last executing test programs: 2m34.012258959s ago: executing program 3 (id=932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf32ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001780), 0x40000, 0x0) readv(r3, &(0x7f0000004a00), 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./cgroup\x00', 0x0, 0x4000}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x9) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)='0000:00:02.0', 0xc) 2m33.107450973s ago: executing program 3 (id=944): syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\a\x00G', 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "190000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 2m33.0319149s ago: executing program 3 (id=945): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) getsockopt$inet_opts(r0, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="4b000000020000000b"], 0x36f0516f) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="b40000000000000073118e00000000002700000000000000950074eb00000000b2a1d7269ade1dd021220a609d2329fa913d9f9d76224062f36b4e5d66394c3561621cb288c4582e289907fcbb4c26c41c9eaf8f913a63b4821db973f8e1ab0376402cc79aff1b524dce20e1be1aa7c9b0b6272b3dae87662deebebee66bd424839d327cb8e218de0cffe8905b674b203d359c76bdfdfcb50711234f22f54f648253f9b8f158800e155ce9270f82c0a23f96b65fd26d83b46fde2e30cc30296f8e0213143a3675666132060e2cd29ecbe416942597593973e723b9db1acd3046b1f11d590c567810191901eabb4a646069cf0582e407"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040840) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) (async) getsockopt$inet_opts(r0, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) (async) open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="4b000000020000000b"], 0x36f0516f) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="b40000000000000073118e00000000002700000000000000950074eb00000000b2a1d7269ade1dd021220a609d2329fa913d9f9d76224062f36b4e5d66394c3561621cb288c4582e289907fcbb4c26c41c9eaf8f913a63b4821db973f8e1ab0376402cc79aff1b524dce20e1be1aa7c9b0b6272b3dae87662deebebee66bd424839d327cb8e218de0cffe8905b674b203d359c76bdfdfcb50711234f22f54f648253f9b8f158800e155ce9270f82c0a23f96b65fd26d83b46fde2e30cc30296f8e0213143a3675666132060e2cd29ecbe416942597593973e723b9db1acd3046b1f11d590c567810191901eabb4a646069cf0582e407"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) (async) 2m33.031258184s ago: executing program 3 (id=946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0xffffffff, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}, 0x1, 0x0, 0x0, 0x5004}, 0x0) 2m32.937539873s ago: executing program 3 (id=948): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1, @loopback, 0x5}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 2m32.875928649s ago: executing program 3 (id=949): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x3b6e, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x20, 0x1, 0x8, 0x5b75, 0x0, 0x200, 0x0}) syz_read_part_table(0x624, &(0x7f0000000640)="$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") 2m25.327707968s ago: executing program 4 (id=1039): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m24.428100976s ago: executing program 4 (id=1043): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback={0x4102000000000000}, 0x1}, 0x1c) 2m24.427328749s ago: executing program 4 (id=1045): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="791010ffffff3f0095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) 2m24.426367178s ago: executing program 4 (id=1046): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9ac24e3971b4b2ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x15c, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="422bbfd00e271d27171852a7b45c1e70"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff7fff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f65f6a8a3800000000000000ffb99f0a927d3f24a228b24c"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6c01ad1ee2b8907865823629a69e71b237d580b53090e4617ae63f4a3738604d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c400003237fe1378"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4099fe445f8e3def52733a130650365f000ff55bd6342302e5fb444aaac5ce6e"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1fab75bfbbfc68058af7ae5abf45d824649da391452b62f2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2f84e50406568bb692990883668e8b781a1aa5f5c92df7ef"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x200}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="53091d3b6bb005a2a05adb37795a142d"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5c7c02dbf3f45067"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a2ce49c36231c391040b44fcf5c6f1a130be7afc718b01232aa6a5b90a5d47c2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="bd7050e0277076faaaa03a72e188315a"}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40040}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 2m24.400656848s ago: executing program 4 (id=1048): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0x9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0x98f910, 0x4}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x106f) fsmount(0xffffffffffffffff, 0x0, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xc, "aa"}, {0x18, 0x110, 0x1, '\x00'}], 0x30}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2m24.330435202s ago: executing program 0 (id=1050): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_usbip_server_init(0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x29, 0xd, 0x7f, 0x3, 0x20, @local, @rand_addr=' \x01\x00', 0x20, 0x700, 0x8, 0x6}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r4], 0x320}, 0x1, 0x0, 0x0, 0x20004040}, 0x11) ioctl$TCSETS(r3, 0x5402, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x490042, 0x0) pwrite64(r5, 0x0, 0x0, 0x8080c61) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x2) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0xf000000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000000007) 2m24.083946549s ago: executing program 4 (id=1051): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x88}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") 2m23.171325932s ago: executing program 32 (id=1051): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x88}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") 2m22.411050676s ago: executing program 0 (id=1059): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000100)={0xfffcff7f, 0x0, 0x6, 0x10, 0x200, &(0x7f0000000180)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949e496f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff4175b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7963e43b7f9c03bebfb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 2m22.125829314s ago: executing program 0 (id=1061): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0x9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0x98f910, 0x4}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x106f) fsmount(0xffffffffffffffff, 0x0, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xc, "aa"}, {0x18, 0x110, 0x1, '\x00'}], 0x30}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2m21.213602579s ago: executing program 0 (id=1064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0xef, 0x2, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r4}, 0x38) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4623, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r5, 0x50) setresuid(0xee00, 0xee00, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r6, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r4}, 0x38) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x92462658b1574913, 0x0) 2m19.978959475s ago: executing program 0 (id=1072): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000140), 0x1, 0x558, &(0x7f0000000680)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x54, r5, 0x113, 0x70bd2c, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x87}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f00000000c0)) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) 2m19.013327498s ago: executing program 0 (id=1078): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x810) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r3) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r9, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000001540)=0x4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf250600000020000180080003000500000014000200776730"], 0x34}, 0x1, 0x0, 0x0, 0x24000400}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m17.022809656s ago: executing program 33 (id=949): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x3b6e, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x20, 0x1, 0x8, 0x5b75, 0x0, 0x200, 0x0}) syz_read_part_table(0x624, &(0x7f0000000640)="$eJzs3D+IHUUcB/Dvvtu3710UDytL7SIWJmApCUo4DhFyAdFYSDSFf5pXRTBNzKlRSXGJhRrU4iwE8TxIZSM2Egl3IgS0UBGsFESwFPVAV/bPi+8aC/Ma4fMpdmZ/M/Ob2d1pZ8P/2iAfvJyFplaPUjTlqI/3yva+zkdFstZGumvVXB7ePL78yIvH7u/7Xkmy+8drSYZ11eXp02VxT/FTk3iyvjmql7rALzelbJOuDdrVVPn87RMZJ4Nqz8BefbavFLm+pKLpntn4W7ddefr0fdPQOLMdmI9bfn1lmAy7mzJF/0UGW9d2m/Kv0bh76fXCnmF35KH5zH/50NWl6Wf9ZuXMDytfJ1k5emnjQHWx2ToH2/13+u6ZIfveKcr5TJ5k8ufx6sP3Pjty7sfFe7bH/WbPcv9Ccv7kbt3pmtqJb+4b57gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADm5M5Td316e/HlrR8/OXp35/DOvfsmjz6ztf/I2a1rx4ZJ3i/6fgdGXVmkng4dzmP+y4euLr10rq6zlDKpmtBquXL00sbh6uJi9v98sO/3RNu4/u1Tz3X39c44VRZueP7JYjLo69sPrq6+PswbOZMX8nyZjKvzJ7PYLKx58CoZVPnqzcfHSfs2xjc8OwAAAAAAAAAAAAAAAAAAAHSWy2fLaf2xKsnGA9819XqUC9Mj7rPn3L8fJe2x+0/KyfrmyqsXpqP7/wOsDXKiKavket78nu02R9nGvuiCbfNvdV3PZJ/9pcCpfzvcXyRr//mZ+cffAQAA///Zxmwl") 2m11.302352541s ago: executing program 2 (id=1141): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1800, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x60, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 2m11.220399416s ago: executing program 2 (id=1144): syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffa, 0x1ea1a2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000300) 2m11.163303818s ago: executing program 2 (id=1147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000280)={[{@fat=@umask={'umask', 0x3d, 0x4}}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlate}, {@shortname_win95}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@utf8}, {@shortname_mixed}, {@fat=@nfs}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$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") mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) file_setattr(r1, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x18, 0x1000) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8558, 0x1000, 0x0, 0xe}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x2800088, &(0x7f0000000340)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b7, &(0x7f00000010c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000700)={&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/51, 0x33}, {&(0x7f00000005c0)=""/82, 0x52}, {0xffffffffffffffff}], 0x3, &(0x7f0000000680)=""/78, 0x4e}, 0x120) getdents64(r4, &(0x7f0000000040)=""/61, 0x3d) getdents64(r4, 0xfffffffffffffffe, 0x29) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) close(r5) ioctl$XFS_IOC_FSGROWFSRT(r3, 0x40105870, &(0x7f0000000040)={0x1, 0x9}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c0008000100000000003d000000a27e758a00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="be400000907800130e0300050a00000000000000000008d588dc050391000000"], 0x4e) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0xc0002, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500), r6) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00', @ANYRES16=r7, @ANYBLOB="000125bd7000ffdbdf25010000000800090003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 2m10.932426568s ago: executing program 2 (id=1153): openat$dlm_control(0xffffffffffffff9c, 0x0, 0x509000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0x9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0x98f910, 0x4}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xc, "aa"}, {0x18, 0x110, 0x1, '\x00'}], 0x30}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2m8.555499456s ago: executing program 2 (id=1171): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) close(r6) socket(0x10, 0x3, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x2}}, './file1\x00'}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') 2m7.663918876s ago: executing program 2 (id=1178): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x3f, &(0x7f00000000c0)=0x10, 0x4) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/27, 0x1b}, 0x3}], 0x1, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x164, 0x0, 0x1, 0x201, 0x0, 0x0, {0xe, 0x0, 0x8}, [@CTA_LABELS_MASK={0x28, 0x17, [0xffff8001, 0x81, 0x5, 0xffffff81, 0x3, 0xffffff30, 0x2, 0x536b, 0x0]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xcfb}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x77c0e579}]}, @CTA_LABELS_MASK={0x24, 0x17, [0xe, 0x9, 0x2, 0x7, 0x2, 0x5, 0x7, 0x9]}, @CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x4}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_PROTOINFO={0x4c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x48, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3b}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xdf}, @CTA_PROTOINFO_DCCP_ROLE={0x5}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xe5}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1c}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1b}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0xc040}, 0x8000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x4878, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000002050000000900010073797a30000000000900030073797a300000e5ff07000a40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() prctl$PR_SET_TIMERSLACK(0x1d, 0x3) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000300)='veno', 0x4) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r8 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r8) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000080), 0x1c) 2m3.889093252s ago: executing program 34 (id=1078): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x810) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r3) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r9, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000001540)=0x4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf250600000020000180080003000500000014000200776730"], 0x34}, 0x1, 0x0, 0x0, 0x24000400}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m52.267697521s ago: executing program 35 (id=1178): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x3f, &(0x7f00000000c0)=0x10, 0x4) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/27, 0x1b}, 0x3}], 0x1, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x164, 0x0, 0x1, 0x201, 0x0, 0x0, {0xe, 0x0, 0x8}, [@CTA_LABELS_MASK={0x28, 0x17, [0xffff8001, 0x81, 0x5, 0xffffff81, 0x3, 0xffffff30, 0x2, 0x536b, 0x0]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xcfb}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x77c0e579}]}, @CTA_LABELS_MASK={0x24, 0x17, [0xe, 0x9, 0x2, 0x7, 0x2, 0x5, 0x7, 0x9]}, @CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x4}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_PROTOINFO={0x4c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x48, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3b}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xdf}, @CTA_PROTOINFO_DCCP_ROLE={0x5}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xe5}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1c}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1b}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0xc040}, 0x8000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x4878, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000002050000000900010073797a30000000000900030073797a300000e5ff07000a40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() prctl$PR_SET_TIMERSLACK(0x1d, 0x3) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000300)='veno', 0x4) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r8 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r8) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000080), 0x1c) 8.185889469s ago: executing program 8 (id=1917): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf32ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001780), 0x40000, 0x0) readv(r3, &(0x7f0000004a00), 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./cgroup\x00', 0x0, 0x4000}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x9) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)='0000:00:02.0', 0xc) 7.663906257s ago: executing program 5 (id=1921): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x88}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") 6.698809584s ago: executing program 5 (id=1923): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000010c0)='./file1\x00', 0xa18c56, &(0x7f0000000100)={[{@fat=@check_strict}, {@shortname_mixed}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@fat=@discard}, {@fat=@debug}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@shortname_mixed}, {@shortname_winnt}, {@uni_xlateno}]}, 0x81, 0x29f, &(0x7f0000000640)="$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") r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@RTM_GETMDB={0x18, 0x56, 0x8, 0x70bd28, 0x25dfdbfe, {0x7, r2}, ["", "", "", "", "", "", "", "", "", ""]}, 0x18}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 6.441738638s ago: executing program 8 (id=1926): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000200002001dcdf252500000008000300", @ANYRES32, @ANYBLOB="08002600cc1591a708003500000000000a00340002020202020200000800090001ac0f000a0006000802110000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20040040}, 0x44804) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r2 = userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1e9) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x4044000}, 0x40800) setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000240)=ANY=[@ANYRES64], 0x9, 0x2) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="05000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x100) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xd67}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) io_uring_setup(0xd60, &(0x7f0000000040)={0x0, 0x7cb3, 0x80, 0x0, 0x2b4}) 5.576404791s ago: executing program 5 (id=1927): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="db326cf2bf3d46", 0x7}], 0x1) (fail_nth: 4) 5.220222862s ago: executing program 5 (id=1930): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x8}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="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", 0x125}, {&(0x7f0000000840)="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", 0x187}], 0x2}, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc5c, &(0x7f0000000380)={[{@dioread_lock}, {@test_dummy_encryption}]}, 0x3, 