last executing test programs: 1m12.775064209s ago: executing program 3 (id=39): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_clone3(&(0x7f0000000200)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000340)=0x5, 0x4) 1m12.465127123s ago: executing program 3 (id=45): msync(&(0x7f0000950000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x9, 0x40000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000001400)=0x2) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000001440)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x1}, 0xe) syz_open_dev$dvb_frontend(&(0x7f0000001480), 0x0, 0x2) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) prlimit64(0x0, 0xe, &(0x7f00000014c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001500)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001540)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000015c0)=@abs, 0x6e) r4 = syz_open_procfs(r1, &(0x7f0000001640)='smaps\x00') ioctl$SIOCPNADDRESOURCE(r4, 0x89e0, &(0x7f0000001680)=0xf55e) sendmmsg$unix(r3, &(0x7f0000001640), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000016c0)=0x6) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000001740)={0x36a, 0x78, 0x578, 0x0, 0xa, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x1, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x1, 0x7, 0x5f, 0x202, 0x1, 0xc}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x88dc, 0x20000, 0x0, 0xb}, &(0x7f0000000080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5de, 0x10000, 0x3, 0xf7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd51e, 0x4, 0x3, 0x56}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x70fe, 0x80, 0x2, 0x57}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x381e, 0x80, 0x2, 0x377}}], 0x4, &(0x7f0000001300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x3, 0x718, 0x0, &(0x7f0000000300)=@buf_1k="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"}}, &(0x7f0000001380)) mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x2, 0x110, r6, 0x0) 1m11.634025432s ago: executing program 3 (id=53): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, 0xffffffffffffffff, 0x852ac000) r0 = dup(0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x19f6, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000040)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/4098, 0x1002}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 1m11.551834855s ago: executing program 3 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./gadget\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/dummy_udc\x00', 0x2, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000c80)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000cc0)={0x8, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0xfffc}]}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xbdf) 1m11.551175074s ago: executing program 3 (id=57): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r0, 0x0, 0x800) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r1, &(0x7f00000001c0)='\x00', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000001440)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000014c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001540), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000015c0)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0080ffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000046147a75eb46cf9973b059210000000000000000000000000000000000000000000000003ea4ea4525f5cb3345593d41868f55468ae65ce6bd88d4c8409efb58335065b87ed47e09a47d9daa2160263dd01fdfbd49b73c17b35d9407ad325ecd356596f933d617e9b143f341d8b484af743f64afd97f000000009cbb53d4c2e88733d3126649cf"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xa, 0x17, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000037fd42875692de552285f3d459", @ANYRES64=r0, @ANYBLOB="0000000000000000b702000004070000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000006209000706000000bf91000000000000b5020d96e9f553b1dbeba473840000000000008500000085000000b700000000"], &(0x7f0000001800)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x2000) syz_open_procfs$pagemap(0x0, &(0x7f0000001840)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 1m11.305777049s ago: executing program 3 (id=63): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10a1893ba33115b4}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b40000003e0794c8969ae4923b1ed9728bf3231f290c6642b5ec5465be3881d9b3ea898de713f9734705f62537aab8d3c2a7c60f579b87eb9cc2eb91a159742d9148e55b9878a68789820a1b5ee839f9e85a6ce1b72ac6658282f797a3be348bd97686afd43098590a50162bebbb6737a5c3124aaa9074a5c290216ba5cffc54e21191690b761776f663", @ANYRES16=r1, @ANYBLOB="080025bd7000fcdbdf250b00000014000280080002000900000008000200020000008c00068008000600020000004700040067636d28616573290000000000000000000000000000000000000000000000001f0000009be9b55178a70fcd59f3c2430545391355a16e9fd13acb69722575b9c152ee0036000300c951ad217565f10261b9ce9c73c1dad7fae143d78c668caa2e2ea30d4636f7c85699eaabdebe1cef35969abea1302bbd89110000"], 0xb4}}, 0x4008000) unshare(0x20000400) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000001700)={0x0, 0x1ae7, 0x0, 0x2, 0x151}, &(0x7f0000001780)=0x0, &(0x7f00000017c0)=0x0, &(0x7f0000001800)=0x0) r6 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x1, 0x10, 0x5, 0xc, 0x0, 0xa6700}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000240)={r7, 0x148}, &(0x7f0000000280)=0x8) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000001840)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000018c0)=@new_dev={0x4, 0x2e3, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc3}}}, &(0x7f0000001900)) 1m9.623244414s ago: executing program 0 (id=84): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xd, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f0000000280)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x6000) 1m8.91945939s ago: executing program 0 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x6b4, 0x0) recvmmsg(r1, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x301041, 0x41) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r4, r5, 0x8, 0x0, @void}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) 1m7.862493768s ago: executing program 0 (id=102): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1829008}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140f, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x44840}, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @local}, {0x2, 0x4e24, @multicast1}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0x401, 0x40000000, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0x4, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}]}}]}, 0x44}}, 0x20000060) 1m7.809644943s ago: executing program 0 (id=104): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', 0x844, &(0x7f0000000200)=ANY=[], 0x1, 0x267, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x14b302, 0x8c) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x200800, &(0x7f0000000780)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_LSEEK(r0, &(0x7f00000036c0)={0x18, 0x0, 0x0, {0x10}}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x101042, 0x15) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x80800) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x2}, 0x8) r4 = io_uring_setup(0xf83, &(0x7f00000000c0)={0x0, 0xc472, 0x800, 0x1001ffff, 0x237}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000180)=[{0x0}], 0x1) r5 = io_uring_setup(0x6fa2, &(0x7f0000000200)={0x0, 0x41e28, 0x0, 0x4, 0x3d}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000280)=[r4], 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x3, 0x6}) pwrite64(r2, &(0x7f0000000600)='2', 0xfdef, 0xe7c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x143841, 0x114) write$FUSE_GETXATTR(r6, &(0x7f0000000680)={0x18, 0x0, 0x0, {0x3}}, 0x18) 1m7.605538769s ago: executing program 0 (id=105): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='mountstats\x00') writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)='2', 0x1}], 0x1) 1m7.274144261s ago: executing program 0 (id=108): shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 1m7.209149562s ago: executing program 32 (id=108): shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 55.989710877s ago: executing program 33 (id=63): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10a1893ba33115b4}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b40000003e0794c8969ae4923b1ed9728bf3231f290c6642b5ec5465be3881d9b3ea898de713f9734705f62537aab8d3c2a7c60f579b87eb9cc2eb91a159742d9148e55b9878a68789820a1b5ee839f9e85a6ce1b72ac6658282f797a3be348bd97686afd43098590a50162bebbb6737a5c3124aaa9074a5c290216ba5cffc54e21191690b761776f663", @ANYRES16=r1, @ANYBLOB="080025bd7000fcdbdf250b00000014000280080002000900000008000200020000008c00068008000600020000004700040067636d28616573290000000000000000000000000000000000000000000000001f0000009be9b55178a70fcd59f3c2430545391355a16e9fd13acb69722575b9c152ee0036000300c951ad217565f10261b9ce9c73c1dad7fae143d78c668caa2e2ea30d4636f7c85699eaabdebe1cef35969abea1302bbd89110000"], 0xb4}}, 0x4008000) unshare(0x20000400) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000001700)={0x0, 0x1ae7, 0x0, 0x2, 0x151}, &(0x7f0000001780)=0x0, &(0x7f00000017c0)=0x0, &(0x7f0000001800)=0x0) r6 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x1, 0x10, 0x5, 0xc, 0x0, 0xa6700}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000240)={r7, 0x148}, &(0x7f0000000280)=0x8) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000001840)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000018c0)=@new_dev={0x4, 0x2e3, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc3}}}, &(0x7f0000001900)) 31.085517046s ago: executing program 1 (id=383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000fc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x2, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x2, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r3 = socket(0x840000000002, 0x3, 0xff) syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/ipc\x00') syz_open_procfs(0x0, &(0x7f0000000740)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000008c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000980)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000a00), 0x651, 0x0) socket$igmp(0x2, 0x3, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000a40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a80)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x19, 0x0, &(0x7f0000000ac0)) r9 = syz_open_procfs(0x0, &(0x7f0000000780)='map_files\x00') readlinkat(r9, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)=""/76, 0x4c) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000540)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x32}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0xc8d0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000380)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x800000000000002, 0x0) 30.706025168s ago: executing program 1 (id=385): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x370, 0x370, 0x0, 0xd0, 0x370, 0x450, 0x450, 0x450, 0x450, 0x280, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x24, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 30.672226715s ago: executing program 1 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) setrlimit(0x5, &(0x7f0000004300)={0x7, 0x3}) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000480)=""/204, 0xcc}, {&(0x7f0000000580)=""/66, 0x42}, {&(0x7f0000000600)=""/4106, 0x100a}, {&(0x7f0000001640)=""/138, 0x8a}], 0x5}, 0x44541}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001740)=""/238, 0xee}, {&(0x7f0000001840)=""/198, 0xc6}, {&(0x7f0000001940)=""/4109, 0x100d}, {&(0x7f0000002980)=""/243, 0xf3}], 0x4}, 0x1}], 0x2, 0x40002000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004280)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x50}}, 0x24000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x100, 0x0) r2 = syz_usb_connect$uac3(0x2, 0x120, &(0x7f0000002a80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x86a, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10e, 0x3, 0x1, 0x3, 0x50, 0x3c, {0x8, 0xb, 0x1, 0x2, 0x1, 0x22, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x45, 0x3}, [@power_domain={0x9, 0x24, 0x10, 0x6, 0x9, 0xffff, 0xfb}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x200, 0x1, 0x8, 0xd173, 0x9, 0x0, 0x8, 0xb7}, @mixer_unit={0x7, 0x24, 0x5, 0x3, 0x81, 'S^'}, @feature_unit={0x11, 0x24, 0x7, 0x4, 0x2, [0xa, 0x8, 0x10]}, @cluster_info_segment={0x6, 0x20, 0x4, 0x8e, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0x800, 0x2, 0x3, 0xfb, 0x8, 0x8, 0xe}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7fff, 0x3, 0x9}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0x9, 0x9, "52061d", "ad"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x0, 0x7, {0xa, 0x25, 0x25, 0x4, 0x6, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9f, 0x1, 0x5, 0x1, "a6c70a", "bf64"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0x2, 0x7, 'g'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0xfc, 0x6, "d939913b"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x2, 0x5, 0x1, "9fe49ff2cc"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xaa, 0x5b, 0x3, 0x7f, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x9a, 0x1, {0xa, 0x25, 0x25, 0x3e57, 0x4, 0x3ff}}}}}}}}]}}, &(0x7f0000003280)={0xa, &(0x7f0000002bc0)={0xa, 0x6, 0x250, 0x93, 0x5, 0x10, 0x8, 0x9}, 0x30, &(0x7f0000000180)={0x5, 0xf, 0x30, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x6, 0x0, 0xba, 0xff, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x6, 0xf00f, 0x909}, @ss_container_id={0x14, 0x10, 0x4, 0x32, "8e96557bab95016f803e79dedcff50d1"}]}, 0x9, [{0x4, &(0x7f0000002c40)=@lang_id={0x4, 0x3, 0x414}}, {0xec, &(0x7f0000002c80)=@string={0xec, 0x3, "d847b6002991ac4adf594288e2a5da612abbb46ef051e4a2edebe1aeb77a68a0b12d95d835c1c233554adf9bbed4454b1894517416f016a9e541eace28088d56dd23443f85401fcde3e843fe35bd7aea965dfce783dd26ef365f8afc120fa649a4993a8aac8a3998a365af4a73f98fe702a73269968edb09a9ee270f54fa4640a637e7a40335ac3751bb30811f854ecb79ae363351946f7713de2b35dbb4c4d0ef239ea2ee09d00e4be57b6feee9109bc6b2b627315123c89636abc7cd17227a61db3f6b9196047da9b99ff3f78d9c97a17c22e4c861460cd6d3ca686f4e8b11a596d43535af0da0b30d"}}, {0x75, &(0x7f0000003c00)=ANY=[@ANYRES32]}, {0xc6, &(0x7f0000002e00)=@string={0xc6, 0x3, "d355e7f29a38c48e4e99a195f7b54856bcd02e23088dddac235e948c0927554bdb0fe9a88d8e1adb9336637b4c4b4e4a5bb3d73741975fa335956a1e2b86a2e5cc323bd9576ac8a4d1fa03b28cf74550cdccb9679119c5907d7921210e6ff1eb8bc8b6c8501c0de6fe85c75677f284a7a53ae9c5a856f26c44f12a69fb7f34b2fc8c271bdaf7369eae0b06df935ee87c84d7f25744a7877b8e04610de8a68f95493ea5ffec9ed8d5ae672d38347ee89a1947048146f3d3c0790e368ac1872b5a02404658"}}, {0xf5, &(0x7f0000002f00)=@string={0xf5, 0x3, "7c005b294bd4d9411f35d365fb9eb6d54ef8e2a3e872af4dcbe15900fc9ebc623af6c51804f3f7d09949fc6a6625550db0ce2a4a2f815c1f36348ffc480560094c3151845776068ce97642d2d349f03ef6ee4acf2acfeb0918f0267902a34bb2f16f7728de7d3e466284f42a935cb62269ea1386c08bd18f692897bf7a3fcd1d1d202cc71a12097f0cbb689a64547cd84b1a9f9ded16a3cf8a66701e17dc8cbf20647cc85478057fc69472a4f05f71072d3e2bfe3d1bf5ba53dd8ba4f62a7677ba0f6bd89f2fd1c821739f05470fd2ea627ffa2a7e354cf14c9223d8d3b395718b2aca14c40fd7e0b911d5dcaab46cf0f728c9"}}, {0xde, &(0x7f0000003180)=@string={0xde, 0x3, "7f9e97f1be2039ea615c10afb2ada54f8da10f171923d7da218c8ea5f1fe810a894fbfe8e1d7df1e08040d872a3bf389d50c21fc73c28b52301ea0b3f08abd5e53567714c3b36203217a77ef41f5334b4dd8ff4e3df4218b882c294c99f223488f700cc212e4f51c4f8068f172337f0b360d9d412e34f65e03fe2b976bd0de241b264289a616e40a61746c6295b94e15bb3f0c2e133ddeb09d44e6c234dd5517ddd5f4ad03d328e2ca72ecaf9653356c60a0b88978acf488b01eb4f185efa9c3e18eaf3dff330a3b043d90ba784a8b66516d2b14cd3c55ceab0d252d"}}, {0x4, &(0x7f0000003100)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000003140)=@lang_id={0x4, 0x3, 0x3009}}, {0xdf, &(0x7f0000003c40)=@string={0xdf, 0x3, "b9885d991413a52f53867aab32e1584c19c82af1105976892c926d3950e6fe8e6141172c885e5aac0c661b70d0ca89d213b220e9119a6000984bd8e86e7358789b5bf95bb787237c2fb001b1c9218d4d8d1e57bea8c62108898753986dcc6568c54472beb09bcb6a47630cdae5e3ccd617669d3dccf15898fac3449b5ec7aebd6423acf0cb6bf2ba2f9eb79117166d4cf0cf0977199de7fcce956a1aaae3e2015318c6814dc367d8b9bdbbda663e3f8551c6328c1cf7a67a2095dccf032eef256682dad05be92ca4ef51177b041c1ad07904ea8e0c0972eccc39ec48aa"}}]}) syz_usb_control_io(r2, &(0x7f0000003580)={0x2c, &(0x7f0000003000)=ANY=[@ANYBLOB="00247b0000007be010812e2511907d5764786776a0518934c1f61b14c98569bfc8a8a2bdbb5cf1b59b92452d53c48a8b603ebf5f1adb03aa79c0b8ce7201e344d80826bdeb6f9dd84b21841aeae01ecfe6d6d77bdf7fa7ab42e4e88ecb9d7d8b587a2a2ead2862554f887ef2f60f8c191995a2e9808ddf62af5718ae2f5ca4377bb982e7ae"], &(0x7f0000003400)={0x0, 0x3, 0x83, @string={0x83, 0x3, "7856b428ae25499dcea3d078cf8e47cd6eb8d9f813da60c91f227639adb3cf59bd1b053579e66052cf8d6d311fe0acc56263454b3f0dfd98a42614261a2e5c3df373520e162aab776912e841ab2fef5972744c2292f566827afba4a5b700acad28491667f028f0b5654ba11151e6d0c91ad75adda818276dbda6b7d28f6dc99ec2"}}, &(0x7f00000034c0)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x7, 0x8}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x83, 0x5, 0x6d, 0x100, 0x5}]}}, &(0x7f0000003500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x4, 0x9, "22b0ff94", "b2bd0e87"}}, &(0x7f0000003540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0xb, 0x1, 0x9, 0x401, 0x8df8}}}, &(0x7f0000003a40)={0x84, &(0x7f00000035c0)={0x20, 0x9, 0x8a, "7bb037933f5e125641cc8b19fdecfb2a1fbac211952242b135b7602ed59ee8764cbc1d33d1a9cd52b0f164a3fdb5c4baadaf9b7ab39c29a25b389680d4da4642d45a4b4d8514d326498bb3c0d0c258db13f567e9535f745ce6ae3914e0f45ca8207b40c8e2fde73766c829e61f31c555ba754c3ca918ac80c39ab0dd89b58d42057118a8498195948f77"}, &(0x7f0000003680)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000036c0)={0x0, 0x8, 0x1}, &(0x7f0000003700)={0x20, 0x0, 0x4, {0x5dbd6339e2e7049b, 0x2}}, &(0x7f0000003b00)=ANY=[@ANYBLOB="5393000000de7d98d2340000000080ff47b1146c3355f4ab5bd0391b120e09ddb7c6e992e93f7b06fb408f5b38f09018d86d1eaf94464546ab1c16bd48a59132954834f58ac079ad67562f732754bb6bf3e736a41c08494d05dce1decd092614dae02f69a6331cf4880bbf162e16251c3475c00a9208da8331ec06a601c35cfcedd558a2a2565e7324848f3cf2dcea44e4fb0879c208b5dc9658216804f52459a2e3fd9c08602dfcf47bac1493531513f6c9d2a799a5693fd4f0089c76ba00"/206], &(0x7f0000003780)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000037c0)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000003800)={0x40, 0xb, 0x2, 'C\a'}, &(0x7f0000003840)={0x40, 0xf, 0x2, 0xaa}, &(0x7f0000003880)={0x40, 0x13, 0x6, @local}, &(0x7f00000038c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000003900)={0x40, 0x19, 0x2, "0190"}, &(0x7f0000003940)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000003980)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000039c0)={0x40, 0x1e, 0x1}, &(0x7f0000003a00)={0x40, 0x21, 0x1, 0x2d}}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000004380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000043c0)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000004400)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000004440)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000044c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000004540), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000004580)=0x80000001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r4, &(0x7f00000045c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004600), 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) 26.965943265s ago: executing program 1 (id=407): syz_mount_image$ext4(&(0x7f0000000ec0)='ext2\x00', &(0x7f0000000f00)='./proc\x00', 0x2200002, &(0x7f00000000c0)={[{@norecovery}, {}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@quota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x100000000000080}}, {@delalloc}, {@nogrpid}, {@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x24}}]}, 0x1, 0x572, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001580)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000015c0)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000001600)='./bus\x00', &(0x7f0000001640), 0x8, &(0x7f0000001680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) chdir(&(0x7f00000016c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x1cb842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000004c0)="b800000500000000", &(0x7f0000000500)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000540)=ANY=[@ANYRES8=r3, @ANYRESDEC=r3, @ANYRESOCT], 0x41, 0x3a2, &(0x7f0000000580)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x133042, 0x19) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) bind$packet(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000009c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x686, 0x0, 0x0, 0x0, @in6={0xa, 0x4e1e, 0xd9f0, @private0}, @in6={0xa, 0x4e23, 0xfffff78b, @local, 0x3}}}, 0x118) io_setup(0x20fe, &(0x7f0000000dc0)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)="6a89bae78ce5bacc536afc85431333e590e18a0f67592a6048487a69ed0d532b96347d6e6e1fa3c2975fe5a516f8f14871252a1706007d5f201f7f39c211f6", 0x3f, 0x600, 0x0, 0x2}]) 26.554582153s ago: executing program 1 (id=415): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f00000003c0)=[@dead_binder_done]}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0xbd, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x3}, 0x1c) bind$inet6(r2, &(0x7f0000000100)={0xa, 0xe64, 0xb, @empty, 0x3}, 0x1c) syz_emit_ethernet(0xfc1, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) 24.365629604s ago: executing program 1 (id=421): r0 = socket$inet6(0xa, 0x80802, 0x0) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x1, @mcast1, 0x2}, 0x1c) add_key(&(0x7f00000002c0)='asymmetric\x00', 0x0, &(0x7f0000000680)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e207365ec662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a615f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020700301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a140ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9cdca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a022541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b300", 0x559, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xb, 0x3, "91abc12404cf37"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x88}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200), 0x1}}], 0x3, 0x1c000) shutdown(r0, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x1}) ppoll(&(0x7f0000000240)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x6ed6, &(0x7f00000000c0)={0x0, 0xbf57, 0x40000, 0x2, 0x26e}) r4 = add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, &(0x7f00000004c0)="3081d73081ba020101300d06092a864886f70d01010b0500300d310b3009060355040313024341301e170d3230303130313030303030305a170d3330303130313030303030305a300f310d300b06035504031304557365723066301f06082a85030701010101301306072a85030202230106082af30307010112020343000440d5a777f9262f8c3dcce31f01d95e8cf4ecb50034f5516d3b904b23286f03c8366160001000000b954e544f152105d8526644317e5dc5d126005f60d8f0c727fc300d06092a864886f70d01010b05000309000102030405060708", 0xda, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f00000005c0)='enc=raw hash=streebog256\x00', 0x0) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc2}, &(0x7f0000000400)={0x0, "940a9a368c1f0ad8bdeba472bdf979a50f2170ec76b8a7fd49944ec2bf974c4dfa78e7b98d4e3cbea3c37da77aa96a9f90969861481f22c1eeec876a47638eb4", 0x28}, 0x48, r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000d40)=0x3) ioctl$TIOCSLCKTRMIOS(r5, 0x80047437, &(0x7f0000000d80)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000640)={0x28, 0x0, 0x0, r3, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) 23.192826931s ago: executing program 34 (id=421): r0 = socket$inet6(0xa, 0x80802, 0x0) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x1, @mcast1, 0x2}, 0x1c) add_key(&(0x7f00000002c0)='asymmetric\x00', 0x0, &(0x7f0000000680)="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", 0x559, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xb, 0x3, "91abc12404cf37"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x88}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200), 0x1}}], 0x3, 0x1c000) shutdown(r0, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x1}) ppoll(&(0x7f0000000240)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x6ed6, &(0x7f00000000c0)={0x0, 0xbf57, 0x40000, 0x2, 0x26e}) r4 = add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, &(0x7f00000004c0)="3081d73081ba020101300d06092a864886f70d01010b0500300d310b3009060355040313024341301e170d3230303130313030303030305a170d3330303130313030303030305a300f310d300b06035504031304557365723066301f06082a85030701010101301306072a85030202230106082af30307010112020343000440d5a777f9262f8c3dcce31f01d95e8cf4ecb50034f5516d3b904b23286f03c8366160001000000b954e544f152105d8526644317e5dc5d126005f60d8f0c727fc300d06092a864886f70d01010b05000309000102030405060708", 0xda, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f00000005c0)='enc=raw hash=streebog256\x00', 0x0) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc2}, &(0x7f0000000400)={0x0, "940a9a368c1f0ad8bdeba472bdf979a50f2170ec76b8a7fd49944ec2bf974c4dfa78e7b98d4e3cbea3c37da77aa96a9f90969861481f22c1eeec876a47638eb4", 0x28}, 0x48, r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000d40)=0x3) ioctl$TIOCSLCKTRMIOS(r5, 0x80047437, &(0x7f0000000d80)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000640)={0x28, 0x0, 0x0, r3, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) 6.062056149s ago: executing program 2 (id=536): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f0000000040)=0x51) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb4, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x81) openat$dir(0xffffffffffffff9c, &(0x7f0000001840)='.