5: detected capacity change from 0 to 2048 [ 188.828108][T10136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.836920][T10142] loop8: detected capacity change from 0 to 2048 [ 188.845078][T10142] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.856065][T10136] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 188.856102][T10136] overlayfs: failed to verify index dir 'upper' xattr [ 188.857506][T10136] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 188.864926][T10142] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 188.864961][T10142] overlayfs: failed to verify index dir 'upper' xattr [ 188.864967][T10142] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 188.889836][ T5650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.935040][ T6489] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.011175][T10158] loop8: detected capacity change from 0 to 512 [ 189.014408][T10158] EXT4-fs: inline encryption not supported [ 189.030476][T10158] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 189.034479][T10158] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1221: invalid indirect mapped block 2683928664 (level 1) [ 189.034521][T10158] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 189.035579][T10158] EXT4-fs (loop8): 1 truncate cleaned up [ 189.036044][T10158] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.902190][T10177] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1225'. [ 190.047083][ T6489] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.076204][T10186] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1229'. [ 190.079880][T10186] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1229'. [ 190.132769][T10190] loop9: detected capacity change from 0 to 2048 [ 190.153607][T10190] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.164492][T10196] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1232'. [ 190.168409][T10196] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1232'. [ 190.173277][T10190] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 190.175587][T10190] overlayfs: failed to verify index dir 'upper' xattr [ 190.175624][T10190] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 190.274869][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.844515][T10217] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14 [ 191.021391][T10219] overlayfs: failed to clone upperpath [ 191.059012][T10221] __nla_validate_parse: 1 callbacks suppressed [ 191.060540][T10221] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1239'. [ 191.109454][T10224] bond4: entered promiscuous mode [ 191.109619][T10224] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.603721][ T50] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 191.629976][T10242] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1246'. [ 191.935124][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 191.936512][ T30] audit: type=1800 audit(191.910:1545): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 191.955429][T10246] loop8: detected capacity change from 0 to 256 [ 191.995964][ T30] audit: type=1800 audit(191.970:1546): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 192.053728][ T30] audit: type=1800 audit(192.030:1547): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 192.062637][T10251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1248'. [ 192.065819][T10251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1248'. [ 192.330068][T10261] overlayfs: failed to clone upperpath [ 192.626666][T10269] loop9: detected capacity change from 0 to 1024 [ 192.630877][ T30] audit: type=1800 audit(192.600:1548): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 192.639626][T10269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.650429][ T30] audit: type=1800 audit(192.620:1549): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 192.682965][ T30] audit: type=1800 audit(192.650:1550): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.1254" name="file2" dev="overlay" ino=16 res=0 errno=0 [ 192.687527][T10269] FAULT_INJECTION: forcing a failure. [ 192.687527][T10269] name failslab, interval 1, probability 0, space 0, times 0 [ 192.691302][T10269] CPU: 1 UID: 0 PID: 10269 Comm: syz.9.1254 Not tainted syzkaller #0 PREEMPT [ 192.691327][T10269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 192.691333][T10269] Call trace: [ 192.691337][T10269] show_stack+0x2c/0x3c (C) [ 192.691360][T10269] __dump_stack+0x30/0x40 [ 192.691372][T10269] dump_stack_lvl+0xd8/0x12c [ 192.691382][T10269] dump_stack+0x1c/0x28 [ 192.691392][T10269] should_fail_ex+0x41c/0x590 [ 192.691400][T10269] should_failslab+0xc4/0x120 [ 192.691408][T10269] __kmalloc_noprof+0x108/0x6b8 [ 192.691418][T10269] copy_splice_read+0x154/0x8fc [ 192.691429][T10269] do_splice_read+0x1f4/0x2e8 [ 192.691438][T10269] splice_direct_to_actor+0x20c/0x7a8 [ 192.691447][T10269] do_splice_direct_actor+0x140/0x228 [ 192.691456][T10269] do_splice_direct+0x58/0x70 [ 192.691465][T10269] do_sendfile+0x40c/0x6c0 [ 192.691473][T10269] __arm64_sys_sendfile64+0x1c4/0x28c [ 192.691481][T10269] invoke_syscall+0x98/0x244 [ 192.691491][T10269] el0_svc_common+0xec/0x23c [ 192.691501][T10269] do_el0_svc+0x4c/0x5c [ 192.691510][T10269] el0_svc+0x64/0x260 [ 192.691520][T10269] el0t_64_sync_handler+0x44/0x104 [ 192.691528][T10269] el0t_64_sync+0x198/0x19c [ 192.737809][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.763443][ T30] audit: type=1800 audit(192.740:1551): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 192.770994][ T30] audit: type=1400 audit(192.740:1552): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lowerdir" requested=x pid=10273 comm="syz.9.1255" name="bus" dev="tmpfs" ino=780 [ 192.773384][T10274] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 192.873695][ T30] audit: type=1800 audit(192.840:1553): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 