0x459, &(0x7f0000000540)="$eJzs3MtvG0UYAPBvN48S2pJQyqMPIFAQEY+kaQv0wAEQSByKhAQHOEZJWpWmDWqCRKsIWoTKCSEk7ogj/wInuCDECYkr3FGlCuWSlpPR2ruN7dhu4tpxi38/ycnMzmxmPu+OPbtjJ4C+NZ79SCJ2RcSfETFaydZWGK/8ur66MntjdWU2iVLp3X+Scr211ZXZomqx3848M5FGpF8kcaBBu0sXLp6ZWViYP5/np5bPfjS1dOHiC6fPzpyaPzV/7sjx48eOTr/80pEXOxJn1qe1/Z8uHtz31gffvH3iq5r46+LokPFWhU+XSh1urrd2V6WTwQ3FI9vaGTZtICKywzVUHv+jMRDrB2803vy8p50DuqpUKpV2Ni++VAL+x5KozRvy0C+KN/q11ZU0VldmG10Hv9q96UfPXXutcgGUxX09f1RKBiPN6wzVXd920nhEvH/p3++yR3TnPgQAQI2fsvnP85V5x1rN/C+Nh6rq3ZevDY1FxP0RsSciHoiIvRHxYES57sMR8cgW269fJNk4/0mvthXYJmXzv1fyta3a+V8x+4uxgTy3uxz/UHLy9ML84fw5mYihHVl+ukUbP7/xx9fNyqrnf9kja7+YC+b9uDq4o3afuZnlmduJudq1yxH7BxvFn9xcCUgiYl9E7G+zjdPP/nCwWdmt429h4zrTlpW+j3imcvwvRV38haT1+uTUPbEwf3iqOCs2+u33K+80a/+24u+A7Pjf2/D8vxn/WFK9Xru09Tau/PVl02uads//4eS9cno43/bJzPLy+emI4eREpdPV24+s71vki/pZ/BOHGo//PbH+TByIiOwkfjQiHouIx/O+PxERT0bEoRbx//r6Ux+2H393ZfHPben4ryeGo35L48TAmV9+rGl0bEP8N1of/2Pl1ES+ZTOvf5vpV3tnMwAAANx90ojYFUk6eTOdppOTlc/L741IFxaXlp87ufjxubnKdwTGYigt7nSNVt0Pnc4v6yv5yxFR+WhBUX40v2/87cBIOT85u7gw1+vgoc/tbDL+M38P9Lp3QNd1YB0NuEsZ/9C/jH/oX8Y/9K8G498/bIE+0ej9/7Me9APYfnXj37If9BHX/9C/jH/oX8Y/9KWlkbj1l+RbJoq/1Obut5sY2fRX/bc5EUN3RDe6loj0juiGRJcSvX1dAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6JT/AgAA//9OFd7A") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2009850, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@noblock_validity}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101402, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) read$FUSE(r1, &(0x7f0000001e00)={0x2020}, 0x2020) connect$802154_dgram(r1, &(0x7f0000000200)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) fsetxattr$security_evm(r1, &(0x7f0000000080), &(0x7f0000000180)=@sha1={0x1, "dc0021f6f9a6968526d4237d803c090e8acd9f23"}, 0x15, 0x2) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001600), 0xffffffffffffffff) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, &(0x7f00000001c0)=0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000000)={0x4c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4080) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x105) lseek(r4, 0xfffffffffffffffe, 0x0) 4.687762948s ago: executing program 5 (id=1937): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a01000000000061114c0000000000850000002f0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x34) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fsopen(&(0x7f0000001080)='ufs\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000013000100000000000000000007060000", @ANYRES32=r5, @ANYBLOB="000000000000000014001a80100005800c0006800800010000000000"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113d00000000008510000002000000b70a0000000000009500c2000000000095000012000000"], &(0x7f0000000100)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100}, 0x94) syz_read_part_table(0x1077, &(0x7f0000000000)="$eJzs0LFNBDEUBNA5zt69EwSkVECBxIg9iQpICSiFlJxmEAQfrY9gGwCS9xJbXx6P5fCvjq/9Nkk9JMfsx+iQtCRzkqfNyX3yUclXzVVV2eX9Osm05jImGbnqVT11t8bvX1o/5OZUrc5G02e1zKefO6dlXa8uR/VbljxPyWOSnt2m+WJslvPrNvoffBEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/LrvAAAA//8ghCX8") listen(0xffffffffffffffff, 0x9) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) 3.428063129s ago: executing program 5 (id=1940): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 3.294990404s ago: executing program 36 (id=1940): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 3.251816438s ago: executing program 8 (id=1944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf32ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001780), 0x40000, 0x0) readv(r3, &(0x7f0000004a00), 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./cgroup\x00', 0x0, 0x4000}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x9) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)='0000:00:02.0', 0xc) 3.241116396s ago: executing program 1 (id=1946): mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000005c40)="0000fffa090209000101008001120100020000004000800000000000000001", 0x1f) 3.159787004s ago: executing program 1 (id=1947): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000000580)="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", 0x66c}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c845) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 3.124924961s ago: executing program 1 (id=1948): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06000000040000000300000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, r2, 0xffffffff00000000, 0x7}, 0x38) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000880)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005fffc00000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000008efeae28be91000000000000000000000000004b4c6ffadd11d9439e026e253900000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a0000000000000000000000804000000000000000000800000000000000000101000000000000440005000000394a236500000000000000000000000004d23c00000000000000ffffffff0000000000000000000000000000000000030000490000000000"], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x2) cachestat(r7, &(0x7f0000000000)={0x61f5, 0x5}, &(0x7f00000000c0), 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700090a"], 0x10}}, 0x800) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000280012800b00010167656e657665000018000280140007000000000000000000000000000000000108000a00", @ANYRES32=r5, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r9) sendmsg$nl_route_sched(r9, &(0x7f000000c7c0)={0x0, 0x0, &(0x7f000000c780)={&(0x7f0000000300)=@newtaction={0xe0, 0x32, 0x400, 0x0, 0x0, {}, [{0xfffffffffffffe45, 0x1, [@m_pedit={0xc8, 0xd, 0x0, 0x0, {{0xa}, {0x4, 0x3}, {0x99, 0x6, "7d5dbb35658884c7bc298689114102692e7e92ef44e7796bf1fb55d7ba6fc1d8c8c2af799564d62da930b83f8b236f3e93eb8d9d3344f4fd3326f349c1e82623f4c3b454a99d1ce93b7e12f904d0b98b5fda5cc6e1cceb4c8b792230a82579fc2d8d39183eb55331a15ac0de973d83b9aac85ca8dc22a467003f9bcc1e4803565426d11736ad7766c615e6d560721c506b81f519ef"}, {0xc}, {0xc}}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x200c014}, 0x4004) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1, @loopback, 0x5}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4}}}, 0x118) r10 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r10], 0x20}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, &(0x7f0000000740)={&(0x7f00000000c0)=0x80, 0x80, &(0x7f00000004c0)=[{}, {}, {}], &(0x7f0000000700)}) 2.745584594s ago: executing program 1 (id=1954): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2581) socket$can_raw(0x1d, 0x3, 0x1) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000043c214f80004000000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="950000000000000020000000000085100000feffffff95006cd700"/36], &(0x7f0000000040)='GPL\x00', 0x4, 0xdf, &(0x7f00000005c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0xc, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a", 0x19, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000000602, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x100000b, 0x1010, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$inet6(r3, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8000, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES8], 0x2000, 0x0) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd) dup(r2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008) socket$nl_generic(0x10, 0x3, 0x10) setsockopt(r1, 0x465, 0x5, &(0x7f00000006c0)="b913c1281ef47e6a70fe146f2bb7c3d461070000000000000005d9d9a71ae9ccc6021f352101d1a1ed2ab6834b012a94a320220a5a6f422495ee08a40cff4fea8837ff07faf306aa279ef99bcee922fff5bdf540f0edd9cb99c91e7d757756f82fb4a22778a95b95feaa8474484d531d6af4ba35c612f308cddfab3142aaf39340216f8d310832fb9771d14e15608cdf9a1f70adada1d11b468f432216864fbfa178e07f2a03e0f07e3fc60b5e35a60003530000000000853dfdf500000000", 0xbf) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt(r3, 0x61, 0xc, &(0x7f00000001c0)="ef998f0bf3f01dd9f6b2f1656df7242ae91ef1bdeaac85e7ef04cdd3818f6c94d6dd728b5f258ddc4962596cc885cb64f01afc3584be431c5bfb01898c04fe79bc3850c9eb58eb6d5d9ddd092b2fed22425f95b0c233e81589f6ff3cacc5d30b7ec25acb12c585e5258808eca54c", 0x6e) 1.909952855s ago: executing program 8 (id=1958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf250800000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848) 1.796102737s ago: executing program 6 (id=1959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 1.689751981s ago: executing program 7 (id=1960): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xfffffffb, 0x9, {0x0}, {0xee01}, 0x8, 0x60}) r2 = syz_open_procfs(r1, &(0x7f0000000180)='task\x00') getdents64(r2, &(0x7f0000000000)=""/90, 0x5a) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @multicast2}, 0x2, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x3, 0x20000008, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0xfffffffe, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x5}, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x100, 0x0, 0x2e}, 0x6e6bbd}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@rand_addr=' \x01\x00', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3c, 0x4, 0x0, 0x3501, 0xa, 0x2}, {@in=@private=0xa010101, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@rand_addr=0x64010100, 0x3c, 0x3, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1.63514775s ago: executing program 8 (id=1961): unshare(0x22020600) r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000000c0)="53dea9fd", 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0xffffae1d) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0xfa2, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x2}]}, &(0x7f0000000080)=0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x64}}, {@lazytime}, {@data_journal}, {@noload}, {@oldalloc}]}, 0x3, 0x440, &(0x7f0000000280)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0xa, 0x801, 0x84) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109042, 0x23) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x7) ioctl$BLKGETNRZONES(r6, 0x80041285, &(0x7f0000000040)=0x8) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) listen(r5, 0xfffffffd) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x1) r9 = socket$netlink(0x10, 0x3, 0x4) listen(r4, 0x8200002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r9) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) 1.634560264s ago: executing program 6 (id=1962): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x3b) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) listen(r0, 0x6) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @loopback, 0x8, 0x8}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x30, 0x84, 0x1, "54e61dc307df22c99b77926ee0168b1213689c74df10daf52c"}], 0x30}}], 0x2, 0x40000040) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa}, 0x20) 1.634103765s ago: executing program 1 (id=1963): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x106f) fsmount(0xffffffffffffffff, 0x0, 0x80) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, 0x0, 0x0) 1.62594855s ago: executing program 6 (id=1964): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff2, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x4, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}, @TCF_EM_META={0xffffffffffffff16, 0x2, 0x0, 0x0, {{0xe341, 0x4, 0x101}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x0, 0x1, 0x0, 0x0, {{0x800, 0x2, 0xfff}, {0x6, 0x0, 0x2, "b5413453cd96491185a8"}}}, @TCF_EM_META={0x0, 0x3, 0x0, 0x0, {{0x5, 0x4, 0xd}, [@TCA_EM_META_HDR={0x0, 0x1, {{0x4, 0xb1}, {0x9, 0x7}}}]}}, @TCF_EM_IPSET={0x0, 0x3, 0x0, 0x0, {{0x8001, 0x8, 0x8}, {0x4, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x0, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x9}, {0xae4a, 0x0, 0x1, 'g'}}}, @TCF_EM_IPT={0x0, 0x3, 0x0, 0x0, {{0x9, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_REVISION={0x0, 0x3, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x0, 0x3, 0x2}, @TCA_EM_IPT_HOOK]}}, @TCF_EM_NBYTE={0x0, 0x1, 0x0, 0x0, {{0x101, 0x2, 0x7}, {0xb31c, 0x0, 0x0, "a4190604ce87ec30de93"}}}, @TCF_EM_U32={0x0, 0x2, 0x0, 0x0, {{0xfff, 0x3, 0xbc}, {0x8, 0x7f, 0x8, 0x3}}}, @TCF_EM_IPT={0x0, 0x2, 0x0, 0x0, {{0x6, 0x9, 0x10}, [@TCA_EM_IPT_MATCH_DATA={0x0, 0x5, "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"}]}}, @TCF_EM_U32={0x0, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x23e8}, {0x7, 0x9, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x0, 0x1, {0x3}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.282883733s ago: executing program 7 (id=1965): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x6, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="e5", 0x1}], 0x1}], 0x1, 0x40800) openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x569882, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x22000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x402, 0x0) 1.257836564s ago: executing program 7 (id=1966): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000000)={0x2, 0xf, 0x3, 0x5, 0x40, 0x9, 0x5}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002001090780040080a0000eac9000000010000"], 0x0) 1.203952076s ago: executing program 7 (id=1967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf32ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001780), 0x40000, 0x0) readv(r3, &(0x7f0000004a00), 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./cgroup\x00', 0x0, 0x4000}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x9) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)='0000:00:02.0', 0xc) 1.20288111s ago: executing program 6 (id=1968): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffa, 0x1ea1a2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) socket(0x2c, 0x3, 0x10000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYRESOCT=r0, @ANYRES64=r5], 0x4}}, 0x20000800) sendfile(r5, r3, 0x0, 0x100000000) 1.127942042s ago: executing program 6 (id=1969): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000000000000, 0x31, 0xffffffffffffffff, 0xffffe000) 1.127313148s ago: executing program 6 (id=1970): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a01000000000061114c0000000000850000002f0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x34) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = fsopen(&(0x7f0000001080)='ufs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) fsmount(r3, 0x1, 0x7c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113d00000000008510000002000000b70a0000000000009500c2000000000095000012000000"], &(0x7f0000000100)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100}, 0x94) syz_read_part_table(0x1077, &(0x7f0000000000)="$eJzs0LFNBDEUBNA5zt69EwSkVECBxIg9iQpICSiFlJxmEAQfrY9gGwCS9xJbXx6P5fCvjq/9Nkk9JMfsx+iQtCRzkqfNyX3yUclXzVVV2eX9Osm05jImGbnqVT11t8bvX1o/5OZUrc5G02e1zKefO6dlXa8uR/VbljxPyWOSnt2m+WJslvPrNvoffBEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/LrvAAAA//8ghCX8") listen(0xffffffffffffffff, 0x9) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x8, &(0x7f0000000400)={&(0x7f00000010c0)=ANY=[@ANYBLOB="280000001e00030903000000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="095840c87df62521695e0b60280add95"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x50) 278.547566ms ago: executing program 1 (id=1971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82600, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x74bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x300) 238.502969ms ago: executing program 7 (id=1972): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003000)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x15c, 0x15c, 0x5, [@fwd={0x9}, @struct={0xc, 0x9, 0x0, 0x4, 0x1, 0x400, [{0x6, 0x2}, {0x5}, {0x10, 0x2, 0x1}, {0x4, 0x2, 0x9}, {0x2, 0xd, 0x6}, {0xe, 0x4}, {0xa, 0x5, 0x5a3}, {0xa, 0x2, 0x7}, {0xe, 0x5, 0x3}]}, @struct={0x8, 0x4, 0x0, 0x4, 0x0, 0x1, [{0x0, 0x0, 0x6}, {0xb, 0x4, 0xfff}, {0x2, 0x5, 0xfffffffe}, {0xc, 0x5, 0x2}]}, @func={0x4, 0x0, 0x0, 0xc, 0x1}, @enum64={0x2, 0xa, 0x0, 0x13, 0x1, 0x3, [{0xe, 0x7f, 0x5}, {0x10, 0x0, 0x6}, {0x3ff, 0x7, 0x101}, {0x10, 0x0, 0x3}, {0xb, 0x2, 0xfff}, {0x1, 0x0, 0x1}, {0x8, 0x81, 0x3}, {0xd, 0x7, 0x8}, {0x7, 0xffff, 0x5}, {0x1, 0x8, 0x6}]}, @func={0xd, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x30, 0x5f]}}, &(0x7f0000002000)=""/4096, 0x179, 0x1000, 0x1, 0x7fffffff, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) (async) setresuid(0xee00, 0xee00, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x5, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb9}, 0x94) close(r2) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) brk(0xdc0000000000) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f00000001c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000100003042adcff7ed440782d4dbc37d4", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800600190000000000050001000400000008001a"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000004040)={{r5, &(0x7f0000000240)='syzkaller\x00', 0x28000, &(0x7f0000000380)={@_ha_fsid={[0x7, 0x6e0]}, {0x4, 0xa, 0x5, 0x1}}, 0x9, &(0x7f00000003c0), &(0x7f00000005c0)=0x24f}, {[0xecf, 0x4, 0xd, 0x6f]}, 0x176, 0x1000, &(0x7f0000003040)=""/4096}) sendmsg$AUDIT_TTY_GET(r10, &(0x7f0000004180)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004140)={&(0x7f0000004100)={0x10, 0x3f8, 0x400, 0x70bd2d, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40004}, 0x1) (async) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r11 = accept4(r9, 0x0, 0x0, 0x100000) sendmmsg$inet6(r11, &(0x7f0000009e00)=[{{0x0, 0x0, &(0x7f0000006340)=[{&(0x7f0000001400)="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", 0x170}], 0x1}}], 0x1, 0x44851) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001fc0), r3) 175.848656ms ago: executing program 8 (id=1973): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2581) socket$can_raw(0x1d, 0x3, 0x1) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000043c214f80004000000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="950000000000000020000000000085100000feffffff95006cd700"/36], &(0x7f0000000040)='GPL\x00', 0x4, 0xdf, &(0x7f00000005c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0xc, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a", 0x19, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000000602, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x100000b, 0x1010, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$inet6(r3, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8000, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES8], 0x2000, 0x0) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd) dup(r2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008) socket$nl_generic(0x10, 0x3, 0x10) setsockopt(r1, 0x465, 0x5, &(0x7f00000006c0)="b913c1281ef47e6a70fe146f2bb7c3d461070000000000000005d9d9a71ae9ccc6021f352101d1a1ed2ab6834b012a94a320220a5a6f422495ee08a40cff4fea8837ff07faf306aa279ef99bcee922fff5bdf540f0edd9cb99c91e7d757756f82fb4a22778a95b95feaa8474484d531d6af4ba35c612f308cddfab3142aaf39340216f8d310832fb9771d14e15608cdf9a1f70adada1d11b468f432216864fbfa178e07f2a03e0f07e3fc60b5e35a60003530000000000853dfdf500000000", 0xbf) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt(r3, 0x61, 0xc, &(0x7f00000001c0)="ef998f0bf3f01dd9f6b2f1656df7242ae91ef1bdeaac85e7ef04cdd3818f6c94d6dd728b5f258ddc4962596cc885cb64f01afc3584be431c5bfb01898c04fe79bc3850c9eb58eb6d5d9ddd092b2fed22425f95b0c233e81589f6ff3cacc5d30b7ec25acb12c585e5258808eca54c", 0x6e) 0s ago: executing program 7 (id=1974): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x96}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1e0000000400000045c000000400000040000000", @ANYRES32=r1, @ANYBLOB="842a0000000000000000000000000000000000008e8e63dcf67e34e4f7886fe2644619ca3ebe3d2c453705710f3041bc1052bd8f7b372c50ae6cd7b1b55c228a7371fd802d683f41e0c3b6e53223cca12f37d5314faf92338bc012866bcacbac532383c3d68def6fcfaf52f13f7a0297fef2114972e86a95f870b46c7947384cccec619136f5ec2e23034c5f0e68e396161cf4bcaefab8aafdc9559a73c7a6bd6078a5a6d566444f9a021a7f8b287fcec379ab845f160a6fb0046e669cb9c704c8c4e5d29b67b96bc186db99046994740cf1fb62fdc25cde", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000001000000030000000700"/28], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000480)=""/97, 0x61, 0x0, &(0x7f0000000500)=""/122, 0x7a}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000006c0)='syzkaller\x00', 0x9, 0x69, &(0x7f0000000700)=""/105, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000780)=[0x1], &(0x7f00000007c0)=[{0x5, 0x5, 0x0, 0x9}, {0x0, 0x1, 0x5, 0x6}, {0x4, 0x1, 0xb, 0xb}, {0x5, 0x2, 0x0, 0xa}, {0x1, 0x4, 0x1, 0xa}, {0x3, 0x2, 0xd, 0xc}, {0x2, 0x3, 0x9, 0xc}, {0x2, 0x1, 0x8, 0x2}, {0x1, 0x2, 0xf}], 0x10, 0x7}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x29, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @alu={0x4, 0x1, 0x8, 0x8, 0x7, 0xffffffffffffffff, 0xfffffffffffffff0}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ldst={0x0, 0x3, 0x4, 0x9, 0x0, 0x20, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @exit]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x75, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r7, 0x6, &(0x7f00000009c0)=[r8, 0x1, r9, r10], &(0x7f0000000a00)=[{0x5, 0x5, 0x2, 0xc}, {0x5, 0x1, 0xe, 0xb}, {0x1, 0x5}, {0x0, 0x5, 0x4, 0xb}, {0x3, 0x2, 0xd, 0xa}, {0x4, 0x4, 0x10}], 0x10, 0x5}, 0x94) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) kernel console output (not intermixed with test programs): t [1, 0] type 2 family 0 port 6081 - 0 [ 130.716484][ T7149] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.718416][ T7149] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.732093][ T8233] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 131.645049][ T7149] bridge_slave_1: left allmulticast mode [ 131.646422][ T7149] bridge_slave_1: left promiscuous mode [ 131.648324][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.654688][ T7149] bridge_slave_0: left allmulticast mode [ 131.654711][ T7149] bridge_slave_0: left promiscuous mode [ 131.654787][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.895436][ T7149] team0: Port device vxlan0 removed [ 132.131750][ T8265] loop2: detected capacity change from 0 to 8 [ 132.132776][ T8265] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 132.132784][ T8265] unable to read xattr id index table [ 132.182024][ T7149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.197642][ T7149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.204805][ T7149] bond0 (unregistering): Released all slaves [ 132.210528][ T7149] bond1 (unregistering): (slave dummy0): Releasing active interface [ 132.225211][ T7149] bond1 (unregistering): Released all slaves [ 132.235592][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 132.447371][ T7149] tipc: Left network mode [ 132.831380][ T4717] Bluetooth: hci1: command tx timeout [ 132.912616][ T8215] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.915917][ T8215] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.917599][ T8215] bridge_slave_0: entered allmulticast mode [ 132.919709][ T8215] bridge_slave_0: entered promiscuous mode [ 132.934782][ T8215] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.936247][ T8215] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.937807][ T8215] bridge_slave_1: entered allmulticast mode [ 132.940570][ T8215] bridge_slave_1: entered promiscuous mode [ 132.961425][ T4398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 132.999335][ T8215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.005951][ T8215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.053312][ T8215] team0: Port device team_slave_0 added [ 133.056484][ T8215] team0: Port device team_slave_1 added [ 133.076502][ T8215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.079103][ T8215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.083896][ T8215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.087190][ T8215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.088716][ T8215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.093467][ T8215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.142287][ T8215] hsr_slave_0: entered promiscuous mode [ 133.144112][ T8215] hsr_slave_1: entered promiscuous mode [ 133.146065][ T8215] debugfs: 'hsr0' already exists in 'hsr' [ 133.147638][ T8215] Cannot create hsr debugfs directory [ 133.421771][ T7149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.421805][ T7149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.431704][ T7149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.431732][ T7149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.440986][ T7149] veth1_macvtap: left promiscuous mode [ 133.441040][ T7149] veth0_macvtap: left promiscuous mode [ 133.441147][ T7149] veth1_vlan: left promiscuous mode [ 133.441199][ T7149] veth0_vlan: left promiscuous mode [ 133.577468][ T7149] team0 (unregistering): Port device team_slave_1 removed [ 133.583125][ T7149] team0 (unregistering): Port device team_slave_0 removed [ 133.584232][ T8324] netlink: 'syz.1.1071': attribute type 6 has an invalid length. [ 133.657054][ T4398] 8021q: adding VLAN 0 to HW filter on device eth3 [ 133.822230][ T8215] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.828993][ T8215] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.833894][ T8215] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.840643][ T8215] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.842323][ T8215] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.844763][ T8215] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.847903][ T8215] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 134.139341][ T8215] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.181726][ T8348] vlan2: entered promiscuous mode [ 134.181754][ T8348] bridge0: entered promiscuous mode [ 134.221551][ T8215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.232683][ T8215] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.245556][ T7130] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.245599][ T7130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.246179][ T7130] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.246198][ T7130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.261024][ T8215] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 134.265118][ T8215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.285278][ T4398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 134.429632][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 134.682774][ T8379] team0: Device ipvlan0 failed to register rx_handler [ 134.742131][ T8215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.822061][ T8384] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1079'. [ 134.857699][ T8384] No such timeout policy "syz1" [ 134.860405][ T8384] loop1: detected capacity change from 0 to 256 [ 134.864888][ T8384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.865479][ T8384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.903128][ T4717] Bluetooth: hci1: command tx timeout [ 134.929678][ T8215] veth0_vlan: entered promiscuous mode [ 134.934923][ T8215] veth1_vlan: entered promiscuous mode [ 134.944432][ T8215] veth0_macvtap: entered promiscuous mode [ 134.946006][ T8215] veth1_macvtap: entered promiscuous mode [ 134.950710][ T8215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.954501][ T8215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.958212][ T5694] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.958259][ T5694] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.958275][ T5694] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.958289][ T5694] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.996433][ T7149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.996469][ T7149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.009281][ T7149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.009316][ T7149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.377891][ C0] vcan0: j1939_tp_rxtimer: 0x00000000240a4ea1: rx timeout, send abort [ 135.877935][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ed6cb219: rx timeout, send abort [ 135.877981][ C0] vcan0: j1939_tp_rxtimer: 0x00000000240a4ea1: abort rx timeout. Force session deactivation [ 135.921467][ T8408] loop1: detected capacity change from 0 to 8192 [ 136.120322][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1082'. [ 136.377982][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ed6cb219: abort rx timeout. Force session deactivation [ 136.681184][ T8408] Dev loop1: unable to read RDB block 8 [ 136.681250][ T8408] loop1: unable to read partition table [ 136.681333][ T8408] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 136.754844][ T4711] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 136.757186][ T4711] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 136.759133][ T4711] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 136.760820][ T4711] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 136.770332][ T4711] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 136.929007][ T8434] syz_tun: entered allmulticast mode [ 136.965586][ T8434] syz_tun (unregistering): left allmulticast mode [ 136.983292][ T4711] Bluetooth: hci1: command tx timeout [ 137.009345][ T8440] cgroup: name respecified [ 137.046604][ T8443] netlink: 5508 bytes leftover after parsing attributes in process `syz.1.1086'. [ 137.533000][ T8415] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.533088][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.533163][ T8415] bridge_slave_0: entered allmulticast mode [ 137.534282][ T8415] bridge_slave_0: entered promiscuous mode [ 137.535258][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.535309][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.535363][ T8415] bridge_slave_1: entered allmulticast mode [ 137.535884][ T8415] bridge_slave_1: entered promiscuous mode [ 137.543780][ T8415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.544874][ T8415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.551390][ T8415] team0: Port device team_slave_0 added [ 137.552576][ T8415] team0: Port device team_slave_1 added [ 137.559750][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.559774][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.559789][ T8415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.560424][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.560431][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.560445][ T8415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.574965][ T8415] hsr_slave_0: entered promiscuous mode [ 137.575320][ T8415] hsr_slave_1: entered promiscuous mode [ 137.575547][ T8415] debugfs: 'hsr0' already exists in 'hsr' [ 137.575559][ T8415] Cannot create hsr debugfs directory [ 137.640188][ T8415] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 137.643340][ T8415] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 137.645835][ T8415] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 137.648169][ T8415] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 137.650322][ T8415] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 137.653076][ T8415] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 137.654988][ T8415] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 137.657323][ T8415] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 137.692252][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.692308][ T8415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.692389][ T8415] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.692421][ T8415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.745585][ T8415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.753332][ T928] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.754770][ T928] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.758078][ T8415] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.762127][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.762171][ T6298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.766668][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.766706][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.993918][ T8415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.191774][ T8415] veth0_vlan: entered promiscuous mode [ 138.193870][ T8415] veth1_vlan: entered promiscuous mode [ 138.200229][ T8415] veth0_macvtap: entered promiscuous mode [ 138.220016][ T8415] veth1_macvtap: entered promiscuous mode [ 138.233941][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.234976][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.268471][ T928] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.268523][ T928] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.268556][ T928] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.268574][ T928] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.345913][ T4911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.345943][ T4911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.372306][ T4911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.372339][ T4911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.482008][ T8500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1100'. [ 138.823840][ T4711] Bluetooth: hci5: command tx timeout [ 139.063041][ T4711] Bluetooth: hci1: command tx timeout [ 139.100663][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 139.606934][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1111'. [ 139.750220][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1115'. [ 140.902958][ T4711] Bluetooth: hci5: command tx timeout [ 141.033451][ T8566] loop5: detected capacity change from 0 to 256 [ 141.178311][ T8576] loop5: detected capacity change from 0 to 512 [ 141.286478][ T8587] loop5: detected capacity change from 0 to 512 [ 141.295024][ T8587] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 141.295052][ T8587] EXT4-fs (loop5): blocks per group (42) and clusters per group (32768) inconsistent [ 141.432233][ T8583] loop4: detected capacity change from 0 to 7 [ 141.448950][ T8583] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 141.448986][ T8583] loop4: partition table partially beyond EOD, truncated [ 141.449087][ T8583] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 141.515554][ T8595] netlink: 'syz.5.1127': attribute type 2 has an invalid length. [ 141.713764][ T8599] Cannot find add_set index 0 as target [ 141.973758][ T8616] binder: tried to use weak ref as strong ref [ 141.975070][ T8616] binder: 8614:8616 Acquire 1 refcount change on invalid ref 0 ret -22 [ 141.976781][ T8616] binder: 8614:8616 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 141.986987][ T8622] netlink: 'syz.2.1138': attribute type 10 has an invalid length. [ 142.096610][ T8627] loop2: detected capacity change from 0 to 512 [ 142.105818][ T8627] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 142.107320][ T8627] System zones: 0-2, 18-18, 34-35 [ 142.112207][ T8627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.195243][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 142.406144][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.458287][ T8635] team0: Device ipvlan0 failed to register rx_handler [ 142.475040][ T8637] loop8: detected capacity change from 0 to 7 [ 142.478566][ T8637] Dev loop8: unable to read RDB block 7 [ 142.478613][ T8637] loop8: unable to read partition table [ 142.478678][ T8637] loop8: partition table beyond EOD, truncated [ 142.478689][ T8637] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 142.576939][ T8646] loop2: detected capacity change from 0 to 256 [ 142.591350][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.595032][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.595069][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.595086][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.595101][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.595114][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.595127][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.595138][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.595150][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.595161][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.611166][ T11] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 142.681188][ T8654] fido_id[8654]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 142.869839][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1151'. [ 143.055030][ T4711] Bluetooth: hci5: command tx timeout [ 143.417736][ T8679] netlink: 'syz.1.1158': attribute type 21 has an invalid length. [ 143.417794][ T8679] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1158'. [ 143.559625][ T8682] FAULT_INJECTION: forcing a failure. [ 143.559625][ T8682] name failslab, interval 1, probability 0, space 0, times 0 [ 143.559670][ T8682] CPU: 0 UID: 0 PID: 8682 Comm: syz.5.1159 Not tainted syzkaller #0 PREEMPT [ 143.559682][ T8682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 143.559687][ T8682] Call trace: [ 143.559690][ T8682] show_stack+0x2c/0x3c (C) [ 143.559707][ T8682] __dump_stack+0x30/0x40 [ 143.559720][ T8682] dump_stack_lvl+0xd8/0x12c [ 143.559729][ T8682] dump_stack+0x1c/0x28 [ 143.559738][ T8682] should_fail_ex+0x41c/0x590 [ 143.559749][ T8682] should_failslab+0xc4/0x120 [ 143.559757][ T8682] kmem_cache_alloc_noprof+0x94/0x5d8 [ 143.559766][ T8682] security_inode_alloc+0x40/0x304 [ 143.559776][ T8682] inode_init_always_gfp+0x704/0xbac [ 143.559786][ T8682] alloc_inode+0x9c/0x198 [ 143.559794][ T8682] alloc_anon_inode+0x28/0x31c [ 143.559803][ T8682] anon_inode_make_secure_inode+0x84/0x18c [ 143.559813][ T8682] __anon_inode_getfile+0xa8/0x1c8 [ 143.559822][ T8682] anon_inode_create_getfile+0x4c/0x64 [ 143.559832][ T8682] io_uring_create+0x4b4/0x830 [ 143.559840][ T8682] __arm64_sys_io_uring_setup+0x27c/0x288 [ 143.559850][ T8682] invoke_syscall+0x98/0x244 [ 143.559859][ T8682] el0_svc_common+0xec/0x23c [ 143.559869][ T8682] do_el0_svc+0x4c/0x5c [ 143.559878][ T8682] el0_svc+0x64/0x260 [ 143.559888][ T8682] el0t_64_sync_handler+0x48/0x148 [ 143.559897][ T8682] el0t_64_sync+0x198/0x19c [ 143.729602][ T8693] loop6: detected capacity change from 0 to 256 [ 144.149318][ T8710] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 144.149341][ T8710] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 144.149448][ T8710] vhci_hcd vhci_hcd.0: Device attached [ 144.238254][ T8713] loop5: detected capacity change from 0 to 8192 [ 144.309450][ T8713] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.403094][ T24] usb 12-1: new low-speed USB device number 2 using vhci_hcd [ 144.888333][ T8711] vhci_hcd: connection reset by peer [ 144.890249][ T4911] vhci_hcd vhci_hcd.5: stop threads [ 144.891371][ T4911] vhci_hcd vhci_hcd.5: release socket [ 144.892567][ T4911] vhci_hcd vhci_hcd.5: disconnect device [ 145.073760][ T4711] Bluetooth: hci5: command tx timeout [ 145.262004][ T8719] loop2: detected capacity change from 0 to 128 [ 145.265295][ T8719] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.887556][ T8757] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1176'. [ 145.966061][ T8764] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1177'. [ 145.966097][ T8764] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1177'. [ 146.050260][ T4716] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.186041][ T8775] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 146.186071][ T8775] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 146.186150][ T8775] vhci_hcd vhci_hcd.0: Device attached [ 146.189247][ T8775] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 146.189256][ T8775] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 146.189262][ T8775] overlayfs: missing 'lowerdir' [ 146.248352][ T8775] loop5: detected capacity change from 0 to 8192 [ 146.267537][ T8775] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.902096][ T8780] vhci_hcd: connection closed [ 146.902611][ T7154] vhci_hcd vhci_hcd.5: stop threads [ 146.902643][ T7154] vhci_hcd vhci_hcd.5: release socket [ 146.902675][ T7154] vhci_hcd vhci_hcd.5: disconnect device [ 147.120246][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 147.593839][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1185'. [ 147.862075][ T8840] loop1: detected capacity change from 0 to 512 [ 147.885265][ T8840] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 147.885298][ T8840] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 147.885356][ T8840] System zones: 0-1, 15-15, 18-18, 34-34 [ 147.885512][ T8840] EXT4-fs (loop1): orphan cleanup on readonly fs [ 147.885549][ T8840] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 147.885586][ T8840] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 147.885601][ T8840] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 147.899598][ T8840] EXT4-fs (loop1): 1 truncate cleaned up [ 147.900040][ T8840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.922502][ T8840] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 147.963131][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.010814][ T8855] macsec1: entered promiscuous mode [ 148.012154][ T8855] macsec1: entered allmulticast mode [ 148.113240][ T8861] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1190'. [ 148.231752][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'. [ 148.946875][ T8871] loop1: detected capacity change from 0 to 256 [ 148.947549][ T8871] vfat: Unknown parameter 'nnonumtail' [ 149.055096][ T8874] input: syz0 as /devices/virtual/input/input3 [ 149.400627][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1197'. [ 149.536559][ T24] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 149.833050][ T6648] vhci_hcd: connection reset by peer [ 149.839392][ T8810] vhci_hcd vhci_hcd.0: stop threads [ 149.840564][ T8810] vhci_hcd vhci_hcd.0: release socket [ 149.843733][ T8810] vhci_hcd vhci_hcd.0: disconnect device [ 149.863839][ T4717] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.864960][ T4717] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.865311][ T4717] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.865638][ T4717] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.865912][ T4717] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.897723][ T8900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1200'. [ 149.910796][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 150.051481][ T8894] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.051573][ T8894] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.051634][ T8894] bridge_slave_0: entered allmulticast mode [ 150.052220][ T8894] bridge_slave_0: entered promiscuous mode [ 150.054150][ T8894] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.054205][ T8894] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.054304][ T8894] bridge_slave_1: entered allmulticast mode [ 150.054736][ T8894] bridge_slave_1: entered promiscuous mode [ 150.065357][ T8894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.066452][ T8894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.075371][ T8894] team0: Port device team_slave_0 added [ 150.094338][ T8894] team0: Port device team_slave_1 added [ 150.108224][ T8894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.110215][ T8894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.110265][ T8894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.119357][ T8894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.120856][ T8894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.126264][ T8894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.164336][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1203'. [ 150.171744][ T8811] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.174145][ T8811] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.182269][ T8894] hsr_slave_0: entered promiscuous mode [ 150.185086][ T8894] hsr_slave_1: entered promiscuous mode [ 150.185583][ T8894] debugfs: 'hsr0' already exists in 'hsr' [ 150.185595][ T8894] Cannot create hsr debugfs directory [ 150.249519][ T8894] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 150.267229][ T8894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.270013][ T8894] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 150.274860][ T8894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.275206][ T8894] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 150.276691][ T8894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.277293][ T8894] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 150.278670][ T8894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.294756][ T8811] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.294796][ T8811] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.305277][ T8894] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.305316][ T8894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.305397][ T8894] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.305435][ T8894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.327739][ T8894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.330924][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.332517][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.554770][ T8894] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.560075][ T8800] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.560113][ T8800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.563202][ T8800] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.563237][ T8800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.600262][ T8811] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.602442][ T8811] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.688124][ T8811] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.690213][ T8811] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.756642][ T8894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.829989][ T8811] bridge_slave_1: left promiscuous mode [ 150.830094][ T8811] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.843017][ T8811] bridge_slave_0: left allmulticast mode [ 150.844297][ T8811] bridge_slave_0: left promiscuous mode [ 150.845786][ T8811] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.872237][ T8956] binder: 8955:8956 BC_ACQUIRE_DONE u0000000000000001 node 31 cookie mismatch 00000000000000fc != 0000000000000000 [ 150.923218][ T8811] bond3 (unregistering): (slave geneve2): Releasing active interface [ 150.985866][ T8811] batman_adv: batadv0: Removing interface: vlan4 [ 151.021176][ T8811] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 151.066171][ T8811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.120859][ T8811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.153903][ T8811] bond0 (unregistering): Released all slaves [ 151.158205][ T8811] bond1 (unregistering): Released all slaves [ 151.176162][ T8811] bond2 (unregistering): Released all slaves [ 151.196726][ T8811] bond3 (unregistering): Released all slaves [ 151.330109][ T8969] loop5: detected capacity change from 0 to 8 [ 151.339562][ T8969] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 151.339603][ T8969] unable to read xattr id index table [ 151.510630][ T8894] veth0_vlan: entered promiscuous mode [ 151.523747][ T8894] veth1_vlan: entered promiscuous mode [ 151.558470][ T8894] veth0_macvtap: entered promiscuous mode [ 151.569271][ T8894] veth1_macvtap: entered promiscuous mode [ 151.613522][ T8894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.620291][ T8894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.696241][ T8976] __nla_validate_parse: 1 callbacks suppressed [ 151.696290][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1210'. [ 151.868840][ T8810] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.898566][ T7140] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.898668][ T7140] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.898842][ T7140] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.944762][ T4711] Bluetooth: hci6: command tx timeout [ 151.996021][ T8812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.996052][ T8812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.017559][ T7140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.017592][ T7140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.049842][ T4398] 8021q: adding VLAN 0 to HW filter on device eth4 [ 152.142756][ T8990] syzkaller0: entered promiscuous mode [ 152.145231][ T8990] syzkaller0: entered allmulticast mode [ 152.147588][ T8990] tipc: Started in network mode [ 152.148674][ T8990] tipc: Node identity fe83141f2fa, cluster identity 4711 [ 152.150326][ T8990] tipc: Enabled bearer , priority 0 [ 152.159513][ T8811] hsr_slave_0: left promiscuous mode [ 152.160920][ T8811] hsr_slave_1: left promiscuous mode [ 152.162432][ T30] audit: type=1326 audit(152.130:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8989 comm="syz.1.1212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0777fe8 code=0x0 [ 152.167130][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.168692][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.170544][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.172015][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.178529][ T8811] veth1_vlan: left promiscuous mode [ 152.179688][ T8811] veth0_vlan: left promiscuous mode [ 152.254241][ T8811] team0 (unregistering): Port device team_slave_1 removed [ 152.260636][ T8811] team0 (unregistering): Port device team_slave_0 removed [ 152.322215][ T8988] tipc: Resetting bearer [ 152.327780][ T8988] tipc: Disabling bearer [ 152.332585][ T4398] 8021q: adding VLAN 0 to HW filter on device eth5 [ 152.448853][ T9020] loop6: detected capacity change from 0 to 128 [ 152.462746][ T9020] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.476497][ T9020] EXT4-fs error (device loop6): dx_make_map:1296: inode #2: block 33: comm syz.6.1214: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 152.479908][ T9020] EXT4-fs error (device loop6) in do_split:2027: Corrupt filesystem [ 152.492350][ T8415] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.522707][ T9030] FAULT_INJECTION: forcing a failure. [ 152.522707][ T9030] name failslab, interval 1, probability 0, space 0, times 0 [ 152.522741][ T9030] CPU: 1 UID: 0 PID: 9030 Comm: syz.6.1215 Not tainted syzkaller #0 PREEMPT [ 152.522753][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 152.522759][ T9030] Call trace: [ 152.522762][ T9030] show_stack+0x2c/0x3c (C) [ 152.522782][ T9030] __dump_stack+0x30/0x40 [ 152.522794][ T9030] dump_stack_lvl+0xd8/0x12c [ 152.522804][ T9030] dump_stack+0x1c/0x28 [ 152.522813][ T9030] should_fail_ex+0x41c/0x590 [ 152.522828][ T9030] should_failslab+0xc4/0x120 [ 152.522837][ T9030] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 152.522846][ T9030] zswap_store+0x784/0x1cd8 [ 152.522857][ T9030] swap_writeout+0x774/0x1468 [ 152.522865][ T9030] shrink_folio_list+0x2748/0x4328 [ 152.522875][ T9030] reclaim_folio_list+0xe8/0x6d8 [ 152.522884][ T9030] reclaim_pages+0x3d0/0x4ac [ 152.522893][ T9030] madvise_cold_or_pageout_pte_range+0x1974/0x2224 [ 152.522901][ T9030] walk_pgd_range+0xa6c/0x17c8 [ 152.522908][ T9030] __walk_page_range+0x150/0x60c [ 152.522918][ T9030] walk_page_range_vma_unsafe+0x2c0/0x368 [ 152.522926][ T9030] walk_page_range_vma+0x80/0x98 [ 152.522932][ T9030] madvise_vma_behavior+0x26e0/0x33dc [ 152.522943][ T9030] madvise_walk_vmas+0x4c8/0x9bc [ 152.522953][ T9030] madvise_do_behavior+0x5f0/0x7c0 [ 152.522963][ T9030] do_madvise+0x28c/0x2f0 [ 152.522972][ T9030] __arm64_sys_madvise+0xa4/0xc0 [ 152.522982][ T9030] invoke_syscall+0x98/0x244 [ 152.522993][ T9030] el0_svc_common+0xec/0x23c [ 152.523003][ T9030] do_el0_svc+0x4c/0x5c [ 152.523012][ T9030] el0_svc+0x64/0x260 [ 152.523022][ T9030] el0t_64_sync_handler+0x48/0x148 [ 152.523032][ T9030] el0t_64_sync+0x198/0x19c [ 152.572614][ T4398] 8021q: adding VLAN 0 to HW filter on device eth6 [ 152.589786][ T9038] loop6: detected capacity change from 0 to 2048 [ 152.625719][ T9038] loop6: [POWERTEC] [ 152.807010][ T4398] 8021q: adding VLAN 0 to HW filter on device eth7 [ 153.168404][ T9068] loop5: detected capacity change from 0 to 8 [ 153.175090][ T9068] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 153.175129][ T9068] unable to read xattr id index table [ 153.364086][ T9067] loop1: detected capacity change from 0 to 8192 [ 153.414511][ T9067] loop1: p1 < > p3 p4 < > [ 153.418769][ T9067] loop1: p3 size 218103808 extends beyond EOD, truncated [ 153.504274][ T9071] FAULT_INJECTION: forcing a failure. [ 153.504274][ T9071] name failslab, interval 1, probability 0, space 0, times 0 [ 153.506941][ T9071] CPU: 0 UID: 0 PID: 9071 Comm: syz.1.1222 Not tainted syzkaller #0 PREEMPT [ 153.506962][ T9071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 153.506968][ T9071] Call trace: [ 153.506972][ T9071] show_stack+0x2c/0x3c (C) [ 153.506996][ T9071] __dump_stack+0x30/0x40 [ 153.507008][ T9071] dump_stack_lvl+0xd8/0x12c [ 153.507019][ T9071] dump_stack+0x1c/0x28 [ 153.507029][ T9071] should_fail_ex+0x41c/0x590 [ 153.507040][ T9071] should_failslab+0xc4/0x120 [ 153.507048][ T9071] __kmalloc_cache_noprof+0x94/0x5ec [ 153.507057][ T9071] rtnl_newlink+0x110/0x1144 [ 153.507066][ T9071] rtnetlink_rcv_msg+0x66c/0x9bc [ 153.507073][ T9071] netlink_rcv_skb+0x238/0x414 [ 153.507082][ T9071] rtnetlink_rcv+0x28/0x38 [ 153.507089][ T9071] netlink_unicast+0x600/0x7f8 [ 153.507096][ T9071] netlink_sendmsg+0x648/0x948 [ 153.507104][ T9071] __sock_sendmsg+0xc8/0x17c [ 153.507112][ T9071] ____sys_sendmsg+0x3d0/0x6c8 [ 153.507120][ T9071] ___sys_sendmsg+0x198/0x224 [ 153.507129][ T9071] __sys_sendmsg+0x158/0x204 [ 153.507137][ T9071] __arm64_sys_sendmsg+0x80/0x94 [ 153.507146][ T9071] invoke_syscall+0x98/0x244 [ 153.507156][ T9071] el0_svc_common+0xec/0x23c [ 153.507165][ T9071] do_el0_svc+0x4c/0x5c [ 153.507175][ T9071] el0_svc+0x64/0x260 [ 153.507185][ T9071] el0t_64_sync_handler+0x48/0x148 [ 153.507194][ T9071] el0t_64_sync+0x198/0x19c [ 153.515194][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 153.516859][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 153.526613][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 153.733645][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'. [ 154.022983][ T4711] Bluetooth: hci6: command tx timeout [ 155.757594][ T9095] loop7: detected capacity change from 0 to 512 [ 155.757947][ T9095] EXT4-fs: inline encryption not supported [ 155.769261][ T9095] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.769288][ T9095] EXT4-fs (loop7): DAX unsupported by block device. [ 155.908486][ T9103] loop1: detected capacity change from 0 to 512 [ 155.922309][ T9101] loop6: detected capacity change from 0 to 8192 [ 155.929344][ T9103] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.956361][ T9105] loop5: detected capacity change from 0 to 4096 [ 155.964647][ T9101] loop6: p1 < > p3 p4 < > [ 155.965325][ T9103] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 155.965425][ T9103] EXT4-fs (loop1): orphan cleanup on readonly fs [ 155.966284][ T9103] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 155.966310][ T9103] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 155.966318][ T9103] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1230: Failed to acquire dquot type 1 [ 155.966329][ T9103] loop1: lost filesystem error report for type 5 error -117 [ 155.967041][ T9103] EXT4-fs (loop1): Remounting filesystem read-only [ 155.967266][ T9103] EXT4-fs (loop1): 1 truncate cleaned up [ 155.969800][ T7140] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 155.969814][ T7140] Quota error (device loop1): write_blk: dquota write failed [ 155.969822][ T7140] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 155.969830][ T7140] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 155.969838][ T7140] Quota error (device loop1): write_blk: dquota write failed [ 155.969844][ T7140] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 155.969867][ T7140] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 155.969875][ T7140] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 155.972888][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 155.972907][ C1] EXT4-fs (loop1): initial error at time 155: ext4_acquire_dquot:7041 [ 155.972920][ C1] EXT4-fs (loop1): last error at time 155: ext4_acquire_dquot:7041 [ 155.986760][ T9103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.987288][ T9101] loop6: p3 size 218103808 extends beyond EOD, truncated [ 156.013802][ T9105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.080454][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.103565][ T4711] Bluetooth: hci6: command tx timeout [ 156.631728][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 156.638640][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 156.640878][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 156.836379][ T8215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.495875][ T9137] Cannot find add_set index 0 as target [ 157.549404][ T9142] tipc: Enabling of bearer rejected, failed to enable media [ 157.667089][ T9145] loop7: detected capacity change from 0 to 8 [ 157.900952][ T9146] loop6: detected capacity change from 0 to 512 [ 157.912400][ T9145] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 157.912426][ T9145] unable to read xattr id index table [ 157.953888][ T9146] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 157.953912][ T9146] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 157.954015][ T9146] System zones: 0-1, 15-15, 18-18, 34-34 [ 157.954958][ T9146] EXT4-fs (loop6): orphan cleanup on readonly fs [ 157.955076][ T9146] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 157.955278][ T9146] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 157.955316][ T9146] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 157.967179][ T9146] EXT4-fs (loop6): 1 truncate cleaned up [ 157.969600][ T9146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.986730][ T9146] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 158.196479][ T4711] Bluetooth: hci6: command tx timeout [ 158.458738][ T9154] syzkaller0: entered promiscuous mode [ 158.458775][ T9154] syzkaller0: entered allmulticast mode [ 158.461748][ T9154] tipc: Enabled bearer , priority 0 [ 158.464215][ T9154] tipc: Resetting bearer [ 158.564308][ T9158] vhci_hcd vhci_hcd.0: port 0 already used [ 158.745703][ T8415] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.888743][ T9196] loop6: detected capacity change from 0 to 512 [ 158.891541][ T9196] ext4: Unknown parameter 'nouser_xattr' [ 158.897469][ T9196] overlayfs: missing 'lowerdir' [ 159.201578][ T9210] loop7: detected capacity change from 0 to 8 [ 159.208865][ T9210] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 159.208876][ T9210] unable to read xattr id index table [ 159.285823][ T9153] tipc: Resetting bearer [ 159.291942][ T9153] tipc: Disabling bearer [ 159.898478][ T9235] loop6: detected capacity change from 0 to 512 [ 159.927156][ T9235] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 159.930270][ T9235] EXT4-fs (loop6): 1 truncate cleaned up [ 159.931984][ T9235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.950468][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1253'. [ 159.954339][ T9235] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1253: bg 0: block 7: invalid block bitmap [ 160.105826][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 160.184486][ T8415] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.214331][ T9245] loop8: detected capacity change from 0 to 7 [ 160.217499][ T9245] Dev loop8: unable to read RDB block 7 [ 160.217544][ T9245] loop8: unable to read partition table [ 160.217606][ T9245] loop8: partition table beyond EOD, truncated [ 160.217627][ T9245] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 160.537609][ T9255] loop6: detected capacity change from 0 to 1024 [ 160.557198][ T9255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 161.575296][ T4717] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.576071][ T4717] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.576403][ T4717] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.576800][ T4717] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.577015][ T4717] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.648885][ T8415] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.816093][ T9277] loop5: detected capacity change from 0 to 8 [ 162.050088][ T9277] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 162.050118][ T9277] unable to read xattr id index table [ 162.243313][ T9267] netlink: 752 bytes leftover after parsing attributes in process `syz.7.1263'. [ 162.449937][ T9287] loop6: detected capacity change from 0 to 8 [ 162.496879][ T8812] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.584642][ T9287] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 162.584702][ T9287] unable to read xattr id index table [ 162.742344][ T8812] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.896171][ T8812] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.302790][ T8812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.372021][ T9264] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.372431][ T9264] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.372742][ T9264] bridge_slave_0: entered allmulticast mode [ 163.373347][ T9264] bridge_slave_0: entered promiscuous mode [ 163.374491][ T9264] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.374628][ T9264] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.374858][ T9264] bridge_slave_1: entered allmulticast mode [ 163.375316][ T9264] bridge_slave_1: entered promiscuous mode [ 163.386866][ T9264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.388376][ T9264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.399648][ T9264] team0: Port device team_slave_0 added [ 163.401464][ T9264] team0: Port device team_slave_1 added [ 163.411004][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.411014][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.411026][ T9264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.411595][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.411660][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.411671][ T9264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.430369][ T9264] hsr_slave_0: entered promiscuous mode [ 163.430708][ T9264] hsr_slave_1: entered promiscuous mode [ 163.431083][ T9264] debugfs: 'hsr0' already exists in 'hsr' [ 163.431093][ T9264] Cannot create hsr debugfs directory [ 163.641689][ T4717] Bluetooth: hci2: command tx timeout [ 164.127745][ T9339] loop1: detected capacity change from 0 to 8 [ 165.033144][ T9339] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 165.033173][ T9339] unable to read xattr id index table [ 165.353809][ T8812] bond0 (unregistering): Released all slaves [ 165.354145][ T9351] syz.5.1279 (9351): drop_caches: 2 [ 165.383605][ T4398] 8021q: adding VLAN 0 to HW filter on device eth8 [ 165.385604][ T9264] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 165.388165][ T9264] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.575817][ T9371] vhci_hcd vhci_hcd.0: port 0 already used [ 165.722968][ T4717] Bluetooth: hci2: command tx timeout [ 165.783576][ T9376] loop1: detected capacity change from 0 to 8192 [ 165.792705][ T9376] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.421581][ T9264] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 166.428096][ T9264] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.429645][ T8812] tipc: Left network mode [ 166.434985][ T9264] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 166.439981][ T9264] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.441935][ T9264] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 166.446187][ T9264] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.076035][ T9414] vlan2: entered promiscuous mode [ 167.076074][ T9414] bridge0: entered promiscuous mode [ 167.083829][ T9264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.325157][ T9431] loop1: detected capacity change from 0 to 8 [ 167.343715][ T9431] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 167.343744][ T9431] unable to read xattr id index table [ 167.366650][ T9264] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.409219][ T8812] hsr_slave_0: left promiscuous mode [ 167.411008][ T8812] hsr_slave_1: left promiscuous mode [ 167.418404][ T8812] veth1_macvtap: left promiscuous mode [ 167.418454][ T8812] veth0_macvtap: left promiscuous mode [ 167.418516][ T8812] veth1_vlan: left promiscuous mode [ 167.418592][ T8812] veth0_vlan: left promiscuous mode [ 167.520999][ T9439] loop5: detected capacity change from 0 to 512 [ 167.531908][ T9439] EXT4-fs (loop5): Test dummy encryption mode enabled [ 167.550106][ T9439] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1292: inode has both inline data and extents flags [ 167.554697][ T9439] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 167.816191][ T4717] Bluetooth: hci2: command tx timeout [ 167.827972][ T9439] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1292: couldn't read orphan inode 15 (err -117) [ 167.828100][ T9439] loop5: lost filesystem error report for type 5 error -117 [ 167.832918][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 167.832934][ C1] EXT4-fs (loop5): initial error at time 167: ext4_orphan_get:1399: inode 15 [ 167.832950][ C1] EXT4-fs (loop5): last error at time 167: ext4_orphan_get:1404 [ 168.095448][ T9439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.129172][ T8215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.451268][ T9465] pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 168.463175][ T9465] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f] [ 168.464407][ T9465] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf] [ 168.475078][ T9465] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf]: assigned [ 168.476596][ T9465] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f]: assigned [ 168.482439][ T9465] virtio-pci 0000:00:01.0: virtio_pci: leaving for legacy driver [ 168.517065][ T9467] 9p: Bad value for 'rfdno' [ 168.597940][ T8811] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.597989][ T8811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.598546][ T8811] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.598585][ T8811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.631034][ T9264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.631074][ T9264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.925400][ T9264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.072930][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1305'. [ 169.570368][ T9537] FAULT_INJECTION: forcing a failure. [ 169.570368][ T9537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.584046][ T9537] CPU: 0 UID: 0 PID: 9537 Comm: syz.1.1309 Not tainted syzkaller #0 PREEMPT [ 169.584079][ T9537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 169.584086][ T9537] Call trace: [ 169.584091][ T9537] show_stack+0x2c/0x3c (C) [ 169.584113][ T9537] __dump_stack+0x30/0x40 [ 169.584125][ T9537] dump_stack_lvl+0xd8/0x12c [ 169.584135][ T9537] dump_stack+0x1c/0x28 [ 169.584144][ T9537] should_fail_ex+0x41c/0x590 [ 169.584156][ T9537] should_fail+0x14/0x24 [ 169.584166][ T9537] should_fail_usercopy+0x20/0x30 [ 169.584176][ T9537] _inline_copy_from_user+0x3c/0x174 [ 169.584186][ T9537] move_addr_to_kernel+0x88/0x168 [ 169.584194][ T9537] __copy_msghdr+0x2e0/0x3d4 [ 169.584202][ T9537] copy_msghdr_from_user+0xe8/0x194 [ 169.584211][ T9537] ___sys_sendmsg+0x14c/0x224 [ 169.584220][ T9537] __sys_sendmmsg+0x204/0x580 [ 169.584228][ T9537] __arm64_sys_sendmmsg+0xa4/0xc0 [ 169.584237][ T9537] invoke_syscall+0x98/0x244 [ 169.584247][ T9537] el0_svc_common+0xec/0x23c [ 169.584257][ T9537] do_el0_svc+0x4c/0x5c [ 169.584266][ T9537] el0_svc+0x64/0x260 [ 169.584277][ T9537] el0t_64_sync_handler+0x48/0x148 [ 169.584286][ T9537] el0t_64_sync+0x198/0x19c [ 169.654213][ T9264] veth0_vlan: entered promiscuous mode [ 169.658512][ T9545] loop8: detected capacity change from 0 to 7 [ 169.659479][ T9545] Dev loop8: unable to read RDB block 7 [ 169.659497][ T9545] loop8: unable to read partition table [ 169.659569][ T9545] loop8: partition table beyond EOD, truncated [ 169.659580][ T9545] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 169.671225][ T9264] veth1_vlan: entered promiscuous mode [ 169.713723][ T9264] veth0_macvtap: entered promiscuous mode [ 169.731638][ T9264] veth1_macvtap: entered promiscuous mode [ 169.745386][ T9553] team0: Device ipvlan0 failed to register rx_handler [ 169.750921][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.757929][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.779041][ T8800] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.779201][ T8800] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.779221][ T8800] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.779238][ T8800] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.854047][ T7154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.854076][ T7154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.854555][ T7154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.854565][ T7154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.863070][ T4717] Bluetooth: hci2: command tx timeout [ 169.911465][ T9569] loop7: detected capacity change from 0 to 128 [ 170.005030][ T9587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1320'. [ 170.053828][ T4398] 8021q: adding VLAN 0 to HW filter on device eth9 [ 170.222131][ T9604] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1325'. [ 170.254523][ T9604] No such timeout policy "syz1" [ 170.256798][ T9604] loop6: detected capacity change from 0 to 256 [ 170.259973][ T9604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.260168][ T9604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.657044][ T9626] loop7: detected capacity change from 0 to 512 [ 170.676806][ T9626] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.1330: attempt to clear invalid blocks 2 len 1 [ 170.680566][ T9626] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 170.682969][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 170.682992][ C1] EXT4-fs (loop7): initial error at time 170: ext4_clear_blocks:876: inode 13 [ 170.683025][ C1] EXT4-fs (loop7): last error at time 170: ext4_clear_blocks:876: inode 13 [ 170.692196][ T9626] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 170.692727][ T9626] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1330: invalid indirect mapped block 1819239214 (level 0) [ 170.692755][ T9626] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 170.701592][ T9626] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1330: invalid indirect mapped block 1819239214 (level 1) [ 170.701625][ T9626] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 170.707801][ T9626] EXT4-fs (loop7): 1 truncate cleaned up [ 170.710044][ T9626] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.717321][ T4398] 8021q: adding VLAN 0 to HW filter on device eth10 [ 170.720191][ T9626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.720220][ T9626] IPv6: NLM_F_CREATE should be set when creating new route [ 170.729060][ T9626] EXT4-fs warning (device loop7): ext4_empty_dir:3104: inode #2: comm syz.7.1330: directory missing '..' [ 170.749684][ T8894] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.798534][ T9637] loop7: detected capacity change from 0 to 512 [ 170.817375][ T9637] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 170.817422][ T9637] System zones: 0-2, 18-18, 34-35 [ 170.818159][ T9637] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.843403][ T8894] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.915383][ T9652] syzkaller0: entered promiscuous mode [ 170.915414][ T9652] syzkaller0: entered allmulticast mode [ 170.921143][ T9652] bpf: Bad value for 'mode' [ 170.969314][ T4398] 8021q: adding VLAN 0 to HW filter on device eth11 [ 170.980236][ T9663] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 170.981773][ T9663] macsec1: entered promiscuous mode [ 171.153661][ T9668] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.153904][ T9668] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.432079][ T9668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.434279][ T9668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.477008][ T9680] FAULT_INJECTION: forcing a failure. [ 171.477008][ T9680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.477040][ T9680] CPU: 1 UID: 0 PID: 9680 Comm: syz.7.1341 Not tainted syzkaller #0 PREEMPT [ 171.477054][ T9680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 171.477060][ T9680] Call trace: [ 171.477064][ T9680] show_stack+0x2c/0x3c (C) [ 171.477086][ T9680] __dump_stack+0x30/0x40 [ 171.477098][ T9680] dump_stack_lvl+0xd8/0x12c [ 171.477108][ T9680] dump_stack+0x1c/0x28 [ 171.477118][ T9680] should_fail_ex+0x41c/0x590 [ 171.477130][ T9680] should_fail+0x14/0x24 [ 171.477139][ T9680] should_fail_usercopy+0x20/0x30 [ 171.477149][ T9680] _inline_copy_from_user+0x3c/0x174 [ 171.477160][ T9680] copy_msghdr_from_user+0xb8/0x194 [ 171.477169][ T9680] ___sys_sendmsg+0x14c/0x224 [ 171.477177][ T9680] __sys_sendmmsg+0x204/0x580 [ 171.477186][ T9680] __arm64_sys_sendmmsg+0xa4/0xc0 [ 171.477194][ T9680] invoke_syscall+0x98/0x244 [ 171.477204][ T9680] el0_svc_common+0xec/0x23c [ 171.477214][ T9680] do_el0_svc+0x4c/0x5c [ 171.477223][ T9680] el0_svc+0x64/0x260 [ 171.477234][ T9680] el0t_64_sync_handler+0x48/0x148 [ 171.477246][ T9680] el0t_64_sync+0x198/0x19c [ 171.616396][ T7140] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.617613][ T7140] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.617646][ T7140] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.617669][ T7140] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.760483][ T9693] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1345'. [ 171.762169][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1345'. [ 171.770462][ T9693] team0: Port device team_slave_0 removed [ 172.120284][ T9703] loop1: detected capacity change from 0 to 8192 [ 172.122309][ T9703] FAT-fs (loop1): bogus sectors per cluster 254 [ 172.122349][ T9703] FAT-fs (loop1): Can't find a valid FAT filesystem [ 172.399492][ T9721] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1355'. [ 172.449147][ T9725] netlink: 'syz.7.1356': attribute type 1 has an invalid length. [ 172.504509][ T4717] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 172.504802][ T4717] Bluetooth: hci1: Injecting HCI hardware error event [ 172.509856][ T4717] Bluetooth: hci1: hardware error 0x00 [ 172.779245][ T9730] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1358'. [ 172.965078][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1359'. [ 173.274365][ T9749] loop6: detected capacity change from 0 to 1024 [ 173.492047][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1365'. [ 173.832088][ T9780] loop5: detected capacity change from 0 to 4096 [ 173.850480][ T9780] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.586250][ T9795] loop7: detected capacity change from 0 to 8192 [ 174.754143][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1374'. [ 174.903004][ T4717] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 175.239275][ T8215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.389268][ T9806] trusted_key: encrypted_key: master key parameter 'D' is invalid [ 175.426314][ T9808] Cannot find add_set index 0 as target [ 175.534031][ T9817] loop5: detected capacity change from 0 to 8 [ 175.538983][ T9817] SQUASHFS error: Failed to read block 0x62: -5 [ 175.539028][ T9817] squashfs image failed sanity check [ 175.564056][ T9817] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 175.565900][ T8800] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.567701][ T8800] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.569577][ T8800] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.571635][ T8800] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.920175][ T9837] team0: Device ipvlan0 failed to register rx_handler [ 176.074379][ T9842] loop5: detected capacity change from 0 to 8 [ 176.077990][ T9842] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 176.078007][ T9842] unable to read xattr id index table [ 176.273235][ T9852] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1397'. [ 176.479258][ T9864] loop1: detected capacity change from 0 to 128 [ 176.650664][ T9868] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 176.899141][ T9874] binder: 9873:9874 BC_ACQUIRE_DONE u0000000000000001 node 32 cookie mismatch 00000000000000fc != 0000000000000000 [ 178.211805][ T9901] FAULT_INJECTION: forcing a failure. [ 178.211805][ T9901] name failslab, interval 1, probability 0, space 0, times 0 [ 178.211843][ T9901] CPU: 1 UID: 0 PID: 9901 Comm: syz.5.1411 Not tainted syzkaller #0 PREEMPT [ 178.211856][ T9901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 178.211863][ T9901] Call trace: [ 178.211866][ T9901] show_stack+0x2c/0x3c (C) [ 178.211886][ T9901] __dump_stack+0x30/0x40 [ 178.211898][ T9901] dump_stack_lvl+0xd8/0x12c [ 178.211908][ T9901] dump_stack+0x1c/0x28 [ 178.211917][ T9901] should_fail_ex+0x41c/0x590 [ 178.211929][ T9901] should_failslab+0xc4/0x120 [ 178.211937][ T9901] __kmalloc_noprof+0x108/0x6b8 [ 178.211945][ T9901] sock_kmalloc+0xec/0x1a0 [ 178.211953][ T9901] ____sys_sendmsg+0x1b4/0x6c8 [ 178.211962][ T9901] ___sys_sendmsg+0x198/0x224 [ 178.211970][ T9901] __sys_sendmmsg+0x204/0x580 [ 178.211978][ T9901] __arm64_sys_sendmmsg+0xa4/0xc0 [ 178.211987][ T9901] invoke_syscall+0x98/0x244 [ 178.211997][ T9901] el0_svc_common+0xec/0x23c [ 178.212006][ T9901] do_el0_svc+0x4c/0x5c [ 178.212018][ T9901] el0_svc+0x64/0x260 [ 178.212029][ T9901] el0t_64_sync_handler+0x48/0x148 [ 178.212039][ T9901] el0t_64_sync+0x198/0x19c [ 178.327973][ T9906] loop1: detected capacity change from 0 to 512 [ 178.419401][ T9906] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1414: inode has both inline data and extents flags [ 178.419449][ T9906] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.422079][ T9906] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1414: couldn't read orphan inode 15 (err -117) [ 178.422112][ T9906] loop1: lost filesystem error report for type 5 error -117 [ 178.424165][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 178.424177][ C0] EXT4-fs (loop1): initial error at time 179: ext4_orphan_get:1399: inode 15 [ 178.424195][ C0] EXT4-fs (loop1): last error at time 179: ext4_orphan_get:1404 [ 178.425018][ T9906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.600404][ T9913] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1413'. [ 178.822301][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.919087][ T9921] loop6: detected capacity change from 0 to 8 [ 178.921375][ T9921] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 178.921402][ T9921] unable to read xattr id index table [ 178.984836][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1417'. [ 179.947080][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1428'. [ 180.013186][ T9965] loop7: detected capacity change from 0 to 128 [ 180.020597][ T9962] binder: 9960:9962 BC_ACQUIRE_DONE u0000000000000001 node 33 cookie mismatch 00000000000000fc != 0000000000000000 [ 180.101983][ T9976] loop7: detected capacity change from 0 to 128 [ 180.436440][ T9976] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.451125][ T9976] EXT4-fs error (device loop7): dx_make_map:1296: inode #2: block 33: comm syz.7.1436: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 180.456146][ T9976] EXT4-fs error (device loop7) in do_split:2027: Corrupt filesystem [ 180.474598][ T8894] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.884717][T10012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1446'. [ 182.548803][T10047] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 182.551373][T10047] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 182.553319][T10047] overlayfs: missing 'lowerdir' [ 182.557271][ T30] audit: type=1326 audit(183.524:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10046 comm="syz.5.1454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e577fe8 code=0x0 [ 182.663705][T10049] loop5: detected capacity change from 0 to 512 [ 182.664153][T10049] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.667063][T10049] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 182.679479][T10049] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 182.679605][T10049] EXT4-fs (loop5): orphan cleanup on readonly fs [ 182.680840][T10049] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1454: bg 0: block 361: padding at end of block bitmap is not set [ 182.680857][T10049] loop5: lost filesystem error report for type 5 error -117 [ 182.688767][T10049] EXT4-fs (loop5): Remounting filesystem read-only [ 182.691957][T10049] EXT4-fs (loop5): 1 truncate cleaned up [ 182.692441][T10049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 183.000844][T10057] loop7: detected capacity change from 0 to 512 [ 183.382254][T10071] FAULT_INJECTION: forcing a failure. [ 183.382254][T10071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.382355][T10071] CPU: 0 UID: 0 PID: 10071 Comm: syz.1.1461 Not tainted syzkaller #0 PREEMPT [ 183.382371][T10071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 183.382380][T10071] Call trace: [ 183.382385][T10071] show_stack+0x2c/0x3c (C) [ 183.382406][T10071] __dump_stack+0x30/0x40 [ 183.382417][T10071] dump_stack_lvl+0xd8/0x12c [ 183.382427][T10071] dump_stack+0x1c/0x28 [ 183.382437][T10071] should_fail_ex+0x41c/0x590 [ 183.382454][T10071] should_fail+0x14/0x24 [ 183.382464][T10071] should_fail_usercopy+0x20/0x30 [ 183.382475][T10071] _inline_copy_from_user+0x3c/0x174 [ 183.382486][T10071] copy_msghdr_from_user+0xb8/0x194 [ 183.382495][T10071] ___sys_sendmsg+0x14c/0x224 [ 183.382504][T10071] __sys_sendmmsg+0x204/0x580 [ 183.382512][T10071] __arm64_sys_sendmmsg+0xa4/0xc0 [ 183.382521][T10071] invoke_syscall+0x98/0x244 [ 183.382530][T10071] el0_svc_common+0xec/0x23c [ 183.382540][T10071] do_el0_svc+0x4c/0x5c [ 183.382549][T10071] el0_svc+0x64/0x260 [ 183.382559][T10071] el0t_64_sync_handler+0x48/0x148 [ 183.382569][T10071] el0t_64_sync+0x198/0x19c [ 183.566169][T10057] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 183.566267][T10057] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 183.566314][T10057] System zones: 0-1, 15-15, 18-18, 34-34 [ 183.566484][T10057] EXT4-fs (loop7): orphan cleanup on readonly fs [ 183.566527][T10057] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 183.566570][T10057] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 183.566590][T10057] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 183.567571][T10057] EXT4-fs (loop7): 1 truncate cleaned up [ 183.568003][T10057] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.569453][T10057] fscrypt (loop7, inode 16): Error -61 getting encryption context [ 183.607922][ T8215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 184.180997][ T8894] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.638748][T10096] loop6: detected capacity change from 0 to 8192 [ 185.391323][T10106] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1470'. [ 186.492111][T10153] loop8: detected capacity change from 0 to 512 [ 186.590659][T10153] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 186.590693][T10153] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 186.590741][T10153] System zones: 0-1, 15-15, 18-18, 34-34 [ 186.590894][T10153] EXT4-fs (loop8): orphan cleanup on readonly fs [ 186.590932][T10153] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 186.590970][T10153] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 186.590986][T10153] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 186.603440][T10153] EXT4-fs (loop8): 1 truncate cleaned up [ 186.603909][T10153] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 186.609169][T10153] fscrypt (loop8, inode 16): Error -61 getting encryption context [ 186.747442][T10157] loop1: detected capacity change from 0 to 8192 [ 186.852555][T10157] loop1: p1 < > p3 p4 < > [ 186.860810][T10157] loop1: p3 size 218103808 extends beyond EOD, truncated [ 187.363397][ T9264] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.389167][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.389216][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.706208][T10178] tipc: Enabled bearer , priority 0 [ 187.711030][T10177] loop8: detected capacity change from 0 to 8 [ 187.711823][T10177] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 187.711831][T10177] unable to read xattr id index table [ 187.846713][T10176] tipc: Disabling bearer [ 187.874488][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1487'. [ 187.877147][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 187.877518][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 187.881778][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 188.015659][T10219] loop8: detected capacity change from 0 to 4096 [ 188.021720][T10224] netlink: 'syz.5.1493': attribute type 30 has an invalid length. [ 188.021749][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1493'. [ 188.021781][T10224] bond0: option arp_missed_max: invalid value (0) [ 188.021799][T10224] bond0: option arp_missed_max: allowed values 1 - 255 [ 188.029115][T10219] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.054063][T10227] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 188.139678][ T4398] veth1_vlan: left promiscuous mode [ 188.744004][T10252] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 188.744027][T10252] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.744147][T10252] vhci_hcd vhci_hcd.0: Device attached [ 188.983739][T10255] loop6: detected capacity change from 0 to 8192 [ 188.996010][T10255] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.113123][ T8338] usb 14-1: new low-speed USB device number 2 using vhci_hcd [ 189.273328][T10253] vhci_hcd: connection reset by peer [ 189.278578][ T8810] vhci_hcd vhci_hcd.6: stop threads [ 189.279634][ T8810] vhci_hcd vhci_hcd.6: release socket [ 189.280795][ T8810] vhci_hcd vhci_hcd.6: disconnect device [ 189.720967][ T9264] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.804729][T10264] tipc: Enabled bearer , priority 0 [ 189.807415][T10263] tipc: Disabling bearer [ 189.881688][T10257] loop5: detected capacity change from 0 to 8 [ 189.885507][T10257] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 189.885532][T10257] unable to read xattr id index table [ 190.183784][T10276] loop7: detected capacity change from 0 to 8 [ 190.184660][ T4717] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 190.184714][ T4717] Bluetooth: hci5: Injecting HCI hardware error event [ 190.186117][ T4717] Bluetooth: hci5: hardware error 0x00 [ 190.197901][T10276] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 190.197930][T10276] unable to read xattr id index table [ 190.469834][T10307] loop5: detected capacity change from 0 to 512 [ 190.474004][T10307] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 190.474035][T10307] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 190.474063][T10307] System zones: 0-1, 15-15, 18-18, 34-34 [ 190.474180][T10307] EXT4-fs (loop5): orphan cleanup on readonly fs [ 190.474214][T10307] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 190.474248][T10307] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 190.474260][T10307] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 190.476128][T10307] EXT4-fs (loop5): 1 truncate cleaned up [ 190.478434][T10307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.551901][T10307] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 190.729830][ T8215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.876120][T10320] tipc: Enabled bearer , priority 0 [ 190.878608][T10318] tipc: Disabling bearer [ 190.956032][T10325] binder: 10324:10325 BC_ACQUIRE_DONE u0000000000000001 node 34 cookie mismatch 00000000000000fc != 0000000000000000 [ 191.296568][T10335] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 191.297566][T10335] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 191.298079][T10335] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 191.610124][T10339] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1519'. [ 191.730004][T10352] tipc: Enabled bearer , priority 0 [ 191.732211][T10350] tipc: Disabling bearer [ 192.812989][ T4717] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 193.692974][T10361] loop1: detected capacity change from 0 to 8192 [ 194.095019][T10361] Dev loop1: unable to read RDB block 8 [ 194.095091][T10361] loop1: unable to read partition table [ 194.095186][T10361] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 194.152061][T10374] loop5: detected capacity change from 0 to 1024 [ 194.208450][T10374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 194.275166][ T8338] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 194.276206][ T8215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 194.395723][T10395] binder: 10394:10395 BC_ACQUIRE_DONE u0000000000000001 node 35 cookie mismatch 00000000000000fc != 0000000000000000 [ 194.672679][T10413] fuse: Unknown parameter '×C' [ 194.761145][T10416] loop1: detected capacity change from 0 to 8 [ 194.795537][T10416] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 194.795584][T10416] unable to read xattr id index table [ 194.821150][T10416] SQUASHFS error: zlib decompression failed, data probably corrupt [ 194.821238][T10416] SQUASHFS error: Failed to read block 0x9b: -5 [ 194.821277][T10416] SQUASHFS error: Unable to read metadata cache entry [99] [ 194.821310][T10416] SQUASHFS error: Unable to read inode 0x127 [ 195.699213][T10422] loop8: detected capacity change from 0 to 8 [ 195.813374][T10422] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 195.813436][T10422] unable to read xattr id index table [ 196.087301][T10427] loop7: detected capacity change from 0 to 8192 [ 196.775722][T10427] Dev loop7: unable to read RDB block 8 [ 196.777045][T10427] loop7: unable to read partition table [ 196.777118][T10427] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 196.872675][T10435] netlink: 536 bytes leftover after parsing attributes in process `syz.6.1552'. [ 198.276674][T10458] binder: 10457:10458 ioctl 400c620e 20000300 returned -22 [ 198.278372][T10458] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1557'. [ 198.718474][T10477] loop6: detected capacity change from 0 to 8 [ 198.720580][T10477] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 198.720606][T10477] unable to read xattr id index table [ 198.753005][T10473] loop7: detected capacity change from 0 to 8192 [ 198.759716][T10479] Injecting memory failure for pfn 0x1368e2 at process virtual address 0x20000000 [ 198.763357][T10479] Memory failure: 0x1368e2: Sending SIGBUS to syz.5.1564:10479 due to hardware memory corruption [ 198.763459][T10479] Memory failure: 0x1368e2: recovery action for dirty LRU page: Recovered [ 198.763484][T10479] Injecting memory failure for pfn 0x219250 at process virtual address 0x20001000 [ 198.763524][T10479] Memory failure: 0x219250: unhandlable page. [ 198.763531][T10479] Memory failure: 0x219250: recovery action for get hwpoison page: Ignored [ 198.765201][T10479] input: syz0 as /devices/virtual/input/input5 [ 198.832663][T10473] loop7: p1 < > p3 p4 < > [ 198.853814][T10485] loop1: detected capacity change from 0 to 256 [ 198.888991][T10473] loop7: p3 size 218103808 extends beyond EOD, truncated [ 200.092278][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 200.134705][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 200.140067][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 200.169356][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 200.178003][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 200.201457][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 200.430883][T10519] netlink: 'syz.8.1577': attribute type 30 has an invalid length. [ 200.432786][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1577'. [ 200.434840][T10519] bond0: option arp_missed_max: invalid value (0) [ 200.436279][T10519] bond0: option arp_missed_max: allowed values 1 - 255 [ 200.833361][T10527] loop6: detected capacity change from 0 to 8192 [ 200.961162][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1576'. [ 202.107700][T10545] loop1: detected capacity change from 0 to 8192 [ 202.200195][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'. [ 202.383046][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1583'. [ 204.125152][T10599] x_tables: duplicate underflow at hook 1 [ 207.114807][T10654] loop6: detected capacity change from 0 to 1024 [ 207.125298][T10654] EXT4-fs: Ignoring removed orlov option [ 207.125369][T10654] EXT4-fs: Ignoring removed orlov option [ 207.148604][T10654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.151887][T10656] tipc: Enabled bearer , priority 0 [ 207.391906][T10650] loop8: detected capacity change from 0 to 8192 [ 207.671968][T10647] loop5: detected capacity change from 0 to 8192 [ 208.114571][T10656] tipc: Disabling bearer [ 208.119852][ T8415] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.523772][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1600'. [ 208.712995][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1598'. [ 209.352845][T10670] loop1: detected capacity change from 0 to 256 [ 209.731619][T10650] Dev loop8: unable to read RDB block 8 [ 209.731693][T10650] loop8: unable to read partition table [ 209.731791][T10650] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 209.903628][T10689] netlink: 'syz.1.1611': attribute type 4 has an invalid length. [ 210.049679][T10690] loop5: detected capacity change from 0 to 8192 [ 210.140430][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1615'. [ 212.035871][T10704] loop7: detected capacity change from 0 to 512 [ 212.107447][T10704] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 212.107507][T10704] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 212.107631][T10704] System zones: 0-1, 15-15, 18-18, 34-34 [ 212.108103][T10704] EXT4-fs (loop7): orphan cleanup on readonly fs [ 212.108374][T10704] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 212.108456][T10704] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 212.108477][T10704] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 212.120204][T10704] EXT4-fs (loop7): 1 truncate cleaned up [ 212.122435][T10704] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.139370][T10704] fscrypt (loop7, inode 16): Error -61 getting encryption context [ 213.044913][T10718] loop6: detected capacity change from 0 to 512 [ 213.878228][T10718] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 213.878269][T10718] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 213.878309][T10718] System zones: 0-1, 15-15, 18-18, 34-34 [ 213.878468][T10718] EXT4-fs (loop6): orphan cleanup on readonly fs [ 213.878506][T10718] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 213.878547][T10718] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 213.878564][T10718] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 213.878787][T10718] EXT4-fs (loop6): 1 truncate cleaned up [ 213.879239][T10718] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.882074][T10715] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 213.937090][ T8894] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.016577][ T8415] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.080768][T10735] team0: Device ipvlan0 failed to register rx_handler [ 216.400306][T10778] Injecting memory failure for pfn 0x219250 at process virtual address 0x20ffa000 [ 216.402661][T10778] Memory failure: 0x219250: Sending SIGBUS to syz.8.1639:10778 due to hardware memory corruption [ 216.407008][T10778] Memory failure: 0x219250: recovery action for already poisoned page: Failed [ 216.681447][T10785] loop7: detected capacity change from 0 to 512 [ 216.707730][T10785] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 216.707778][T10785] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 216.707938][T10785] System zones: 0-1, 15-15, 18-18, 34-34 [ 216.708698][T10785] EXT4-fs (loop7): orphan cleanup on readonly fs [ 216.708925][T10785] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 216.709074][T10785] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 216.709112][T10785] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 216.715414][T10785] EXT4-fs (loop7): 1 truncate cleaned up [ 216.715913][T10785] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 216.725519][T10785] fscrypt (loop7, inode 