\x00', 0x800, 0x41) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_MARK={0x8}, @CTA_NAT_SRC={0x30, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x2, 0x9, 0xfffffffb, 0xfffffffc]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x7, 0xf4b3, 0x4]}, @CTA_TUPLE_MASTER={0x1c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffc}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x7, 0x7, 0x5, 0x6, 0xfffffffd]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc0}, 0x80080) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='100', 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000440)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000004c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000500)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) syz_emit_ethernet(0x32, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a538ae464632", @val={@val={0x88a8, 0x3}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000540), 0x4) sendto$inet(r2, &(0x7f0000000580), 0xffffffffffffff94, 0xb, 0x0, 0x0) 5.059878733s ago: executing program 2 (id=544): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 4.758236999s ago: executing program 2 (id=545): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x173) (async) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='14', 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth/file0\x00', 0x9902) 4.597926063s ago: executing program 2 (id=547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000880)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000900)={{&(0x7f00001fa000/0x3000)=nil, 0x3000}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x48, r3, 0xb97534d5fe9704cf, 0x1, 0xffffffff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7fc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x80}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000400)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-7,shortname=win95,shortname=win95,sys_immutable,shortname=winnt,shortname=winnt,uni_xlate=1,check=normal,codepage=862,iocharset=cp932,nonumtail=0,rodir\x00\x00`\x00\x00\x00\x00\x00et=cp936,shortname=win95,utf8=0,\x00'], 0x2, 0x289, &(0x7f0000000500)="$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") syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f0000000880)) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000c80)=0x100000001, 0x76dc) connect$inet6(r10, &(0x7f0000000cc0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000d00), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000d40)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) splice(r10, 0x0, r9, 0x0, 0x2, 0x0) setsockopt$llc_int(r9, 0x10c, 0x4, &(0x7f0000000d80)=0x1, 0x4) ioctl$VIDIOC_QUERYCTRL(r8, 0xc0445624, &(0x7f0000000980)={0x9, 0x4, "5e51db9ba690097207b1af96dd19660d1be24d2138bb4d1a0461b18613b4042f", 0x8, 0x0, 0x6, 0x2, 0x200}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000a00)={{&(0x7f00001fa000/0x3000)=nil, 0x3000}, 0xbc1dfa9fe732672b}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x5, &(0x7f0000000b00)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8001}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r11, 0x0, 0xe, 0x0, &(0x7f0000000c00)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r7, @ANYBLOB="5c005a80140001800500"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.19808309s ago: executing program 7 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000640), 0x6b4, 0x0) recvmmsg(r0, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x301041, 0x41) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r3, r4, 0x8, 0x0, @void}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) 3.389909639s ago: executing program 5 (id=558): socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x81, 0xffffffff}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) write(r0, &(0x7f0000000800)='0', 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(0x0, r2) connect$inet(r1, 0x0, 0x0) mkdirat(0xffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x800004, 0x0) r4 = openat(0xffffff9c, &(0x7f00000008c0)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r4, &(0x7f0000000900)='zstd', 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x200008, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="5209e709efe40d1cd056a9905b3419e8d8a129f17deab3bb577a23b8"], 0x1, 0x392, &(0x7f0000000b00)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_crypto(0x10, 0x3, 0x15) setuid(0xee01) sendmsg$nl_crypto(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000f80)='.\x00', 0x0, 0x10) ioctl$FITRIM(r6, 0xc0185879, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x89901) move_mount(r7, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 3.214007719s ago: executing program 4 (id=559): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000100)="$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") prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='cmdline\x00') preadv(r2, &(0x7f0000000a00)=[{&(0x7f0000000a40)=""/4115, 0x1013}], 0x1, 0x16, 0xfffffff9) 2.94123624s ago: executing program 5 (id=561): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2a0471a, &(0x7f0000000080), 0x82, 0x48f, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20842, 0x63) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000f40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002f80)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000003000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000050c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_LSEEK(r0, &(0x7f0000009940)={0x18, 0x0, r2, {0x8001}}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000005100)='./file0\x00', 0x22401, 0x0) syz_fuse_handle_req(r1, &(0x7f0000005140)="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", 0x2000, &(0x7f0000007140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000007200)={0x18, 0xfffffffffffffff5, 0x4001, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000009a00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r5, &(0x7f000000ba40)={0x90, 0x865488442d6c2e91, r6, {0x4, 0x3, 0x3d, 0x9, 0x5, 0x8, {0x4, 0x1, 0x3, 0x6, 0x2, 0x7, 0xfffffffa, 0x9, 0xc, 0x4000, 0x6, r3, r4, 0x9000000, 0x3bf}}}, 0x90) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000009380)='./file0\x00', 0xc08700, &(0x7f00000093c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@grpjquota}, {@noinit_itable}, {@test_dummy_encryption_v1}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@inlinecrypt}]}, 0x3, 0x465, &(0x7f00000094c0)="$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") fallocate(r5, 0x11, 0x460e, 0x40003) syz_fuse_handle_req(r1, &(0x7f0000007240)="602624a337563d2c35d2a004e7b823b146b7a01ee93fc11e9ee93e8ed53c781bc65d0f1485acc7296e9983502c7e3d55199ebd65b81c9315ffdaf6f819ca591f2790327aa802fbdfe7b91d27f5b33e140ce2a6579e75e1cbe781838909ee9dd88b37f31bafe4e15f1dc578d23d21351cdb11b2ad0eb580ef57554b0b335ed0fc8956319d5f2ef00832fc4f2c8b424ba1ca2cfe05a78726ae675d5cf3be9f30cf285f31627c58475721378f6d6e303dced301afa2728c8342eea7c809c91097ffccaac4cec719857c7e98e7b24340cbe27d597f254cc71323e20d4c66c5e7dfa1bdffad627bf2c2eb7f8c13ec98f0b817e3d71bf576d23217e7aa73df931ab1a8b9a71b44795b32de112e057641805287621b8562c5bffd6fbe98f6619447f88e0652163dc8df31f9aa2df295c308f93d2942be643f266b68548bf4d1b9d517d1fcf5ac3a029721d78a059c3db22d8216b16f1193d8bb102012605aad22adc66a4ede7542be78af4b51c42737daeae34c2f218333076c3aa5c7490cc58d636eb97da1d2a24ee923e594432228ccc8eff1f6702e774ee840c694224217be3a27ac0b12c6951308779e44fd0e388b7c915e035c3a915ed971883c0ccc11ed62375b1784bc8ea07542886eab92a0dfbf3295d657a4f543b037eff99dd43cf0f57b6cd7b2f46c2c7a1d08d85a07bb3904d4191cf123f938ee073f825eca2fd3fa12dd3052a40b1e215c14424eac522f1329c349cd014630daf91a8db699231c079f80f4eb6ef798adfabbb1f0760810b7d9d700b67774344fd82d0114ffd5f7be990bac80f0196f731818270a7f8466cccb0bbed605e6e23dd61349e916e846f3b2654165465e0c22eefd5f817f974e359052fd735205a9aa3f3608e0cf95a83e4a993944cab987573b068abee1fe23bf8b3c3cf226e8168229ead67949c8277fb24937cbfd4e338fb26a640bf4d45e1fc886172729541c95f678e97640388e4eb4de0a33237e136dc931ca43216499deb9b6c5feafbcbcec07f404cbbe587a8540506ef883f2bf6faf3c9780c382a34d516f2b77e3c3948bab808431a15fdc709441874d2ff1cd399daab10ee20d1e7ac21ba741eaa3d8c9e62bdb5ce529d1c7fadb068a99e3c48a591e6655cabd052a530546dbcb0fb5975b5c37a3b261889ccac56ff06f8e580b6acea4d34616bca231799fc63299d2168f5d92823d5e9595d2424c3e288d48fec238d809e786a6dfe913f9895dd5655f392cc63eb379417b272516056c8f2feb69a3752f4c37ea34331c520e5c9bb67d03750821e0b989295bc8ee69743c9a8693bcc3928a69da87d9606ce591679c1204f428ddbb40262247ff60010a75843e192a8055b0e500d75a796b6ea1dcfcb43f6b80b36706f9dc01e1838eeea1b22c1a7f43ec0c84ed9dc7580ea81f30fdd2354550a0f762c7a05b8afba70941c7f1c53dde5da32a9be83da62fea848b0851f52c4a26516a7bc90d63fa66747f7a2f6e83f82ca46e1af4aab014577fdc94fb7a52bb3a91bab281962bb83b47f789d29f33b73f5feb665cb6e7b793e9a77d5f4bed2d6e031a11ce8062cc43d250bb2f2bd1ac3ed56c71be581b104d845968421950ef712c048d4560deff6780f6825f1aea1c3c46c3301a5327dc8d79a1df07196ab8740443f6833fdf9d4327cb0fce962b8088a547865435199ef450577a7099dca6da7ad15c8dec1bc5b2449e8a8b106376a8740975b6754472b306b31fc374210b50ea59244a7194be3627293437bac92a62b28bc584183dd4a9760523db17f1f98cb53303a0e7ff240cf653bfaf3c9a50447456828f2773b224fc26d7be69afb31e9632784fc748d9526998f9d183c0706b8bea493580d262a922306c8224724fb6851ef45b4418a898493e4c443811d37fbd340704f1c2a29cffdb8335532465599e3c5cfa9e3e34e684b7e11b09fcfc0f7c2195d4e927a4b6e7ab1aa15a072d9167a6336c995fa5a93148e4c16180a6b92e312ee14ba7b9cb77368dddbc528ece9dce5ffbe0c2184b1cd2ad4ad6bd3eff8bc0e627fddea6cfdcfae29e2c28adbde63bdc58978157c78298563ca871e58d6020b146a0e6a52387a9fec3b7d6a22922b6859ddc8b4adf42359f8867e9505787d48d5767c3a21ad2dda738adc3eb0a1b3bb5214d07a748e6108bb797da8484f68fbbdd0053e5b6749365c4a465770b849b79c98f8774bc9a8064f0e8ea0463049609d3c933b67b2f654c393d0374d77285c74a170360504bd55c8602685f5b3a73bcbcb453c1c8c84610828988b2cae184d5638fec69abddc6cc49723281088339259aa0ce28b9718c08d74754234d7af7eaa237e38e183661db88255233d100829add1caeb62586c6445e141dba3773e1b3c50c04e201c300082d117491edba032b16e2975502f29931f837032c41199d8f668ac922792098290e70d967822958f93574a7cfdc21eadb6f8d98e31291ee661125a04d26190a0919aed312e9ec52d1d8c4b819c480213db9f31f5e549b7e58cd370407c9e5e1ac3d632d4b9151a290ea3becfbf7a0608025943db4fe55531ca7f8c6062955fe1e75271a0dec15fa52ee0e023a7b70ba43d812f43aefbd28e07b67876adea4639c060267662663380ae088ebadd7556eb07478fbf4148e3e13a3bbd85fb71b88f64d1cd9cc27216314fcd6411166d2b58436f82551173afc89ede2792092516b5e8b97b8c0af38c32d6b74998db148a2e400fa7409b9f0f4dedef6c546ff63d20b7c70e79c786c7be6a487afa0e1dd47365c5176cd2f2917fdc954177edab9d3b53bf43313a863ae72798d2e800a243a3a83159d6bcf295cc493941a51012505ab3cef33511244c0cfb1b8df6bc45ca7e7c66b3ca2afb74c4eb19bdc0436962d6c1476311eea1581a555acddd3e4c3c880d96511ea32cd2efa276c93b37e90f69d29977acb151e0799bd8e9ee98dd353c1d64bca442fa29a972e7a59e17db11043aac2624bc2c34b80483f09a23cbb4b9b49caee728162185957e8303494e8e026484efc80eaa44a1b14f7a18ed34b814c9bb294e551c29a2da3844afdabe636a66d21fc8955ad44cf522098f550f79ea49b8f0c903234000e446fd5ead886a529e6685ad0442cadb09332b78d0f467454940422b27efc42de7591f15b7ea7aa90a88ed37e51694fb19e987cd1f066c1aafd8f18818da04e51aa5d1c47b76cffc25fd6496f6b51c33ae1424a3fd7c86964c059aa6bc5f3f786dcb69be02fc565d5f93bfc2a5db3e3623149f1def6d0c826a317a2733888a5e8301fcf56f37cecd6f0b2cd93148ac6636fcf3b6fd5686b652bc27a8c5d038518bf5edbc40398dc6c6fa95eb3318273725be7941d629fefc936ca21b7e7401c18b74c46d3881d6889ff771680c323f2029444e427d4f46906bb8603fbd63dc1f214dafdcbe4d169f773b6c081fa4b14883ca5bfc66e66290fb8615bec477e8ebf37da8a7699b394a5a703f532f36a3ee0972f1cad3f473619a2e15c6f5e8240516c6b916fa9973dc2716ed049d3e2113eb4b7a3572d332ce189cee0eab84df23c9318b80e235bc54d42b550c7b951cdb9c644ebcd8f595000bcd4df025f5f30a230a6884aa3a9d3e5d4a7f622d840da9c0e8c567cbe76fbc1266f092b5474b0adb648c7cb98ca85031ad72b4bd7e7fb1e765fa0d97b2eb670ec8d1d9cbc314e5af78a203d95da14a7545e138dd01ed336d19ecaa020aa7fa3d7ac4c0d6b7dd0240d38ebcab4900b033f68e80ccd69e671c595202a96509d42ef1061484df21e1a6e27f862b8cb92929d3552181addd77f80b2c48b9e37933f423efaf02394e2430395863c777ea9d4d21aad1eaf92ffd6fe407cc732e54fde6f957577950bc396c9c764b095206e7f689f624713a99e54480dfa64ba2ae3d8740553220c6d10b4c3ffb54f3e64d9990286583598fc1d455c2b0d0906c1ff60dc4e4582fbb96012289b2ec3533483366817a4242f0d10c3d4e834979118fd67e9f759751f1a1f4f2effe7d5246807a450faed5a95a3254f45331ab832597582933259b9ec2538a57c92a657457bf0164735fc88ed80ab2f9c42c9f806fe3ed401ffcad981c8a4afed6c7ef966857f79ded3d6a9c04ee0016eff17e29a7db6ae1be2dc21957351179194eb14a683268ef4bca476d214558eeaaa97cdca2330bd5518c2af1c9ff696dd5c77c7237aa303e9a0f12c7297073e2b97b3e8db6647e09ef3d2945ecbabb623441404e59b6f4e558516399a880e58daadef38a5fe2629056b9a3885d59bb22f45d8de362421578f35864e6d21f64c5982c623b5677392fb5e729fb426bc541fe7a2a7bc9a66a663d18138ec3a9af74145496e0b8a4d2518c58603a66f5e7c2f6657dd2fceda6ed6ba402d573059d407d15715095049907230e4a6a887dfb867fe423d14f7a7b837e3fa120bb9dffee9675f35b1957badeb26385ce81e22dcd6258c6da1d9e4137bf721a21a5b65b23c43e93c706247a6e8e7ff2a1d71fb974a36caafad2080d186462eb3089092c776326d67425df4121b125860e7206e4d180ae82ca7decb851c69a593ceefd6c734a7fd9772a31e7bb035ae5caa43bc157716616879e66987498700a0fe453d704b436eaa5483dd5e5fb7cd632bb9a37c80d210a7033791c45f5884b4155c541b65f4d07716ca6464958a25aae35064f9e1e0be3da15e3c45aca97c2132b3fdba949bafd48c0c78d53cd9491744b0d064bea5f5de8e7909b5c57a0d9aac44c4a68a2aca110812a74f7429dc4c9a67e51cd4bc209579e3ea4c16cb667da3c5cc3ce4740749ff135883067d66f5cc6bcb089a182bb26a35cce4c48f4b6769f8e1f7c40abd1d869f41ce0ad56c41bd3aab93b223180da5770797a0d64194ce43c040cb65eefd0922a21404dfff1ad940350e591c8ab3e232743b48189b46e192500b8fe202ee2be6b2cc84e642265c729fc334b3a0641df11cfc4f87df6faa8a452a148ff9fce52f95846a25a895134f5ccf053757152e7b11d11a032da07780478d2718a0daca34f4e6dc2207a0540bf33277dcbcf4f2bace4d0587b69741ea8f8f9094c99aa4e93fda397f3edbeddd6a21ffa89f946ffc5bcd5b5212e39f5309ab11aede9addb5a30f215fb2926f47f7f3ec630901362a693684fb774a6d90b43e9f9adfd5fdec75e6aa886a1aa45f19eb24861bc4e365babc5588b5522f67630d4de386363db85ae4a94a93f1d6c875115d1be8ecec600e17894a02c472160eb2640a38225eee077ac8857de91cadfc283e0da302f4b1dbdaf8fef20ad4b93e1f75b9523b495ddf5f6280758364046e26301c50a4c710f92ec4a6895d82c125db071def11c6649805e34fb2fde1a6229060df3fa61c65001ccb98d9b025a517d202739f9973238e2ce4736414c1e6cd60980f4548b995ba104f81b6d6902ad327d975742e9710357e83b4e360dbfdff06a6f1fc42800d7188623a1f3c202b4eb6646e53f4174c5aba8529b63d9d42cf8a7e2155e2d26e790267a514c7eec4635de8bdda1fcc9a8fffc0a9a55a9bd289951f5dd881343932228f26aa9ccea11aae87d35ba8d05c3bf7959e9ffa0300cb22b343c114b0476e205eb6e53f369a6e003b282df1fe93b0824166979d2c5733e36f849fb205493a1d452e0220afe9e9e09d4656a2164c35e1575ef4bf76a0c1d837a16bbc711542a4eeade7df7c46fb3231ee3ad64309de030431e846972d54d7ff202b9588cdfc39db25e48040a1e6edf54edc48c9bf7a05fbcab3b2f15bb370ef8c2681cce75ed6457fb945a711f15d429bfd702e6c623ff792a812482fed07db7ad99220b30c840563238eea202714959feee2721592dbae0acf328b7dfb53eebc848270281e75bdb2c92dbee5cff7a21efc1f17c65555256f4668d3e2f6db39a4b1cdd99ae894867641e7452a62192ae8f77c6b74146ca1cd02987a38c319572767caa42b2a964aa7823f4d0dabddd092de9ec953568f7f104854872e8e5b63442a631b68c9357eb9b0052de096d27d4e5a9d9f7a2fe5a6b049a780c8d40d67b80a3a07d1098a6a0db12426d9ae0fbbbdd8a975cbf9ebef829fbea7f257594e1ada26375121684e06f65b5ca6e0b9e138428a838f47c5be590f002d3cca25fb9851d1faa49a7203eed5876c2f7a292941c870dfac47c157ba031d491538227a923fc580289a26e680ef2ad36e0bf525ca8b9ff7b9b8f0d4b76004350db087f4d4450a4873315d7487bbf5d8a24ffdc68d56f7a6fe5502e821c68a138c456706e766b5b5d1d6a4d7db46d692a60ad050aed348dd0f196b496ad71ce44530080b272b788adcfc76a6c10923c4c8ef2787ab1b7e17ffe6afc000e520811d9729fe2574b10d4256be3593d83718eb8b76183e64f6fdaa678ade24144bd8b776b63055d08fd7d19cbf0c504d18489a765ce0c261db9743c99e290a08b524f2fc61537dd188f0e3eb58a2d4c1d55816f292817b0bd9bae7d462cee6a322b290894f3e81ea47d4bead8df4c179bee9161d676c523a671e2f86f1d1f7ae4b282e08b1ca95fe39852150356e3f99806445486a10b46883cf5f2b9e58cec6865828450a15515f146df3f29416b837a0a61cfaa6d6d01d0ec9c2782d28283aac508b133f8aec0e22df04d59a82a1666e9c05e98803045895221810ce377fed8e0680ade54a2940f3fcea931ecf6cf9c13d0c5ac5a7f9099d8e1db8aa8176f495a0bf1bdde40b2d8ca73674a361892da30551143a48fa458b7762987b2e7cfcab1a0fc6c51bca0c3d91e63fee01200b59763ad1a19f28d23c03eb3e3d8c0ee8c7510cb3cd83488d0607c1da1345ac4956c2d0cfccf3321c9bdc47736b68eb284903e77156d7abdf2641841c531b7fecd1034962069e981f89c103a4533d3e68f987be238420768d423927baf0ff821bd525d63ec46ea33e74057f0d3fb70dfd4172bb9e9784ebdb9fd5f0c77aa54e29232d38e1274257dbe3a3b5b9b1ed26b864dd7041f63f28a117b364357b1cfeafa6dccbb53d80525ceece26c52c5585bfb084d428631b42cad8bdbc3ff74e26aac1fd1175d3afd6c937acb5db68d62f712ecfed944e9aed045110c07b2d323d6ccc38f0bde16a3a02d38afc385dc52814412f4bb91b21aeb0fb5d4e076f5674538e5124df1673ee13e94caa528858d83cef9fa643dcc9caa05c180062e5fe9631ac8f40333a799fc7a406ed719a132bcdcb7359facef167e32ade3206a9ff412341348f5e89953ba2ddd1a90efb7730cbc4887aff925c6e28f65b5dc3b0a38a56b194fe1a04478251248502c5e4fb073740c721379142402b2f58f1d7af1379e35657644e20138fc49587aa5396604971dcb3b6871fa92d9eb0a25142ad7267e5a17bfad8ad487990c04639550673ca49d8d4e57c80d37f8ce20f1e5c346cef0524f5cc3e391884c69938e95b97c514ad02ea421c8a240fea362b9f49f2200ecf174ac9946b1eb7fcce1489eda3556ceabd584b2f48ce795ce2d86097bbff2c96b04719d4bc207943d2136d1c3eef4403590fff092940b4e20fd4e0c821f5519a79fcf96cead6d2682e79d1abe45cf22cd26cab1e1746a62b6eda7b91d32441ced31c889342c937f35b8d76ae3426fbec3d50fb547954a17833c31197101b828a41ff5a1b9fba2eaa2ce2999b50bf8c52a8bd47cc9e4cd48958e55f150b91455df91096ed2bc45edc0876cb5d409b3cc3e73dc8bb25ccf2b60519a3fd6f154c1b742616bd26b8c8b660b346a480ebdb616c609f7ff824d6bcc9e7012a55888f9f6fae12a9eb2312f392621c5e1441693078df9464c224f3249b8a006301e5ef38da3bcb6a5fe200f38eece4503718d872ad888cc0d393c0cfaf3249040aa10412c7880d89b09b2b672b089e8ded41bfdc1a85707defffeb52008f52646a659906006b84d2b90009eb8fc4af489f50667f6967904706d8da2479eef4fedd21c8bf64c22a8c8851497ab66b13d856fb3883fe1fd6a4b5f0793250a995e605a9798a3e612f11c868678bc5dd159aefe8577229e74236e46a5b8ac32c447f9ae7f039e1e8f182453e13788f4657fa29365e10d1530a65df93a889ba3a7c755c81be7ef8769b5250616ecf88af289f749fe011a4ef26a91994e0bf12be77f7480b428cf56a7ba3c67a76fa42cbade5255dc0d06790e6a4ec2c4e414b8339cc718e25bf87dd2eb57752e988ab46dd96c44b57cceb90c3eb148c81b196dfcc030000fd7aeea7603a094d238116e8874f78d4ebdde7ac048d5c2f270d764a65d2f9dc47e3d2e7c4a99674c5858be9ebea2a7f129cf043880ff7c8ea40172e0ea168ad207ec933fcfb66bed5a83902dc98534a0c8517b0f1725b01ae2b531703cfd78292e9ca18f392c42f344c45bec6d4d549add3993d6a59527c4a765fa6a6368f4182d16e22542d0db7d28a0494d829db8d13c2a58c0609c8ec6982530ad72a1e6a05312d5ae74d2e1686031631e9b19b586efccef3cb15a6f2daa293994638baf6292110fe0ac563473f0da1ac59c7b6d55dea4a3c3619ef9a03cee0a2e1b9766abbbae1fe7e11694b0857b717e07a68ae510cfc509853816908eea24f434cab1166cbf2014de9a4dc43e165dc84af7e9eff6ada8d27595edf0aec681712ddd808745b8bfa56f0b16e23b96f93a87914620cbfc3664b86ce8998610f8b4dedd01ab7edd8bcaee7f1f8bc792dfc7e45ba4120cd0756f3cf8f268e84da8207e73a585dd30e2439a10d8769d934f1a4f010965ead6e3a96e391af8134dc982330396f4fae3e1e10235a5b68da3b0fee4686f6c0ec39fe6a5a05e7dc4b79f893b54ba34c7785d0198f5a116620ed67e22d2556ed045103fe9d3da849d7adab17ee5b14e2ac5dfe05947d0d7d9f80a8343620126852095235ef2fbfd20339e62bf4aea70e3fd33bbe7c5703139315379c0af0d57b8c0eec635ea411d4c391348d3dfc272c498398a2e9b5f039909ecaeeb7eb8b220aba18ab677e859c55a0dcd4ccbbc02af4d55630edd3d4d94cb816fd383a99d8dbec719f421c00af6f3da9601a073922949cf11cc3d9b71243a7ed21113827e6a37e9ba8c27473a952585c8e41e3b8bb0e756790fc1cb2a7a46d62d280bc2535448013b295d13594df2399c49dcc577a319532e42c5757340d1ec8834eb04c0c40f1c72d08ec459c800849b157f3a6748a1f35fad019da90154e5591e6ff5729632876427591093cba37f036bab0b83fb81c4496c3cc71f48f957380ed3808e77beac8585711c884dd4527dec377a3e4d7755d7f42a70249d798120f0682c26ab4cbda448768c185669dec61bb75f506a9e6f53991752a15ebf57be628956a23fb3d4ead49dc8f93cc2ae402a8ae15ad3308c5de0eafbe923d02faa38aa218ab75300c6f2088d7a3baee9acf73a3f553bad96a82088d255767871e24c9c859461ee435459d2ce1a6b493eb39cc239ef3d9a5cc844c9fb8550e2fdd0c0cdfe322969b9cc0eedc279f10bc8040ab883080c03fd6036304f5ee0473cc13d900d9163d98e1b9b2b6efb844986cb553686839e4fca0af1f01a8bec97c878f6b9813747be0120589f7a75f6b97553dcb3e5d2b378862174ffcfae371acdce146510f65aef2b32828724ea6d127b9a4b95c88b6269afaecb2b379a2bfec346d65b9378f1dd6dfb88529834ec2d02bc75baace3aef84e56a9f98cfe272cd801a871162fa57ade5927639be02c2970c69413d771781f942e22b565a2e13745e1a22bb1768b6853db50dce82c1cc242dee5232b0577eb0ef88c7239b6ab8f18ba4bf481f8261a63cc9261a62e8e99c145b20f0f5a3c9b7871ffa8e6572447e81a3255846a8aef1503302d13b0df5eb03aac7cd0ad7f8eccc8a94c3b6735826b9b87a44610c6c32de191f63b3642caed4e61b12226eb32eb4a49269c9336031b97ded7a4e0bb77fa4622393abfb17260bc872245421e9e3700f223c9f4bcdcd6ad5f9f174a1ab4a3bf7e98491da070b717aae9dcb40fbe0d7e07f7fa75bc599ab07540569c8a8eec803d8f750faab099e8b600c2ec2ae53d0b0d160b9989c186111c7b2d3326265c65afba9d5891963043bcb3f511a179c44a85fe82e4d973517faa24a25f301495199f3f3db37743b532291c59feede13057f5c0f175959de343370149c652359f576f088a90207a553461ab54fc86957dfce3e512f4dde64823df08b13f0e01864d0fc8921329d28812a513b0679b173d05fe2c0647910ef8f8e4ce0787f08045cec126b677062f2f62c5b70971be5d7b4e7a745ba1bec4ad29daf74594153e97351d174107dc74b6b86a18c6e27b18304f001dbe8ba2bf43318a75647ebbd85a45feb49dbaf084d0d155e297135e1824d9efcde73964ed31e4a7a88b408d8dc9a89966f38ecf3314efe6fbc3f4dc5489de80481b51a77329809247480aaa2c1595aa779bf2430f2552c5024de0bbbc47d1657f68c4636f6454a8cdaa5000dcac46c1bad8eff7550d9d0562a014c8dfc36044d6d969a24a8a8b8dcc954bdc4bdcc8aa9df5eda2985a68fdd3f4e8be909c3950fc06a1cd088c0da587dafa7764ee95607fc53f1e4eacec47b68a295ea23fa8f2756b735a6fc43a3e669a3bdffef28de2d6482309d3ddee1c0fc37f730f88d2310aed61f62ee97b5757af2f9c122a0db01092ea3b701a6f38da41822f9da096ddf36e754fc48ef90dfe7351c1901b706c23ce9dda52f9efbe5b22d3fd8890f3823a1bd33d6c105885abf35de67bf9c6d02b042a04422ba395d9df668368c802cf360a2981dadae3c79bec8f7cd69aac07bb07dcd4082fb0b2e7996698d13d07b9646c58cf29ac74e1dc4c68955f6bc669be8d09451a770f3e8571aa0e0e4aa44ebc208539820572ed6bff2aa3a56ff0efb9d6842a4c23409c50b8b0311956d9deb6377faf28b966e41b172b0f1b064be3ee449847fd4c38b1aaa97c644baf6483e3649eb27fce5700fa15ca4df3bbdee83028d2b70fa1fd569855781d0056e84ee45bedc0ed1714ef65c615b50266e7eacb9b0dec5b534b16bc5435b50a0f0de2d31560c083a3f977ea194f93a5dab05f70169857d7e7341cbe661e68fea6199c726b5f9cc34bdeadb5e313644357622a48a121f25cced61f8f1da1bb61ca643b3bdcb2fea17c069aeb6df4952aade51a103dd69e4883450c9e7e5797bd15aac9c636aa8c1749ba361756453ef3273bcc572f6cdda00b025788ffaa70ca395b8440f7e1e6770f1eb7b9d60f37d7b6e41b324affc84e71ec7ea160db8f2d73e0490b1b7df753ccc587d45b52ec46af01516ab88a8ec48b8e7931fbc2d756fc6bbb4cb2b7f7ac41e5065c0aaa591082711f6cd35bf3c01cc3b9b10edeaa0153f0a5c1a9db1d419b2fb9ebe431c3f9d9018644c1fe761b5604f8e44e84b6413bb7d3e17d5806685908d2e1a6cb9aa39f7f8db81233bf7d6ffbaff21377e1c35edd25bae360f81c0215aaa6fa360d5b8c88ffe49565237ab167de71356622ed15887d07aaa740dbd8263dbebea9c3e57f8a84ce1618330910b4d0dc7d8d8245b18be888858dab2d3191337fe00", 0x2000, &(0x7f0000009240)={&(0x7f0000009300)={0x50, 0xffffffffffffffda, 0x3b, {0x7, 0x2d, 0x8, 0x1, 0xc, 0x7ff, 0x3, 0x36, 0x0, 0x0, 0x119, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) truncate(&(0x7f0000000f00)='./file1\x00', 0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009980)='/sys/power/pm_test', 0x141a82, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendfile(r7, r7, &(0x7f00000099c0)=0x7, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000980)='.