192.885091][T10278] netlink: 'syz.8.1257': attribute type 10 has an invalid length. [ 192.885124][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1257'. [ 192.909659][ T30] audit: type=1800 audit(192.880:1554): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 193.152124][T10285] loop8: detected capacity change from 0 to 256 [ 193.152559][T10285] vfat: Bad value for 'shortname' [ 193.406776][T10294] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1262'. [ 193.408546][T10294] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1262'. [ 193.675756][T10302] trusted_key: encrypted_key: insufficient parameters specified [ 193.950652][T10299] overlayfs: failed to clone upperpath [ 193.986538][T10304] 9p: Bad value for 'wfdno' [ 193.998885][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1265'. [ 193.998927][T10306] netlink: 'syz.8.1265': attribute type 20 has an invalid length. [ 193.998937][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1265'. [ 194.143185][T10309] nbd8: detected capacity change from 0 to 63 [ 194.149421][T10310] block nbd8: NBD_DISCONNECT [ 194.149504][T10310] block nbd8: Disconnected due to user request. [ 194.149515][T10310] block nbd8: shutting down sockets [ 194.151468][ C0] blk_print_req_error: 129 callbacks suppressed [ 194.151482][ C0] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.151523][ C0] buffer_io_error: 138 callbacks suppressed [ 194.151530][ C0] Buffer I/O error on dev nbd8, logical block 0, async page read [ 194.152955][ C0] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 194.152990][ C0] Buffer I/O error on dev nbd8, logical block 1, async page read [ 194.153009][ C0] Buffer I/O error on dev nbd8, logical block 2, async page read [ 194.153027][ C0] Buffer I/O error on dev nbd8, logical block 3, async page read [ 194.153222][ T11] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 194.153238][ T11] Buffer I/O error on dev nbd8, logical block 0, async page read [ 194.153249][ T11] Buffer I/O error on dev nbd8, logical block 1, async page read [ 194.153258][ T11] Buffer I/O error on dev nbd8, logical block 2, async page read [ 194.153267][ T11] Buffer I/O error on dev nbd8, logical block 3, async page read [ 194.153344][ T11] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 194.153361][ T11] Buffer I/O error on dev nbd8, logical block 0, async page read [ 194.153371][ T11] Buffer I/O error on dev nbd8, logical block 1, async page read [ 194.153427][ T11] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 194.153496][ T11] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 194.153563][ T11] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 194.155409][ T11] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 194.155575][ T11] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 194.155614][ T4707] ldm_validate_partition_table(): Disk read failed. [ 194.155657][ T11] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 194.155934][ T4707] Dev nbd8: unable to read RDB block 0 [ 194.156469][ T4707] nbd8: unable to read partition table [ 194.170869][ T4707] ldm_validate_partition_table(): Disk read failed. [ 194.171076][ T4707] Dev nbd8: unable to read RDB block 0 [ 194.171304][ T4707] nbd8: unable to read partition table [ 194.276427][T10314] loop5: detected capacity change from 0 to 256 [ 194.362111][T10316] overlayfs: failed to clone upperpath [ 194.476560][T10322] loop5: detected capacity change from 0 to 2048 [ 194.500361][T10322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.517580][ T50] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 194.550204][ T5650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.637453][T10333] FAULT_INJECTION: forcing a failure. [ 194.637453][T10333] name failslab, interval 1, probability 0, space 0, times 0 [ 194.640227][T10333] CPU: 1 UID: 0 PID: 10333 Comm: syz.9.1273 Not tainted syzkaller #0 PREEMPT [ 194.640248][T10333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 194.640254][T10333] Call trace: [ 194.640258][T10333] show_stack+0x2c/0x3c (C) [ 194.640285][T10333] __dump_stack+0x30/0x40 [ 194.640297][T10333] dump_stack_lvl+0xd8/0x12c [ 194.640307][T10333] dump_stack+0x1c/0x28 [ 194.640317][T10333] should_fail_ex+0x41c/0x590 [ 194.640325][T10333] should_failslab+0xc4/0x120 [ 194.640334][T10333] __kmalloc_noprof+0x108/0x6b8 [ 194.640343][T10333] nft_trans_alloc+0x34/0x270 [ 194.640352][T10333] nft_trans_table_add+0x38/0x190 [ 194.640360][T10333] nf_tables_newtable+0x968/0x10f4 [ 194.640368][T10333] nfnetlink_rcv+0xc8c/0x16ec [ 194.640376][T10333] netlink_unicast+0x600/0x7f8 [ 194.640384][T10333] netlink_sendmsg+0x648/0x948 [ 194.640393][T10333] __sock_sendmsg+0xc8/0x17c [ 194.640403][T10333] ____sys_sendmsg+0x3d0/0x6c8 [ 194.640412][T10333] ___sys_sendmsg+0x198/0x224 [ 194.640421][T10333] __sys_sendmsg+0x158/0x204 [ 194.640433][T10333] __arm64_sys_sendmsg+0x88/0x9c [ 194.640443][T10333] invoke_syscall+0x98/0x244 [ 194.640454][T10333] el0_svc_common+0xec/0x23c [ 194.640463][T10333] do_el0_svc+0x4c/0x5c [ 194.640473][T10333] el0_svc+0x64/0x260 [ 194.640482][T10333] el0t_64_sync_handler+0x44/0x104 [ 194.640491][T10333] el0t_64_sync+0x198/0x19c [ 194.644827][T10332] loop5: detected capacity change from 0 to 512 [ 194.659998][T10332] EXT4-fs: inline encryption not supported [ 194.666609][ T4731] Bluetooth: hci1: command 0x0406 tx timeout [ 194.670718][T10332] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 194.681864][T10332] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1272: invalid indirect mapped block 2683928664 (level 1) [ 194.681889][T10332] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 194.683044][T10332] EXT4-fs (loop5): 1 truncate cleaned up [ 194.683498][T10332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.059730][T10349] loop9: detected capacity change from 0 to 512 [ 195.062019][T10349] EXT4-fs (loop9): Test dummy encryption mode enabled [ 195.079196][T10349] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.1276: inode has both inline data and extents flags [ 195.079241][T10349] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 195.081595][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 195.081611][ C0] EXT4-fs (loop9): initial error at time 195: ext4_orphan_get:1399: inode 15 [ 195.081627][ C0] EXT4-fs (loop9): last error at time 195: ext4_orphan_get:1399: inode 15 [ 195.088984][T10349] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1276: couldn't read orphan inode 15 (err -117) [ 195.089019][T10349] loop9: lost filesystem error report for type 5 error -117 [ 195.092115][T10349] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.181036][T10355] overlayfs: failed to clone upperpath [ 196.706248][ T5650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.710097][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.717052][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1281'. [ 196.717092][T10373] netlink: 'syz.8.1281': attribute type 20 has an invalid length. [ 196.717102][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1281'. [ 196.850684][T10384] loop9: detected capacity change from 0 to 2048 [ 196.854071][T10381] 9p: Bad value for 'wfdno' [ 197.338243][T10384] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.340988][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 197.341000][ T30] audit: type=1800 audit(197.310:1574): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 197.385294][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.411194][ T30] audit: type=1800 audit(197.380:1575): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 197.441002][T10399] loop9: detected capacity change from 0 to 512 [ 197.446616][ T30] audit: type=1800 audit(197.420:1576): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 197.521217][ T30] audit: type=1800 audit(197.490:1577): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 197.627880][ T30] audit: type=1800 audit(197.600:1578): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 197.712100][T10415] overlayfs: failed to clone upperpath [ 197.782160][T10412] loop5: detected capacity change from 0 to 512 [ 197.881962][T10412] EXT4-fs (loop5): Test dummy encryption mode enabled [ 197.887667][ T30] audit: type=1804 audit(197.860:1579): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="udevd" name="/sys/devices/virtual/block/loop5/uevent" dev="sysfs" ino=16390 res=1 errno=0 [ 197.887706][ T30] audit: type=1800 audit(197.860:1580): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 197.940437][T10423] loop8: detected capacity change from 0 to 512 [ 197.944742][T10423] EXT4-fs: inline encryption not supported [ 197.951028][ T30] audit: type=1800 audit(197.890:1581): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 197.966944][ T30] audit: type=1800 audit(197.910:1582): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 197.966991][ T30] audit: type=1800 audit(197.920:1583): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 197.973280][T10412] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1293: inode has both inline data and extents flags [ 197.973302][T10412] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 197.973456][T10412] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1293: couldn't read orphan inode 15 (err -117) [ 197.973471][T10412] loop5: lost filesystem error report for type 5 error -117 [ 197.974082][T10412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.263959][T10429] overlayfs: missing 'lowerdir' [ 198.511126][T10423] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 198.511430][T10423] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1296: invalid indirect mapped block 2683928664 (level 1) [ 198.511463][T10423] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 198.511725][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 198.511743][ C1] EXT4-fs (loop8): initial error at time 198: ext4_free_branches:1023: inode 13 [ 198.511778][ C1] EXT4-fs (loop8): last error at time 198: ext4_free_branches:1023: inode 13 [ 198.512614][T10423] EXT4-fs (loop8): 1 truncate cleaned up [ 198.513094][T10423] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.938487][ T6489] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.243251][ T5650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.253791][T10452] 9p: Bad value for 'rfdno' [ 199.760120][T10471] macvlan0: entered promiscuous mode [ 200.169806][T10483] overlayfs: failed to clone upperpath [ 200.213891][T10484] loop9: detected capacity change from 0 to 512 [ 200.215951][T10484] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 200.249221][T10487] loop9: detected capacity change from 0 to 1024 [ 200.260452][T10487] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 200.539946][T10497] lo: entered allmulticast mode [ 200.553131][T10487] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 2: comm syz.9.1315: lblock 2 mapped to illegal pblock 2 (length 1) [ 200.557022][T10487] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 200.559008][T10487] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 48: comm syz.9.1315: lblock 0 mapped to illegal pblock 48 (length 1) [ 200.561436][T10499] loop8: detected capacity change from 0 to 512 [ 200.562316][T10499] EXT4-fs: inline encryption not supported [ 200.563630][T10499] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 200.563783][T10499] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1318: invalid indirect mapped block 2683928664 (level 1) [ 200.563801][T10499] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 200.564152][T10499] EXT4-fs (loop8): 1 truncate cleaned up [ 200.564275][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 200.564287][ C1] EXT4-fs (loop9): initial error at time 200: ext4_map_blocks:791: inode 3: block 2 [ 200.564309][ C1] EXT4-fs (loop9): last error at time 200: ext4_map_blocks:791: inode 3: block 2 [ 200.564607][T10499] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.589117][T10487] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 200.616113][T10487] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.1315: Failed to acquire dquot type 0 [ 200.616162][T10487] loop9: lost filesystem error report for type 5 error -117 [ 200.624599][T10487] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 200.624628][T10487] loop9: lost filesystem error report for type 5 error -117 [ 200.628577][T10487] EXT4-fs error (device loop9): ext4_evict_inode:267: inode #11: comm syz.9.1315: mark_inode_dirty error [ 200.628613][T10487] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 200.632890][T10487] EXT4-fs warning (device loop9): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 200.632938][T10487] EXT4-fs (loop9): 1 orphan inode deleted [ 200.633397][T10487] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.644134][ T7474] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 200.646771][ T7474] EXT4-fs error (device loop9): ext4_release_dquot:7077: comm kworker/u8:18: Failed to release dquot type 0 [ 200.656992][T10487] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.658966][T10487] EXT4-fs error (device loop9): __ext4_get_inode_loc:4886: comm syz.9.1315: Invalid inode table block 1 in block_group 0 [ 200.658997][T10487] loop9: lost filesystem error report for type 5 error -117 [ 200.662253][T10487] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 200.662289][T10487] loop9: lost filesystem error report for type 5 error -117 [ 200.662401][T10487] EXT4-fs error (device loop9): ext4_quota_off:7325: inode #3: comm syz.9.1315: mark_inode_dirty error [ 200.662413][T10487] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 201.362188][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1322'. [ 201.952065][ T6489] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.228194][T10532] FAULT_INJECTION: forcing a failure. [ 202.228194][T10532] name failslab, interval 1, probability 0, space 0, times 0 [ 202.236212][T10532] CPU: 1 UID: 0 PID: 10532 Comm: syz.5.1327 Not tainted syzkaller #0 PREEMPT [ 202.236234][T10532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 202.236241][T10532] Call trace: [ 202.236245][T10532] show_stack+0x2c/0x3c (C) [ 202.236267][T10532] __dump_stack+0x30/0x40 [ 202.236279][T10532] dump_stack_lvl+0xd8/0x12c [ 202.236289][T10532] dump_stack+0x1c/0x28 [ 202.236299][T10532] should_fail_ex+0x41c/0x590 [ 202.236308][T10532] should_failslab+0xc4/0x120 [ 202.236317][T10532] kmem_cache_alloc_noprof+0x94/0x5d8 [ 202.236325][T10532] skb_clone+0x1ac/0x320 [ 202.236336][T10532] __netlink_deliver_tap+0x364/0x6f4 [ 202.236346][T10532] netlink_deliver_tap+0x1d8/0x1dc [ 202.236355][T10532] __netlink_sendskb+0x78/0xd0 [ 202.236364][T10532] netlink_sendskb+0x2c/0xdc [ 202.236372][T10532] netlink_unicast+0x2c0/0x7f8 [ 202.236380][T10532] netlink_ack+0x570/0x890 [ 202.236388][T10532] netlink_rcv_skb+0x21c/0x414 [ 202.236397][T10532] nfnetlink_rcv+0x218/0x16ec [ 202.236405][T10532] netlink_unicast+0x600/0x7f8 [ 202.236413][T10532] netlink_sendmsg+0x648/0x948 [ 202.236422][T10532] __sock_sendmsg+0xc8/0x17c [ 202.236431][T10532] ____sys_sendmsg+0x3d0/0x6c8 [ 202.236440][T10532] ___sys_sendmsg+0x198/0x224 [ 202.236449][T10532] __sys_sendmsg+0x158/0x204 [ 202.236458][T10532] __arm64_sys_sendmsg+0x88/0x9c [ 202.236467][T10532] invoke_syscall+0x98/0x244 [ 202.236478][T10532] el0_svc_common+0xec/0x23c [ 202.236487][T10532] do_el0_svc+0x4c/0x5c [ 202.236497][T10532] el0_svc+0x64/0x260 [ 202.236506][T10532] el0t_64_sync_handler+0x44/0x104 [ 202.236514][T10532] el0t_64_sync+0x198/0x19c [ 202.301291][T10537] loop8: detected capacity change from 0 to 512 [ 202.302710][T10537] EXT4-fs: inline encryption not supported [ 202.307286][T10537] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 202.307510][T10537] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1329: invalid indirect mapped block 2683928664 (level 1) [ 202.307525][T10537] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 202.307983][T10537] EXT4-fs (loop8): 1 truncate cleaned up [ 202.308499][T10537] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.314784][T10538] loop5: detected capacity change from 0 to 512 [ 202.344957][T10538] EXT4-fs (loop5): Test dummy encryption mode enabled [ 202.371977][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 202.375255][ T30] audit: type=1800 audit(202.320:1607): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 202.375332][ T30] audit: type=1800 audit(202.340:1608): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 202.384952][T10538] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1330: inode has both inline data and extents flags [ 202.384982][T10538] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 202.388049][T10538] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1330: couldn't read orphan inode 15 (err -117) [ 202.388086][T10538] loop5: lost filesystem error report for type 5 error -117 [ 202.392321][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 202.392343][ C1] EXT4-fs (loop5): initial error at time 202: ext4_orphan_get:1399: inode 15 [ 202.392366][ C1] EXT4-fs (loop5): last error at time 202: ext4_orphan_get:1404 [ 202.399776][T10538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.817805][T10545] overlay: Unknown parameter 'fsuuid' [ 203.217857][ T6489] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.593611][T10559] loop9: detected capacity change from 0 to 512 [ 203.593966][T10559] EXT4-fs: inline encryption not supported [ 203.773238][ T30] audit: type=1800 audit(203.550:1609): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 203.773266][ T30] audit: type=1800 audit(203.560:1610): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 203.775591][T10559] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 203.776506][T10559] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1335: invalid indirect mapped block 2683928664 (level 1) [ 203.776530][T10559] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 203.776874][T10559] EXT4-fs (loop9): 1 truncate cleaned up [ 203.777330][T10559] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.331728][ T5650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.354296][T10572] : renamed from bond_slave_0 [ 204.383968][ T30] audit: type=1800 audit(204.360:1611): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 204.396453][T10572] fuse: Bad value for 'fd' [ 204.404468][T10577] netlink: 15487 bytes leftover after parsing attributes in process `syz.7.1339'. [ 204.657700][ T30] audit: type=1800 audit(204.610:1612): pid=10579 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.1335" name="file0" dev="loop9" ino=13 res=0 errno=0 [ 204.657747][ T30] audit: type=1800 audit(204.620:1613): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 204.678075][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.722874][ T30] audit: type=1800 audit(204.700:1614): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 204.834402][ T30] audit: type=1800 audit(204.810:1615): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 205.109482][ T30] audit: type=1800 audit(205.080:1616): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 205.117934][T10598] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1345'. [ 205.135174][T10598] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1345'. [ 206.136557][T10612] overlayfs: failed to clone upperpath [ 206.157130][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1350'. [ 206.574643][T10629] netlink: 15487 bytes leftover after parsing attributes in process `syz.8.1353'. [ 206.688422][T10635] loop8: detected capacity change from 0 to 2048 [ 206.707121][T10635] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.719128][T10635] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1356'. [ 206.730794][ T6489] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.216314][T10649] overlayfs: failed to clone upperpath [ 207.690782][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 207.690823][ T30] audit: type=1800 audit(207.660:1629): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 208.088359][ T30] audit: type=1800 audit(208.060:1630): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 208.116551][T10670] netlink: 11575 bytes leftover after parsing attributes in process `syz.9.1364'. [ 208.145613][ T30] audit: type=1800 audit(208.120:1631): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 208.179172][T10676] netlink: 'syz.9.1367': attribute type 39 has an invalid length. [ 208.300466][ T30] audit: type=1800 audit(208.270:1632): pid=10686 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1370" name="map_device" dev="sysfs" ino=19806 res=0 errno=0 [ 208.307386][T10686] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 208.312057][T10686] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 208.313746][ T30] audit: type=1800 audit(208.280:1633): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148496 res=0 errno=0 [ 208.318154][T10686] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 208.610022][ T30] audit: type=1800 audit(208.580:1634): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 208.660773][T10696] FAULT_INJECTION: forcing a failure. [ 208.660773][T10696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.663833][ T30] audit: type=1800 audit(208.630:1635): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 208.667360][T10696] CPU: 0 UID: 0 PID: 10696 Comm: syz.5.1373 Not tainted syzkaller #0 PREEMPT [ 208.667379][T10696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 208.667385][T10696] Call trace: [ 208.667388][T10696] show_stack+0x2c/0x3c (C) [ 208.667414][T10696] __dump_stack+0x30/0x40 [ 208.667426][T10696] dump_stack_lvl+0xd8/0x12c [ 208.667436][T10696] dump_stack+0x1c/0x28 [ 208.667446][T10696] should_fail_ex+0x41c/0x590 [ 208.667454][T10696] should_fail+0x14/0x24 [ 208.667461][T10696] should_fail_usercopy+0x20/0x30 [ 208.667468][T10696] _inline_copy_from_user+0x3c/0x174 [ 208.667477][T10696] kstrtouint_from_user+0xcc/0x174 [ 208.667485][T10696] proc_fail_nth_write+0x9c/0x234 [ 208.667494][T10696] vfs_write+0x2a4/0xa0c [ 208.667502][T10696] ksys_write+0x12c/0x228 [ 208.667508][T10696] __arm64_sys_write+0x84/0x98 [ 208.667515][T10696] invoke_syscall+0x98/0x244 [ 208.667525][T10696] el0_svc_common+0xec/0x23c [ 208.667535][T10696] do_el0_svc+0x4c/0x5c [ 208.667544][T10696] el0_svc+0x64/0x260 [ 208.667554][T10696] el0t_64_sync_handler+0x44/0x104 [ 208.667563][T10696] el0t_64_sync+0x198/0x19c [ 208.691376][T10699] loop8: detected capacity change from 0 to 512 [ 208.698062][ T30] audit: type=1800 audit(208.670:1636): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 208.718547][T10699] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.723296][T10699] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.810502][ T30] audit: type=1800 audit(208.780:1637): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 208.822141][T10708] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.1377'. [ 209.088118][T10714] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1380'. [ 209.089973][T10714] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1380'. [ 209.160365][T10723] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 209.163584][T10723] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 209.167730][T10723] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 209.191111][ T30] audit: type=1800 audit(209.120:1638): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 210.331776][T10742] fuse: Bad value for 'fd' [ 210.722439][T10739] overlayfs: failed to clone upperpath [ 211.181842][T10743] overlay: Unknown parameter 'fsuuid' [ 211.223376][T10751] netlink: 15487 bytes leftover after parsing attributes in process `syz.9.1389'. [ 211.553384][T10755] loop9: detected capacity change from 0 to 256 [ 211.553750][T10755] vfat: Unknown parameter 'nonumdail' [ 211.763358][T10758] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1392'. [ 211.791003][T10763] loop5: detected capacity change from 0 to 128 [ 211.816016][T10763] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.820882][T10763] : renamed from bond_slave_0 (while UP) [ 211.883737][ T5650] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.919419][T10778] loop5: detected capacity change from 0 to 1024 [ 211.919791][T10778] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.023521][T10778] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 212.565326][T10795] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1402'. [ 212.696609][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 212.696652][ T30] audit: type=1800 audit(212.670:1651): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 212.703478][T10803] loop9: detected capacity change from 0 to 256 [ 212.713845][ T30] audit: type=1800 audit(212.690:1652): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 212.716135][T10803] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.007735][T10809] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1405'. [ 213.009115][T10809] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1405'. [ 213.091755][ T30] audit: type=1800 audit(213.050:1653): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 213.105207][ T30] audit: type=1800 audit(213.080:1654): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 213.136891][ T30] audit: type=1800 audit(213.110:1655): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 213.231180][ T30] audit: type=1800 audit(213.200:1656): pid=10821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1410" name="reclaim" dev="sysfs" ino=1149 res=0 errno=0 [ 213.238960][T10821] loop5: detected capacity change from 0 to 512 [ 213.239349][T10821] EXT4-fs: Ignoring removed nobh option [ 213.244317][T10821] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 213.244355][T10821] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 213.246172][T10821] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.1410: inode has both inline data and extents flags [ 213.246195][T10821] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 213.246643][ T30] audit: type=1800 audit(213.220:1657): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 213.248552][T10821] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1410: couldn't read orphan inode 13 (err -117) [ 213.248574][T10821] loop5: lost filesystem error report for type 5 error -117 [ 213.250781][T10821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.454973][ T30] audit: type=1800 audit(213.430:1658): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 213.458654][T10826] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1412'. [ 213.568658][ T30] audit: type=1800 audit(213.540:1659): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 213.719244][T10835] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 213.719284][T10835] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 214.346549][ T30] audit: type=1800 audit(214.310:1660): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 214.463378][ T5650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.826378][T10849] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1417'. [ 214.828585][T10849] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1417'. [ 215.143329][T10856] fuse: Bad value for 'fd' [ 215.149455][T10856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.149647][T10856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.343479][T10867] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1425'. [ 216.442592][T10873] syz_tun: entered allmulticast mode [ 216.456832][T10873] dvmrp8: entered allmulticast mode [ 216.461032][T10872] syz_tun: left allmulticast mode [ 216.528520][T10882] loop8: detected capacity change from 0 to 512 [ 216.530670][T10882] EXT4-fs (loop8): Test dummy encryption mode enabled [ 216.550087][T10880] netlink: 15231 bytes leftover after parsing attributes in process `syz.9.1429'. [ 216.553053][T10882] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1428: inode has both inline data and extents flags [ 216.556004][T10882] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 216.556605][T10882] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1428: couldn't read orphan inode 15 (err -117) [ 216.558648][T10882] loop8: lost filesystem error report for type 5 error -117 [ 216.563170][T10882] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.067764][T10888] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 217.067799][T10888] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 217.807952][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 217.807999][ T30] audit: type=1800 audit(217.780:1668): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 218.311008][T10904] netlink: 'syz.7.1435': attribute type 13 has an invalid length. [ 218.314376][T10904] netlink: 'syz.7.1435': attribute type 58 has an invalid length. [ 218.314421][T10904] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1435'. [ 218.321728][ T30] audit: type=1800 audit(218.260:1669): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 218.332324][T10908] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1437'. [ 218.356299][ T6489] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.375783][T10911] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1440'. [ 218.375820][T10911] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 218.375970][T10911] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.386770][ T30] audit: type=1800 audit(218.360:1670): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 218.408530][ T30] audit: type=1800 audit(218.380:1671): pid=10916 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1442" name="map_device" dev="sysfs" ino=19806 res=0 errno=0 [ 218.415023][ T30] audit: type=1800 audit(218.390:1672): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 218.428395][T10918] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1441'. [ 218.428834][T10912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.428845][T10912] IPv6: NLM_F_CREATE should be set when creating new route [ 218.428914][T10912] IPv6: NLM_F_CREATE should be set when creating new route [ 218.429213][T10912] x_tables: unsorted underflow at hook 2 [ 218.440109][T10918] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1441'. [ 218.475368][ T30] audit: type=1800 audit(218.450:1673): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 218.515043][T10924] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 218.517819][T10924] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 218.520200][T10924] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 218.522762][ T30] audit: type=1800 audit(218.490:1674): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149964 res=0 errno=0 [ 218.532141][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1444'. [ 218.976149][ T30] audit: type=1800 audit(218.930:1675): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 218.994454][T10935] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16 [ 218.998849][ T30] audit: type=1800 audit(218.970:1676): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149978 res=0 errno=0 [ 219.006408][ T30] audit: type=1800 audit(218.980:1677): pid=4709 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=149994 res=0 errno=0 [ 219.144250][T10942] loop9: detected capacity change from 0 to 512 [ 219.147289][T10942] EXT4-fs: inline encryption not supported [ 219.151082][T10942] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 219.154312][T10942] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1447: invalid indirect mapped block 2683928664 (level 1) [ 219.158419][T10942] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 219.158780][T10942] EXT4-fs (loop9): 1 truncate cleaned up [ 219.160744][T10942] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.885935][T10966] loop8: detected capacity change from 0 to 128 [ 219.899780][T10966] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.910571][T10966] : renamed from bond_slave_0 (while UP) [ 219.956797][ T6489] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.140693][ T7694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.224157][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1463'. [ 221.224188][T10999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.224223][T10999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.226628][T10999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.226641][T10999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.265261][T11022] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1470'. [ 222.345365][T11026] overlayfs: failed to clone upperpath [ 223.251335][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 223.251382][ T30] audit: type=1800 audit(223.190:1708): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 223.334124][ T30] audit: type=1800 audit(223.300:1709): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 223.338031][ T30] audit: type=1800 audit(223.310:1710): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 223.410714][T11049] overlayfs: failed to clone upperpath [ 223.694730][T11054] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1481'. [ 223.695040][T11054] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.695208][T11054] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.269320][ T30] audit: type=1326 audit(224.240:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11079 comm="syz.9.1487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff823792a8 code=0x7ffc0000 [ 224.274328][ T30] audit: type=1326 audit(224.240:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11079 comm="syz.9.1487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff823792a8 code=0x7ffc0000 [ 224.274380][ T30] audit: type=1326 audit(224.240:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11079 comm="syz.9.1487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=160 compat=0 ip=0xffff823792a8 code=0x7ffc0000 [ 224.274399][ T30] audit: type=1326 audit(224.240:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11079 comm="syz.9.1487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff823792a8 code=0x7ffc0000 [ 224.274415][ T30] audit: type=1326 audit(224.240:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11079 comm="syz.9.1487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff823792a8 code=0x7ffc0000 [ 224.274431][ T30] audit: type=1326 audit(224.240:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11079 comm="syz.9.1487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff8235c16c code=0x7ffc0000 [ 224.274446][ T30] audit: type=1326 audit(224.240:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11079 comm="syz.9.1487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff823792a8 code=0x7ffc0000 [ 224.329897][T11082] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1488'. [ 224.332368][T11082] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1488'. [ 224.659418][T11090] overlayfs: failed to clone upperpath [ 225.004552][T11095] loop8: detected capacity change from 0 to 512 [ 225.006138][T11095] EXT4-fs (loop8): Test dummy encryption mode enabled [ 225.008748][T11095] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1492: inode has both inline data and extents flags [ 225.009164][T11095] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 225.011594][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 225.011606][ C1] EXT4-fs (loop8): initial error at time 224: ext4_orphan_get:1399: inode 15 [ 225.011621][ C1] EXT4-fs (loop8): last error at time 224: ext4_orphan_get:1399: inode 15 [ 225.011943][T11095] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1492: couldn't read orphan inode 15 (err -117) [ 225.011964][T11095] loop8: lost filesystem error report for type 5 error -117 [ 225.022966][T11095] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.407472][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 225.527955][T11105] overlayfs: missing 'lowerdir' [ 226.052837][T11115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1497'. [ 226.054742][T11115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1497'. [ 226.584924][T11125] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 226.584952][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 227.041003][ T6489] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.069275][T11142] loop8: detected capacity change from 0 to 512 [ 228.156044][T11142] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.839406][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 228.839470][ T30] audit: type=1800 audit(228.750:1729): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 228.945899][T11154] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1507'. [ 229.456788][ T6489] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.471674][ T30] audit: type=1800 audit(229.440:1730): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 229.547972][T11160] overlayfs: failed to clone upperpath [ 230.364122][T11170] overlayfs: failed to clone upperpath [ 231.031325][T11175] overlayfs: missing 'lowerdir' [ 231.373765][ T30] audit: type=1804 audit(231.350:1731): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="udevd" name="/sys/devices/virtual/block/loop8/uevent" dev="sysfs" ino=16741 res=1 errno=0 [ 231.375059][ T30] audit: type=1800 audit(231.350:1732): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 235.423937][ T30] audit: type=1800 audit(235.330:1733): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 235.494556][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1518'. [ 235.502918][T11192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1516'. [ 235.809849][T11192] bond5 (unregistering): Released all slaves [ 237.270452][ T30] audit: type=1800 audit(237.240:1734): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 238.519368][T11219] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 238.807868][ T30] audit: type=1800 audit(238.780:1735): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 239.429089][T11246] netlink: 'syz.7.1529': attribute type 11 has an invalid length. [ 239.429159][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1529'. [ 239.965209][T11240] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 239.977945][T11240] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 239.988528][T11240] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 240.111979][ T30] audit: type=1800 audit(239.110:1736): pid=11240 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1530" name="map_device" dev="sysfs" ino=19806 res=0 errno=0 [ 240.112067][ T30] audit: type=1800 audit(239.960:1737): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151037 res=0 errno=0 [ 240.153127][T11236] ip6t_REJECT: ECHOREPLY is not supported [ 240.155692][T11240] ================================================================== [ 240.155709][T11240] BUG: KASAN: null-ptr-deref in trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 [ 240.155739][T11240] Read of size 255 at addr 0000000000000000 by task syz.8.1530/11240 [ 240.155749][T11240] [ 240.155757][T11240] CPU: 1 UID: 0 PID: 11240 Comm: syz.8.1530 Tainted: G L syzkaller #0 PREEMPT [ 240.155771][T11240] Tainted: [L]=SOFTLOCKUP [ 240.155776][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 240.155784][T11240] Call trace: [ 240.155789][T11240] show_stack+0x2c/0x3c (C) [ 240.155808][T11240] __dump_stack+0x30/0x40 [ 240.155825][T11240] dump_stack_lvl+0xd8/0x12c [ 240.155841][T11240] print_report+0x58/0x84 [ 240.155855][T11240] kasan_report+0x8c/0xc4 [ 240.155871][T11240] kasan_check_range+0x17c/0x1ac [ 240.155886][T11240] __asan_memcpy+0x3c/0x84 [ 240.155903][T11240] trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 [ 240.155918][T11240] __traceiter_rtrs_clt_close_conns+0x74/0xc8 [ 240.155932][T11240] rtrs_clt_close_conns+0x2f0/0x40c [ 240.155949][T11240] rtrs_clt_open+0xa6c/0xd54 [ 240.155964][T11240] rnbd_clt_map_device+0xcb8/0x1f64 [ 240.155982][T11240] rnbd_clt_map_device_store+0x900/0xad8 [ 240.155999][T11240] dev_attr_store+0x6c/0x90 [ 240.156014][T11240] sysfs_kf_write+0xe0/0x108 [ 240.156031][T11240] kernfs_fop_write_iter+0x260/0x3b8 [ 240.156047][T11240] vfs_write+0x51c/0xa0c [ 240.156060][T11240] ksys_write+0x12c/0x228 [ 240.156072][T11240] __arm64_sys_write+0x84/0x98 [ 240.156085][T11240] invoke_syscall+0x98/0x244 [ 240.156102][T11240] el0_svc_common+0x19c/0x23c [ 240.156119][T11240] do_el0_svc+0x4c/0x5c [ 240.156135][T11240] el0_svc+0x64/0x260 [ 240.156151][T11240] el0t_64_sync_handler+0x44/0x104 [ 240.156166][T11240] el0t_64_sync+0x198/0x19c [ 240.156180][T11240] ================================================================== [ 240.156210][T11240] Disabling lock debugging due to kernel taint [ 240.232631][T11249] overlayfs: failed to clone upperpath [ 240.833909][ T30] audit: type=1800 audit(240.810:1738): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 248.814065][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.814151][ T1594] ieee802154 phy1 wpan1: encryption failed: -22