16): Error -61 getting encryption context [ 217.932887][T10796] loop5: detected capacity change from 0 to 8192 [ 218.459607][ T8894] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.524764][ T30] audit: type=1326 audit(219.494:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10803 comm="syz.7.1647" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5177fe8 code=0x7ffc0000 [ 218.524813][ T30] audit: type=1326 audit(219.494:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10803 comm="syz.7.1647" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5177fe8 code=0x7ffc0000 [ 218.525227][ T30] audit: type=1326 audit(219.494:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10803 comm="syz.7.1647" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5177fe8 code=0x7ffc0000 [ 218.885390][ T30] audit: type=1326 audit(219.494:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10803 comm="syz.7.1647" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5177fe8 code=0x7ffc0000 [ 219.064453][T10812] loop8: detected capacity change from 0 to 8192 [ 219.147626][ T30] audit: type=1326 audit(220.114:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10803 comm="syz.7.1647" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5177fe8 code=0x7ffc0000 [ 219.208790][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1646'. [ 219.410493][ T30] audit: type=1326 audit(220.224:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10803 comm="syz.7.1647" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=427 compat=0 ip=0xffffb5177fe8 code=0x7ffc0000 [ 219.410545][ T30] audit: type=1326 audit(220.364:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10803 comm="syz.7.1647" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5177fe8 code=0x7ffc0000 [ 219.410581][ T30] audit: type=1326 audit(220.364:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10803 comm="syz.7.1647" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5177fe8 code=0x7ffc0000 [ 219.410602][ T30] audit: type=1326 audit(220.364:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10803 comm="syz.7.1647" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5177fe8 code=0x7ffc0000 [ 219.410622][ T30] audit: type=1326 audit(220.374:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10803 comm="syz.7.1647" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb5177fe8 code=0x7ffc0000 [ 220.054528][T10832] Injecting memory failure for pfn 0x15da2c at process virtual address 0x20162000 [ 220.070576][T10832] Memory failure: 0x15da2c: recovery action for clean LRU page: Recovered [ 220.082784][T10832] Injecting memory failure for pfn 0x15da2d at process virtual address 0x20163000 [ 220.086919][T10832] Memory failure: 0x15da2d: recovery action for clean LRU page: Recovered [ 220.086949][T10832] Injecting memory failure for pfn 0x15da2e at process virtual address 0x20164000 [ 220.087018][T10832] Memory failure: 0x15da2e: recovery action for clean LRU page: Recovered [ 220.565276][T10854] loop5: detected capacity change from 0 to 512 [ 220.565906][T10854] ext4: Unknown parameter 'subj_type' [ 220.674203][T10860] netlink: 'syz.5.1662': attribute type 30 has an invalid length. [ 220.674255][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1662'. [ 220.674292][T10860] bond0: option arp_missed_max: invalid value (0) [ 220.674308][T10860] bond0: option arp_missed_max: allowed values 1 - 255 [ 220.911460][T10870] loop5: detected capacity change from 0 to 8 [ 220.914497][T10870] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 220.914523][T10870] unable to read xattr id index table [ 221.025551][T10872] loop8: detected capacity change from 0 to 2048 [ 221.080006][T10872] loop8: p1 < > p4 [ 221.080006][T10872] p4: [ 221.087401][T10872] loop8: p4 size 722688 extends beyond EOD, truncated [ 221.176382][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 221.178819][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 221.184562][T10883] Cannot find add_set index 0 as target [ 221.611355][T10899] binder: 10898:10899 BC_ACQUIRE_DONE u0000000000000001 node 38 cookie mismatch 00000000000000fc != 0000000000000000 [ 221.647048][T10906] loop1: detected capacity change from 0 to 8 [ 221.649058][T10906] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 221.649087][T10906] unable to read xattr id index table [ 222.218557][T10931] loop5: detected capacity change from 0 to 8 [ 222.225607][T10931] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 222.225626][T10931] unable to read xattr id index table [ 222.228671][T10931] SQUASHFS error: zlib decompression failed, data probably corrupt [ 222.228696][T10931] SQUASHFS error: Failed to read block 0x9b: -5 [ 222.228715][T10931] SQUASHFS error: Unable to read metadata cache entry [99] [ 222.228728][T10931] SQUASHFS error: Unable to read inode 0x127 [ 222.692846][T10946] loop6: detected capacity change from 0 to 8 [ 222.703721][T10946] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 222.705571][T10946] unable to read xattr id index table [ 222.863342][T10953] loop6: detected capacity change from 0 to 128 [ 222.877391][T10953] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1693'. [ 222.877423][T10953] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1693'. [ 223.508615][T10969] binder: 10968:10969 BC_ACQUIRE_DONE u0000000000000001 node 40 cookie mismatch 00000000000000fc != 0000000000000000 [ 223.742194][T10972] loop8: detected capacity change from 0 to 8192 [ 223.926347][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1698'. [ 224.634133][T10986] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1704'. [ 224.642782][T10984] loop1: detected capacity change from 0 to 8 [ 224.654492][T10984] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 224.654520][T10984] unable to read xattr id index table [ 225.274754][T11002] loop1: detected capacity change from 0 to 8192 [ 225.765533][T10992] team0: Device ipvlan0 failed to register rx_handler [ 226.263000][ T4717] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 226.263059][ T4717] Bluetooth: hci6: Injecting HCI hardware error event [ 226.266636][ T4711] Bluetooth: hci6: hardware error 0x00 [ 226.737286][T11019] loop9: detected capacity change from 0 to 524287998 [ 228.362940][T11037] loop7: detected capacity change from 0 to 8192 [ 228.496162][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1717'. [ 228.602978][ T4711] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 229.385773][T11058] loop6: detected capacity change from 0 to 8192 [ 231.301576][T11087] loop5: detected capacity change from 0 to 8192 [ 231.338441][T11087] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.438277][T11083] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 231.438301][T11083] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 231.439629][T11083] vhci_hcd vhci_hcd.0: Device attached [ 231.465011][T11084] vhci_hcd: connection closed [ 231.482933][ T7154] vhci_hcd vhci_hcd.5: stop threads [ 231.482965][ T7154] vhci_hcd vhci_hcd.5: release socket [ 231.482995][ T7154] vhci_hcd vhci_hcd.5: disconnect device [ 232.179165][T11100] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 232.179205][T11100] overlayfs: overlapping lowerdir path [ 232.188745][T11100] team0 (unregistering): Port device team_slave_0 removed [ 232.191510][T11100] team0 (unregistering): Port device team_slave_1 removed [ 232.224945][T11098] FAULT_INJECTION: forcing a failure. [ 232.224945][T11098] name failslab, interval 1, probability 0, space 0, times 0 [ 232.224977][T11098] CPU: 0 UID: 0 PID: 11098 Comm: syz.8.1737 Not tainted syzkaller #0 PREEMPT [ 232.224998][T11098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 232.225006][T11098] Call trace: [ 232.225010][T11098] show_stack+0x2c/0x3c (C) [ 232.225030][T11098] __dump_stack+0x30/0x40 [ 232.225044][T11098] dump_stack_lvl+0xd8/0x12c [ 232.225054][T11098] dump_stack+0x1c/0x28 [ 232.225063][T11098] should_fail_ex+0x41c/0x590 [ 232.225074][T11098] should_failslab+0xc4/0x120 [ 232.225083][T11098] kmem_cache_alloc_noprof+0x94/0x5d8 [ 232.225092][T11098] xfrm_state_alloc+0x2c/0x270 [ 232.225102][T11098] pfkey_add+0x554/0x22b4 [ 232.225112][T11098] pfkey_sendmsg+0x9f4/0xdf8 [ 232.225122][T11098] __sock_sendmsg+0xc8/0x17c [ 232.225131][T11098] ____sys_sendmsg+0x3f8/0x6c8 [ 232.225139][T11098] ___sys_sendmsg+0x198/0x224 [ 232.225147][T11098] __sys_sendmmsg+0x204/0x580 [ 232.225156][T11098] __arm64_sys_sendmmsg+0xa4/0xc0 [ 232.225164][T11098] invoke_syscall+0x98/0x244 [ 232.225175][T11098] el0_svc_common+0xec/0x23c [ 232.225184][T11098] do_el0_svc+0x4c/0x5c [ 232.225193][T11098] el0_svc+0x64/0x260 [ 232.225204][T11098] el0t_64_sync_handler+0x48/0x148 [ 232.225213][T11098] el0t_64_sync+0x198/0x19c [ 232.237458][T11103] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1738'. [ 232.420938][T11111] loop8: detected capacity change from 0 to 7 [ 232.460820][T11111] Dev loop8: unable to read RDB block 7 [ 232.460855][T11111] loop8: unable to read partition table [ 232.460921][T11111] loop8: partition table beyond EOD, truncated [ 232.464187][T11111] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 232.755404][T11121] loop1: detected capacity change from 0 to 8192 [ 234.926492][T11137] loop8: detected capacity change from 0 to 512 [ 234.955528][T11137] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.063114][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1749'. [ 235.098564][ T9264] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.872601][T11163] loop5: detected capacity change from 0 to 1024 [ 235.883398][T11163] EXT4-fs: Ignoring removed bh option [ 235.888022][T11163] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 235.898497][T11163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.944490][T11163] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 235.968193][T11163] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 235.971122][T11163] fuse: Bad value for 'group_id' [ 235.972252][T11163] fuse: Bad value for 'group_id' [ 235.977343][T11163] overlay: Unknown parameter 'euid' [ 236.041417][ T8215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.306778][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'. [ 237.194329][T11189] loop1: detected capacity change from 0 to 8 [ 237.201243][T11189] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 237.201273][T11189] unable to read xattr id index table [ 237.544863][T11199] loop5: detected capacity change from 0 to 512 [ 237.640948][T11209] loop7: detected capacity change from 0 to 8 [ 237.932792][T11209] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 237.932814][T11209] unable to read xattr id index table [ 237.934579][T11209] SQUASHFS error: zlib decompression failed, data probably corrupt [ 237.934602][T11209] SQUASHFS error: Failed to read block 0x9b: -5 [ 237.934637][T11209] SQUASHFS error: Unable to read metadata cache entry [99] [ 237.934670][T11209] SQUASHFS error: Unable to read inode 0x127 [ 238.817716][T11199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 239.040661][ T8215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 239.160781][T11232] fuse: Bad value for 'fd' [ 239.162726][T11232] fuse: Bad value for 'fd' [ 239.165429][T11232] fuse: Bad value for 'fd' [ 239.861088][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1769'. [ 240.103970][ T4711] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 240.106227][ T4711] Bluetooth: hci2: Injecting HCI hardware error event [ 240.109910][ T4717] Bluetooth: hci2: hardware error 0x00 [ 241.011706][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 241.011880][T11256] FAULT_INJECTION: forcing a failure. [ 241.011880][T11256] name failslab, interval 1, probability 0, space 0, times 0 [ 241.011946][T11256] CPU: 0 UID: 0 PID: 11256 Comm: syz.1.1770 Not tainted syzkaller #0 PREEMPT [ 241.011961][T11256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 241.011969][T11256] Call trace: [ 241.011973][T11256] show_stack+0x2c/0x3c (C) [ 241.011994][T11256] __dump_stack+0x30/0x40 [ 241.012006][T11256] dump_stack_lvl+0xd8/0x12c [ 241.012016][T11256] dump_stack+0x1c/0x28 [ 241.012025][T11256] should_fail_ex+0x41c/0x590 [ 241.012037][T11256] should_failslab+0xc4/0x120 [ 241.012045][T11256] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 241.012054][T11256] __alloc_skb+0x1f0/0x610 [ 241.012064][T11256] netlink_ack+0x11c/0x890 [ 241.012073][T11256] netlink_rcv_skb+0x21c/0x414 [ 241.012081][T11256] rtnetlink_rcv+0x28/0x38 [ 241.012089][T11256] netlink_unicast+0x600/0x7f8 [ 241.012097][T11256] netlink_sendmsg+0x648/0x948 [ 241.012105][T11256] __sock_sendmsg+0xc8/0x17c [ 241.012113][T11256] ____sys_sendmsg+0x3d0/0x6c8 [ 241.012121][T11256] ___sys_sendmsg+0x198/0x224 [ 241.012130][T11256] __sys_sendmsg+0x158/0x204 [ 241.012138][T11256] __arm64_sys_sendmsg+0x80/0x94 [ 241.012147][T11256] invoke_syscall+0x98/0x244 [ 241.012158][T11256] el0_svc_common+0xec/0x23c [ 241.012168][T11256] do_el0_svc+0x4c/0x5c [ 241.012177][T11256] el0_svc+0x64/0x260 [ 241.012188][T11256] el0t_64_sync_handler+0x48/0x148 [ 241.012197][T11256] el0t_64_sync+0x198/0x19c [ 241.093529][T11264] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1773'. [ 241.099709][T11264] loop8: detected capacity change from 0 to 512 [ 241.123105][T11264] EXT4-fs error (device loop8): ext4_quota_enable:7228: comm syz.8.1773: Bad quota inum: 8388611, type: 0 [ 241.123419][T11264] loop8: lost filesystem error report for type 5 error -117 [ 241.123595][T11264] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=8388611). Please run e2fsck to fix. [ 241.123834][T11264] EXT4-fs (loop8): mount failed [ 241.421133][T11270] binder: 11269:11270 BC_ACQUIRE_DONE u0000000000000001 node 41 cookie mismatch 00000000000000fc != 0000000000000000 [ 241.481422][T11274] bridge0: port 3(ipvlan3) entered blocking state [ 241.484227][T11274] bridge0: port 3(ipvlan3) entered disabled state [ 241.485971][T11274] ipvlan3: entered allmulticast mode [ 241.487442][T11274] bridge0: entered allmulticast mode [ 241.489851][T11274] ipvlan3: left allmulticast mode [ 241.491165][T11274] bridge0: left allmulticast mode [ 242.291041][ C0] vcan0: j1939_tp_rxtimer: 0x00000000c3f31d02: rx timeout, send abort [ 242.559769][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1783'. [ 242.559805][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1783'. [ 242.614979][T11298] loop8: detected capacity change from 0 to 8192 [ 242.656721][T11298] loop8: p1 < > p3 p4 < > [ 242.658210][T11298] loop8: p3 size 218103808 extends beyond EOD, truncated [ 242.675628][T11298] FAULT_INJECTION: forcing a failure. [ 242.675628][T11298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.675662][T11298] CPU: 1 UID: 0 PID: 11298 Comm: syz.8.1784 Not tainted syzkaller #0 PREEMPT [ 242.675676][T11298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 242.675682][T11298] Call trace: [ 242.675686][T11298] show_stack+0x2c/0x3c (C) [ 242.675706][T11298] __dump_stack+0x30/0x40 [ 242.675718][T11298] dump_stack_lvl+0xd8/0x12c [ 242.675728][T11298] dump_stack+0x1c/0x28 [ 242.675738][T11298] should_fail_ex+0x41c/0x590 [ 242.675752][T11298] should_fail+0x14/0x24 [ 242.675761][T11298] should_fail_usercopy+0x20/0x30 [ 242.675772][T11298] simple_read_from_buffer+0xc4/0x238 [ 242.675782][T11298] proc_fail_nth_read+0x1a8/0x248 [ 242.675791][T11298] vfs_read+0x230/0x8c8 [ 242.675802][T11298] ksys_read+0x12c/0x228 [ 242.675811][T11298] __arm64_sys_read+0x7c/0x90 [ 242.675818][T11298] invoke_syscall+0x98/0x244 [ 242.675829][T11298] el0_svc_common+0xec/0x23c [ 242.675839][T11298] do_el0_svc+0x4c/0x5c [ 242.675848][T11298] el0_svc+0x64/0x260 [ 242.675859][T11298] el0t_64_sync_handler+0x48/0x148 [ 242.675868][T11298] el0t_64_sync+0x198/0x19c [ 242.701586][T11301] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1785'. [ 242.701744][T11301] sch_fq: defrate 0 ignored. [ 242.762859][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 242.771907][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 242.775205][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 242.791091][ C0] vcan0: j1939_tp_rxtimer: 0x00000000c3f31d02: abort rx timeout. Force session deactivation [ 242.791168][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e8d0442e: rx timeout, send abort [ 243.254994][T11322] loop8: detected capacity change from 0 to 8192 [ 243.256372][ T4717] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 243.291224][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e8d0442e: abort rx timeout. Force session deactivation [ 243.687151][T11322] Dev loop8: unable to read RDB block 8 [ 243.687221][T11322] loop8: unable to read partition table [ 243.687290][T11322] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 244.149940][T11334] loop7: detected capacity change from 0 to 8192 [ 244.534431][T11339] binder: 11338:11339 BC_ACQUIRE_DONE u0000000000000001 node 42 cookie mismatch 00000000000000fc != 0000000000000000 [ 244.539842][T11334] Dev loop7: unable to read RDB block 8 [ 244.539908][T11334] loop7: unable to read partition table [ 244.539993][T11334] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 244.958229][T11349] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1799'. [ 245.023322][T11351] syzkaller0: entered promiscuous mode [ 245.023358][T11351] syzkaller0: entered allmulticast mode [ 245.024618][T11351] tipc: Enabled bearer , priority 0 [ 245.028963][T11350] tipc: Resetting bearer [ 245.038732][T11350] tipc: Disabling bearer [ 245.117375][T11361] FAULT_INJECTION: forcing a failure. [ 245.117375][T11361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.117418][T11361] CPU: 1 UID: 0 PID: 11361 Comm: syz.5.1802 Not tainted syzkaller #0 PREEMPT [ 245.117433][T11361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 245.117440][T11361] Call trace: [ 245.117443][T11361] show_stack+0x2c/0x3c (C) [ 245.117469][T11361] __dump_stack+0x30/0x40 [ 245.117480][T11361] dump_stack_lvl+0xd8/0x12c [ 245.117491][T11361] dump_stack+0x1c/0x28 [ 245.117502][T11361] should_fail_ex+0x41c/0x590 [ 245.117514][T11361] should_fail+0x14/0x24 [ 245.117524][T11361] should_fail_usercopy+0x20/0x30 [ 245.117534][T11361] _inline_copy_from_user+0x3c/0x174 [ 245.117545][T11361] copy_msghdr_from_user+0xb8/0x194 [ 245.117554][T11361] ___sys_sendmsg+0x14c/0x224 [ 245.117563][T11361] __sys_sendmmsg+0x204/0x580 [ 245.117571][T11361] __arm64_sys_sendmmsg+0xa4/0xc0 [ 245.117580][T11361] invoke_syscall+0x98/0x244 [ 245.117590][T11361] el0_svc_common+0xec/0x23c [ 245.117600][T11361] do_el0_svc+0x4c/0x5c [ 245.117609][T11361] el0_svc+0x64/0x260 [ 245.117619][T11361] el0t_64_sync_handler+0x48/0x148 [ 245.117629][T11361] el0t_64_sync+0x198/0x19c [ 245.515849][T11367] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1805'. [ 246.792395][T11379] loop7: detected capacity change from 0 to 8 [ 246.804392][T11379] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 246.804404][T11379] unable to read xattr id index table [ 247.570377][T11412] loop8: detected capacity change from 0 to 8 [ 247.572791][T11412] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 247.572802][T11412] unable to read xattr id index table [ 247.574442][T11412] SQUASHFS error: zlib decompression failed, data probably corrupt [ 247.574457][T11412] SQUASHFS error: Failed to read block 0x9b: -5 [ 247.574468][T11412] SQUASHFS error: Unable to read metadata cache entry [99] [ 247.574475][T11412] SQUASHFS error: Unable to read inode 0x127 [ 248.568761][T11425] binder: 11424:11425 BC_ACQUIRE_DONE u0000000000000001 node 43 cookie mismatch 00000000000000fc != 0000000000000000 [ 248.843467][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.844972][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.279311][T11432] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 249.859463][T11458] loop5: detected capacity change from 0 to 8 [ 250.160843][T11458] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 250.160876][T11458] unable to read xattr id index table [ 250.162277][T11458] SQUASHFS error: zlib decompression failed, data probably corrupt [ 250.162289][T11458] SQUASHFS error: Failed to read block 0x9b: -5 [ 250.162296][T11458] SQUASHFS error: Unable to read metadata cache entry [99] [ 250.162303][T11458] SQUASHFS error: Unable to read inode 0x127 [ 250.708288][T11461] loop1: detected capacity change from 0 to 4096 [ 250.730984][T11461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.230029][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1841'. [ 251.428329][T11491] overlayfs: workdir and upperdir must be separate subtrees [ 251.501136][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.243598][T11504] loop7: detected capacity change from 0 to 8 [ 253.012947][T11504] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 253.012976][T11504] unable to read xattr id index table [ 253.101720][T11502] loop5: detected capacity change from 0 to 8192 [ 253.603305][T11509] FAULT_INJECTION: forcing a failure. [ 253.603305][T11509] name failslab, interval 1, probability 0, space 0, times 0 [ 253.603346][T11509] CPU: 1 UID: 0 PID: 11509 Comm: syz.1.1848 Not tainted syzkaller #0 PREEMPT [ 253.603359][T11509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 253.603367][T11509] Call trace: [ 253.603371][T11509] show_stack+0x2c/0x3c (C) [ 253.603392][T11509] __dump_stack+0x30/0x40 [ 253.603403][T11509] dump_stack_lvl+0xd8/0x12c [ 253.603413][T11509] dump_stack+0x1c/0x28 [ 253.603422][T11509] should_fail_ex+0x41c/0x590 [ 253.603433][T11509] should_failslab+0xc4/0x120 [ 253.603441][T11509] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 253.603450][T11509] __alloc_skb+0x1f0/0x610 [ 253.603463][T11509] alloc_skb_with_frags+0xb8/0x690 [ 253.603471][T11509] sock_alloc_send_pskb+0x740/0x850 [ 253.603479][T11509] __ip_append_data+0x26cc/0x3744 [ 253.603488][T11509] ip_make_skb+0x208/0x254 [ 253.603495][T11509] udp_sendmsg+0x13a0/0x1bd4 [ 253.603505][T11509] inet_sendmsg+0xb4/0xd8 [ 253.603516][T11509] __sock_sendmsg+0xc8/0x17c [ 253.603523][T11509] sock_write_iter+0x220/0x310 [ 253.603533][T11509] do_iter_readv_writev+0x48c/0x6f8 [ 253.603541][T11509] vfs_writev+0x2a8/0x630 [ 253.603548][T11509] do_writev+0x134/0x2a8 [ 253.603554][T11509] __arm64_sys_writev+0x80/0x94 [ 253.603561][T11509] invoke_syscall+0x98/0x244 [ 253.603571][T11509] el0_svc_common+0xec/0x23c [ 253.603581][T11509] do_el0_svc+0x4c/0x5c [ 253.603590][T11509] el0_svc+0x64/0x260 [ 253.603600][T11509] el0t_64_sync_handler+0x48/0x148 [ 253.603610][T11509] el0t_64_sync+0x198/0x19c [ 253.622023][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1847'. [ 254.113023][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1844'. [ 254.803299][T11504] SQUASHFS error: zlib decompression failed, data probably corrupt [ 254.803847][T11504] SQUASHFS error: Failed to read block 0x9b: -5 [ 254.803869][T11504] SQUASHFS error: Unable to read metadata cache entry [99] [ 254.803882][T11504] SQUASHFS error: Unable to read inode 0x127 [ 254.941933][T11518] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 254.954677][T11518] loop7: detected capacity change from 0 to 128 [ 255.229083][T11518] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 255.238690][T11518] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 255.248796][T11502] Dev loop5: unable to read RDB block 8 [ 255.248865][T11502] loop5: unable to read partition table [ 255.248956][T11502] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 256.206434][T11529] syzkaller0: entered promiscuous mode [ 256.207541][T11529] syzkaller0: entered allmulticast mode [ 256.223396][T11533] FAULT_INJECTION: forcing a failure. [ 256.223396][T11533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.226062][T11533] CPU: 1 UID: 0 PID: 11533 Comm: syz.7.1856 Not tainted syzkaller #0 PREEMPT [ 256.226090][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 256.226097][T11533] Call trace: [ 256.226101][T11533] show_stack+0x2c/0x3c (C) [ 256.226126][T11533] __dump_stack+0x30/0x40 [ 256.226138][T11533] dump_stack_lvl+0xd8/0x12c [ 256.226148][T11533] dump_stack+0x1c/0x28 [ 256.226158][T11533] should_fail_ex+0x41c/0x590 [ 256.226169][T11533] should_fail+0x14/0x24 [ 256.226178][T11533] should_fail_usercopy+0x20/0x30 [ 256.226189][T11533] _inline_copy_from_user+0x3c/0x174 [ 256.226199][T11533] copy_msghdr_from_user+0xb8/0x194 [ 256.226208][T11533] ___sys_sendmsg+0x14c/0x224 [ 256.226219][T11533] __sys_sendmmsg+0x204/0x580 [ 256.226228][T11533] __arm64_sys_sendmmsg+0xa4/0xc0 [ 256.226237][T11533] invoke_syscall+0x98/0x244 [ 256.226247][T11533] el0_svc_common+0xec/0x23c [ 256.226257][T11533] do_el0_svc+0x4c/0x5c [ 256.226266][T11533] el0_svc+0x64/0x260 [ 256.226277][T11533] el0t_64_sync_handler+0x48/0x148 [ 256.226286][T11533] el0t_64_sync+0x198/0x19c [ 256.250351][T11532] binder: 11531:11532 BC_ACQUIRE_DONE u0000000000000001 node 44 cookie mismatch 00000000000000fc != 0000000000000000 [ 257.796571][T11585] fuse: Bad value for 'fd' [ 257.878001][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1869'. [ 258.556424][T11605] loop7: detected capacity change from 0 to 8192 [ 259.118537][T11619] syzkaller0: entered promiscuous mode [ 259.119767][T11619] syzkaller0: entered allmulticast mode [ 259.127790][T11619] tipc: Started in network mode [ 259.127822][T11619] tipc: Node identity 0274af2e9f75, cluster identity 4711 [ 259.127946][T11619] tipc: Enabled bearer , priority 0 [ 259.243331][T11616] tipc: Resetting bearer [ 259.254336][T11616] tipc: Disabling bearer [ 259.592545][T11634] loop1: detected capacity change from 0 to 2048 [ 259.656204][T11634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.681995][T11634] overlay: ./file0 is not a directory [ 259.690661][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 259.701674][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.970572][T11649] loop7: detected capacity change from 0 to 8192 [ 260.128849][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1889'. [ 260.744547][T11649] Dev loop7: unable to read RDB block 8 [ 260.744688][T11649] loop7: unable to read partition table [ 260.744745][T11649] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 260.818170][T11657] Cannot find add_set index 0 as target [ 262.136340][T11689] loop1: detected capacity change from 0 to 128 [ 262.193407][T11681] loop8: detected capacity change from 0 to 8192 [ 262.931210][T11682] loop7: detected capacity change from 0 to 8192 [ 263.342987][T11696] loop5: detected capacity change from 0 to 8 [ 264.394307][T11696] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 264.394338][T11696] unable to read xattr id index table [ 264.395054][T11681] Dev loop8: unable to read RDB block 8 [ 264.395122][T11681] loop8: unable to read partition table [ 264.395196][T11681] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 264.431611][T11682] Dev loop7: unable to read RDB block 8 [ 264.431671][T11682] loop7: unable to read partition table [ 264.431751][T11682] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 264.499456][T11709] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1908'. [ 264.618543][T11718] fuse: fd is not a fuse device [ 266.019030][T11754] loop5: detected capacity change from 0 to 8 [ 266.020968][T11754] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 266.020994][T11754] unable to read xattr id index table [ 266.290697][T11757] loop7: detected capacity change from 0 to 8192 [ 266.439914][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1920'. [ 267.045572][T11763] loop5: detected capacity change from 0 to 256 [ 267.095089][T11764] loop1: detected capacity change from 0 to 512 [ 267.284275][T11764] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 267.284305][T11764] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 267.284345][T11764] System zones: 0-1, 15-15, 18-18, 34-34 [ 267.284501][T11764] EXT4-fs (loop1): orphan cleanup on readonly fs [ 267.284535][T11764] __quota_error: 82 callbacks suppressed [ 267.284546][T11764] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 267.284583][T11764] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 267.284599][T11764] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 267.305091][T11764] EXT4-fs (loop1): 1 truncate cleaned up [ 267.305587][T11764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 268.450679][T11764] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 268.473164][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.735724][T11779] tipc: Enabling of bearer rejected, failed to enable media [ 268.741441][T11785] loop1: detected capacity change from 0 to 128 [ 268.749100][T11782] loop5: detected capacity change from 0 to 512 [ 268.753055][T11782] EXT4-fs (loop5): Test dummy encryption mode enabled [ 268.753096][T11782] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 268.769543][T11782] EXT4-fs (loop5): 1 truncate cleaned up [ 268.770055][T11782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.016837][ T8215] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 269.349760][ T8215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.636464][T11812] loop7: detected capacity change from 0 to 8192 [ 270.198595][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1936'. [ 270.227248][T11814] fuse: Unknown parameter 'o5fd' [ 270.348478][T11816] tipc: Enabled bearer , priority 0 [ 270.397023][T11815] tipc: Disabling bearer [ 270.475090][ T7140] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.475138][ T7140] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.529701][ T4711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.531623][ T4711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.532484][ T4711] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.532955][ T4711] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.533213][ T4711] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.534861][T11821] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1943'. [ 270.600685][T11839] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1948'. [ 270.843470][ T7140] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.843514][ T7140] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.849668][T11839] netlink: 'syz.1.1948': attribute type 1 has an invalid length. [ 270.852118][T11828] batman_adv: batadv0: Adding interface: vxlan0 [ 270.852368][T11828] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.852391][T11828] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 270.945588][ T7140] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.945628][ T7140] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.274573][T11870] loop7: detected capacity change from 0 to 8192 [ 271.840349][ T7140] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.840392][ T7140] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.856280][T11875] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1958'. [ 271.872820][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1953'. [ 272.061237][T11888] bridge0: port 3(ipvlan2) entered blocking state [ 272.063325][T11888] bridge0: port 3(ipvlan2) entered disabled state [ 272.064885][T11888] ipvlan2: entered allmulticast mode [ 272.064918][T11888] bridge0: entered allmulticast mode [ 272.065662][T11888] ipvlan2: left allmulticast mode [ 272.065675][T11888] bridge0: left allmulticast mode [ 272.100170][T11826] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.100219][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.100329][T11826] bridge_slave_0: entered allmulticast mode [ 272.100788][T11826] bridge_slave_0: entered promiscuous mode [ 272.101691][T11826] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.101723][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.101785][T11826] bridge_slave_1: entered allmulticast mode [ 272.102209][T11826] bridge_slave_1: entered promiscuous mode [ 272.110578][T11826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.111617][T11826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.120412][T11826] team0: Port device team_slave_0 added [ 272.121220][T11826] team0: Port device team_slave_1 added [ 272.127836][T11896] loop8: detected capacity change from 0 to 512 [ 272.128349][T11896] EXT4-fs: Ignoring removed oldalloc option [ 272.129954][T11896] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 272.153580][T11826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.154931][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.159683][T11826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.162371][T11826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.163822][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.168311][T11826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.173531][T11896] EXT4-fs (loop8): 1 truncate cleaned up [ 272.174055][T11896] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.485595][T11826] hsr_slave_0: entered promiscuous mode [ 272.488248][T11826] hsr_slave_1: entered promiscuous mode [ 272.489612][T11826] debugfs: 'hsr0' already exists in 'hsr' [ 272.490753][T11826] Cannot create hsr debugfs directory [ 272.576076][ T7140] bridge_slave_1: left allmulticast mode [ 272.576108][ T7140] bridge_slave_1: left promiscuous mode [ 272.576511][ T7140] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.578149][ T7140] bridge_slave_0: left allmulticast mode [ 272.578170][ T7140] bridge_slave_0: left promiscuous mode [ 272.578558][ T7140] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.583096][ T4711] Bluetooth: hci1: command tx timeout [ 273.509880][ T9264] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.562698][T11933] __vm_enough_memory: pid: 11933, comm: syz.7.1972, bytes: 54241756946432 not enough memory for the allocation [ 273.586229][ T7140] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 273.621776][ T7140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.645587][ T7140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.673927][ T7140] bond0 (unregistering): Released all slaves [ 273.689236][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1970'. [ 273.775711][ T7140] tipc: Left network mode [ 273.843806][ T31] INFO: task syz.3.949:7912 blocked for more than 143 seconds. [ 273.843835][ T31] Not tainted syzkaller #0 [ 273.843847][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.843859][ T31] task:syz.3.949 state:D stack:0 pid:7912 tgid:7911 ppid:4721 task_flags:0x400040 flags:0x00800001 [ 273.843885][ T31] Call trace: [ 273.843894][ T31] __switch_to+0x2b0/0x6e0 (T) [ 273.843915][ T31] __schedule+0x1370/0x2d80 [ 273.843928][ T31] schedule+0x13c/0x20c [ 273.843947][ T31] schedule_preempt_disabled+0x18/0x2c [ 273.843960][ T31] __mutex_lock+0x4ec/0xf14 [ 273.843973][ T31] mutex_lock_nested+0x24/0x30 [ 273.843985][ T31] usbdev_open+0x138/0x674 [ 273.844000][ T31] chrdev_open+0x398/0x3e8 [ 273.844013][ T31] do_dentry_open+0x5c4/0xfc0 [ 273.844027][ T31] vfs_open+0x44/0x2dc [ 273.844040][ T31] path_openat+0x21fc/0x2a60 [ 273.844053][ T31] do_file_open+0x1c8/0x2e8 [ 273.844065][ T31] do_sys_openat2+0x114/0x1e8 [ 273.844078][ T31] do_sys_open+0xb0/0xe0 [ 273.844091][ T31] __arm64_sys_openat+0xa0/0xbc [ 273.844105][ T31] invoke_syscall+0x98/0x244 [ 273.844120][ T31] el0_svc_common+0xec/0x23c [ 273.844134][ T31] do_el0_svc+0x4c/0x5c [ 273.844148][ T31] el0_svc+0x64/0x260 [ 273.844161][ T31] el0t_64_sync_handler+0x48/0x148 [ 273.844174][ T31] el0t_64_sync+0x198/0x19c [ 273.844231][ T31] [ 273.844231][ T31] Showing all locks held in the system: [ 273.844239][ T31] 2 locks held by kworker/u8:0/12: [ 273.844248][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 273.844295][ T31] #1: ffff80008ec57c40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 273.844339][ T31] 1 lock held by khungtaskd/31: [ 273.844347][ T31] #0: ffff800088cf6fe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 273.844400][ T31] 3 locks held by kworker/1:3/4438: [ 273.844408][ T31] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 273.844448][ T31] #1: ffff800098cb7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 273.844497][ T31] #2: ffff0000f1f5c250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x198/0x320 [ 273.844540][ T31] 2 locks held by getty/4491: [ 273.844548][ T31] #0: ffff0000d0ffb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 273.844592][ T31] #1: ffff8000924cb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 [ 273.844638][ T31] 5 locks held by kworker/1:5/4809: [ 273.844645][ T31] #0: ffff0000c2edc940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 273.844686][ T31] #1: ffff8000a9367c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 273.844726][ T31] #2: ffff0000ca4541d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x128/0x39fc [ 273.844767][ T31] #3: ffff0000ca4f9578 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x191c/0x39fc [ 273.844806][ T31] #4: ffff0000caa53260 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x1948/0x39fc [ 273.844848][ T31] 3 locks held by kworker/u8:13/7140: [ 273.844856][ T31] #0: ffff0000c004e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 273.844896][ T31] #1: ffff800095517c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 273.844941][ T31] #2: ffff800089dc63e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x104/0x6c4 [ 273.844983][ T31] 1 lock held by syz.3.949/7912: [ 273.844991][ T31] #0: ffff0000ca4541d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x138/0x674 [ 273.845034][ T31] 2 locks held by kworker/u8:21/8800: [ 273.845042][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 273.845082][ T31] #1: ffff800093af7c40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 273.845125][ T31] 2 locks held by syz-executor/11826: [ 273.845134][ T31] 1 lock held by syz.1.1971/11924: [ 273.845143][ T31] 1 lock held by dhcpcd-run-hook/11942: [ 273.845151][ T31] [ 273.845156][ T31] ============================================= [ 273.845156][ T31] [ 273.845165][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 273.915425][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 273.916782][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 273.918467][ T31] Call trace: [ 273.919036][ T31] show_stack+0x2c/0x3c (C) [ 273.919817][ T31] __dump_stack+0x30/0x40 [ 273.920598][ T31] dump_stack_lvl+0x30/0x12c [ 273.921382][ T31] dump_stack+0x1c/0x28 [ 273.922091][ T31] vpanic+0x594/0xaf8 [ 273.922835][ T31] vpanic+0x0/0xaf8 [ 273.923486][ T31] hung_task_panic+0x0/0x2c [ 273.924245][ T31] kthread+0x304/0x3d4 [ 273.924928][ T31] ret_from_fork+0x10/0x20 [ 273.925690][ T31] SMP: stopping secondary CPUs [ 273.926506][ T31] Kernel Offset: disabled [ 273.927205][ T31] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 273.928352][ T31] Memory Limit: none [ 274.273318][ T31] Rebooting in 86400 seconds..