\x00', 0x0, 0xf6) symlinkat(&(0x7f00000009c0)='./file0\x00', r8, &(0x7f0000000a00)='./file0\x00') 2.73787053s ago: executing program 6 (id=562): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0x2}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x1, 0x74b9, 0x7ff, 0x1}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, &(0x7f00000000c0)={r1, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r2, 0xb46}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x2, 0x7f}, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r1, 0x9}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x4, 0x8633, 0x10001, r4}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r0, 0x84, 0x85, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x81}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r6, 0xfffffffb, 0x20}, &(0x7f0000000400)=0xc) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r7, 0x84, 0x82, &(0x7f0000000440)={r4, 0x6}, 0x8) sendto$inet6(r3, &(0x7f0000000480)="074c95005b6b88e105141588e182f4e9bc0173aade1580e46485a91fffccb4209d7e8d5bf5c3f70c139d26241c1dbca410ed09bd8cfdb61ce1e7501fbb33fb5a2d4fc513707e531e90", 0x49, 0x2004c090, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'macvtap0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0x11, &(0x7f0000000500)=@raw=[@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], &(0x7f00000005c0)='GPL\x00', 0xc1, 0xcc, &(0x7f0000000600)=""/204, 0x41000, 0x32, '\x00', r8, @fallback=0x13, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x4, 0xc, 0x101, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780), 0x10, 0x6}, 0x94) setsockopt$inet_sctp_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000880)={0x2, 0x6, 0xd5, "acc9708f03beae394563e22a510fa9ee42a21f91c48cf8543b5014b38f0743060fe198b4ead2d8ded0c32dc0af99588517e94562d326a6be8ee476d334d14f01da20e5cc80a0de19b48be8a426f22c07301ede66819fef616e0e9f7894263a5719a647e37f2b6e1d438d0d935cd780bdde386be64051e526ac2641f39854670cf52f23cd069327a06873a0d798ba435bda841c6b8fdd8b5cb071acb2d33f6b8fd5be6b9ef3b4a44f201dbd3219f3abdc3caedb98d79d411fd416d93b46ff8112a6419a1e9b250a42ca2ecedf01b1407d1109f526e5"}, 0xdd) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000980)=0xfc4e, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f00000009c0)={0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c) setsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r7, 0x84, 0x85, &(0x7f0000000a00)={r5, @in={{0x2, 0x4e20, @private=0xa010101}}, 0x1000}, 0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000ac0)={r4, 0x101}, &(0x7f0000000b00)=0x8) recvfrom$x25(r0, &(0x7f0000000b40)=""/253, 0xfd, 0x40000000, &(0x7f0000000c40)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r9) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, r10, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x880) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000dc0)) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x58, r11, 0x2, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004004}, 0x2000c044) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000f80)={r4, @in={{0x2, 0x4e23, @empty}}, 0x2, 0x1, 0x4, 0x3, 0x0, 0x7ff, 0x1}, 0x9c) io_uring_enter(r0, 0x2f79, 0x623a, 0x80, &(0x7f0000001040)={[0x4]}, 0x8) 2.678691774s ago: executing program 5 (id=563): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001800010000000000f8dbdf25020000000001c80900270000060015000200000014001680100008800c000180050001"], 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000480)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x651, 0x0) tgkill(r1, r1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000340)) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x2840) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000080)={0x5, &(0x7f00000000c0)=[{0x1a, '\x00', @data=0x6, 0xffff}, {0x2e, '\x00', @data=0x8, 0xffff}, {0x34, '\x00', @st={0x4, [{0x3}, {0x0, @svalue=0xf}, {0x0, @svalue=0x921}, {0x3, @uvalue=0xfffffffffffffffc}]}, 0x80000}, {0x11, '\x00', @buffer={"7d92c52655500169a9cb11aa8bf9ebbf5c0849c22e48e0f51760516445c41b54", 0x20}, 0x1}, {0x39, '\x00', @st={0x4, [{0x2, @svalue=0x80000001}, {0x1, @uvalue=0x2}, {0x0, @uvalue=0x7a}, {0x1, @uvalue=0x9}]}, 0x4}]}) futex$unlock_wake_list64(0x0, 0xb, 0xfffffff7, 0x0, 0x0, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={0x0, 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) mmap(&(0x7f0000690000/0x1000)=nil, 0x1000, 0x3000007, 0x1010, 0xffffffffffffffff, 0xd6766000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x44084) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000540)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_get_params_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0x80207509, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x70, &(0x7f0000000b00)={0x70}}}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000600)=@assoc_value={0x0}, &(0x7f0000000640)=0x8) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000a80)=@assoc_value={r6, 0x37}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 2.607728184s ago: executing program 6 (id=564): bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @empty, 0x7}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e978000000000a0000000a00000000000000040004"], 0x1c}}, 0x0) 2.401865953s ago: executing program 4 (id=565): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="b700000000000b0007000000000000009500000000000000bdc5072e4c75223f007e6ca306000000000000009c91420b66f0980e90dc0a9900d145243692fe648adf4cbc1dc631c378820861eccfa60822e798d6526600eea6c33dd5b2a7762091bffe56a9440bf23deb4dc8947d2bafec88ae3708013fdc5b2a1dbc7d50fcb6d9a01d03491c35fee5ff00002e40db34dea1063eaf2e3d6959435775943a5a7090b1c08454a248811ed0850a0e16793732f7c9af95af00100000955133044fd041b55379c29cc8ca9e1e5223ceb6f2e4980e5be2d3f36ae968af01953b6e4b3aa3fe0c375b2e17019ccdf4b9b5caccc4722cf3e6cfa6567c5a8e01bf465f0a27e54911827c4fa432ca89bf5ac89effedbe12b66ce9643697ac0e12a966dcea592613f479d71eb2597dd9000000000000000000000000001d5bdafcd419016b45507fedc616a94a06268d9b21e956eabc"], &(0x7f0000000780)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000007c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 2.230251084s ago: executing program 4 (id=566): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000340)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000380)={0xa0000001}) epoll_pwait(r3, &(0x7f00000003c0)=[{}], 0x1, 0xff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001780)='./proc\x00', &(0x7f00000017c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000001840)='27', 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a3000"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000001c0)={0x0, 0x0}, 0x0) setns(0xc9, 0x0) r6 = socket(0x8, 0x2, 0x0) setsockopt(r6, 0x108, 0x42020054, &(0x7f0000001680)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000500000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) bind(r6, &(0x7f0000001700)=@generic={0x8, "ffff0000feff00"}, 0xc) connect$inet(r4, &(0x7f0000001a00)={0x2, 0x4e20, @broadcast}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={0xffffffffffffffff, 0x0, 0x1000, 0xcc, &(0x7f0000000400)="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", &(0x7f0000001400)=""/204, 0x270d, 0x0, 0x33, 0xa5, &(0x7f0000001500)="c947d5045fd54d0fdfea4476ba524542a14e115faf0e39dfece1f289b11c72aa1650bb17fff7343c0bbebbf7206aa355f31317", &(0x7f0000001540)="65e7ebe203c9dd1adcac413590e1f6a8633a5be5ecd2f3d469414f2ba013762e48dab2b488a11d94cda16ce382d81218ea941cee65ea9b97fdb1049f68ad2a4b3631700c6f9342cd87dcc380de47564e7881752030a79e75e92713ae3118b375bc9f80b86bb5a304b3b19564c6dd6e7eb789636d83e9c46a22f04fe00f4cd5cf705b31a3b9e37ce09b12eb4e205144aa28eb9693309dd3db381fa3dc10107ceb4e15496801", 0x2, 0x0, 0xfffffffb}, 0x50) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000001a40)=[{{&(0x7f0000001a80)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001b00)="92", 0x1}], 0x1}}], 0x1, 0x20000800) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000001b40)={0xec, 0x3, 0x3, 0x3, 0xbd, 0x3, 0x4, 0x4, 0x5, 0x2, 0xa0, 0x1f, 0x2, 0x4}, 0xe) r8 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x0, {0x7a}}, 0x14}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) 2.229778538s ago: executing program 7 (id=567): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) r0 = syz_create_resource$binfmt(0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @local}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000003c0)='wg0\x00', 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000400)='syz_tun\x00', 0x10) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @local}, 0x1c) 2.155948229s ago: executing program 7 (id=568): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000100)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpq5rp3Hj1KX+fKRNZrzj7Hw9O/bsjDcBDKyx7EcSsTkifouIkUb2xgJjjV/Xrpyb+evKuZkk6vU3/kzyclevnJspi5bP29TI1OtFfl2b4154O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TVbfzcX+5jh6ZMNY49Vt66keH6zftjSlk2ofK0JXKhGRNddQ3v9HohIblvaNxMuf9rVywJqq1+v1dp/PhfN14B6WRL9rAPRH+UGfXf+W2x0aetwVLh+OeP9gI/5rxdbYU420KDPUcn3bS2MRceT8319mW6zNPAQAwA2+OxwRz7Ub/6XxYFO5/xVrKKMR8f+IuC8i7o+IrRHxQERe9qGIeLjL47eukNw8/kkv3VZgK5SN/14o1raWxn//1PP4C6OVIrclj38oOXq8NreneE12x9C6LD+5zDG+f+nXzzvtax7/ZVt2/HIs2JBeqrZM0M1OL06vMuwllz+J2F5tiT+XRLmMk0TEtojY3tVfvn6FcfyZr3d0KnXr+JfRg3Wm+lcRTzfa/3y0xF9KOq5PTh48MLV/Yn3U5vZMlGfFzX7+5cLrnY6/qvh7IGv/ja3nf24p/tFkfcTCmbMn8vXahWhdIb6lC79/1vGa5nbP/+HkzTw9XDz24fTi4unJiOHk1Zsfn7r+3CJfbY5/96528af5e1wZ7SMRkZ3EOyPi0Yh4rKj74xHxRETsWib+H1988t3u419mVr6Hsvhnb9X+0dz+3ScqJ374tvv4S1n778tTu4tHVvL+t9IKrua1AwAAgP+KNP8OfJKOL6XTdHy88R3+rbExrc0vLD57dP6DU7ON78qPxlBaznSNNM2HThZzw2V+qiW/t5g3/qKyIc+Pz8zXZvsdPAy4TR36f+aPSr9rB6w592vB4NL/YXDp/zC49H8YXPo/DK52/f/jPtQDuPN8/sPg0v9hcOn/MLj0fxhIHe+NT1d1y7/EPZ+ItPtnVaOvdU66+McQd0+iutZ1Xtd2V7/fmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj3wAAAP//TonqKA==") prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='cmdline\x00') prlimit64(0x0, 0x8, 0x0, 0x0) preadv(r3, &(0x7f0000000a00)=[{&(0x7f0000000a40)=""/4115, 0x1013}], 0x1, 0x16, 0xfffffff9) 2.04990329s ago: executing program 6 (id=569): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f0000000040)=0x51) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb4, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x81) openat$dir(0xffffffffffffff9c, &(0x7f0000001840)='.\x00', 0x800, 0x41) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_MARK={0x8}, @CTA_NAT_SRC={0x30, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x2, 0x9, 0xfffffffb, 0xfffffffc]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x7, 0xf4b3, 0x4]}, @CTA_TUPLE_MASTER={0x1c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffc}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x7, 0x7, 0x5, 0x6, 0xfffffffd]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc0}, 0x80080) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='100', 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000440)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000004c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000500)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) syz_emit_ethernet(0x32, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a538ae464632", @val={@val={0x88a8, 0x3}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000540), 0x4) sendto$inet(r2, &(0x7f0000000580), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1.785867417s ago: executing program 5 (id=570): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000006c0)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x7, 0x80000000}, {0x6, 0x0, 0x4}]}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000700)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000740)={0x5, 0x3ff, 0x6, 0xa513, 0xf, "4ebdaed43bb30000000000d1188400"}) sendmsg(r5, &(0x7f0000000780)={0x0, 0x9521, &(0x7f00000007c0)=[{&(0x7f0000000800)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r6, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x80) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000001200)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000000a00)={0xb0, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x41}, 0x40049d4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000003d08f0ff0000000085000000b4000000b70000000000000095"], &(0x7f0000000680)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500e00080000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d3a6823a45f28fcb1d", 0xd8}], 0x1}, 0x40) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1.643855829s ago: executing program 6 (id=571): r0 = socket$inet(0x2, 0x2, 0x8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd02, &(0x7f0000000280)="0400000000000000000000003801") connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x115c, @loopback}, 0x1, 0x0, 0x1}}, 0x26) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000003c0)=0xf42, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000400)={0x3, &(0x7f0000000440)=[{0x20, 0x1, 0x35, 0xfffff034}, {0x20, 0x0, 0x0, 0x9ea}, {0x6}]}, 0x10) sendto$packet(r3, &(0x7f0000000480)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000500)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x80, 0x0) read(r6, &(0x7f0000000180), 0x1) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x280440e, &(0x7f00000005c0)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000000680)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000012c0)=0x1) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x141442, 0x40) fallocate(r7, 0x0, 0xfff, 0x9) 1.58192519s ago: executing program 2 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffb}, 0x3a, [0x8002, 0x401, 0xf, 0x8, 0x86, 0xc40, 0x3, 0x7f, 0xa6, 0x4d, 0x3, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x1, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0xacc7, 0x8, 0x8, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x40000004, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x3, 0x8, 0x8000, 0x1, 0x40], [0x10000006, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x7ff, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c3, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0xc, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0x1, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x9, 0xe, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x0, 0x9, 0x3, 0x4, 0x4100009, 0x6, 0x0, 0x3, 0xfffffff8, 0x48c93690, 0xe7c, 0x3], [0x7, 0x9, 0x7, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x9, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0x7, 0x5, 0xffffffff, 0x2, 0x400003, 0xc, 0x4, 0x6d01, 0x6, 0x2c, 0x800007, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x6, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x802, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077d, 0x2006, 0x1000007, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x7, 0x5, 0x2000000, 0xffff, 0x6, 0x80000000, 0xb9, 0xce6, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x4, 0xfffa, 0xa620, 0x1, 0x2, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80400000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x87e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x8, 0x226, 0x3, 0x5, 0x2, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x1, 0x5, 0x803, 0x1, 0x200, 0x30, 0xfff]}, 0x45c) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x6c}, 0x38) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r3) r4 = socket$kcm(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000001a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001ac0), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001b00)=r5, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)={0x14, 0x12, 0x0, 0x201, 0x0, 0x25dfdbfe, {0x7}}, 0x14}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x4000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8110}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) socket$alg(0x26, 0x5, 0x0) 1.330649694s ago: executing program 4 (id=573): r0 = socket$inet6(0xa, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x122, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x80) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r4}, 0x10) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @random="7977b4838ee4", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x29}}}}}}, 0x0) recvfrom(r5, 0x0, 0x0, 0x40000040, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x4001}) r6 = socket$inet(0x2, 0x2, 0x0) mremap(&(0x7f0000110000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f000012c000/0x4000)=nil) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00000003c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) write$tun(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac140001"], 0x4a) 1.237577468s ago: executing program 7 (id=574): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x405, 0x0, 0xfffffffc, {0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x40}}, 0x20040852) 771.315833ms ago: executing program 7 (id=575): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000280)={[{@abort}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@minixdf}, {@stripe={'stripe', 0x3d, 0x1}}, {@resuid}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000480)="$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") lsetxattr$security_capability(&(0x7f0000000980)='./file1\x00', &(0x7f00000009c0), 0x0, 0x40000, 0x1) 770.716578ms ago: executing program 5 (id=576): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000100)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpq5rp3Hj1KX+fKRNZrzj7Hw9O/bsjDcBDKyx7EcSsTkifouIkUb2xgJjjV/Xrpyb+evKuZkk6vU3/kzyclevnJspi5bP29TI1OtFfl2b4154O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TVbfzcX+5jh6ZMNY49Vt66keH6zftjSlk2ofK0JXKhGRNddQ3v9HohIblvaNxMuf9rVywJqq1+v1dp/PhfN14B6WRL9rAPRH+UGfXf+W2x0aetwVLh+OeP9gI/5rxdbYU420KDPUcn3bS2MRceT8319mW6zNPAQAwA2+OxwRz7Ub/6XxYFO5/xVrKKMR8f+IuC8i7o+IrRHxQERe9qGIeLjL47eukNw8/kkv3VZgK5SN/14o1raWxn//1PP4C6OVIrclj38oOXq8NreneE12x9C6LD+5zDG+f+nXzzvtax7/ZVt2/HIs2JBeqrZM0M1OL06vMuwllz+J2F5tiT+XRLmMk0TEtojY3tVfvn6FcfyZr3d0KnXr+JfRg3Wm+lcRTzfa/3y0xF9KOq5PTh48MLV/Yn3U5vZMlGfFzX7+5cLrnY6/qvh7IGv/ja3nf24p/tFkfcTCmbMn8vXahWhdIb6lC79/1vGa5nbP/+HkzTw9XDz24fTi4unJiOHk1Zsfn7r+3CJfbY5/96528af5e1wZ7SMRkZ3EOyPi0Yh4rKj74xHxRETsWib+H1988t3u419mVr6Hsvhnb9X+0dz+3ScqJ374tvv4S1n778tTu4tHVvL+t9IKrua1AwAAgP+KNP8OfJKOL6XTdHy88R3+rbExrc0vLD57dP6DU7ON78qPxlBaznSNNM2HThZzw2V+qiW/t5g3/qKyIc+Pz8zXZvsdPAy4TR36f+aPSr9rB6w592vB4NL/YXDp/zC49H8YXPo/DK52/f/jPtQDuPN8/sPg0v9hcOn/MLj0fxhIHe+NT1d1y7/EPZ+ItPtnVaOvdU66+McQd0+iutZ1Xtd2V7/fmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj3wAAAP//TonqKA==") prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='cmdline\x00') preadv(r2, &(0x7f0000000a00)=[{&(0x7f0000000a40)=""/4115, 0x1013}], 0x1, 0x16, 0xfffffff9) 770.260604ms ago: executing program 4 (id=577): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_ublk_setup_io_uring(0x5a42, &(0x7f0000000080)={0x0, 0xdaa8, 0x10, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000280)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x3, 0x104}}}, &(0x7f0000000340)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000000380), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f00000003c0)={0x0, 0x5a7a, 0x0, 0xfffffffe, 0x2ce}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72bc, 0x40, 0x0, 0x1f5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb366, 0x0, 0x2, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x40000, 0x1, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9af2, 0x400, 0x1, 0x20a}}], 0x4, &(0x7f00000006c0)={0x2e, 0x10, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r6, '\x00', {0x4, 0xe50, 0x0, 0x0}}, &(0x7f0000000740)) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x30, r1}, 0x18) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r9, @ANYBLOB="00000000000000000000000000000000000000006acfb26e08780318fddcad1789f9cc52b94190873619d9a40de3dcc56f5f835f4ec8d0d940ba6fe0bd786f39822f2049774bbf66", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00@\x00'/28], 0x50) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000940)='net/packet\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x40f4, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c2518010000786c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb70200000818a2000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b700000000000000950000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (rerun: 64) r11 = socket(0x11, 0x3, 0x0) setsockopt(r11, 0x107, 0xf, &(0x7f00000008c0)="00008634", 0x4) (async, rerun: 32) r12 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000900)={'macvlan1\x00', 0x0}) sendmsg(r11, &(0x7f0000000a40)={&(0x7f0000000a80)=@ll={0x11, 0x3, r13, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000b40)="5401020001000000ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000b80)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777439cc590257a0641579678f72a6f", 0x35}, {&(0x7f0000000bc0)="f76e14895b4c948e303e1fe34234a0a92ecd", 0x12}, {&(0x7f0000000c00)="31b5ae6a1374", 0x6}], 0x4}, 0x40000) (async) ioctl$PPPOEIOCDFWD(r11, 0xb101, 0x0) 753.732588ms ago: executing program 7 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x6b4, 0x0) recvmmsg(r1, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x301041, 0x41) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r4, r5, 0x8, 0x0, @void}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) 675.339851ms ago: executing program 6 (id=579): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) r0 = syz_create_resource$binfmt(0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @local}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000003c0)='wg0\x00', 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000400)='syz_tun\x00', 0x10) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @local}, 0x1c) 552.331468ms ago: executing program 6 (id=580): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001800010000000000f8dbdf25020000000001c80900270000060015000200000014001680100008800c000180050001"], 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000480)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x651, 0x0) tgkill(r1, r1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000340)) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x2840) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000080)={0x5, &(0x7f00000000c0)=[{0x1a, '\x00', @data=0x6, 0xffff}, {0x2e, '\x00', @data=0x8, 0xffff}, {0x34, '\x00', @st={0x4, [{0x3}, {0x0, @svalue=0xf}, {0x0, @svalue=0x921}, {0x3, @uvalue=0xfffffffffffffffc}]}, 0x80000}, {0x11, '\x00', @buffer={"7d92c52655500169a9cb11aa8bf9ebbf5c0849c22e48e0f51760516445c41b54", 0x20}, 0x1}, {0x39, '\x00', @st={0x4, [{0x2, @svalue=0x80000001}, {0x1, @uvalue=0x2}, {0x0, @uvalue=0x7a}, {0x1, @uvalue=0x9}]}, 0x4}]}) futex$unlock_wake_list64(0x0, 0xb, 0xfffffff7, 0x0, 0x0, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={0x0, 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) mmap(&(0x7f0000690000/0x1000)=nil, 0x1000, 0x3000007, 0x1010, 0xffffffffffffffff, 0xd6766000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x44084) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000540)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_get_params_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0x80207509, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x70, &(0x7f0000000b00)={0x70}}}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000600)=@assoc_value={0x0}, &(0x7f0000000640)=0x8) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000a80)=@assoc_value={r6, 0x37}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 330.507671ms ago: executing program 2 (id=581): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4f4, &(0x7f0000000080)="$eJzs3V9rHGsZAPBnJtn+TU2KXtSCtdhKUrS7SWPb4EW1InpVUOu1bUw2IWSTDdlN24SiKX4AQUQFQfDKG8EPIEg/gggFvRcVpWjruejFOd3D7s72T7qbpJxNNmR/P3g777w7k+d9dpjpvjPDTAB963xEXIiIl7Va7VJEDGftaVZis1nqyz1/9nCmXpKo1W7/N4lImm31xcbe+Jsns9WORcT3vh3xw+TduJX1jcXpUqm4ms0Xqksrhcr6xuWFpen54nxxeXJy4trU9amrU+NdyXMoIm5881+/+OnvvnXjT1++//c7/xn7UZK1R7zOo9uaqeca30XLYESs7kWwHhjI8sm1GtpsawAADo7W7/wvRMSlGI6Bxq85AAAA4DCpfW0oPkwiagAAAMChlTbugU3SfHYfwFCkaT7fvIf3M3EiLZUr1S/NldeWZ5v3yo5ELp1bKBXHs3uFRyKX1OcnGvXX81e2zE9GxOmI+Pnw8cZ8fqZcmu31yQ8AAADoEye3jP8/GG6O/wEAAIBDZqTXHQAAAAD2nPE/AAAAHH7G/wAAAHCofefWrXqptd5/PXtvfW2xfO/ybLGymF9am8nPlFdX8vPl8nzjmX1LO/29Urm88pVYXntQqBYr1UJlfePOUnltuXpn4a1XYAMAAAD76PTnH/8tiYjNrx5vlLojve4UsC8G32fhf+5dP4D9N9DrDgA9817//wOHSq7XHQB6LomI32zzecebd/68N/0BAAC6b/Sz7a//p9mYoLPNdJ+6COwR5/+gf7n+D/3L9X/oX7kYCAN56G/bn+vrxvX/Wu29OgQAAHTdUKMkaT675j8UaZrPR5xqvBYgl8wtlIrjEfGpiPjrcO5ofX6isWYSiYsHAAAAAAAAAAAAAAAAAAAAAAAAALArtVoSNQAAAOBQi0j/nWTv/xodvji09fzAkeTFcGMaEfd/ffuXD6ar1dWJevv/XrVXf5W1X+nFGQwAAABgq9Y4vTWOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBuev7s4Uyr7GfcpzcjYqRd/ME41pgei1xEnPh/EoNvrJdExEAX4m8+iohv/KBN/KTerRjJetEu/vFuxT/TLv/t46cRcbIL8aGfPa4ff77ebv9L43xjunX/O/pq3cEuxH9680hj2i5+6/g30Gb/r7ed2mWMs0/+UOgY/1HE2cH2x59W/KTD8e/CLuPf/f7GRqfPar+NGG2bf/JWrEJ1aaVQWd+4vLA0PV+cLy5PTk5cm7o+dXVqvDC3UCpm/7aN8bPP/fHldvmf6BB/ZIf8L+4y/4+ePHj26WY1tzW3evyxC+23/5kO8dNs+38xq9c/H23VN5v1N537/V/ObZf/bIf8d9r+Y7vM/9J3f/KPXS4KAOyDyvrG4nSpVFzt68on+jbqP4sORBYqO1Vq2eCt1fLjg9KxA1hp7RMvenNgAgAAuu7dMfBu3N27DgEAAAAAAAAAAAAAAAAAAEAf6s4zw1rPxN7+6Xotm81Jbp9TBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY1scBAAD//5nY0RA=") openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) unshare(0x2040080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000ff20000180080001006475700014000280080001400000000c08000240000000020900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) getrandom(&(0x7f0000000580)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x3d1a, &(0x7f00000006c0)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000009c0)={'dummy0\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./file0\x00', 0x40042, 0x1) close(r5) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 105.843592ms ago: executing program 4 (id=582): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4f4, &(0x7f0000000080)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) unshare(0x2040080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000ff20000180080001006475700014000280080001400000000c08000240000000020900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) getrandom(&(0x7f0000000580)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x3d1a, &(0x7f00000006c0)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000009c0)={'dummy0\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./file0\x00', 0x40042, 0x1) close(r5) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {0x8}, {0x2, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x8, 0xc824, 0x4, 0xe3, 0x6, 0x0, 0x7, 0x7, 0xe, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x6, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0xc, 0x8, 0xfffffffa, 0xfffffff7, 0x3, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x4, 0x3, 0x7ff, 0x5, 0x0, 0x3, 0x2, 0x6, 0x5, 0xfffff000, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x80, 0x3, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x800, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x0, 0x7, 0x200, 0x2, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x2e, 0xc, 0x6, 0x20, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0x1, 0x6, 0x8, 0x990, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x7ff, 0x8000, 0x5, 0x6, 0x10000, 0xd41b, 0x7, 0xf, 0x40004, 0xf918, 0x7f, 0x3, 0x8, 0x2, 0x140, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x4000001, 0xfffffffe, 0x6, 0x9, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0x5, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x0, 0x4ebe3ccc, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x9, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x7, 0x4, 0x81, 0x58783dd6, 0xed2, 0x5, 0x5, 0x9]}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x800, 0x2, 0xa, 0xbc2, 0x1ff, 0x10, 0x4, 0x8, 0x4, 0x4, 0x6, 0xff, 0x2b45, 0x1, 0x0, 0x6, 0x1, 0x5, 0x552a, 0x9, 0x1, 0x8, 0x3ff, 0x9, 0x9, 0x1000, 0x4, 0x5fdb, 0x1ff, 0x2, 0x10000, 0x7, 0x4, 0x9, 0xfff, 0x10000, 0x10000, 0xd6, 0xfffffff8, 0x8, 0x8001, 0x80000000, 0x32, 0xe, 0x3, 0x0, 0x0, 0x1, 0x10001, 0x481, 0x9, 0xffffff46, 0x8, 0x9, 0x90d3, 0xffff177f, 0x7, 0x0, 0xb099, 0x3, 0x1, 0xff, 0xfffffff2, 0x10, 0xc, 0xfd, 0x101, 0x7, 0x0, 0x0, 0x2, 0x0, 0x3, 0x81, 0xd, 0x3, 0x3, 0x6, 0x6e, 0x90, 0x3, 0x8000, 0xe, 0x9, 0x401, 0xb879, 0x8, 0x8, 0x1, 0x2, 0x80000001, 0xbb4f, 0x2, 0x1, 0x5, 0x1b2, 0xbc, 0x2, 0x2, 0x44bd, 0x2, 0x5, 0x3, 0x8, 0x57e, 0x3, 0x5c5, 0x7, 0x10000, 0x8000009, 0x1, 0x5, 0x1, 0xc9f, 0x8, 0xd, 0x7, 0x6, 0x34, 0x400, 0x2, 0x0, 0x3, 0x4, 0x9, 0x9, 0xb7, 0xfffffffb, 0x7fffffff, 0x401, 0x6, 0x0, 0xb, 0x5, 0xfffffffa, 0x6, 0xf8d, 0xfffff907, 0x5d54156, 0x6, 0x2, 0x40, 0x101, 0x3, 0x1, 0x10001, 0xd141, 0x9, 0x2, 0x2, 0x8, 0x5, 0x9, 0x7, 0xb2, 0x50a6c46e, 0x3, 0x10001, 0x5, 0x1, 0x816, 0x6, 0xbdf2, 0x5, 0x2, 0x5, 0x8, 0x9, 0x8, 0xffffffff, 0x6, 0x484, 0xa24, 0xffffffa1, 0x4a, 0x3, 0x5, 0x7fffffff, 0x1, 0x7, 0x6, 0x1, 0x80000000, 0x3, 0x3, 0x9, 0x854, 0x3ff, 0x56, 0x3, 0x1, 0xf, 0xfd0, 0x7, 0x40, 0x4fb, 0x8, 0x5, 0x80, 0xb36, 0x1, 0x3, 0x5, 0x2, 0x4, 0x8, 0xffffffff, 0x2, 0x4, 0x9, 0xb, 0xccf1, 0x4902, 0x6, 0x7, 0x4, 0x7a, 0x7, 0xfffffffa, 0x8e1, 0x0, 0x0, 0x2aeb00d5, 0xfff, 0x60000000, 0x9, 0x9ec, 0x8, 0x2, 0x1, 0x0, 0x1, 0x7, 0x1, 0x8, 0x101, 0xfffffffd, 0x1, 0x1, 0x4, 0x1000000, 0x10000, 0xffff, 0x5, 0xffffffff, 0x6, 0x4, 0x0, 0x3, 0x3, 0x4, 0x0, 0x9, 0x400, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 0s ago: executing program 5 (id=583): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$igmp(0x2, 0x3, 0x2) (async) openat$fb0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x6}, &(0x7f00000004c0)=0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x90) (async) prlimit64(r4, 0x1, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000240), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) (async, rerun: 32) landlock_create_ruleset(0x0, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000000300)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe2$9p(&(0x7f0000000ec0), 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80040}, 0x24000050) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 5][ T5854] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.231: couldn't read orphan inode 15 (err -117) [ 56.692859][ T5854] loop6: lost filesystem error report for type 5 error -117 [ 56.694847][ T5854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.706756][ T5854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.733619][ T5856] process 5849 (syz.4.229) no longer affine to cpu1 [ 57.660884][ T5867] FAULT_INJECTION: forcing a failure. [ 57.660884][ T5867] name fail_futex, interval 1, probability 0, space 0, times 1 [ 57.660904][ T5867] CPU: 0 UID: 0 PID: 5867 Comm: syz.5.232 Not tainted syzkaller #0 PREEMPT [ 57.660915][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 57.660920][ T5867] Call trace: [ 57.660923][ T5867] show_stack+0x2c/0x3c (C) [ 57.660939][ T5867] __dump_stack+0x30/0x40 [ 57.660948][ T5867] dump_stack_lvl+0xd8/0x12c [ 57.660956][ T5867] dump_stack+0x1c/0x28 [ 57.660964][ T5867] should_fail_ex+0x418/0x58c [ 57.660975][ T5867] should_fail+0x14/0x24 [ 57.660984][ T5867] get_futex_key+0x1ec/0x12b0 [ 57.660996][ T5867] futex_wake+0x10c/0x594 [ 57.661004][ T5867] do_futex+0x2c4/0x378 [ 57.661016][ T5867] __arm64_sys_futex+0x2e4/0x418 [ 57.661028][ T5867] invoke_syscall+0x98/0x244 [ 57.661037][ T5867] el0_svc_common+0xec/0x23c [ 57.661045][ T5867] do_el0_svc+0x4c/0x5c [ 57.661057][ T5867] el0_svc+0x60/0x1d8 [ 57.661068][ T5867] el0t_64_sync_handler+0x44/0x104 [ 57.661078][ T5867] el0t_64_sync+0x198/0x19c [ 57.703316][ T5850] psci: CPU1 killed (polled 0 ms) [ 57.858515][ T5850] loop1: detected capacity change from 0 to 512 [ 57.868200][ T5850] vfat: Unknown parameter 'R V[4ء)}곻Wz#' [ 57.942346][ T5880] loop5: detected capacity change from 0 to 2048 [ 57.965779][ T5880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.971006][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 58.009379][ T5883] loop2: detected capacity change from 0 to 512 [ 58.012608][ T5883] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 58.012624][ T5883] EXT4-fs (loop2): group descriptors corrupted! [ 58.060877][ T5889] loop6: detected capacity change from 0 to 512 [ 58.076372][ T5889] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.237: iget: bad i_size value: 38620345925642 [ 58.076393][ T5889] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.076687][ T5889] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.237: couldn't read orphan inode 15 (err -117) [ 58.076705][ T5889] loop6: lost filesystem error report for type 5 error -117 [ 58.078554][ T5889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.139059][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.183981][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'. [ 58.191294][ T5895] netlink: 'syz.2.239': attribute type 1 has an invalid length. [ 58.231640][ T5895] bond1: entered promiscuous mode [ 58.231882][ T5895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.268003][ T5895] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 58.268024][ T5895] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 58.268034][ T5895] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 58.271383][ T5645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.325052][ T5899] fuse: Bad value for 'fd' [ 58.344660][ T4746] Bluetooth: hci5: command tx timeout [ 58.375371][ T5903] FAULT_INJECTION: forcing a failure. [ 58.375371][ T5903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.375395][ T5903] CPU: 0 UID: 0 PID: 5903 Comm: syz.6.241 Not tainted syzkaller #0 PREEMPT [ 58.375406][ T5903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 58.375412][ T5903] Call trace: [ 58.375415][ T5903] show_stack+0x2c/0x3c (C) [ 58.375430][ T5903] __dump_stack+0x30/0x40 [ 58.375439][ T5903] dump_stack_lvl+0xd8/0x12c [ 58.375447][ T5903] dump_stack+0x1c/0x28 [ 58.375454][ T5903] should_fail_ex+0x418/0x58c [ 58.375464][ T5903] should_fail+0x14/0x24 [ 58.375472][ T5903] should_fail_usercopy+0x20/0x30 [ 58.375480][ T5903] simple_read_from_buffer+0xc4/0x238 [ 58.375489][ T5903] proc_fail_nth_read+0x1a8/0x248 [ 58.375499][ T5903] vfs_read+0x230/0x8c8 [ 58.375507][ T5903] ksys_read+0x12c/0x228 [ 58.375515][ T5903] __arm64_sys_read+0x84/0x98 [ 58.375523][ T5903] invoke_syscall+0x98/0x244 [ 58.375531][ T5903] el0_svc_common+0xec/0x23c [ 58.375538][ T5903] do_el0_svc+0x4c/0x5c [ 58.375545][ T5903] el0_svc+0x60/0x1d8 [ 58.375553][ T5903] el0t_64_sync_handler+0x44/0x104 [ 58.375560][ T5903] el0t_64_sync+0x198/0x19c [ 58.513439][ T5906] binder: 5905:5906 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 58.520178][ T5910] netlink: 'syz.6.243': attribute type 1 has an invalid length. [ 58.522408][ T5906] binder: 5905:5906 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 58.522425][ T5906] binder: 5906 RLIMIT_NICE not set [ 58.545668][ T5911] loop2: detected capacity change from 0 to 512 [ 58.546098][ T5911] ext4: Bad value for 'journal_dev' [ 58.849862][ T5896] loop1: detected capacity change from 0 to 512 [ 58.852435][ T5896] EXT4-fs: Ignoring removed i_version option [ 58.852461][ T5896] EXT4-fs: Ignoring removed bh option [ 58.870800][ T5896] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.238: inode #13: comm syz.1.238: iget: illegal inode # [ 58.870826][ T5896] loop1: lost filesystem error report for type 5 error -117 [ 58.870963][ T5896] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.238: couldn't read orphan inode 13 (err -117) [ 58.870976][ T5896] loop1: lost filesystem error report for type 5 error -117 [ 58.871795][ T5896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.057896][ T4735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.430607][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.250'. [ 59.439849][ T5948] loop5: detected capacity change from 0 to 128 [ 59.443386][ T5938] loop1: detected capacity change from 0 to 8192 [ 59.458915][ T5938] loop1: p1 < > p3 p4 < > [ 59.468795][ T5938] loop1: p3 start 852736 is beyond EOD, truncated [ 59.908750][ T4727] udevd[4727]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 59.915074][ T4729] udevd[4729]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 60.250422][ T5991] loop2: detected capacity change from 0 to 512 [ 60.260640][ T5991] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.262356][ T5991] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 60.262449][ T5991] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.262780][ T5991] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 60.262829][ T5991] EXT4-fs warning (device loop2): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.262879][ T5991] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 60.263351][ T5991] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 60.264295][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 60.264309][ C0] EXT4-fs (loop2): initial error at time 60: mb_free_blocks:2049: inode 12: block 14 [ 60.264328][ C0] EXT4-fs (loop2): last error at time 60: mb_free_blocks:2049: inode 12: block 14 [ 60.279933][ T5991] EXT4-fs (loop2): Remounting filesystem read-only [ 60.294347][ T5991] EXT4-fs (loop2): 1 truncate cleaned up [ 60.294811][ T5991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.310086][ T4426] 8021q: adding VLAN 0 to HW filter on device eth5 [ 60.425410][ T4746] Bluetooth: hci5: command tx timeout [ 60.464651][ T5998] Injecting memory failure for pfn 0x17c9a2 at process virtual address 0x20001000 [ 60.469959][ T5998] Memory failure: 0x17c9a2: keeping poisoned page in swap cache [ 60.469984][ T5998] Memory failure: 0x17c9a2: Sending SIGBUS to syz.2.259:5998 due to hardware memory corruption [ 60.470025][ T5998] Memory failure: 0x17c9a2: recovery action for dirty swapcache page: Delayed [ 60.470052][ T5998] Injecting memory failure for pfn 0x17caa5 at process virtual address 0x20002000 [ 60.470083][ T5998] Memory failure: 0x17caa5: keeping poisoned page in swap cache [ 60.470095][ T5998] Memory failure: 0x17caa5: Sending SIGBUS to syz.2.259:5998 due to hardware memory corruption [ 60.470117][ T5998] Memory failure: 0x17caa5: recovery action for dirty swapcache page: Delayed [ 60.470135][ T5998] Injecting memory failure for pfn 0x11ee74 at process virtual address 0x20003000 [ 60.470158][ T5998] Memory failure: 0x11ee74: keeping poisoned page in swap cache [ 60.470169][ T5998] Memory failure: 0x11ee74: Sending SIGBUS to syz.2.259:5998 due to hardware memory corruption [ 60.470186][ T5998] Memory failure: 0x11ee74: recovery action for dirty swapcache page: Delayed [ 60.472500][ T5997] loop6: detected capacity change from 0 to 2048 [ 60.519869][ T5997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.537339][ T5965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.697216][ T5645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.742225][ T6004] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.753572][ T6004] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 60.753678][ T6004] EXT4-fs (loop5): orphan cleanup on readonly fs [ 60.757498][ T6004] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 60.757556][ T6004] EXT4-fs warning (device loop5): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.757610][ T6004] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 60.757881][ T6004] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 60.758058][ T6004] EXT4-fs (loop5): Remounting filesystem read-only [ 60.758223][ T6004] EXT4-fs (loop5): 1 truncate cleaned up [ 60.758790][ T6004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.866983][ T6013] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.883677][ T6013] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 60.883786][ T6013] EXT4-fs (loop6): orphan cleanup on readonly fs [ 60.891081][ T6013] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 60.891144][ T6013] EXT4-fs warning (device loop6): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.891198][ T6013] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 60.894362][ T6013] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 60.904891][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 60.904905][ C0] EXT4-fs (loop6): initial error at time 60: mb_free_blocks:2049: inode 12: block 14 [ 60.904927][ C0] EXT4-fs (loop6): last error at time 60: mb_free_blocks:2049: inode 12: block 14 [ 60.911165][ T6013] EXT4-fs (loop6): Remounting filesystem read-only [ 60.912118][ T6013] EXT4-fs (loop6): 1 truncate cleaned up [ 60.912627][ T6013] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.073118][ T6028] Injecting memory failure for pfn 0x17bd3f at process virtual address 0x20001000 [ 61.081048][ T6028] Memory failure: 0x17bd3f: keeping poisoned page in swap cache [ 61.081072][ T6028] Memory failure: 0x17bd3f: Sending SIGBUS to syz.5.261:6028 due to hardware memory corruption [ 61.081117][ T6028] Memory failure: 0x17bd3f: recovery action for dirty swapcache page: Delayed [ 61.081144][ T6028] Injecting memory failure for pfn 0x17be60 at process virtual address 0x20002000 [ 61.081237][ T6028] Memory failure: 0x17be60: keeping poisoned page in swap cache [ 61.081249][ T6028] Memory failure: 0x17be60: Sending SIGBUS to syz.5.261:6028 due to hardware memory corruption [ 61.081266][ T6028] Memory failure: 0x17be60: recovery action for dirty swapcache page: Delayed [ 61.081284][ T6028] Injecting memory failure for pfn 0x17be61 at process virtual address 0x20003000 [ 61.081307][ T6028] Memory failure: 0x17be61: keeping poisoned page in swap cache [ 61.081317][ T6028] Memory failure: 0x17be61: Sending SIGBUS to syz.5.261:6028 due to hardware memory corruption [ 61.081333][ T6028] Memory failure: 0x17be61: recovery action for dirty swapcache page: Delayed [ 61.167516][ T6020] FAULT_INJECTION: forcing a failure. [ 61.167516][ T6020] name failslab, interval 1, probability 0, space 0, times 0 [ 61.167541][ T6020] CPU: 0 UID: 0 PID: 6020 Comm: syz.4.262 Not tainted syzkaller #0 PREEMPT [ 61.167552][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 61.167557][ T6020] Call trace: [ 61.167560][ T6020] show_stack+0x2c/0x3c (C) [ 61.167576][ T6020] __dump_stack+0x30/0x40 [ 61.167585][ T6020] dump_stack_lvl+0xd8/0x12c [ 61.167593][ T6020] dump_stack+0x1c/0x28 [ 61.167601][ T6020] should_fail_ex+0x418/0x58c [ 61.167612][ T6020] should_failslab+0xc4/0x120 [ 61.167622][ T6020] __kmalloc_noprof+0x108/0x6c8 [ 61.167632][ T6020] io_cache_alloc_new+0x58/0x114 [ 61.167645][ T6020] io_arm_apoll+0x358/0x800 [ 61.167655][ T6020] io_arm_poll_handler+0x1a8/0x1f4 [ 61.167665][ T6020] io_queue_async+0x144/0x1bc [ 61.167676][ T6020] io_submit_sqes+0xda8/0x1e10 [ 61.167688][ T6020] __arm64_sys_io_uring_enter+0x308/0x16c4 [ 61.167699][ T6020] invoke_syscall+0x98/0x244 [ 61.167708][ T6020] el0_svc_common+0xec/0x23c [ 61.167716][ T6020] do_el0_svc+0x4c/0x5c [ 61.167724][ T6020] el0_svc+0x60/0x1d8 [ 61.167733][ T6020] el0t_64_sync_handler+0x44/0x104 [ 61.167741][ T6020] el0t_64_sync+0x198/0x19c [ 61.310903][ T6036] Injecting memory failure for pfn 0x17c826 at process virtual address 0x20001000 [ 61.360445][ T4737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.378401][ T6036] Memory failure: 0x17c826: keeping poisoned page in swap cache [ 61.378431][ T6036] Memory failure: 0x17c826: Sending SIGBUS to syz.6.264:6036 due to hardware memory corruption [ 61.378472][ T6036] Memory failure: 0x17c826: recovery action for dirty swapcache page: Delayed [ 61.378503][ T6036] Injecting memory failure for pfn 0x17c827 at process virtual address 0x20002000 [ 61.378717][ T6036] Memory failure: 0x17c827: keeping poisoned page in swap cache [ 61.378729][ T6036] Memory failure: 0x17c827: Sending SIGBUS to syz.6.264:6036 due to hardware memory corruption [ 61.378746][ T6036] Memory failure: 0x17c827: recovery action for dirty swapcache page: Delayed [ 61.378765][ T6036] Injecting memory failure for pfn 0x17bfec at process virtual address 0x20003000 [ 61.378789][ T6036] Memory failure: 0x17bfec: keeping poisoned page in swap cache [ 61.378799][ T6036] Memory failure: 0x17bfec: Sending SIGBUS to syz.6.264:6036 due to hardware memory corruption [ 61.378815][ T6036] Memory failure: 0x17bfec: recovery action for dirty swapcache page: Delayed [ 61.588401][ T6040] fuse: Bad value for 'fd' [ 61.609759][ T4426] 8021q: adding VLAN 0 to HW filter on device eth7 [ 62.109244][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.242376][ T5645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.477864][ T6060] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.578192][ T2855] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 62.602191][ T5645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.750575][ T6068] fido_id[6068]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.765024][ T6071] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.769173][ T6071] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 62.769270][ T6071] EXT4-fs (loop6): orphan cleanup on readonly fs [ 62.769586][ T6071] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 62.769630][ T6071] EXT4-fs warning (device loop6): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 62.769675][ T6071] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 62.769940][ T6071] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 62.770313][ T6071] EXT4-fs (loop6): Remounting filesystem read-only [ 62.770445][ T6071] EXT4-fs (loop6): 1 truncate cleaned up [ 62.770882][ T6071] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.802327][ T6073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.938818][ T6078] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.278: iget: bad i_size value: 2533274857506816 [ 62.965851][ T6078] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.278: iget: bad i_size value: 2533274857506816 [ 63.039703][ T6080] Injecting memory failure for pfn 0x11eec0 at process virtual address 0x20001000 [ 63.058486][ T6080] Memory failure: 0x11eec0: keeping poisoned page in swap cache [ 63.058524][ T6080] Memory failure: 0x11eec0: Sending SIGBUS to syz.6.277:6080 due to hardware memory corruption [ 63.058566][ T6080] Memory failure: 0x11eec0: recovery action for dirty swapcache page: Delayed [ 63.058597][ T6080] Injecting memory failure for pfn 0x11eec1 at process virtual address 0x20002000 [ 63.085637][ T6080] Memory failure: 0x11eec1: keeping poisoned page in swap cache [ 63.085669][ T6080] Memory failure: 0x11eec1: Sending SIGBUS to syz.6.277:6080 due to hardware memory corruption [ 63.085697][ T6080] Memory failure: 0x11eec1: recovery action for dirty swapcache page: Delayed [ 63.085728][ T6080] Injecting memory failure for pfn 0x11eec2 at process virtual address 0x20003000 [ 63.087578][ T6080] Memory failure: 0x11eec2: keeping poisoned page in swap cache [ 63.087608][ T6080] Memory failure: 0x11eec2: Sending SIGBUS to syz.6.277:6080 due to hardware memory corruption [ 63.087631][ T6080] Memory failure: 0x11eec2: recovery action for dirty swapcache page: Delayed [ 63.232751][ T4737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.264721][ T6086] netlink: 'syz.5.280': attribute type 1 has an invalid length. [ 63.291062][ T6086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.311528][ T6086] netlink: 28 bytes leftover after parsing attributes in process `syz.5.280'. [ 63.311576][ T6086] bond1: entered promiscuous mode [ 63.311592][ T6086] bond1: entered allmulticast mode [ 63.386221][ T6091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.281'. [ 63.416018][ T6093] set_capacity_and_notify: 7 callbacks suppressed [ 63.416032][ T6093] loop5: detected capacity change from 0 to 512 [ 63.431480][ T6093] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 63.432247][ T6093] EXT4-fs (loop5): orphan cleanup on readonly fs [ 63.433319][ T6093] EXT4-fs (loop5): 1 orphan inode deleted [ 63.440754][ T6093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 63.561070][ T6100] loop5: detected capacity change from 0 to 512 [ 63.565962][ T6100] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.570042][ T6101] loop4: detected capacity change from 0 to 512 [ 63.572492][ T6100] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 63.572586][ T6100] EXT4-fs (loop5): orphan cleanup on readonly fs [ 63.572978][ T6100] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 63.573028][ T6100] EXT4-fs warning (device loop5): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.573078][ T6100] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 63.573307][ T6100] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 63.573600][ T6100] EXT4-fs (loop5): Remounting filesystem read-only [ 63.573712][ T6100] EXT4-fs (loop5): 1 truncate cleaned up [ 63.602405][ T6101] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.607897][ T6101] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 63.608054][ T6101] EXT4-fs (loop4): orphan cleanup on readonly fs [ 63.610533][ T6101] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 63.610586][ T6101] EXT4-fs warning (device loop4): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.610642][ T6101] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 63.610931][ T6101] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 63.611998][ T6101] EXT4-fs (loop4): Remounting filesystem read-only [ 63.612529][ T6101] EXT4-fs (loop4): 1 truncate cleaned up [ 63.831247][ T6109] FAULT_INJECTION: forcing a failure. [ 63.831247][ T6109] name failslab, interval 1, probability 0, space 0, times 0 [ 63.831271][ T6109] CPU: 0 UID: 0 PID: 6109 Comm: syz.6.286 Not tainted syzkaller #0 PREEMPT [ 63.831285][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 63.831289][ T6109] Call trace: [ 63.831292][ T6109] show_stack+0x2c/0x3c (C) [ 63.831307][ T6109] __dump_stack+0x30/0x40 [ 63.831315][ T6109] dump_stack_lvl+0xd8/0x12c [ 63.831322][ T6109] dump_stack+0x1c/0x28 [ 63.831329][ T6109] should_fail_ex+0x418/0x58c [ 63.831339][ T6109] should_failslab+0xc4/0x120 [ 63.831347][ T6109] kmem_cache_alloc_noprof+0x94/0x5d4 [ 63.831356][ T6109] alloc_empty_file+0x6c/0x1cc [ 63.831368][ T6109] alloc_file+0x58/0x98 [ 63.831376][ T6109] alloc_file_pseudo+0xe0/0x198 [ 63.831385][ T6109] sock_alloc_file+0xb4/0x1ac [ 63.831395][ T6109] __sys_socket+0x90/0xec [ 63.831404][ T6109] __arm64_sys_socket+0x84/0x9c [ 63.831413][ T6109] invoke_syscall+0x98/0x244 [ 63.831421][ T6109] el0_svc_common+0xec/0x23c [ 63.831428][ T6109] do_el0_svc+0x4c/0x5c [ 63.831435][ T6109] el0_svc+0x60/0x1d8 [ 63.831443][ T6109] el0t_64_sync_handler+0x44/0x104 [ 63.831450][ T6109] el0t_64_sync+0x198/0x19c [ 63.873338][ T26] cfg80211: failed to load regulatory.db [ 63.900881][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.6.286'. [ 63.902302][ T6109] netlink: 16 bytes leftover after parsing attributes in process `syz.6.286'. [ 63.902666][ T6111] Injecting memory failure for pfn 0x17c809 at process virtual address 0x20001000 [ 63.917507][ T6111] Memory failure: 0x17c809: keeping poisoned page in swap cache [ 63.917538][ T6111] Memory failure: 0x17c809: Sending SIGBUS to syz.5.283:6111 due to hardware memory corruption [ 63.917580][ T6111] Memory failure: 0x17c809: recovery action for dirty swapcache page: Delayed [ 63.917611][ T6111] Injecting memory failure for pfn 0x17c9f0 at process virtual address 0x20002000 [ 63.917687][ T6111] Memory failure: 0x17c9f0: keeping poisoned page in swap cache [ 63.917699][ T6111] Memory failure: 0x17c9f0: Sending SIGBUS to syz.5.283:6111 due to hardware memory corruption [ 63.917717][ T6111] Memory failure: 0x17c9f0: recovery action for dirty swapcache page: Delayed [ 63.917736][ T6111] Injecting memory failure for pfn 0x17c9f1 at process virtual address 0x20003000 [ 63.917760][ T6111] Memory failure: 0x17c9f1: keeping poisoned page in swap cache [ 63.917771][ T6111] Memory failure: 0x17c9f1: Sending SIGBUS to syz.5.283:6111 due to hardware memory corruption [ 63.917787][ T6111] Memory failure: 0x17c9f1: recovery action for dirty swapcache page: Delayed [ 64.130770][ T6089] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 64.130919][ T6089] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 64.321275][ T6089] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 64.322943][ T6089] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 64.325887][ T6089] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 64.331081][ T6089] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 64.341178][ T6089] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 64.341233][ T6089] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 64.357787][ T6089] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 64.359956][ T6089] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 64.360237][ T6089] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 64.363246][ T6089] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 64.376178][ T6089] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 64.376220][ T6089] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 64.396153][ T6089] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 64.397335][ T6117] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 64.628470][ T1611] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.628569][ T1611] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.821034][ T6123] fuse: Bad value for 'fd' [ 64.826977][ T6126] loop4: detected capacity change from 0 to 128 [ 64.837014][ T6126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0042] [ 64.837053][ T6126] System zones: 1-3, 19-19, 35-36 [ 64.840627][ T6126] EXT4-fs mount: 6 callbacks suppressed [ 64.840638][ T6126] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.977288][ T6129] netlink: 56 bytes leftover after parsing attributes in process `syz.6.292'. [ 64.977764][ T6129] netlink: 56 bytes leftover after parsing attributes in process `syz.6.292'. [ 64.993144][ T4744] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.086623][ T6131] fuse: Bad value for 'fd' [ 65.236513][ T6139] loop5: detected capacity change from 0 to 128 [ 65.532839][ T4746] Bluetooth: hci0: command 0x0401 tx timeout [ 65.710139][ T6151] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20001000 [ 65.710793][ T6151] Memory failure: 0x216a31: unhandlable page. [ 65.710803][ T6151] Memory failure: 0x216a31: recovery action for reserved kernel page: Ignored [ 65.781705][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 65.920280][ T6160] FAULT_INJECTION: forcing a failure. [ 65.920280][ T6160] name failslab, interval 1, probability 0, space 0, times 0 [ 65.920303][ T6160] CPU: 0 UID: 0 PID: 6160 Comm: syz.2.304 Not tainted syzkaller #0 PREEMPT [ 65.920316][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 65.920322][ T6160] Call trace: [ 65.920325][ T6160] show_stack+0x2c/0x3c (C) [ 65.920341][ T6160] __dump_stack+0x30/0x40 [ 65.920350][ T6160] dump_stack_lvl+0xd8/0x12c [ 65.920359][ T6160] dump_stack+0x1c/0x28 [ 65.920367][ T6160] should_fail_ex+0x418/0x58c [ 65.920378][ T6160] should_failslab+0xc4/0x120 [ 65.920387][ T6160] __kvmalloc_node_noprof+0x160/0x7fc [ 65.920399][ T6160] alloc_fdtable+0x15c/0x290 [ 65.920409][ T6160] dup_fd+0x614/0x848 [ 65.920418][ T6160] unshare_fd+0x98/0x110 [ 65.920432][ T6160] ksys_unshare+0x3d4/0x6e0 [ 65.920443][ T6160] __arm64_sys_unshare+0x40/0x54 [ 65.920453][ T6160] invoke_syscall+0x98/0x244 [ 65.920462][ T6160] el0_svc_common+0xec/0x23c [ 65.920470][ T6160] do_el0_svc+0x4c/0x5c [ 65.920478][ T6160] el0_svc+0x60/0x1d8 [ 65.920487][ T6160] el0t_64_sync_handler+0x44/0x104 [ 65.920495][ T6160] el0t_64_sync+0x198/0x19c [ 66.202021][ T6167] fuse: Bad value for 'fd' [ 66.317250][ T6171] netlink: 'syz.6.308': attribute type 1 has an invalid length. [ 66.337652][ T6170] netlink: 32 bytes leftover after parsing attributes in process `syz.1.307'. [ 66.344212][ T4746] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.344249][ T4746] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.546435][ T4747] Bluetooth: hci5: command 0x0c1a tx timeout [ 66.546485][ T4747] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.583917][ T6173] netlink: 224 bytes leftover after parsing attributes in process `syz.2.304'. [ 66.641327][ T6175] loop1: detected capacity change from 0 to 512 [ 66.652464][ T6175] EXT4-fs (loop1): Test dummy encryption mode enabled [ 66.652478][ T6175] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 66.652486][ T6175] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.666588][ T6175] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.309: bad orphan inode 131072 [ 66.666611][ T6175] loop1: lost filesystem error report for type 5 error -117 [ 66.667749][ T6175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.721781][ T4735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.848251][ T6165] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 66.924444][ T6180] loop1: detected capacity change from 0 to 1024 [ 66.924867][ T6180] EXT4-fs: quotafile must be on filesystem root [ 67.064585][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 67.064604][ C0] bridge0: topology change detected, propagating [ 67.137396][ T6186] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20001000 [ 67.137576][ T6186] Memory failure: 0x216a31: Sending SIGBUS to syz.4.313:6186 due to hardware memory corruption [ 67.137688][ T6186] Memory failure: 0x216a31: recovery action for already poisoned page: Failed [ 68.273207][ T4746] Bluetooth: hci0: command 0x0401 tx timeout [ 69.276621][ T4746] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.276655][ T4746] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.276674][ T4746] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.276691][ T4746] Bluetooth: hci5: command 0x0c1a tx timeout [ 70.478660][ T4747] Bluetooth: hci0: command 0x0401 tx timeout [ 70.516021][ T6205] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 70.612936][ T6207] loop4: detected capacity change from 0 to 8 [ 70.626305][ T6207] squashfs image failed sanity check [ 70.633594][ T6211] loop5: detected capacity change from 0 to 512 [ 70.642841][ T6211] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.648097][ T6212] loop6: detected capacity change from 0 to 512 [ 70.649031][ T6211] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 70.649127][ T6211] EXT4-fs (loop5): orphan cleanup on readonly fs [ 70.649379][ T6211] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 70.649423][ T6211] EXT4-fs warning (device loop5): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.649468][ T6211] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 70.649671][ T6211] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 70.650305][ T6211] EXT4-fs (loop5): Remounting filesystem read-only [ 70.652103][ T6211] EXT4-fs (loop5): 1 truncate cleaned up [ 70.652569][ T6211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.678855][ T6212] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.695666][ T6212] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 70.695781][ T6212] EXT4-fs (loop6): orphan cleanup on readonly fs [ 70.703573][ T6212] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 70.703631][ T6212] EXT4-fs warning (device loop6): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.703680][ T6212] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 70.718827][ T6212] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 70.719050][ T6212] EXT4-fs (loop6): Remounting filesystem read-only [ 70.719619][ T6212] EXT4-fs (loop6): 1 truncate cleaned up [ 70.720063][ T6212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.845500][ T6218] binder: 6216:6218 tried to acquire reference to desc 0, got 1 instead [ 70.857731][ T6218] binder: 6216:6218 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 70.857753][ T6218] binder: 6218 RLIMIT_NICE not set [ 70.857766][ T6218] binder: 6218 RLIMIT_NICE not set [ 70.865999][ T6218] binder: 6218 RLIMIT_NICE not set [ 70.866064][ T6218] binder_alloc: 6216: binder_alloc_buf, no vma [ 70.866093][ T6218] binder: cannot allocate buffer: vma cleared, target dead or dying [ 70.866122][ T6218] binder: 6216:6218 transaction reply to 6216:6218 failed 7/29189/-3, code 0 size 0-0 line 3409 [ 70.866142][ T6218] binder: send failed reply for transaction 6 to 6216:6218 [ 70.866387][ T1100] binder: undelivered TRANSACTION_COMPLETE [ 70.866400][ T1100] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.900612][ T1100] binder: undelivered TRANSACTION_ERROR: 29190 [ 70.983169][ T6233] netlink: 'syz.2.325': attribute type 1 has an invalid length. [ 71.050926][ T6231] loop4: detected capacity change from 0 to 1024 [ 71.248827][ T6231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.299234][ T6239] Injecting memory failure for pfn 0x11efc2 at process virtual address 0x20001000 [ 71.304868][ T4747] Bluetooth: hci5: command 0x0c1a tx timeout [ 71.304896][ T4747] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.304918][ T4747] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.304934][ T4747] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.333000][ T6239] Memory failure: 0x11efc2: keeping poisoned page in swap cache [ 71.333036][ T6239] Memory failure: 0x11efc2: Sending SIGBUS to syz.5.319:6239 due to hardware memory corruption [ 71.333072][ T6239] Memory failure: 0x11efc2: recovery action for dirty swapcache page: Delayed [ 71.333102][ T6239] Injecting memory failure for pfn 0x11efc3 at process virtual address 0x20002000 [ 71.351401][ T4744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.376514][ T6239] Memory failure: 0x11efc3: keeping poisoned page in swap cache [ 71.376545][ T6239] Memory failure: 0x11efc3: Sending SIGBUS to syz.5.319:6239 due to hardware memory corruption [ 71.376574][ T6239] Memory failure: 0x11efc3: recovery action for dirty swapcache page: Delayed [ 71.376604][ T6239] Injecting memory failure for pfn 0x11efc4 at process virtual address 0x20003000 [ 71.382723][ T6239] Memory failure: 0x11efc4: keeping poisoned page in swap cache [ 71.382745][ T6239] Memory failure: 0x11efc4: Sending SIGBUS to syz.5.319:6239 due to hardware memory corruption [ 71.382770][ T6239] Memory failure: 0x11efc4: recovery action for dirty swapcache page: Delayed [ 71.405435][ T6249] Injecting memory failure for pfn 0x11f143 at process virtual address 0x20001000 [ 71.408286][ T6249] Memory failure: 0x11f143: keeping poisoned page in swap cache [ 71.408309][ T6249] Memory failure: 0x11f143: Sending SIGBUS to syz.6.320:6249 due to hardware memory corruption [ 71.408344][ T6249] Memory failure: 0x11f143: recovery action for dirty swapcache page: Delayed [ 71.408369][ T6249] Injecting memory failure for pfn 0x11f142 at process virtual address 0x20002000 [ 71.408418][ T6249] Memory failure: 0x11f142: keeping poisoned page in swap cache [ 71.408430][ T6249] Memory failure: 0x11f142: Sending SIGBUS to syz.6.320:6249 due to hardware memory corruption [ 71.408447][ T6249] Memory failure: 0x11f142: recovery action for dirty swapcache page: Delayed [ 71.408465][ T6249] Injecting memory failure for pfn 0x17cb6f at process virtual address 0x20003000 [ 71.408491][ T6249] Memory failure: 0x17cb6f: keeping poisoned page in swap cache [ 71.408502][ T6249] Memory failure: 0x17cb6f: Sending SIGBUS to syz.6.320:6249 due to hardware memory corruption [ 71.408518][ T6249] Memory failure: 0x17cb6f: recovery action for dirty swapcache page: Delayed [ 71.552658][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 71.593020][ T6253] bond1: entered promiscuous mode [ 71.603792][ T6253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.823005][ T6266] loop4: detected capacity change from 0 to 128 [ 71.868328][ T6266] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.871319][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.970597][ T4744] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.065209][ T6275] loop4: detected capacity change from 0 to 2048 [ 72.095423][ T6275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.241333][ T4744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.252537][ T5645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.478877][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.335'. [ 72.504282][ T4746] Bluetooth: hci0: command 0x0401 tx timeout [ 72.507334][ T6291] loop6: detected capacity change from 0 to 512 [ 72.578771][ T6291] FAULT_INJECTION: forcing a failure. [ 72.578771][ T6291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.578794][ T6291] CPU: 0 UID: 0 PID: 6291 Comm: syz.6.337 Not tainted syzkaller #0 PREEMPT [ 72.578805][ T6291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 72.578810][ T6291] Call trace: [ 72.578813][ T6291] show_stack+0x2c/0x3c (C) [ 72.578829][ T6291] __dump_stack+0x30/0x40 [ 72.578839][ T6291] dump_stack_lvl+0xd8/0x12c [ 72.578847][ T6291] dump_stack+0x1c/0x28 [ 72.578855][ T6291] should_fail_ex+0x418/0x58c [ 72.578866][ T6291] should_fail+0x14/0x24 [ 72.578875][ T6291] should_fail_usercopy+0x20/0x30 [ 72.578885][ T6291] _copy_from_iter+0x188/0x1064 [ 72.578896][ T6291] tcp_sendmsg_locked+0x1080/0x3198 [ 72.578908][ T6291] tcp_sendmsg+0x40/0x64 [ 72.578917][ T6291] inet_sendmsg+0xb4/0xd8 [ 72.578928][ T6291] __sock_sendmsg+0xc8/0x17c [ 72.578940][ T6291] __sys_sendto+0x250/0x328 [ 72.578950][ T6291] __arm64_sys_sendto+0xec/0x10c [ 72.578962][ T6291] invoke_syscall+0x98/0x244 [ 72.578971][ T6291] el0_svc_common+0xec/0x23c [ 72.578979][ T6291] do_el0_svc+0x4c/0x5c [ 72.578987][ T6291] el0_svc+0x60/0x1d8 [ 72.578996][ T6291] el0t_64_sync_handler+0x44/0x104 [ 72.579004][ T6291] el0t_64_sync+0x198/0x19c [ 72.719643][ T6298] netlink: 'syz.5.341': attribute type 3 has an invalid length. [ 72.719663][ T6298] netlink: 152 bytes leftover after parsing attributes in process `syz.5.341'. [ 72.719678][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.341'. [ 72.722299][ T6296] Bluetooth: MGMT ver 1.23 [ 72.741975][ T6296] syzkaller0: entered promiscuous mode [ 72.741991][ T6296] syzkaller0: entered allmulticast mode [ 72.957260][ T6300] loop6: detected capacity change from 0 to 2048 [ 73.010105][ T6300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.070759][ T5645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.130232][ T6311] loop4: detected capacity change from 0 to 512 [ 73.143119][ T6311] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.345: corrupted in-inode xattr: invalid ea_ino [ 73.143141][ T6311] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.143242][ T6311] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.345: couldn't read orphan inode 15 (err -117) [ 73.143256][ T6311] loop4: lost filesystem error report for type 5 error -117 [ 73.143736][ T6311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.174486][ T6316] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 73.174971][ T6316] IPv6: addrconf: prefix option has invalid lifetime [ 73.191909][ T6310] fuse: Bad value for 'fd' [ 73.305726][ T6322] loop5: detected capacity change from 0 to 512 [ 73.314279][ T6322] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 73.314296][ T6322] EXT4-fs (loop5): blocks per group (32768) and clusters per group (32768) inconsistent [ 73.320922][ T6318] batman_adv: batadv0: Adding interface: syz_tun [ 73.320933][ T6318] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.320954][ T6318] batman_adv: batadv0: Interface activated: syz_tun [ 73.440033][ T4744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.808249][ T6328] FAULT_INJECTION: forcing a failure. [ 73.808249][ T6328] name failslab, interval 1, probability 0, space 0, times 0 [ 73.808270][ T6328] CPU: 0 UID: 0 PID: 6328 Comm: syz.2.353 Not tainted syzkaller #0 PREEMPT [ 73.808281][ T6328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 73.808286][ T6328] Call trace: [ 73.808289][ T6328] show_stack+0x2c/0x3c (C) [ 73.808305][ T6328] __dump_stack+0x30/0x40 [ 73.808314][ T6328] dump_stack_lvl+0xd8/0x12c [ 73.808322][ T6328] dump_stack+0x1c/0x28 [ 73.808330][ T6328] should_fail_ex+0x418/0x58c [ 73.808341][ T6328] should_failslab+0xc4/0x120 [ 73.808350][ T6328] kmem_cache_alloc_node_noprof+0x98/0x604 [ 73.808361][ T6328] __alloc_skb+0x1f0/0x610 [ 73.808373][ T6328] tcp_stream_alloc_skb+0x44/0x2dc [ 73.808384][ T6328] tcp_write_xmit+0xcf0/0x4794 [ 73.808394][ T6328] __tcp_push_pending_frames+0x98/0x320 [ 73.808404][ T6328] tcp_push+0x3d0/0x5ac [ 73.808414][ T6328] tcp_sendmsg_locked+0x1368/0x3198 [ 73.808424][ T6328] tcp_sendmsg+0x40/0x64 [ 73.808433][ T6328] inet_sendmsg+0xb4/0xd8 [ 73.808445][ T6328] __sock_sendmsg+0xc8/0x17c [ 73.808455][ T6328] __sys_sendto+0x250/0x328 [ 73.808467][ T6328] __arm64_sys_sendto+0xec/0x10c [ 73.808478][ T6328] invoke_syscall+0x98/0x244 [ 73.808486][ T6328] el0_svc_common+0xec/0x23c [ 73.808495][ T6328] do_el0_svc+0x4c/0x5c [ 73.808503][ T6328] el0_svc+0x60/0x1d8 [ 73.808511][ T6328] el0t_64_sync_handler+0x44/0x104 [ 73.808522][ T6328] el0t_64_sync+0x198/0x19c [ 73.813042][ T6339] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.865635][ T6339] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 73.865751][ T6339] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.868744][ T6339] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 73.868806][ T6339] EXT4-fs warning (device loop4): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 73.868871][ T6339] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 73.871116][ T6339] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 73.873440][ T6339] EXT4-fs (loop4): Remounting filesystem read-only [ 73.874098][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 73.874118][ C0] EXT4-fs (loop4): initial error at time 73: mb_free_blocks:2049: inode 12: block 14 [ 73.874141][ C0] EXT4-fs (loop4): last error at time 73: mb_free_blocks:2049: inode 12: block 14 [ 73.892696][ T6339] EXT4-fs (loop4): 1 truncate cleaned up [ 73.893167][ T6339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.972358][ T6334] device-mapper: table: 248:2: crypt: Error allocating crypto tfm (-EINVAL) [ 73.972379][ T6334] device-mapper: ioctl: error adding target to table [ 73.997019][ T6347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.026264][ T6354] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 74.166475][ T6361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.208943][ T6355] syzkaller0: entered promiscuous mode [ 74.208958][ T6355] syzkaller0: entered allmulticast mode [ 74.237747][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.854115][ T4744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.882214][ T6392] sctp: [Deprecated]: syz.2.365 (pid 6392) Use of int in max_burst socket option. [ 74.882214][ T6392] Use struct sctp_assoc_value instead [ 74.978143][ T4735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.073238][ T6402] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.076487][ T6402] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 75.076591][ T6402] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.078249][ T6402] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 75.078302][ T6402] EXT4-fs warning (device loop2): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.079200][ T6402] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 75.079884][ T6402] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 75.080640][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 75.080651][ C0] EXT4-fs (loop2): initial error at time 844: mb_free_blocks:2049: inode 12: block 14 [ 75.080669][ C0] EXT4-fs (loop2): last error at time 844: mb_free_blocks:2049: inode 12: block 14 [ 75.090776][ T6402] EXT4-fs (loop2): Remounting filesystem read-only [ 75.104778][ T6402] EXT4-fs (loop2): 1 truncate cleaned up [ 75.105261][ T6402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.202310][ T6410] Injecting memory failure for pfn 0x17cc7e at process virtual address 0x20001000 [ 75.210618][ T6406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.218835][ T6403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.219991][ T6410] Memory failure: 0x17cc7e: Sending SIGBUS to syz.2.368:6410 due to hardware memory corruption [ 75.220034][ T6410] Memory failure: 0x17cc7e: recovery action for dirty LRU page: Recovered [ 75.220049][ T6410] Injecting memory failure for pfn 0x17bf14 at process virtual address 0x20002000 [ 75.220091][ T6410] Memory failure: 0x17bf14: Sending SIGBUS to syz.2.368:6410 due to hardware memory corruption [ 75.220109][ T6410] Memory failure: 0x17bf14: recovery action for dirty LRU page: Recovered [ 75.222341][ T6410] Injecting memory failure for pfn 0x11d81e at process virtual address 0x20003000 [ 75.222433][ T6410] Memory failure: 0x11d81e: Sending SIGBUS to syz.2.368:6410 due to hardware memory corruption [ 75.222455][ T6410] Memory failure: 0x11d81e: recovery action for dirty LRU page: Recovered [ 75.434634][ T4744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.439328][ T4735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.676567][ T6427] set_capacity_and_notify: 7 callbacks suppressed [ 75.676580][ T6427] loop1: detected capacity change from 0 to 512 [ 75.888905][ T6437] FAULT_INJECTION: forcing a failure. [ 75.888905][ T6437] name failslab, interval 1, probability 0, space 0, times 0 [ 75.888925][ T6437] CPU: 0 UID: 0 PID: 6437 Comm: syz.5.375 Not tainted syzkaller #0 PREEMPT [ 75.888935][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 75.888940][ T6437] Call trace: [ 75.888943][ T6437] show_stack+0x2c/0x3c (C) [ 75.888957][ T6437] __dump_stack+0x30/0x40 [ 75.888965][ T6437] dump_stack_lvl+0xd8/0x12c [ 75.888972][ T6437] dump_stack+0x1c/0x28 [ 75.888979][ T6437] should_fail_ex+0x418/0x58c [ 75.888989][ T6437] should_failslab+0xc4/0x120 [ 75.888997][ T6437] kmem_cache_alloc_noprof+0x94/0x5d4 [ 75.889006][ T6437] dst_alloc+0xf4/0x15c [ 75.889016][ T6437] ip6_dst_alloc+0x38/0xc8 [ 75.889026][ T6437] ip6_pol_route+0x738/0xec4 [ 75.889035][ T6437] ip6_pol_route_output+0x60/0x94 [ 75.889042][ T6437] fib6_rule_lookup+0x1a0/0x474 [ 75.889052][ T6437] ip6_route_output_flags+0x300/0x588 [ 75.889061][ T6437] ip6_dst_lookup_tail+0x12c/0x13c8 [ 75.889071][ T6437] ip6_dst_lookup_flow+0x94/0x148 [ 75.889081][ T6437] ip6_sk_dst_lookup_flow+0x5b0/0x7c4 [ 75.889091][ T6437] udpv6_sendmsg+0x13e8/0x1eec [ 75.889100][ T6437] inet6_sendmsg+0xb4/0xd8 [ 75.889109][ T6437] __sock_sendmsg+0xc8/0x17c [ 75.889126][ T6437] ____sys_sendmsg+0x3f8/0x6c8 [ 75.889136][ T6437] ___sys_sendmsg+0x198/0x224 [ 75.889145][ T6437] __sys_sendmmsg+0x204/0x580 [ 75.889156][ T6437] __arm64_sys_sendmmsg+0xac/0xc8 [ 75.889166][ T6437] invoke_syscall+0x98/0x244 [ 75.889174][ T6437] el0_svc_common+0xec/0x23c [ 75.889181][ T6437] do_el0_svc+0x4c/0x5c [ 75.889188][ T6437] el0_svc+0x60/0x1d8 [ 75.889196][ T6437] el0t_64_sync_handler+0x44/0x104 [ 75.889203][ T6437] el0t_64_sync+0x198/0x19c [ 76.024883][ T4737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.109698][ T6445] netlink: 'syz.2.378': attribute type 10 has an invalid length. [ 76.185555][ T4746] Bluetooth: hci0: command 0x0401 tx timeout [ 76.274433][ T6451] block nbd2: Device being setup by another task [ 76.296155][ T4746] block nbd2: Receive control failed (result -107) [ 76.297892][ T6450] nbd2: detected capacity change from 0 to 18 [ 76.299479][ T4413] block nbd2: Dead connection, failed to find a fallback [ 76.299490][ T4413] block nbd2: shutting down sockets [ 76.299513][ T4413] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.299527][ T4413] Buffer I/O error on dev nbd2, logical block 0, async page read [ 76.300605][ T4413] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.300620][ T4413] Buffer I/O error on dev nbd2, logical block 0, async page read [ 76.316326][ T4413] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.316346][ T4413] Buffer I/O error on dev nbd2, logical block 0, async page read [ 76.316394][ T4413] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.316405][ T4413] Buffer I/O error on dev nbd2, logical block 0, async page read [ 76.316453][ T4413] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.316463][ T4413] Buffer I/O error on dev nbd2, logical block 0, async page read [ 76.316934][ T4413] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.316944][ T4413] Buffer I/O error on dev nbd2, logical block 0, async page read [ 76.337673][ T4413] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.337695][ T4413] Buffer I/O error on dev nbd2, logical block 0, async page read [ 76.337748][ T4413] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.337763][ T4413] Buffer I/O error on dev nbd2, logical block 0, async page read [ 76.337779][ T6332] ldm_validate_partition_table(): Disk read failed. [ 76.337812][ T4413] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.337822][ T4413] Buffer I/O error on dev nbd2, logical block 0, async page read [ 76.337965][ T4413] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.337976][ T4413] Buffer I/O error on dev nbd2, logical block 0, async page read [ 76.360376][ T6332] Dev nbd2: unable to read RDB block 0 [ 76.360508][ T6332] nbd2: unable to read partition table [ 76.360572][ T6332] nbd2: partition table beyond EOD, truncated [ 76.406765][ T6451] nbd2: detected capacity change from 18 to 8190 [ 76.407508][ T6332] ldm_validate_partition_table(): Disk read failed. [ 76.407743][ T6332] Dev nbd2: unable to read RDB block 0 [ 76.407995][ T6332] nbd2: unable to read partition table [ 76.551543][ T6462] loop2: detected capacity change from 0 to 512 [ 76.595659][ T6462] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.598643][ T6464] loop1: detected capacity change from 0 to 2048 [ 76.610894][ T6462] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 76.611004][ T6462] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.611645][ T6462] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 76.611696][ T6462] EXT4-fs warning (device loop2): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.611746][ T6462] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 76.611969][ T6462] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 76.612494][ T6462] EXT4-fs (loop2): Remounting filesystem read-only [ 76.612661][ T6462] EXT4-fs (loop2): 1 truncate cleaned up [ 76.613104][ T6462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.667014][ T6464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.745787][ T4735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.999710][ T6478] Injecting memory failure for pfn 0x12171d at process virtual address 0x20001000 [ 77.000101][ T6478] Memory failure: 0x12171d: keeping poisoned page in swap cache [ 77.000128][ T6478] Memory failure: 0x12171d: Sending SIGBUS to syz.2.380:6478 due to hardware memory corruption [ 77.000167][ T6478] Memory failure: 0x12171d: recovery action for dirty swapcache page: Delayed [ 77.000189][ T6478] Injecting memory failure for pfn 0x12171c at process virtual address 0x20002000 [ 77.000218][ T6478] Memory failure: 0x12171c: keeping poisoned page in swap cache [ 77.000229][ T6478] Memory failure: 0x12171c: Sending SIGBUS to syz.2.380:6478 due to hardware memory corruption [ 77.000245][ T6478] Memory failure: 0x12171c: recovery action for dirty swapcache page: Delayed [ 77.000262][ T6478] Injecting memory failure for pfn 0x12171b at process virtual address 0x20003000 [ 77.000284][ T6478] Memory failure: 0x12171b: keeping poisoned page in swap cache [ 77.000294][ T6478] Memory failure: 0x12171b: Sending SIGBUS to syz.2.380:6478 due to hardware memory corruption [ 77.000310][ T6478] Memory failure: 0x12171b: recovery action for dirty swapcache page: Delayed [ 77.137100][ T6480] loop5: detected capacity change from 0 to 512 [ 77.159912][ T6480] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.162666][ T6480] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 77.162759][ T6480] EXT4-fs (loop5): orphan cleanup on readonly fs [ 77.163255][ T6480] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 77.163298][ T6480] EXT4-fs warning (device loop5): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.163344][ T6480] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 77.163551][ T6480] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 77.163742][ T6480] EXT4-fs (loop5): Remounting filesystem read-only [ 77.164186][ T6480] EXT4-fs (loop5): 1 truncate cleaned up [ 77.164638][ T6480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.324999][ T6484] SET target dimension over the limit! [ 77.481530][ T6486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.481706][ T6486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.504185][ T6487] Injecting memory failure for pfn 0x17d2d8 at process virtual address 0x20001000 [ 77.519816][ T6487] Memory failure: 0x17d2d8: keeping poisoned page in swap cache [ 77.519847][ T6487] Memory failure: 0x17d2d8: Sending SIGBUS to syz.5.384:6487 due to hardware memory corruption [ 77.519890][ T6487] Memory failure: 0x17d2d8: recovery action for dirty swapcache page: Delayed [ 77.519922][ T6487] Injecting memory failure for pfn 0x17d2d9 at process virtual address 0x20002000 [ 77.519960][ T6487] Memory failure: 0x17d2d9: keeping poisoned page in swap cache [ 77.519972][ T6487] Memory failure: 0x17d2d9: Sending SIGBUS to syz.5.384:6487 due to hardware memory corruption [ 77.519989][ T6487] Memory failure: 0x17d2d9: recovery action for dirty swapcache page: Delayed [ 77.520006][ T6487] Injecting memory failure for pfn 0x17d2da at process virtual address 0x20003000 [ 77.520033][ T6487] Memory failure: 0x17d2da: keeping poisoned page in swap cache [ 77.520044][ T6487] Memory failure: 0x17d2da: Sending SIGBUS to syz.5.384:6487 due to hardware memory corruption [ 77.520060][ T6487] Memory failure: 0x17d2da: recovery action for dirty swapcache page: Delayed [ 78.476676][ T4737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.744559][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.759569][ T6495] loop2: detected capacity change from 0 to 512 [ 78.781948][ T6495] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.782568][ T6495] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 78.782655][ T6495] EXT4-fs (loop2): orphan cleanup on readonly fs [ 78.782970][ T6495] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 78.783012][ T6495] EXT4-fs warning (device loop2): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.783057][ T6495] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 78.783261][ T6495] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 78.783415][ T6495] EXT4-fs (loop2): Remounting filesystem read-only [ 78.783513][ T6495] EXT4-fs (loop2): 1 truncate cleaned up [ 78.784010][ T6495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.887553][ T6501] Injecting memory failure for pfn 0x12246a at process virtual address 0x20001000 [ 78.932212][ T6501] Memory failure: 0x12246a: Sending SIGBUS to syz.2.389:6501 due to hardware memory corruption [ 78.932263][ T6501] Memory failure: 0x12246a: recovery action for dirty LRU page: Recovered [ 78.932275][ T6501] Injecting memory failure for pfn 0x11f68a at process virtual address 0x20002000 [ 78.934720][ T6501] Memory failure: 0x11f68a: Sending SIGBUS to syz.2.389:6501 due to hardware memory corruption [ 78.934754][ T6501] Memory failure: 0x11f68a: recovery action for dirty LRU page: Recovered [ 78.934765][ T6501] Injecting memory failure for pfn 0x11f688 at process virtual address 0x20003000 [ 78.937543][ T6501] Memory failure: 0x11f688: Sending SIGBUS to syz.2.389:6501 due to hardware memory corruption [ 78.937570][ T6501] Memory failure: 0x11f688: recovery action for dirty LRU page: Recovered [ 78.992210][ T6507] loop5: detected capacity change from 0 to 512 [ 78.999950][ T6507] EXT4-fs: Ignoring removed bh option [ 79.026195][ T6507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.223191][ T6523] FAULT_INJECTION: forcing a failure. [ 79.223191][ T6523] name failslab, interval 1, probability 0, space 0, times 0 [ 79.223213][ T6523] CPU: 0 UID: 0 PID: 6523 Comm: syz.4.396 Not tainted syzkaller #0 PREEMPT [ 79.223227][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 79.223233][ T6523] Call trace: [ 79.223236][ T6523] show_stack+0x2c/0x3c (C) [ 79.223251][ T6523] __dump_stack+0x30/0x40 [ 79.223260][ T6523] dump_stack_lvl+0xd8/0x12c [ 79.223268][ T6523] dump_stack+0x1c/0x28 [ 79.223276][ T6523] should_fail_ex+0x418/0x58c [ 79.223287][ T6523] should_failslab+0xc4/0x120 [ 79.223297][ T6523] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 79.223307][ T6523] __d_alloc+0x50/0x600 [ 79.223319][ T6523] d_alloc+0x54/0x17c [ 79.223329][ T6523] lookup_one_qstr_excl+0x9c/0x200 [ 79.223337][ T6523] __start_dirop+0xb8/0xf4 [ 79.223348][ T6523] start_dirop+0x38/0x4c [ 79.223358][ T6523] simple_start_creating+0xcc/0x114 [ 79.223368][ T6523] debugfs_start_creating+0xd8/0x1bc [ 79.223379][ T6523] __debugfs_create_file+0x7c/0x36c [ 79.223389][ T6523] debugfs_create_file_full+0x58/0x70 [ 79.223399][ T6523] drm_debugfs_clients_add+0xc4/0x188 [ 79.223408][ T6523] drm_file_alloc+0x49c/0x878 [ 79.223419][ T6523] drm_open_helper+0x17c/0x3ec [ 79.223429][ T6523] drm_open+0x188/0x314 [ 79.223439][ T6523] drm_stub_open+0x19c/0x200 [ 79.223447][ T6523] chrdev_open+0x398/0x3e8 [ 79.223459][ T6523] do_dentry_open+0x5c4/0xfbc [ 79.223468][ T6523] vfs_open+0x44/0x2dc [ 79.223475][ T6523] path_openat+0x1084/0x18f0 [ 79.223487][ T6523] do_file_open+0x1c8/0x2e8 [ 79.223498][ T6523] do_sys_openat2+0x114/0x1e8 [ 79.223506][ T6523] do_sys_open+0xb0/0xe0 [ 79.223514][ T6523] __arm64_sys_openat+0xa8/0xc4 [ 79.223523][ T6523] invoke_syscall+0x98/0x244 [ 79.223531][ T6523] el0_svc_common+0xec/0x23c [ 79.223540][ T6523] do_el0_svc+0x4c/0x5c [ 79.223547][ T6523] el0_svc+0x60/0x1d8 [ 79.223556][ T6523] el0t_64_sync_handler+0x44/0x104 [ 79.223564][ T6523] el0t_64_sync+0x198/0x19c [ 79.328515][ T6525] loop6: detected capacity change from 0 to 2048 [ 79.342890][ T6525] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.407210][ T5645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.497168][ T13] IPVS: starting estimator thread 0... [ 79.509501][ T6535] IPVS: set_ctl: invalid protocol: 108 172.30.0.5:20002 [ 79.509862][ T6534] tipc: Started in network mode [ 79.509878][ T6534] tipc: Node identity be706429f5a, cluster identity 4711 [ 79.510003][ T6534] tipc: Enabled bearer , priority 10 [ 79.522419][ T6533] tipc: Resetting bearer [ 79.541972][ T6533] tipc: Disabling bearer [ 79.576714][ T6536] IPVS: using max 57 ests per chain, 136800 per kthread [ 79.613092][ T4737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.701459][ T6542] loop6: detected capacity change from 0 to 8 [ 79.752093][ T6543] veth2: entered promiscuous mode [ 79.752115][ T6543] veth2: entered allmulticast mode [ 79.809347][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.904441][ T6545] syzkaller0: entered promiscuous mode [ 79.904457][ T6545] syzkaller0: entered allmulticast mode [ 80.073339][ T6553] syzkaller0: entered promiscuous mode [ 80.073357][ T6553] syzkaller0: entered allmulticast mode [ 81.137539][ T6559] loop1: detected capacity change from 0 to 1024 [ 81.144338][ T6559] ext2: Bad value for 'debug_want_extra_isize' [ 81.155291][ T6558] FAULT_INJECTION: forcing a failure. [ 81.155291][ T6558] name failslab, interval 1, probability 0, space 0, times 0 [ 81.155310][ T6558] CPU: 0 UID: 0 PID: 6558 Comm: syz.6.408 Not tainted syzkaller #0 PREEMPT [ 81.155321][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 81.155327][ T6558] Call trace: [ 81.155330][ T6558] show_stack+0x2c/0x3c (C) [ 81.155346][ T6558] __dump_stack+0x30/0x40 [ 81.155356][ T6558] dump_stack_lvl+0xd8/0x12c [ 81.155364][ T6558] dump_stack+0x1c/0x28 [ 81.155372][ T6558] should_fail_ex+0x418/0x58c [ 81.155385][ T6558] should_failslab+0xc4/0x120 [ 81.155396][ T6558] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 81.155409][ T6558] aio_alloc_inode+0x2c/0x78 [ 81.155421][ T6558] alloc_inode+0x68/0x198 [ 81.155434][ T6558] alloc_anon_inode+0x28/0x31c [ 81.155443][ T6558] aio_setup_ring+0xe0/0xad4 [ 81.155453][ T6558] ioctx_alloc+0x2ec/0x780 [ 81.155464][ T6558] __arm64_sys_io_setup+0x14c/0x2f4 [ 81.155475][ T6558] invoke_syscall+0x98/0x244 [ 81.155484][ T6558] el0_svc_common+0xec/0x23c [ 81.155493][ T6558] do_el0_svc+0x4c/0x5c [ 81.155501][ T6558] el0_svc+0x60/0x1d8 [ 81.155510][ T6558] el0t_64_sync_handler+0x44/0x104 [ 81.155518][ T6558] el0t_64_sync+0x198/0x19c [ 81.225747][ T6561] netlink: 1 bytes leftover after parsing attributes in process `syz.2.409'. [ 81.241237][ T6558] netlink: 'syz.6.408': attribute type 3 has an invalid length. [ 81.258711][ T6559] loop1: detected capacity change from 0 to 512 [ 81.293708][ T6561] loop2: detected capacity change from 0 to 2048 [ 81.326567][ T6561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.337144][ T6565] FAULT_INJECTION: forcing a failure. [ 81.337144][ T6565] name failslab, interval 1, probability 0, space 0, times 0 [ 81.337166][ T6565] CPU: 0 UID: 0 PID: 6565 Comm: syz.5.411 Not tainted syzkaller #0 PREEMPT [ 81.337178][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 81.337184][ T6565] Call trace: [ 81.337187][ T6565] show_stack+0x2c/0x3c (C) [ 81.337204][ T6565] __dump_stack+0x30/0x40 [ 81.337215][ T6565] dump_stack_lvl+0xd8/0x12c [ 81.337224][ T6565] dump_stack+0x1c/0x28 [ 81.337232][ T6565] should_fail_ex+0x418/0x58c [ 81.337243][ T6565] should_failslab+0xc4/0x120 [ 81.337253][ T6565] __kmalloc_noprof+0x108/0x6c8 [ 81.337263][ T6565] __arm64_sys_futex_waitv+0x244/0x2dc [ 81.337277][ T6565] invoke_syscall+0x98/0x244 [ 81.337286][ T6565] el0_svc_common+0xec/0x23c [ 81.337294][ T6565] do_el0_svc+0x4c/0x5c [ 81.337302][ T6565] el0_svc+0x60/0x1d8 [ 81.337311][ T6565] el0t_64_sync_handler+0x44/0x104 [ 81.337319][ T6565] el0t_64_sync+0x198/0x19c [ 81.390870][ T6565] veth1_macvtap: left promiscuous mode [ 81.429631][ T6565] netlink: 1300 bytes leftover after parsing attributes in process `syz.5.411'. [ 81.466455][ T4735] overlayfs: failed lookup in lower (newroot/75, name='bus', err=-40): overlapping layers [ 81.466604][ T4735] overlayfs: failed lookup in lower (newroot/75, name='bus', err=-40): overlapping layers [ 81.503243][ T4737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.674666][ T6579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.674839][ T6579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.723404][ T6586] loop2: detected capacity change from 0 to 512 [ 83.746397][ T6586] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.757195][ T6586] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 83.757300][ T6586] EXT4-fs (loop2): orphan cleanup on readonly fs [ 83.757566][ T6586] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 83.757609][ T6586] EXT4-fs warning (device loop2): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.632560][ T6586] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 84.638407][ T6586] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 84.638831][ T6586] EXT4-fs (loop2): Remounting filesystem read-only [ 84.638988][ T6586] EXT4-fs (loop2): 1 truncate cleaned up [ 84.639538][ T6586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.679893][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.749210][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.786458][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.804914][ T6588] syzkaller0: entered promiscuous mode [ 84.804929][ T6588] syzkaller0: entered allmulticast mode [ 84.846520][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.902559][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.902589][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.902967][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.902976][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.033490][ T4737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.047968][ T4747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.052729][ T4747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.058214][ T4747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.060947][ T4747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.061530][ T4747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.087522][ T40] bridge_slave_1: left allmulticast mode [ 85.087545][ T40] bridge_slave_1: left promiscuous mode [ 85.087624][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.097666][ T40] bridge_slave_0: left allmulticast mode [ 85.097683][ T40] bridge_slave_0: left promiscuous mode [ 85.097805][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.173080][ T6606] FAULT_INJECTION: forcing a failure. [ 85.173080][ T6606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.173100][ T6606] CPU: 0 UID: 0 PID: 6606 Comm: syz.5.426 Not tainted syzkaller #0 PREEMPT [ 85.173116][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 85.173121][ T6606] Call trace: [ 85.173124][ T6606] show_stack+0x2c/0x3c (C) [ 85.173141][ T6606] __dump_stack+0x30/0x40 [ 85.173150][ T6606] dump_stack_lvl+0xd8/0x12c [ 85.173158][ T6606] dump_stack+0x1c/0x28 [ 85.173166][ T6606] should_fail_ex+0x418/0x58c [ 85.173176][ T6606] should_fail+0x14/0x24 [ 85.173183][ T6606] should_fail_usercopy+0x20/0x30 [ 85.173192][ T6606] _inline_copy_from_user+0x3c/0x188 [ 85.173203][ T6606] memdup_user_nul+0x78/0x120 [ 85.173212][ T6606] smk_write_rules_list+0x1a0/0x330 [ 85.173221][ T6606] smk_write_load+0x50/0x70 [ 85.173228][ T6606] do_loop_readv_writev+0x24c/0x3dc [ 85.173238][ T6606] vfs_writev+0x2c8/0x630 [ 85.173246][ T6606] do_writev+0x134/0x2a8 [ 85.173254][ T6606] __arm64_sys_writev+0x88/0x9c [ 85.173263][ T6606] invoke_syscall+0x98/0x244 [ 85.173271][ T6606] el0_svc_common+0xec/0x23c [ 85.173278][ T6606] do_el0_svc+0x4c/0x5c [ 85.173285][ T6606] el0_svc+0x60/0x1d8 [ 85.173293][ T6606] el0t_64_sync_handler+0x44/0x104 [ 85.173300][ T6606] el0t_64_sync+0x198/0x19c [ 85.250363][ T6605] loop2: detected capacity change from 0 to 4096 [ 85.250767][ T6605] ext4: Unknown parameter 'nouser_xattr' [ 85.338608][ T6621] loop6: detected capacity change from 0 to 512 [ 85.349355][ T6621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.349377][ T6621] ext4: Unknown parameter 'mask' [ 85.375980][ T6621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.380360][ T6621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.541987][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.546797][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.547813][ T40] bond0 (unregistering): Released all slaves [ 85.662508][ T6632] loop4: detected capacity change from 0 to 512 [ 85.689997][ T6632] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.698082][ T6632] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 85.698218][ T6632] EXT4-fs (loop4): orphan cleanup on readonly fs [ 85.706757][ T6632] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 85.706809][ T6632] EXT4-fs warning (device loop4): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.706879][ T6632] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 85.708789][ T6632] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 85.710751][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 85.710763][ C0] EXT4-fs (loop4): initial error at time 855: mb_free_blocks:2049: inode 12: block 14 [ 85.710784][ C0] EXT4-fs (loop4): last error at time 855: mb_free_blocks:2049: inode 12: block 14 [ 85.733922][ T6632] EXT4-fs (loop4): Remounting filesystem read-only [ 85.735043][ T6632] EXT4-fs (loop4): 1 truncate cleaned up [ 85.735509][ T6632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.974658][ T6597] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.101607][ T6654] Injecting memory failure for pfn 0x17d9d6 at process virtual address 0x20001000 [ 86.142863][ T6654] Memory failure: 0x17d9d6: keeping poisoned page in swap cache [ 86.142892][ T6654] Memory failure: 0x17d9d6: Sending SIGBUS to syz.4.431:6654 due to hardware memory corruption [ 86.142930][ T6654] Memory failure: 0x17d9d6: recovery action for dirty swapcache page: Delayed [ 86.142974][ T6654] Injecting memory failure for pfn 0x17d9d7 at process virtual address 0x20002000 [ 86.143050][ T6654] Memory failure: 0x17d9d7: keeping poisoned page in swap cache [ 86.143061][ T6654] Memory failure: 0x17d9d7: Sending SIGBUS to syz.4.431:6654 due to hardware memory corruption [ 86.143078][ T6654] Memory failure: 0x17d9d7: recovery action for dirty swapcache page: Delayed [ 86.143095][ T6654] Injecting memory failure for pfn 0x17d9d8 at process virtual address 0x20003000 [ 86.143123][ T6654] Memory failure: 0x17d9d8: keeping poisoned page in swap cache [ 86.143133][ T6654] Memory failure: 0x17d9d8: Sending SIGBUS to syz.4.431:6654 due to hardware memory corruption [ 86.143149][ T6654] Memory failure: 0x17d9d8: recovery action for dirty swapcache page: Delayed [ 86.306986][ T6659] loop6: detected capacity change from 0 to 512 [ 86.313013][ T40] hsr_slave_0: left promiscuous mode [ 86.313345][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.313357][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.334995][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.335013][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.346154][ T6659] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.346806][ T6659] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 86.346897][ T6659] EXT4-fs (loop6): orphan cleanup on readonly fs [ 86.347240][ T6659] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 86.347285][ T6659] EXT4-fs warning (device loop6): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.347330][ T6659] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 86.349227][ T6659] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 86.360861][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 86.360877][ C0] EXT4-fs (loop6): initial error at time 855: mb_free_blocks:2049: inode 12: block 14 [ 86.360895][ C0] EXT4-fs (loop6): last error at time 855: mb_free_blocks:2049: inode 12: block 14 [ 86.372152][ T6659] EXT4-fs (loop6): Remounting filesystem read-only [ 86.375966][ T6659] EXT4-fs (loop6): 1 truncate cleaned up [ 86.376450][ T6659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.377297][ T40] veth1_macvtap: left promiscuous mode [ 86.377324][ T40] veth0_macvtap: left promiscuous mode [ 86.377451][ T40] veth1_vlan: left promiscuous mode [ 86.377487][ T40] veth0_vlan: left promiscuous mode [ 86.791769][ T40] team0 (unregistering): Port device team_slave_1 removed [ 86.804556][ T40] team0 (unregistering): Port device team_slave_0 removed [ 86.970082][ T4426] 8021q: adding VLAN 0 to HW filter on device eth8 [ 87.005798][ T4747] Bluetooth: hci0: command tx timeout [ 87.051366][ T4744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.147694][ T6672] netlink: 'syz.5.445': attribute type 1 has an invalid length. [ 87.203326][ T5645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.631814][ T6597] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.631841][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.631915][ T6597] bridge_slave_0: entered allmulticast mode [ 87.632362][ T6597] bridge_slave_0: entered promiscuous mode [ 87.647352][ T6597] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.647459][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.647520][ T6597] bridge_slave_1: entered allmulticast mode [ 87.647943][ T6597] bridge_slave_1: entered promiscuous mode [ 87.707897][ T6597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.715802][ T6597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.769952][ T6597] team0: Port device team_slave_0 added [ 87.774714][ T6597] team0: Port device team_slave_1 added [ 87.823809][ T6697] loop6: detected capacity change from 0 to 512 [ 87.824255][ T6597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.824268][ T6597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.824284][ T6597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.849290][ T6597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.849306][ T6597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.849320][ T6597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.868259][ T6697] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.869888][ T6697] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 87.869992][ T6697] EXT4-fs (loop6): orphan cleanup on readonly fs [ 87.870564][ T6697] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 87.870617][ T6697] EXT4-fs warning (device loop6): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.870669][ T6697] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 87.881380][ T6697] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 87.884944][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 87.884956][ C0] EXT4-fs (loop6): initial error at time 857: mb_free_blocks:2049: inode 12: block 14 [ 87.884975][ C0] EXT4-fs (loop6): last error at time 857: mb_free_blocks:2049: inode 12: block 14 [ 87.898202][ T6697] EXT4-fs (loop6): Remounting filesystem read-only [ 87.899724][ T6697] EXT4-fs (loop6): 1 truncate cleaned up [ 87.905974][ T6697] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.999927][ T6702] loop5: detected capacity change from 0 to 512 [ 88.009004][ T6597] hsr_slave_0: entered promiscuous mode [ 88.013774][ T6597] hsr_slave_1: entered promiscuous mode [ 88.013980][ T6597] debugfs: 'hsr0' already exists in 'hsr' [ 88.013991][ T6597] Cannot create hsr debugfs directory [ 88.014428][ T6702] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 88.056497][ T6702] EXT4-fs (loop5): 1 truncate cleaned up [ 88.057396][ T6702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.390076][ T6708] GUP no longer grows the stack in syz.5.439 (6708): 20004000-2000a000 (20002000) [ 88.390095][ T6708] CPU: 0 UID: 0 PID: 6708 Comm: syz.5.439 Not tainted syzkaller #0 PREEMPT [ 88.390106][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 88.390118][ T6708] Call trace: [ 88.390121][ T6708] show_stack+0x2c/0x3c (C) [ 88.390139][ T6708] __dump_stack+0x30/0x40 [ 88.390150][ T6708] dump_stack_lvl+0xd8/0x12c [ 88.390160][ T6708] dump_stack+0x1c/0x28 [ 88.390168][ T6708] gup_vma_lookup+0x1ac/0x1cc [ 88.390181][ T6708] __get_user_pages+0x2b4/0x13b0 [ 88.390191][ T6708] get_user_pages_remote+0x278/0x83c [ 88.390203][ T6708] __access_remote_vm+0x1d8/0x68c [ 88.390212][ T6708] access_remote_vm+0x48/0x60 [ 88.390221][ T6708] proc_pid_cmdline_read+0x4cc/0xa14 [ 88.390234][ T6708] do_loop_readv_writev+0x24c/0x3dc [ 88.390245][ T6708] vfs_readv+0x258/0x520 [ 88.390255][ T6708] do_preadv+0x11c/0x224 [ 88.390265][ T6708] __arm64_sys_preadv+0xac/0xc4 [ 88.390274][ T6708] invoke_syscall+0x98/0x244 [ 88.390284][ T6708] el0_svc_common+0xec/0x23c [ 88.390292][ T6708] do_el0_svc+0x4c/0x5c [ 88.390300][ T6708] el0_svc+0x60/0x1d8 [ 88.390309][ T6708] el0t_64_sync_handler+0x44/0x104 [ 88.390317][ T6708] el0t_64_sync+0x198/0x19c [ 88.431378][ T4426] 8021q: adding VLAN 0 to HW filter on device eth9 [ 88.506477][ T6710] Injecting memory failure for pfn 0x1802bd at process virtual address 0x20001000 [ 88.516664][ T6710] Memory failure: 0x1802bd: keeping poisoned page in swap cache [ 88.516686][ T6710] Memory failure: 0x1802bd: Sending SIGBUS to syz.6.438:6710 due to hardware memory corruption [ 88.516722][ T6710] Memory failure: 0x1802bd: recovery action for dirty swapcache page: Delayed [ 88.516748][ T6710] Injecting memory failure for pfn 0x1802be at process virtual address 0x20002000 [ 88.516787][ T6710] Memory failure: 0x1802be: keeping poisoned page in swap cache [ 88.516799][ T6710] Memory failure: 0x1802be: Sending SIGBUS to syz.6.438:6710 due to hardware memory corruption [ 88.516816][ T6710] Memory failure: 0x1802be: recovery action for dirty swapcache page: Delayed [ 88.516835][ T6710] Injecting memory failure for pfn 0x1802bf at process virtual address 0x20003000 [ 88.519472][ T6710] Memory failure: 0x1802bf: keeping poisoned page in swap cache [ 88.519518][ T6710] Memory failure: 0x1802bf: Sending SIGBUS to syz.6.438:6710 due to hardware memory corruption [ 88.519541][ T6710] Memory failure: 0x1802bf: recovery action for dirty swapcache page: Delayed [ 88.718585][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.718751][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.748406][ T6597] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 88.864635][ T6597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.865031][ T6597] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 88.865925][ T6597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.866216][ T6597] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 88.866993][ T6597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.867266][ T6597] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 88.873526][ T6597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.707804][ T4747] Bluetooth: hci0: command tx timeout [ 89.729413][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.895500][ T6597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.926777][ T6597] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.939458][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.939486][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.959914][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.959944][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.986490][ T6734] loop5: detected capacity change from 0 to 512 [ 90.009804][ T6734] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 90.009974][ T6734] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 90.018454][ T6734] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #13: comm syz.5.444: iget: bad i_size value: 12154757448730 [ 90.018481][ T6734] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 90.024900][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 90.024914][ C0] EXT4-fs (loop5): initial error at time 859: ext4_orphan_get:1403: inode 13 [ 90.024929][ C0] EXT4-fs (loop5): last error at time 859: ext4_orphan_get:1403: inode 13 [ 90.029270][ T6734] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.444: couldn't read orphan inode 13 (err -117) [ 90.029293][ T6734] loop5: lost filesystem error report for type 5 error -117 [ 90.049260][ T6734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.104894][ T6734] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 90.245775][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.270826][ T5645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.392555][ T4426] 8021q: adding VLAN 0 to HW filter on device eth10 [ 90.531270][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.448'. [ 90.598397][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.448'. [ 90.670411][ T6597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.677705][ T6771] loop2: detected capacity change from 0 to 4096 [ 90.679566][ T6771] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.688920][ T6771] EXT4-fs (loop2): Test dummy encryption mode enabled [ 90.697932][ T6771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.707435][ T6779] 0x000000000003-0x000000010001 : "" [ 90.715220][ T6779] ftl_cs: FTL header corrupt! [ 90.778980][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.779001][ T6771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.786180][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.786193][ T6771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.065056][ T6802] netlink: 'syz.6.454': attribute type 6 has an invalid length. [ 91.101921][ T4737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.169861][ T6597] veth0_vlan: entered promiscuous mode [ 91.194813][ T6597] veth1_vlan: entered promiscuous mode [ 91.261990][ T6597] veth0_macvtap: entered promiscuous mode [ 91.270323][ T6597] veth1_macvtap: entered promiscuous mode [ 91.312871][ T6597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.324221][ T6597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.340760][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.340800][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.340816][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.340830][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.347607][ T6810] loop5: detected capacity change from 0 to 512 [ 91.385848][ T6810] vfat: Unknown parameter '' [ 91.391921][ T6815] loop6: detected capacity change from 0 to 512 [ 91.422628][ T6815] EXT4-fs (loop6): 1 truncate cleaned up [ 91.428715][ T6815] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.480675][ T6820] device-mapper: raid: Choosing default region size of 4MiB [ 91.480990][ T6820] device-mapper: table: 248:3: raid: RAID device lookup failure (-ENOENT) [ 91.481000][ T6820] device-mapper: ioctl: error adding target to table [ 91.503586][ T4426] 8021q: adding VLAN 0 to HW filter on device eth11 [ 91.574691][ T4875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.574707][ T4875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.624047][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.624062][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.657155][ T4747] Bluetooth: hci0: command tx timeout [ 91.889288][ T6832] 0x000000000003-0x000000010001 : "" [ 91.900374][ T6832] ftl_cs: FTL header corrupt! [ 92.199709][ T5645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.218972][ T4747] Bluetooth: hci0: Invalid connection link type handle 0x00c8 [ 92.254325][ T6836] Injecting memory failure for pfn 0x121b32 at process virtual address 0x20ffe000 [ 92.280232][ T6836] Memory failure: 0x121b32: Sending SIGBUS to syz.7.422:6836 due to hardware memory corruption [ 92.280288][ T6836] Memory failure: 0x121b32: recovery action for dirty LRU page: Recovered [ 92.297500][ T6849] netlink: 'syz.4.466': attribute type 6 has an invalid length. [ 92.400203][ T6859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.400392][ T6859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.401042][ T6858] netlink: 28 bytes leftover after parsing attributes in process `syz.6.471'. [ 94.226774][ T4746] Bluetooth: hci0: command tx timeout [ 94.319820][ T6870] loop5: detected capacity change from 0 to 512 [ 94.325630][ T4747] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 94.327086][ T4747] Bluetooth: Frame is too long (len 10, expected len 4) [ 94.328135][ T4747] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 94.337143][ T6870] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.344543][ T6870] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 94.344680][ T6870] EXT4-fs (loop5): orphan cleanup on readonly fs [ 94.351482][ T6870] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 94.351533][ T6870] EXT4-fs warning (device loop5): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.351584][ T6870] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 94.352314][ T6870] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 94.353214][ T6870] EXT4-fs (loop5): Remounting filesystem read-only [ 94.353547][ T6870] EXT4-fs (loop5): 1 truncate cleaned up [ 94.353996][ T6870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.380833][ T6869] loop2: detected capacity change from 0 to 512 [ 94.396241][ T6869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.441191][ T6869] capability: warning: `syz.2.472' uses 32-bit capabilities (legacy support in use) [ 94.471457][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.662961][ T6883] 0x000000000003-0x000000010001 : "" [ 94.668789][ T6883] ftl_cs: FTL header corrupt! [ 94.848605][ T6891] loop5: detected capacity change from 0 to 512 [ 94.851362][ T6891] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 94.873243][ T6891] EXT4-fs (loop5): 1 truncate cleaned up [ 94.876831][ T6891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.993996][ T4737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.012785][ T6894] netlink: 'syz.7.480': attribute type 6 has an invalid length. [ 95.217226][ T6905] netlink: 40 bytes leftover after parsing attributes in process `syz.2.483'. [ 95.407218][ T6909] loop4: detected capacity change from 0 to 512 [ 95.414101][ T6909] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.414773][ T6909] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 95.414870][ T6909] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.429255][ T6909] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 95.429317][ T6909] EXT4-fs warning (device loop4): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.429372][ T6909] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 95.429619][ T6909] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 95.429876][ T6909] EXT4-fs (loop4): Remounting filesystem read-only [ 95.430000][ T6909] EXT4-fs (loop4): 1 truncate cleaned up [ 95.430571][ T6909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.519150][ T4744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.584742][ T6912] loop6: detected capacity change from 0 to 4096 [ 95.591536][ T6912] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.591639][ T6912] EXT4-fs (loop6): Test dummy encryption mode enabled [ 95.594982][ T6912] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 95.595039][ T6912] System zones: 0-5 [ 95.608250][ T6912] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.681153][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.769518][ T6924] loop5: detected capacity change from 0 to 512 [ 95.777522][ T6924] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 95.791954][ T6924] EXT4-fs (loop5): 1 truncate cleaned up [ 95.792458][ T6924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.804499][ T5645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.450168][ T6940] netlink: 'syz.6.493': attribute type 6 has an invalid length. [ 96.506421][ T6942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.506589][ T6942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.628714][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.733285][ T6965] FAULT_INJECTION: forcing a failure. [ 97.733285][ T6965] name failslab, interval 1, probability 0, space 0, times 0 [ 97.733305][ T6965] CPU: 0 UID: 0 PID: 6965 Comm: syz.5.500 Not tainted syzkaller #0 PREEMPT [ 97.733316][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 97.733322][ T6965] Call trace: [ 97.733325][ T6965] show_stack+0x2c/0x3c (C) [ 97.733341][ T6965] __dump_stack+0x30/0x40 [ 97.733350][ T6965] dump_stack_lvl+0xd8/0x12c [ 97.733359][ T6965] dump_stack+0x1c/0x28 [ 97.733367][ T6965] should_fail_ex+0x418/0x58c [ 97.733378][ T6965] should_failslab+0xc4/0x120 [ 97.733388][ T6965] kmem_cache_alloc_noprof+0x94/0x5d4 [ 97.733399][ T6965] alloc_empty_file+0x6c/0x1cc [ 97.733410][ T6965] path_openat+0x78/0x18f0 [ 97.733422][ T6965] do_file_open+0x1c8/0x2e8 [ 97.733433][ T6965] do_sys_openat2+0x114/0x1e8 [ 97.733442][ T6965] do_sys_open+0xb0/0xe0 [ 97.733450][ T6965] __arm64_sys_openat+0xa8/0xc4 [ 97.733459][ T6965] invoke_syscall+0x98/0x244 [ 97.733468][ T6965] el0_svc_common+0xec/0x23c [ 97.733476][ T6965] do_el0_svc+0x4c/0x5c [ 97.733484][ T6965] el0_svc+0x60/0x1d8 [ 97.733494][ T6965] el0t_64_sync_handler+0x44/0x104 [ 97.733502][ T6965] el0t_64_sync+0x198/0x19c [ 97.773878][ T6965] 0x000000000003-0x000000010001 : "" [ 97.787353][ T6965] ftl_cs: FTL header corrupt! [ 97.945147][ T6972] loop7: detected capacity change from 0 to 512 [ 97.988404][ T6972] FAULT_INJECTION: forcing a failure. [ 97.988404][ T6972] name failslab, interval 1, probability 0, space 0, times 0 [ 97.988426][ T6972] CPU: 0 UID: 0 PID: 6972 Comm: syz.7.502 Not tainted syzkaller #0 PREEMPT [ 97.988437][ T6972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 97.988443][ T6972] Call trace: [ 97.988446][ T6972] show_stack+0x2c/0x3c (C) [ 97.988461][ T6972] __dump_stack+0x30/0x40 [ 97.988470][ T6972] dump_stack_lvl+0xd8/0x12c [ 97.988478][ T6972] dump_stack+0x1c/0x28 [ 97.988486][ T6972] should_fail_ex+0x418/0x58c [ 97.988497][ T6972] should_failslab+0xc4/0x120 [ 97.988507][ T6972] kmem_cache_alloc_node_noprof+0x98/0x604 [ 97.988518][ T6972] __alloc_skb+0x1f0/0x610 [ 97.988531][ T6972] tcp_stream_alloc_skb+0x44/0x2dc [ 97.988542][ T6972] tcp_write_xmit+0xcf0/0x4794 [ 97.988552][ T6972] __tcp_push_pending_frames+0x98/0x320 [ 97.988562][ T6972] tcp_push+0x3d0/0x5ac [ 97.988571][ T6972] tcp_sendmsg_locked+0x1368/0x3198 [ 97.988582][ T6972] tcp_sendmsg+0x40/0x64 [ 97.988591][ T6972] inet_sendmsg+0xb4/0xd8 [ 97.988603][ T6972] __sock_sendmsg+0xc8/0x17c [ 97.988614][ T6972] __sys_sendto+0x250/0x328 [ 97.988625][ T6972] __arm64_sys_sendto+0xec/0x10c [ 97.988636][ T6972] invoke_syscall+0x98/0x244 [ 97.988645][ T6972] el0_svc_common+0xec/0x23c [ 97.988654][ T6972] do_el0_svc+0x4c/0x5c [ 97.988662][ T6972] el0_svc+0x60/0x1d8 [ 97.988670][ T6972] el0t_64_sync_handler+0x44/0x104 [ 97.988678][ T6972] el0t_64_sync+0x198/0x19c [ 98.203703][ T6990] loop5: detected capacity change from 0 to 512 [ 98.206985][ T4747] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.221237][ T6990] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.232015][ T6990] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 98.232118][ T6990] EXT4-fs (loop5): orphan cleanup on readonly fs [ 98.233444][ T6990] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 98.233497][ T6990] EXT4-fs warning (device loop5): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.233546][ T6990] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 98.415678][ T6990] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 98.415953][ T6990] EXT4-fs (loop5): Remounting filesystem read-only [ 98.416229][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 98.416241][ C0] EXT4-fs (loop5): initial error at time 868: mb_free_blocks:2049: inode 12: block 14 [ 98.416259][ C0] EXT4-fs (loop5): last error at time 868: mb_free_blocks:2049: inode 12: block 14 [ 98.422078][ T6990] EXT4-fs (loop5): 1 truncate cleaned up [ 98.433716][ T6990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.535141][ T6999] macsec1: entered promiscuous mode [ 98.601477][ T7001] Injecting memory failure for pfn 0x180995 at process virtual address 0x20001000 [ 98.607092][ T7001] Memory failure: 0x180995: keeping poisoned page in swap cache [ 98.607124][ T7001] Memory failure: 0x180995: Sending SIGBUS to syz.5.508:7001 due to hardware memory corruption [ 98.607166][ T7001] Memory failure: 0x180995: recovery action for dirty swapcache page: Delayed [ 98.607192][ T7001] Injecting memory failure for pfn 0x180996 at process virtual address 0x20002000 [ 98.607284][ T7001] Memory failure: 0x180996: keeping poisoned page in swap cache [ 98.607296][ T7001] Memory failure: 0x180996: Sending SIGBUS to syz.5.508:7001 due to hardware memory corruption [ 98.607313][ T7001] Memory failure: 0x180996: recovery action for dirty swapcache page: Delayed [ 98.607331][ T7001] Injecting memory failure for pfn 0x180997 at process virtual address 0x20003000 [ 98.607356][ T7001] Memory failure: 0x180997: keeping poisoned page in swap cache [ 98.607366][ T7001] Memory failure: 0x180997: Sending SIGBUS to syz.5.508:7001 due to hardware memory corruption [ 98.607384][ T7001] Memory failure: 0x180997: recovery action for dirty swapcache page: Delayed [ 98.645397][ T7002] loop2: detected capacity change from 0 to 512 [ 98.667462][ T7002] loop2: detected capacity change from 0 to 512 [ 98.796420][ T4746] Bluetooth: hci0: status 0xff [ 99.005085][ T7009] loop6: detected capacity change from 0 to 512 [ 99.019707][ T7009] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 99.029002][ T7009] EXT4-fs (loop6): 1 truncate cleaned up [ 99.032287][ T7009] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.326568][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.574406][ T7025] loop5: detected capacity change from 0 to 512 [ 99.590725][ T7025] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 99.802159][ T7027] netlink: 'syz.4.516': attribute type 6 has an invalid length. [ 99.849804][ T7025] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 99.849927][ T7025] EXT4-fs (loop5): orphan cleanup on readonly fs [ 99.851098][ T5645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.852121][ T7025] EXT4-fs (loop5): 1 orphan inode deleted [ 99.853713][ T7025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 99.915434][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.974955][ T7030] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.018203][ T7030] loop7: detected capacity change from 0 to 2048 [ 100.053504][ T7030] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.080266][ T7030] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 100.086997][ T7032] loop6: detected capacity change from 0 to 512 [ 100.090772][ T7032] vfat: Unknown parameter 'R V[4ء)}곻Wz#' [ 100.110431][ T7038] loop5: detected capacity change from 0 to 512 [ 100.110669][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.520'. [ 100.378663][ T7038] FAULT_INJECTION: forcing a failure. [ 100.378663][ T7038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.378685][ T7038] CPU: 0 UID: 0 PID: 7038 Comm: syz.5.522 Not tainted syzkaller #0 PREEMPT [ 100.378696][ T7038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 100.378701][ T7038] Call trace: [ 100.378704][ T7038] show_stack+0x2c/0x3c (C) [ 100.378720][ T7038] __dump_stack+0x30/0x40 [ 100.378729][ T7038] dump_stack_lvl+0xd8/0x12c [ 100.378737][ T7038] dump_stack+0x1c/0x28 [ 100.378745][ T7038] should_fail_ex+0x418/0x58c [ 100.378756][ T7038] should_fail+0x14/0x24 [ 100.378765][ T7038] should_fail_usercopy+0x20/0x30 [ 100.378776][ T7038] _copy_from_iter+0x188/0x1064 [ 100.378788][ T7038] tcp_sendmsg_locked+0x1080/0x3198 [ 100.378800][ T7038] tcp_sendmsg+0x40/0x64 [ 100.378809][ T7038] inet_sendmsg+0xb4/0xd8 [ 100.378821][ T7038] __sock_sendmsg+0xc8/0x17c [ 100.378832][ T7038] __sys_sendto+0x250/0x328 [ 100.378843][ T7038] __arm64_sys_sendto+0xec/0x10c [ 100.378855][ T7038] invoke_syscall+0x98/0x244 [ 100.378864][ T7038] el0_svc_common+0xec/0x23c [ 100.378872][ T7038] do_el0_svc+0x4c/0x5c [ 100.378880][ T7038] el0_svc+0x60/0x1d8 [ 100.378889][ T7038] el0t_64_sync_handler+0x44/0x104 [ 100.378896][ T7038] el0t_64_sync+0x198/0x19c [ 100.493586][ T7046] loop6: detected capacity change from 0 to 512 [ 100.521994][ T7046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.525473][ T7042] mmap: syz.6.523 (7042): VmData 37756928 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 100.529305][ T7049] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 100.544870][ T7049] EXT4-fs (loop5): 1 truncate cleaned up [ 100.547889][ T7049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.584792][ T5645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.737576][ T6597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.754065][ T7043] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.754080][ T7043] EXT4-fs (loop4): Test dummy encryption mode enabled [ 100.757708][ T7043] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 100.757744][ T7043] System zones: 0-5 [ 100.773794][ T7043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.844034][ T7062] netlink: 'syz.7.527': attribute type 1 has an invalid length. [ 101.100249][ T4744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.506938][ T7073] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.511474][ T7073] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 101.511575][ T7073] EXT4-fs (loop6): orphan cleanup on readonly fs [ 101.518301][ T7073] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 101.518356][ T7073] EXT4-fs warning (device loop6): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.518408][ T7073] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 101.520663][ T7073] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 101.521048][ T7073] EXT4-fs (loop6): Remounting filesystem read-only [ 101.521203][ T7073] EXT4-fs (loop6): 1 truncate cleaned up [ 101.521250][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 101.521270][ C0] EXT4-fs (loop6): initial error at time 871: mb_free_blocks:2049: inode 12: block 14 [ 101.521302][ C0] EXT4-fs (loop6): last error at time 871: mb_free_blocks:2049: inode 12: block 14 [ 101.552399][ T7073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.556109][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.609614][ T7073] Injecting memory failure for pfn 0x11e953 at process virtual address 0x20001000 [ 101.622944][ T7073] Memory failure: 0x11e953: keeping poisoned page in swap cache [ 101.622975][ T7073] Memory failure: 0x11e953: Sending SIGBUS to syz.6.531:7073 due to hardware memory corruption [ 101.623015][ T7073] Memory failure: 0x11e953: recovery action for dirty swapcache page: Delayed [ 101.623038][ T7073] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20002000 [ 101.623057][ T7073] Memory failure: 0x216a31: Sending SIGBUS to syz.6.531:7073 due to hardware memory corruption [ 101.623067][ T7073] Memory failure: 0x216a31: recovery action for already poisoned page: Failed [ 101.706129][ T7080] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.706949][ T7080] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 101.707071][ T7080] EXT4-fs (loop5): orphan cleanup on readonly fs [ 101.725781][ T7080] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 101.725981][ T7080] EXT4-fs warning (device loop5): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.726036][ T7080] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 101.727327][ T7080] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 101.730159][ T7080] EXT4-fs (loop5): Remounting filesystem read-only [ 101.730370][ T7080] EXT4-fs (loop5): 1 truncate cleaned up [ 101.746548][ T7080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.755119][ T5645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.797211][ T7083] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.811957][ T7083] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 101.812082][ T7083] EXT4-fs (loop7): orphan cleanup on readonly fs [ 101.814611][ T7083] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 101.814670][ T7083] EXT4-fs warning (device loop7): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.815850][ T7083] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 101.819415][ T7083] EXT4-fs error (device loop7): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 101.827002][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 101.827016][ C0] EXT4-fs (loop7): initial error at time 872: mb_free_blocks:2049: inode 12: block 14 [ 101.827036][ C0] EXT4-fs (loop7): last error at time 872: mb_free_blocks:2049: inode 12: block 14 [ 101.841976][ T7083] EXT4-fs (loop7): Remounting filesystem read-only [ 101.847298][ T7080] Injecting memory failure for pfn 0x17c6ed at process virtual address 0x20001000 [ 101.847944][ T7083] EXT4-fs (loop7): 1 truncate cleaned up [ 101.848441][ T7083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.863779][ T7080] Memory failure: 0x17c6ed: keeping poisoned page in swap cache [ 101.863809][ T7080] Memory failure: 0x17c6ed: Sending SIGBUS to syz.5.532:7080 due to hardware memory corruption [ 101.863851][ T7080] Memory failure: 0x17c6ed: recovery action for dirty swapcache page: Delayed [ 101.863874][ T7080] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20002000 [ 101.863893][ T7080] Memory failure: 0x216a31: Sending SIGBUS to syz.5.532:7080 due to hardware memory corruption [ 101.863903][ T7080] Memory failure: 0x216a31: recovery action for already poisoned page: Failed [ 101.975653][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.181523][ T7093] FAULT_INJECTION: forcing a failure. [ 102.181523][ T7093] name failslab, interval 1, probability 0, space 0, times 0 [ 102.181544][ T7093] CPU: 0 UID: 0 PID: 7093 Comm: syz.2.536 Not tainted syzkaller #0 PREEMPT [ 102.181555][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 102.181561][ T7093] Call trace: [ 102.181564][ T7093] show_stack+0x2c/0x3c (C) [ 102.181579][ T7093] __dump_stack+0x30/0x40 [ 102.181588][ T7093] dump_stack_lvl+0xd8/0x12c [ 102.181597][ T7093] dump_stack+0x1c/0x28 [ 102.181605][ T7093] should_fail_ex+0x418/0x58c [ 102.181615][ T7093] should_failslab+0xc4/0x120 [ 102.181626][ T7093] kmem_cache_alloc_node_noprof+0x98/0x604 [ 102.181637][ T7093] __alloc_skb+0x1f0/0x610 [ 102.181649][ T7093] tcp_stream_alloc_skb+0x44/0x2dc [ 102.181660][ T7093] tcp_write_xmit+0xcf0/0x4794 [ 102.181671][ T7093] __tcp_push_pending_frames+0x98/0x320 [ 102.181681][ T7093] tcp_push+0x3d0/0x5ac [ 102.181690][ T7093] tcp_sendmsg_locked+0x1368/0x3198 [ 102.181701][ T7093] tcp_sendmsg+0x40/0x64 [ 102.181711][ T7093] inet_sendmsg+0xb4/0xd8 [ 102.181722][ T7093] __sock_sendmsg+0xc8/0x17c [ 102.181733][ T7093] __sys_sendto+0x250/0x328 [ 102.181744][ T7093] __arm64_sys_sendto+0xec/0x10c [ 102.181756][ T7093] invoke_syscall+0x98/0x244 [ 102.181765][ T7093] el0_svc_common+0xec/0x23c [ 102.181773][ T7093] do_el0_svc+0x4c/0x5c [ 102.181781][ T7093] el0_svc+0x60/0x1d8 [ 102.181789][ T7093] el0t_64_sync_handler+0x44/0x104 [ 102.181798][ T7093] el0t_64_sync+0x198/0x19c [ 102.455876][ T7102] netlink: 'syz.5.535': attribute type 6 has an invalid length. [ 102.478222][ T7105] Injecting memory failure for pfn 0x1224e9 at process virtual address 0x20001000 [ 102.488251][ T7089] vfat: Unknown parameter 'R V[4ء)}곻Wz#' [ 102.501893][ T7105] Memory failure: 0x1224e9: keeping poisoned page in swap cache [ 102.501924][ T7105] Memory failure: 0x1224e9: Sending SIGBUS to syz.7.533:7105 due to hardware memory corruption [ 102.501964][ T7105] Memory failure: 0x1224e9: recovery action for dirty swapcache page: Delayed [ 102.501995][ T7105] Injecting memory failure for pfn 0x1224eb at process virtual address 0x20002000 [ 102.504651][ T7105] Memory failure: 0x1224eb: keeping poisoned page in swap cache [ 102.504672][ T7105] Memory failure: 0x1224eb: Sending SIGBUS to syz.7.533:7105 due to hardware memory corruption [ 102.504698][ T7105] Memory failure: 0x1224eb: recovery action for dirty swapcache page: Delayed [ 102.504725][ T7105] Injecting memory failure for pfn 0x11fa6f at process virtual address 0x20003000 [ 102.504762][ T7105] Memory failure: 0x11fa6f: keeping poisoned page in swap cache [ 102.504775][ T7105] Memory failure: 0x11fa6f: Sending SIGBUS to syz.7.533:7105 due to hardware memory corruption [ 102.504793][ T7105] Memory failure: 0x11fa6f: recovery action for dirty swapcache page: Delayed [ 102.539876][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.534'. [ 102.765726][ T7117] set_capacity_and_notify: 6 callbacks suppressed [ 102.765739][ T7117] loop6: detected capacity change from 0 to 512 [ 102.777961][ T7117] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 102.793957][ T7117] EXT4-fs (loop6): 1 truncate cleaned up [ 102.794404][ T7117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.973223][ T7123] netlink: 'syz.5.543': attribute type 1 has an invalid length. [ 103.029838][ T7115] loop4: detected capacity change from 0 to 4096 [ 103.238993][ T7115] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.239021][ T7115] EXT4-fs (loop4): Test dummy encryption mode enabled [ 103.257315][ T7115] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 103.257368][ T7115] System zones: 0-5 [ 103.262023][ T7115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.398614][ T4744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.462765][ T6597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.519879][ T7138] loop2: detected capacity change from 0 to 256 [ 103.583133][ T5645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.726453][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 103.821021][ T7159] loop5: detected capacity change from 0 to 512 [ 103.830091][ T7159] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 103.850771][ T7159] EXT4-fs (loop5): 1 truncate cleaned up [ 103.902357][ T7159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.652166][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.828577][ T7188] loop4: detected capacity change from 0 to 512 [ 104.830647][ T7188] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 104.831813][ T7178] loop6: detected capacity change from 0 to 4096 [ 104.844200][ T7178] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.844214][ T7178] EXT4-fs (loop6): Test dummy encryption mode enabled [ 104.844852][ T7188] EXT4-fs (loop4): 1 truncate cleaned up [ 104.845290][ T7188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.856197][ T7178] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 104.856254][ T7178] System zones: 0-5 [ 104.857037][ T7178] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.973248][ T7193] loop5: detected capacity change from 0 to 512 [ 104.974023][ T7193] vfat: Unknown parameter 'R V[4ء)}곻Wz#' [ 105.020093][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.558'. [ 105.051809][ T5645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.175345][ T7201] loop5: detected capacity change from 0 to 1024 [ 105.178223][ T7201] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 105.178273][ T7201] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 105.185989][ T7201] EXT4-fs error (device loop5): ext4_get_journal_inode:5928: inode #32: comm syz.5.561: iget: special inode unallocated [ 105.186015][ T7201] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 105.186148][ T7201] EXT4-fs (loop5): Remounting filesystem read-only [ 105.186194][ T7201] EXT4-fs (loop5): no journal found [ 105.186201][ T7201] EXT4-fs (loop5): can't get journal size [ 105.188264][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 105.188277][ C0] EXT4-fs (loop5): initial error at time 875: ext4_get_journal_inode:5928: inode 32 [ 105.188292][ C0] EXT4-fs (loop5): last error at time 875: ext4_get_journal_inode:5928: inode 32 [ 105.209551][ T7201] EXT4-fs (loop5): filesystem is read-only [ 105.209998][ T7201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 105.354004][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.431463][ T7211] netlink: 'syz.5.563': attribute type 1 has an invalid length. [ 105.632159][ T4744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.919837][ T7236] loop7: detected capacity change from 0 to 512 [ 105.931431][ T7236] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 105.944454][ T7236] EXT4-fs (loop7): 1 truncate cleaned up [ 105.949970][ T7236] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.970265][ T7240] FAULT_INJECTION: forcing a failure. [ 105.970265][ T7240] name failslab, interval 1, probability 0, space 0, times 0 [ 105.970293][ T7240] CPU: 0 UID: 0 PID: 7240 Comm: syz.4.566 Not tainted syzkaller #0 PREEMPT [ 105.970304][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 105.970310][ T7240] Call trace: [ 105.970313][ T7240] show_stack+0x2c/0x3c (C) [ 105.970329][ T7240] __dump_stack+0x30/0x40 [ 105.970338][ T7240] dump_stack_lvl+0xd8/0x12c [ 105.970346][ T7240] dump_stack+0x1c/0x28 [ 105.970354][ T7240] should_fail_ex+0x418/0x58c [ 105.970365][ T7240] should_failslab+0xc4/0x120 [ 105.970375][ T7240] __kmalloc_cache_noprof+0x94/0x5fc [ 105.970386][ T7240] nft_netdev_hook_alloc+0x74/0x380 [ 105.970398][ T7240] nf_tables_parse_netdev_hooks+0x12c/0x4c0 [ 105.970410][ T7240] nft_flowtable_parse_hook+0x394/0x7d8 [ 105.970422][ T7240] nf_tables_newflowtable+0xe14/0x134c [ 105.970433][ T7240] nfnetlink_rcv+0xc8c/0x16ec [ 105.970442][ T7240] netlink_unicast+0x600/0x7f8 [ 105.970454][ T7240] netlink_sendmsg+0x648/0x948 [ 105.970466][ T7240] __sock_sendmsg+0xc8/0x17c [ 105.970477][ T7240] ____sys_sendmsg+0x3d0/0x6c8 [ 105.970488][ T7240] ___sys_sendmsg+0x198/0x224 [ 105.970500][ T7240] __sys_sendmsg+0x158/0x204 [ 105.970511][ T7240] __arm64_sys_sendmsg+0x88/0x9c [ 105.970523][ T7240] invoke_syscall+0x98/0x244 [ 105.970532][ T7240] el0_svc_common+0xec/0x23c [ 105.970540][ T7240] do_el0_svc+0x4c/0x5c [ 105.970548][ T7240] el0_svc+0x60/0x1d8 [ 105.970557][ T7240] el0t_64_sync_handler+0x44/0x104 [ 105.970565][ T7240] el0t_64_sync+0x198/0x19c [ 106.797345][ T6597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.062381][ T7253] loop6: detected capacity change from 0 to 4096 [ 107.094623][ T7253] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.094643][ T7253] EXT4-fs (loop6): Test dummy encryption mode enabled [ 107.098320][ T7253] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 107.098369][ T7253] System zones: 0-5 [ 107.147828][ T7253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.194723][ T7269] EXT4-fs: Ignoring removed i_version option [ 107.197529][ T7269] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.219066][ T7269] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.225656][ T7271] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 107.240194][ T7271] EXT4-fs (loop5): 1 truncate cleaned up [ 107.240639][ T7271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.277032][ T6597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.361518][ T5645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.759001][ T7289] set_capacity_and_notify: 2 callbacks suppressed [ 107.759015][ T7289] loop2: detected capacity change from 0 to 512 [ 107.759752][ T7290] netlink: 'syz.6.580': attribute type 1 has an invalid length. [ 107.771310][ T7289] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.773897][ T7289] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 107.773991][ T7289] EXT4-fs (loop2): orphan cleanup on readonly fs [ 107.774365][ T7289] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 107.774410][ T7289] EXT4-fs warning (device loop2): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.774458][ T7289] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 107.774648][ T7289] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 107.774817][ T7289] EXT4-fs (loop2): Remounting filesystem read-only [ 107.775709][ T7289] EXT4-fs (loop2): 1 truncate cleaned up [ 107.798577][ T7289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.937330][ T7295] loop4: detected capacity change from 0 to 512 [ 107.949702][ T7295] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.955535][ T7295] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 107.955631][ T7295] EXT4-fs (loop4): orphan cleanup on readonly fs [ 107.955880][ T7295] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 107.955925][ T7295] EXT4-fs warning (device loop4): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.955971][ T7295] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 107.956360][ T7295] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 107.956549][ T7295] EXT4-fs (loop4): Remounting filesystem read-only [ 107.956661][ T7295] EXT4-fs (loop4): 1 truncate cleaned up [ 107.981075][ T7295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.040309][ T5243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.076784][ T7297] Injecting memory failure for pfn 0x17f2f3 at process virtual address 0x20001000 [ 108.101886][ T7297] Memory failure: 0x17f2f3: keeping poisoned page in swap cache [ 108.101923][ T7297] Memory failure: 0x17f2f3: Sending SIGBUS to syz.2.581:7297 due to hardware memory corruption [ 108.101962][ T7297] Memory failure: 0x17f2f3: recovery action for dirty swapcache page: Delayed [ 108.101992][ T7297] Injecting memory failure for pfn 0x17f2f2 at process virtual address 0x20002000 [ 108.102096][ T7297] Memory failure: 0x17f2f2: keeping poisoned page in swap cache [ 108.102109][ T7297] Memory failure: 0x17f2f2: Sending SIGBUS to syz.2.581:7297 due to hardware memory corruption [ 108.102135][ T7297] Memory failure: 0x17f2f2: recovery action for dirty swapcache page: Delayed [ 108.102154][ T7297] Injecting memory failure for pfn 0x17f2f1 at process virtual address 0x20003000 [ 108.102182][ T7297] Memory failure: 0x17f2f1: keeping poisoned page in swap cache [ 108.102193][ T7297] Memory failure: 0x17f2f1: Sending SIGBUS to syz.2.581:7297 due to hardware memory corruption [ 108.102210][ T7297] Memory failure: 0x17f2f1: recovery action for dirty swapcache page: Delayed [ 147.279996][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 39s! [ 147.280041][ C0] Showing busy workqueues and worker pools: