last executing test programs: 1m35.605549142s ago: executing program 0 (id=980): ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='attr/sockcreate\x00') writev(r6, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m35.439900119s ago: executing program 0 (id=984): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000800)=[{{&(0x7f00000002c0)={0x2, 0xce22, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)}], 0x1, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_retopts={{0x14c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x61, [@remote, @multicast2, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @noop, @cipso={0x86, 0xe, 0x3, [{0x1, 0x8, "ced335f3aa47"}]}, @cipso={0x86, 0x62, 0x2, [{0x0, 0x5, "cb12e0"}, {0x5, 0xb, "c0817d3788ae85de33"}, {0x1, 0x12, "71a2432bd48fe69844d4e9638b4f0e0d"}, {0x1, 0x5, "03a8a5"}, {0x0, 0x9, "f6795497635fd7"}, {0x6, 0xd, "b01d28a6ddf979df48e8f6"}, {0x7, 0x12, "b6e61fd7d3448c244267de778ad3a09c"}, {0x7, 0x6, "5838b679"}, {0x6, 0x5, "aa6866"}, {0x6, 0x2}]}, @rr={0x7, 0x1f, 0x7, [@multicast1, @private=0xa010100, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x38}, @local]}, @ssrr={0x89, 0x3, 0x32}, @rr={0x7, 0xb, 0x34, [@multicast1, @empty]}, @timestamp_prespec={0x44, 0x44, 0xcb, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x18}, 0x9}, {@multicast2, 0x6}, {@loopback, 0x3}, {@local}, {@multicast1, 0xeb}, {@rand_addr=0x64010101, 0x200}, {@loopback, 0x745d}, {@remote, 0xc}]}, @timestamp_addr={0x44, 0x3c, 0xb4, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x81}, {@multicast2, 0xd}, {@multicast1, 0x400}, {@multicast2, 0x2925fa63}, {@loopback, 0x1}, {@local, 0xffff}, {@multicast2, 0x3}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x1b0}}], 0x2, 0x2400c8a0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r4, 0x0, 0x38f9, 0x0) splice(r3, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) 1m34.609184354s ago: executing program 0 (id=992): clock_gettime(0x1, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000c, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0xd, 0x2, 0x0, "a42700d0fffd0a00", 0xe01d2ac}) 1m33.693489438s ago: executing program 0 (id=999): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000100)={0x1, 0x0, 0x4}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x114, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @empty, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @private2, 0x40}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @mcast2, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb02}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x90}, 0x40004) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) fsopen(0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 1m33.201834398s ago: executing program 0 (id=1005): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"432394708652f9c96dd8347a81655e47", 0x0, 0x0, {0x0, 0x8}, {0x65, 0x3ff}, 0x4a5749f6, [0x9, 0x2, 0x7fff, 0x4, 0x89dd, 0x1, 0x3, 0x0, 0x4, 0x1ff, 0x3ff, 0xfb19, 0xfffffffffffffff9, 0x9, 0x0, 0xffffffff]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000400)=r3) mmap$xdp(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x1000000, 0x4014811, r2, 0x80000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES32=0x0, @ANYBLOB="01002301000034020000020000000800010049a6eb2ee87ddb65d68741fa682f6700133e084d6d15bb81257d84d49d1543693d785b6fdef196b55d39d621fbc4ef61bfe8a7c330127b7e9115b6fcc5b8b681ca78d68578e9ac8665068760558949ccd39f6214ec588e7a7a548dd6477b09f35c0ed906773dd32ac00e20be912e5a773f80804d7d2812c585b69a1740e5e3666e3529", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) close(r0) 1m33.072040436s ago: executing program 0 (id=1007): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x17, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c032fd90c087fea440010028bd5500010000e9ac8dd423599301", @ANYRES32=r4, @ANYBLOB="0500330001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x240088c5}, 0x80) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x51, 0x1, 0x200, "ff00000000000000050040000000000700ef3809000000000000000000000004", 0x59455247}) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/79, 0x4f) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 1m17.887110919s ago: executing program 32 (id=1007): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x17, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c032fd90c087fea440010028bd5500010000e9ac8dd423599301", @ANYRES32=r4, @ANYBLOB="0500330001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x240088c5}, 0x80) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x51, 0x1, 0x200, "ff00000000000000050040000000000700ef3809000000000000000000000004", 0x59455247}) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/79, 0x4f) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 39.616285963s ago: executing program 1 (id=1435): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) close(0x3) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) 39.61558344s ago: executing program 1 (id=1436): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{0x3, 0x8, 0x8, 0x47}, {0x91, 0x3, 0x2c, 0x10000000}, {0x644, 0x0, 0x26, 0xd}, {0x81, 0x4, 0x2, 0xfffffffa}, {0x6, 0x1, 0x4, 0x1}, {0x100, 0x9, 0xb3, 0x80000000}, {0x2, 0x2, 0x9, 0x5}, {0x7, 0x9, 0xb, 0x3}, {0xbe, 0x2, 0xe, 0x4}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={r1, 0x0, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000180)={0x3, 0x1, 0x0, 0x2f0, 0x1}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) write$P9_RRENAMEAT(r3, &(0x7f0000000200)={0x7, 0x4b, 0x1}, 0x7) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x0, r0, 0x7fffffffffffffff, 0x0, 0x5, 0x7}) r4 = syz_open_dev$mouse(&(0x7f0000000280), 0x7e47cb5e, 0x12000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2d}, r5}}, 0x30) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x19, 0xc1, &(0x7f00000003c0)="489f182818d50602bd839c48b879e6c2241c71361fbd48eed7", &(0x7f0000000400)=""/193, 0x3, 0x0, 0x9b, 0xe7, &(0x7f0000000500)="3a7647d21fb327ed6a597aa8a926e0474cc020ed728b16aa46a1ff866176cbe2c94ac4ed8a3fd73e6ea1cdebee415acdfe052dc61bd8e15f1338e6786eb6d781e47c096aa92b07e50134e79922467b9399f49917d8e977ae048062b349768a69a64410bb09069bc6e3817afdf41c79d4ea0e9a80279af90d2db6397b0f485621ddb6a1d92feb84b48f5a19233bd92ad1ac1623f1221f371898de3e", &(0x7f00000005c0)="48dc8eb88dc68be64045de95fb1523a7424f2c2005c0a06e4cc0dfe15baf241a60d761216c9d134ab7613397ba1fea89977533cd5b41a9df9121d4c381ecaec15df4d8866aee5b9f4058f71cad973dc95d659ec1a676d991e430d1a9883e8a240680caf3078c9b66f1e01f57160daeb17dc794bc744e92460121b2382050859a503fb89fa9bd2ed1341f949d1329519a7a11ed967b4229af9720dff3e0910e4c93c5a11f9df219e3cb6d266071f01cd36467d48456334a4dbc800fea2d3c51f5f711b9bbf64b21cb50e29bf12390261250c352903c25242925e6198e0a3b48f07dc9d7f00a40ec", 0x0, 0x0, 0x2}, 0x50) write$P9_RREMOVE(r3, &(0x7f0000000740)={0x7, 0x7b, 0x2}, 0x7) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000780)={0x2}) ioctl$FE_SET_FRONTEND(r4, 0x40246f4c, &(0x7f00000007c0)={0xffff, 0x0, @qpsk={0x3, 0xe}}) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000800)) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000840)={@in6={{0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x52a}}, 0x0, 0x0, 0x34, 0x0, "8a2086b31a921dfdcf27b7d8f6b95a49904b8bfdacf5ab40af96b50b5eeaca2f23cc46ee2a7db51fa03e6a23aee5b24279b24f17ef53fede72671007a218fd03446b510e90f76891db9d126fcbbb20cf"}, 0xd8) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000940)={0xffffffffffffffff}) ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000000ac0)={r4, &(0x7f00000009c0)='\'\x00', 0x100, &(0x7f0000000a00)={@_ha_fsid={[0x2, 0x5ffc]}, {0xe, 0x5, 0xc079, 0x5}}, 0x3, &(0x7f0000000a40), &(0x7f0000000a80)=0xfff}) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000b00)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x800, 0x12, {"9a56f836d270d3f848bbb0a4c78fb2fd"}, 0x5, 0x5, 0x8000}}}, 0x90) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) getsockname$packet(r8, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c40)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000d00)={'syztnl0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', r10, 0x29, 0x61, 0x4, 0x9, 0x40, @remote, @mcast2, 0x8, 0x700, 0x2, 0x6}}) listen(r8, 0x0) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000d80)={0x2, &(0x7f0000000d40)=[{0xfff7, 0xd0, 0x0, 0x9b0}, {0xc, 0xc, 0x8b, 0x5}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r11, &(0x7f00000012c0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000e40)={0x438, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x40c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0xa9, 0x4, "957ec365e3f3e2ce20aa5312d59f8b965fe237e01e8da8219831f7c16f93184c2e7cac89fedfc6c6b65dbfc3e6f5b624b8c844d92d5effc6f9fc168dfa102db38c4f1d019b5633ae2a4c1ae9cb1f7a391daaf035b23f77571b702d42907850d7331a62f63993b323e021fa1dd8ddaf50fdab98529d9f4c49c50a3c3df860206031b67878767ab819490742d1d01bd10487371ade0d22eaa0677accb06176ef92d588aaa7f6"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x72, 0x5, "fa51d98e23410072fb3b69fdcc4573116d2484930257a286508ffc7ddd723a3d2f1bd03a1737f29b3fa1dda9b9a2ca4c2ebd286451f6b37f5f093954f4091e94cf037e0d7b0592dc499228a72f9e09670bd455843aa1ff7b2dd37621adf42fac48da95d2d737c203ba2f0e7092fe"}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$^^,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/input/mouse#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ',{\'\b}+{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xd3, 0x5, "90027584c5b36ad4b7551b3b35a2ba00995e9d9b6b948527e3e9fa0b53cbf6d4a56494e4f915c55df178e4a87fa8d45bf6a284ee86fb022598e1d60ec82e5685d1fa62ecd929d1bc1c9f644d2bdd12de765ee16c03c62afae90aa99c6e3acff14c3f6b000eaec3473acc580262a4cf951084d023dc84c7842924ce73184edd268788e9f55356ee663462aac8bedc2695f8df92650f7a45895688b1c7e2ac754b57af72419d1cf7e2224dacfd8f20ce3b70cc140a367ebe26889b44f9188412c144d8438b6228e19c7777f42e8c814f"}, @ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/input/mouse#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-,#^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*-/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xb7\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa74d}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@&/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '}&\xe2\xc4%]*/)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '((\x1d+}-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/&!*[)){\xba\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '-[,,+\x1b-{\x86-\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x438}, 0x1, 0x0, 0x0, 0x40}, 0x4c040) syz_open_dev$video(&(0x7f0000001300), 0xf1, 0x12800) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001340)=0x50a) 39.61511303s ago: executing program 1 (id=1437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd29, 0x2, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x47}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c040}, 0x4004001) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) unshare(0x2c020400) unshare(0x40000) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="008a07000000b69ce39c1371f30000"], 0x8, 0x800) msgsnd(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000390427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="3c450700000000001400128009000100766574680000000068000280080001"], 0x3c}, 0x1, 0x0, 0x0, 0x24004805}, 0xc080) msgrcv(r3, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 39.547411046s ago: executing program 1 (id=1438): syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000080)={[{@test_dummy_encryption}, {@nogrpid}, {@norecovery}]}, 0x3, 0x47b, &(0x7f0000000880)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000006c0)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}}}, 0xa) syz_emit_vhci(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000002c0)={"35f62835", 0x7f3f, 0x5e, 0x69, 0xffd, 0x0, "0c18f84e5087b7a305d4b46bfb05e0", "fbffffff", "b87e8992", "04f2cec4", ["4b1e691b34ab3e6cb8fdbca2", "0500000000000000007a6fe4", "99592355f1a1000000004080", "da3dff6ce34eb7ca6f2f8c58"]}) 39.449155382s ago: executing program 1 (id=1440): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000002c0)={'mpc624\x00', [0x100, 0xb, 0xcd, 0x2, 0x5, 0x103, 0x7fff800, 0x20000000, 0x8, 0x100000b, 0xffffffff, 0xb51, 0x200009, 0x401, 0x3, 0x3, 0x0, 0x6, 0xff9, 0xfffffffd, 0x6, 0x1, 0x4, 0x9, 0x4c, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0x8a]}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x14a101, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x7) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x0, 0x3e, 0x0, 0x1}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x250, 0xd8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000000280), {[{{@ip={@empty, @broadcast, 0x0, 0xffffffff, 'wlan1\x00', 'vcan0\x00', {}, {0xff}, 0x67, 0x0, 0x28}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xa, 0x6, 0x8001, 0x7a8, 'syz0\x00', 'syz1\x00', {0x8}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8, 0x401, 0x0, 'snmp_trap\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000100)={0x2, 0x7c, "9979cc85f2bc76205d517c70560be34fa29ac209bc321a506866e78aa91cfe33e7475112e416ac87370ee39b3f08b78cab48ea3effd42dbab8add07c329da25a54f10d6ad4f4dd03a7139ba374ea1cbac0895a78b6a3fad8a5544b471346f9b47781f5475b8714d59d39a20aacc3c641941de7962c5d1d00920abfed"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6a) 38.893277898s ago: executing program 1 (id=1445): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8000000, 0x33363248, 0x2, @stepwise={0xfffffed1, 0xfc2a, 0xaf5, 0xc4, 0x4, 0x3}}) 38.818924363s ago: executing program 33 (id=1445): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8000000, 0x33363248, 0x2, @stepwise={0xfffffed1, 0xfc2a, 0xaf5, 0xc4, 0x4, 0x3}}) 3.431926863s ago: executing program 5 (id=1846): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[], 0x1dc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x4, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r7, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x10000, &(0x7f00000038c0)={&(0x7f0000001500)={0x1c, r8, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000040)={0x400, r1, 0x1d, {0x2, 0x7fffffffffffffff}, 0x3}, 0x1) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r11 = socket$inet(0x2, 0x3, 0x4) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040820}, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000880)={0x0, 0xd3, "a4e34121301ba422752196b6888269e5a0d33eaa6b47a5179bfad8c656c414a9de6d44a39022d8ea3c198ce310685b2a02d56fbc82792c2173d43e59e7e1ff05d3a815de4d579a5750b657f93c646a1dc9fc011def99fb99dbd2f107c256bd254de93e7f3e27ebcb74c76cab89728f02a6f5428a9d3665bfc5ca2c4ac54f6bb1a0b6970c25f78504d99ca963b6193bb6d2845a01f2bc25155e9aeea5492983c52ae546e703e58ed93ee1c67042d39bbeca565e0d746e2e3866695dbcd897628903c2afef9ec6f3c107024f41068694519cefe8"}, &(0x7f0000000c00)=0xdb) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000c80)={r14, 0xb9, 0x5, [0x1000, 0x9, 0x8, 0x1ff, 0x0]}, 0x12) 3.371970017s ago: executing program 5 (id=1848): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x1, 0x2}, 0xe) shutdown(r0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000000)) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000380)="e8", 0x1}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000001400)="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", 0x1000}], 0x3) 3.295781682s ago: executing program 5 (id=1849): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000100)={0x1, 0x0, 0x4}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x114, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @empty, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @private2, 0x40}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @mcast2, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb02}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x90}, 0x40004) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) fsopen(0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) 3.178114341s ago: executing program 2 (id=1852): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x38}}) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (rerun: 64) 3.103734967s ago: executing program 2 (id=1853): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x7, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x8, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303a, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000005, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x8, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r4 = socket$inet6(0xa, 0x2, 0x0) close(r4) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x34}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x44}}}}], 0x28}, 0x1400c0c0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.980242016s ago: executing program 2 (id=1856): clock_gettime(0x1, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x34, 0x24, 0xd0f, 0x1ffffe, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x24008004) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000c, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0xd, 0x2, 0x0, "a42700d0fffd0a00", 0xe01d2ac}) 2.42593197s ago: executing program 4 (id=1860): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') setxattr$smack_xattr_label(&(0x7f0000000000)='./file0/file0/..\x00', &(0x7f0000000040)='security.SMACK64MMAP\x00', 0x0, 0x0, 0x1) 2.413978249s ago: executing program 6 (id=1861): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000240)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1805006, &(0x7f0000002580)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], 0x1, 0x2e6, &(0x7f0000000540)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 2.402567433s ago: executing program 4 (id=1862): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe8) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000740)={[], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x31, 0x39, 0x62, 0x30, 0x30, 0x35, 0x62], 0x2d, [0x31, 0x39, 0x30, 0x30], 0x2d, [0x61, 0x62, 0xe0c9c1b548ddf36f, 0x34], 0x2d, [0x63, 0x35, 0x33, 0x61], 0x2d, [0x31, 0x36, 0x34, 0x32, 0x66, 0x61, 0x33, 0x37]}}}, {@context={'context', 0x3d, 'root'}}, {@euid_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, 'cpuset.effective_cpus\x00'}}, {@dont_hash}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0x41a0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000017c0)=""/4100, 0x1004}, {&(0x7f0000000080)=""/79, 0x4f}, {&(0x7f0000000100)=""/195, 0xc3}, {&(0x7f0000000200)=""/111, 0x6f}, {&(0x7f0000000280)=""/28, 0x1c}, {&(0x7f00000002c0)=""/3, 0x3}, {&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000340)=""/110, 0x6e}], 0x8}, 0x10002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000840)="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", 0x3d9}, {&(0x7f0000000540)="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", 0x1db}], 0x2}, 0x8400) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="fb", 0x1}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x8, 0x40, 0xc0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r3}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f0000000000)={0x1, 0x0}) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) 2.327666425s ago: executing program 6 (id=1863): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000100)={0xd972, 0x104000000}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB="080004000001"], 0x4c}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000180), 0x8, &(0x7f0000000400)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa808100100086dd6040000000403a00fe80000000ecc5368926c7e85c0000000000000001020190780000050060000000004000fffc010000000000000000000000000000fc0200000000000000000000000000003a00000000000000f4c638bed6f068cc00"/122], 0x0) recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r8, 0x40004580, 0xffffffffffffffff) fsmount(r4, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, r9}, 0x18) 2.258300215s ago: executing program 5 (id=1864): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x10000000, 0x3, {0xa, 0x3, 0x9, 0xfffffffe}}) 2.218740682s ago: executing program 5 (id=1865): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x2}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000094000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.059943852s ago: executing program 4 (id=1866): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa7f0e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ef, 0x800, 0x3, 0x50}, &(0x7f0000002dc0)=0x0, &(0x7f0000002e00)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x14}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 1.73798768s ago: executing program 2 (id=1867): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a", 0x23}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) read(r1, &(0x7f0000000180)=""/118, 0x76) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) 1.560983045s ago: executing program 3 (id=1868): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@inlinecrypt}, {@jqfmt_vfsold}, {@jqfmt_vfsold}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@delalloc}]}, 0xfc, 0x5a7, &(0x7f0000001dc0)="$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") (async) syz_emit_vhci(0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x40) read$smackfs_ptrace(r2, 0x0, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000002a000000850000000700000007000000794c5d0000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0xe, 0x55, &(0x7f00000003c0)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = getpid() sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioprio_set$pid(0x1, 0x0, 0x4007) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/keys\x00', 0x0, 0x0) (async) ioctl$COMEDI_CHANINFO(0xffffffffffffffff, 0x80306403, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x1}, {0x81, 0xfffffffe}]}}) (async) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0x180000, &(0x7f0000000580)={[{@dax_never}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x800}}, {@data_ordered}, {@norecovery}, {@nodelalloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@sb={'sb', 0x3d, 0xffff}}, {@errors_remount}, {@noauto_da_alloc}]}, 0x1, 0x553, &(0x7f0000000980)="$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") (async) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) (async) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./bus\x00', 0x300000d, 0x0, 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000140), 0x0, 0x88a0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0xff, 0x0, 0x0) 1.47772144s ago: executing program 6 (id=1869): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x104, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_NAT={0x50, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xffa1}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.477244265s ago: executing program 3 (id=1870): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[], 0x1dc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x4, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r7, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x10000, &(0x7f00000038c0)={&(0x7f0000001500)={0x1c, r8, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000040)={0x400, r1, 0x1d, {0x2, 0x7fffffffffffffff}, 0x3}, 0x1) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r11 = socket$inet(0x2, 0x3, 0x4) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040820}, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000880)={0x0, 0xd3, "a4e34121301ba422752196b6888269e5a0d33eaa6b47a5179bfad8c656c414a9de6d44a39022d8ea3c198ce310685b2a02d56fbc82792c2173d43e59e7e1ff05d3a815de4d579a5750b657f93c646a1dc9fc011def99fb99dbd2f107c256bd254de93e7f3e27ebcb74c76cab89728f02a6f5428a9d3665bfc5ca2c4ac54f6bb1a0b6970c25f78504d99ca963b6193bb6d2845a01f2bc25155e9aeea5492983c52ae546e703e58ed93ee1c67042d39bbeca565e0d746e2e3866695dbcd897628903c2afef9ec6f3c107024f41068694519cefe8"}, &(0x7f0000000c00)=0xdb) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000c80)={r14, 0xb9, 0x5, [0x1000, 0x9, 0x8, 0x1ff, 0x0]}, 0x12) 1.47404839s ago: executing program 3 (id=1871): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000140)=0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.456993627s ago: executing program 6 (id=1872): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000140)="0c03573afa64193f5c0c67f7ed0f08ef102566dce7ec5f66a648201426236ae476434d7c6d4dbb49b6af27b75412ff599713d2", 0x33}, {&(0x7f0000000180)="47b6b1bcf13967b3c4bf3cc68f653effb380625761263b1720c5cb1c081f2af91cfebdad5d8f59f17b8a1d71b9c27079e4fe363d15d9fd80591447d7dce56e707f13b3168cd1dbb94cbf2a21264246d1b563d39bab7e3e105e9956260704ea72f04250aa97c76a1683207d3de919bc0b5196b965553881bb5e792e93c42885cd11f181ac41811b073e5dcf5bc549aaa4181bdd03fe1d7da63aa4b13b67e45f868047a7dd0fae16b9536264269ed9fe79b1824b17e0d5d95fe641338a1eee0e4612e6cc974a1f8d80a731d91569", 0xcd}, {&(0x7f0000000680)="396b0b2d92a081c10b34f3708c065b93255ae169ced3036d77380fdfb4a44fcdf0ae", 0x22}, {&(0x7f0000000740)="8fd7e1a2dae37ddf36b42888adb33b24cd5e70270cb2d35209544b64813df407ff978c073d5ba9a9e32da3814e10996ef7943420ecfecc2de257612ab795736ed45429621b51fc18dc63218e25f3e78d6308e06b7e9be8620ae26f73aed8774085f407be383588ab40b4a484b7e58eb3f4fa4986201c553184dc50df0da7dd227dc629e5c4eca6a85653091218ed2ee524c822a0e24ea255037fca7ce779468e0695b0ea7ba0075572cf8306993b047c1c36a5e64ae6c3dea6278c8d5a987d2a493a3f070f6241", 0xc7}, {&(0x7f0000000840)="581f06a617594d1244e24b1ad08297c3a93ec8741db357cf2f47105e5a0830d4aa12743c45893332326216118c82631b2dd8ee154e7e9c12ab9ef8ea571f29a31fb97fc052ed5e49683e157e8ff4708c88924e4ff8a5076d28e610007b056699eeb30f42451b99257e4e19157baff11811710a05bbd87e7911c77ff0172fcd4e83bd2644d6c92acde5cdcfa70eefccc0d73b31c7458c7b26bf7372cc551e7b2aa542261c950e2c885c819366fc4706575f7024f91acee2072768c0e2803c08d0f9b403b2faecba3d1fa15d387baf8d56a1370a90c81140151436", 0xda}], 0x5}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000d40)="f82a370b33b81ccf7e1c527ebda28c7fb10b74814f36e8b19bd4a237f2f5957e0bd1d72c", 0x24}, {&(0x7f0000000dc0)="0c2cdfe2a19afa542fb437c368d3cc5c1272b1ef9522fde9d1deda8057e00c25dc33b439c607b5aa933953679f10257690a52101b5cd65f64f9273fda9abb0e5d068d3d9c9b455f2d4aa658bd3ccebc05acc37003123e84d8193659f07bf920ffe806708395c22b7e1e68b960403392b9327e47364bc93a0864788672be9402c83574a5d68b325bd0f9a7e9488930dd8298e381ef07fecc2809bc49437ea1fc6", 0xa0}], 0x2}}], 0x2, 0x40080) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0) 1.455654835s ago: executing program 3 (id=1873): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000140)={0x5}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.419690658s ago: executing program 6 (id=1874): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={@mcast1, 0x80, r2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c00), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001c40)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}}, 0x0) fallocate(r3, 0x0, 0x0, 0x8ffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x10, 0x0, r6}, 0x50) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)={[{0x2d, 'pids'}]}, 0x6) write$cgroup_subtree(r10, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x800000, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x66, 0x2, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r11, &(0x7f0000000140), &(0x7f0000000200)=""/137, 0x2}, 0x20) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={0x0, 0x5}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_ext={0x1c, 0x8, &(0x7f0000000180)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb5}, @ldst={0x3, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffff4}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x1, 0x3, 0x0, 0xb, 0xffffffffffffffc0, 0x1}], &(0x7f0000000240)='GPL\x00', 0x2, 0x1000, &(0x7f0000000280)=""/4096, 0x41100, 0x30, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x1, 0x1, 0x8001, 0x9}, 0x10, 0x1113d, r3, 0x4, &(0x7f0000001340)=[r7, r11, r12], &(0x7f0000001380)=[{0x4, 0x5, 0x10}, {0x4, 0x5, 0xe, 0x1}, {0x3, 0x4, 0xb, 0x1}, {0x2, 0x5, 0x4, 0x8}], 0x10, 0x1ff}, 0x94) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x30, r13, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x400400c) 1.325221335s ago: executing program 5 (id=1875): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000100)={0x1, 0x0, 0x4}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x114, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @empty, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @private2, 0x40}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @mcast2, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb02}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x90}, 0x40004) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) fsopen(0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) 1.226667078s ago: executing program 3 (id=1876): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000640)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000030900010073797a310000000024000480200001800700010063740000140002b680080001400000001308000240000000030900020073797a3200000000140000001100010000000000000000000300000a"], 0x78}, 0x1, 0x0, 0x0, 0x400c091}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r3, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x400000000000222, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200"/616], 0x310) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x33) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113f00000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0xfffffffffffffd9b}, 0x70) setsockopt(r8, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e1d, 0x4, @loopback, 0x4}, 0x1c) 1.163715701s ago: executing program 4 (id=1877): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=':\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) listen(r0, 0xf) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r3) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022abd7000fcdbdf250300000008000800040000000c0003000100000000000000ae1ec5d63c55309b39cebd2584c95aced707f9d4f752772189698d6f9ffd8fa61a687321a76ba40a392eafada39fa0030cbcb0f21a941d0dde52a11ffb0de5f9d36df54cdd224dd524beba3f895f547e0fe0f45693bcf872e751", @ANYRES32=r5, @ANYBLOB="080002000100000008000400ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0xc000) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r6, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r11, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r11, 0x7}}, 0x48) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r12, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r13, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x10002}, {0xa, 0xce23, 0x3, @remote, 0x3}, r13, 0xb3d}}, 0x48) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r14, 0xffffffffffffffff, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x1a) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 1.076364194s ago: executing program 4 (id=1878): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000240)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1805006, &(0x7f0000002580)=ANY=[@ANYBLOB="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", @ANYBLOB="78d5fd8d68e4126c1cf26cd7722bb6ee6d8220919affd712109788551ef9df92ef3431d221379be12a342add15ee4aef9b8009359adfbb1a4aa91277dbf650786203116710241bb5a7a07ce8747254c79781a40e4dbfafec8f92bbab754ce26c1a6e2569434c7275c474fd17ff3b74ba532883a546d39fdde0723b45c8c2facd84cc860e2a069a75f74aebf22bd33d3fbe4ed3edd6c85d7b473a0089020f673c9ddcc098a884093845028d4809af7ad081406e81016d5275598cc2b62b20ff2ef03851671c399b5f44a20038fe67ea882d67822eeb5b5e2f7ac1a8ea3f61e51fd7e05cada220add2e241d87efcc9c6e14b8c934176997f1588403049b8a8c7f05671a379a9335ecdc2908110cbb2784cca102042e3615667b6e8681ea6e9c11cfd9de3f4551d45ac10b51922c2f461b9d30b0889b7890176888a63539562f9b037b3291e166f2e94b5418ca5ddd6eaf04fe40262f41401b8013696854f8176bf71995075e2f3f92c6d4566d6dd6a9a37bad345418d5e71eef2fd1e6184c4ea828026f3210fc984da6dba9e49a63b7d01bdc4fa0f76e1f698a0181b870d0437566bf03803fe3c5cad124c0fff425c3c9277b8e05cfd1d4ef581c05221b92ab7662fb29e394ceed7ae4dbb633296d1fce00542b5962ba48e5572447463e88985c556e15152d9208883aba6162e712ac4c3bea789150150671d82f09fb30f82dd69b62fddb72666d824d71a119aad3b20890a1c0f0d996a1e11c0972100184a4e1d79243033dfbf9dbda8a8b0b8d7b72d07f1849b4b776815a9dc1cc5f371892bba260c766fa9f7f03e2f7e52083e975f1dec07ef92f7d1abc9e48ade8bcd731463c54d716b4706801daa6e0d08b00670e441912bea74ba0509c4f59a84d0bdfd896beba56678283f9c231ddb344fcfb38602895b8e01cbe4cf848032793ff6b4e005ce2c0b3491969e391c0190fa61cccfd80fff85c3ae29ec40cef7854c25c857019d2124a96f92126a7fd8515c2ee50b8fb358e50cecccb72089002bf4909f80ac8b50e09dc51a859f5d37a03726c9431329cf281a379cd0beab2f183dd86662a07f4031990a88ad1f0f38a9638a525ea924b0df2579dc32b09ad03cbaad6910c15c832b4735ca62b3c1cf1f6702d37b84fc531c8f3eef177e5093ef19bdd605e84d323d6c253bf7eab59bc1bd386b7647b94ded09290c787e5fc70bb10687b58f8f8098c5559f6e59659ba93d46bfdf74e58f54cd9d6d3705128db3f172226d8125868108ba6615bfde175d793276d19474755df07a9fc72687707096497feb392ba771fd2f5f99101025104f2ae704c507312020354998d5cfa2511270213d682885e278bcdb9631a7a5d5f0e65c832a46deaf821b5e851089e05d1647b0653183d568af91c73a72bed2a66772925c45a79ac6c1945eba9ebbe545a46e7c35344c2dce6477e5af1cceab72757a6bde1a80dc3d4fe7000a6d7130f2d41bf08211485efdcefc272aed14cc670eb78d6e5277f3afd0d58a3ca72824b8a9edc7295dd64e2d3c18c29abe957e041ade8095ac7162338ed342bde78a68aa449ba121a625717454e14ee49390fa7546d18f92d19e9d1a03e3665f067b65b3f48c633803a5196f146a5a16e0b5ca656b1f7914f21c71fde91d63433284d289e7a5ec9cdd0be41e54e0b9cf467990af08f6666bf329bd9f43a9f94424ef9bf383648eac5136737827a152f407e3d85358835562cf9413f99c7ec69f8bcc2c7592ed70c86ed0ad57d8c2b782a2ecbd2f2ccacdb2ee8d11d63393604bbaa438129d1b53972b71b3ce58573398d79f4cdfa6713d554434d1f07c8d63257d1354f7973ed16c7b3ca585ade2fa6a8946c38d21b9278036692d6bea9ab348b3ee40c1f8ad3739f9a2579175ea5a2a99dfc85bde7331db522cfe6864d8e88146edaebcdd80402015eca3fc3e168061cc2034cc3497f94b46560496ee3013fe7e64ccb422afe151ef55c9e44fcd461920d69bcdb5c708e73456c1a8ad0382d96673a5e42242246161255add2224154ef8cd468fc1521c34562bf8ed486159372f0e8441b690abf5fb74c183f4e21852a9c099d93942430292e08b401694d958069496cac57af0d68855151cb40294857ea32aa5a809be043de32e9dd2788ade0a135d5479acb506de96ff0f05932d715ce0b4873d841f189f5c92d303a2f0086879f15f50c7aea67eca164aad582494cc22e944ddf4c1fcb35aeb27a10c670bf369a3dad4d11e59030bd1dcfcb1d526078695a7348a097de194691926d4a4f8e67e246dca5aa8652780fa63e049870450f1602436495f5ba1f129f2e33f21eed3fd1308e725190b93a554d292165a01134bcbdb6baf1e34c8e30499bada09ee42458e45ba7df166be8283fdc16f9e406fe578bfc3a3d8d0d3c458e8b165e2fdd961788a2a6374c259c79f4ccf9645ecc72983cb1245237d93988ec5675b421ece0f738e669c7b47a8ac4fa0ab71abb90ed1fa02e93f8ee2f3f953ff3a1846c60a502d114a95a69c102102827e8b47d0589ac3654adf18a82f9c3542b8ffd75260f8d338eccc31714f12d5b9755696f7eb40cd49e2a52a7d3b91c3b2c973f8b061f8987c314ebc30cd61b1c3ea588e0af7b199d0a4a1840de615e105705dfd8fca3f9932c2872134ee9463c171596c7c98325dcbde07afed9af87077f1436e0518a4e8f76208b5da974676d7d4dea9aa35978a34c20ea64f75c1103e6d465e0eef530cc388a3e917d7207579841505a3cd0ba16cb8eb584492bcebe8d6a9f1e42e1da1564003c3edbc76c097fe32c7ae1e0d2dad2124afba195d5d8e7de295c35094dea67bf49612d25d7cde92ae7563f46add29566e84b09e6955fda32d4b112db4b61c450da0f0074dd776244f663e9450dfee6367c9fcc7090e4ae3d7c276dfdddc79f6f6d5131df1202a25d0518112fad10c7b30cfc451db53ec4e4eae9d8c820a92c4d27bb3d351ae78b55df976538b9e4185f052f914fbff843b7437981d5406127d5aa862a3e525e7999dce59707fc7d7b7e2a0c191816867646161d4f58a91ae938dad2db7b0431dd015d83b2801e8c6ec24056935836e18e33ce99d14d9725e06e067aa5a479d0df0426c669584fa404d9120caac40399b4d290deb21f2786bc760517fc48d20cc315eae41d58f41d89fa05f65dee669a4d61f209aac311515d33a2f435f6d30f0a4d7e4a80e1c6f4a5699285ff6d7f737b99c9cb7a983af98a647d542332167166d426ebaf6a57479bf1ddd73b5603588db064d3fa00dda0a52d72922c46756dde029c48aa063a8eebf197369ababb7878568ef2091868838a9f6777770a17bfe5df908bd6e8684f4d153b56eac2650e890fb2403c6809ce9d62b8d631b167e7d0f83458f33e1ba51f29503d8ffd928dde670ef2f5143b7b3a3e953f0d3673adebdfa594d15c3d37353bd0ae9bf7b630c91c8c53934c17d1a14a954d2cbe74658707246e14faeaa17008bed4dbf3c4c0d6bedd237a52eb7bdc86fc60f5f1002aaf5baa5a61d7fbd5773764deb783405110fa063c6e5be86a4e0557bf7ab55bd3d8280ca56323666d823798aa40470ac9d3603e6d3fb1bdff7ee3fb1ff806b517c4cbe3f6ac24aef6784ff8b67ff1f0a3ebf5e269dd898fbb47c830a9aea75f834bba2b56b4ccebafb2e0192438022f5d3c075ec151f7e0923e3562b46c6288a4936facce48a6eafdea72ea715e0c59e1f2ca80a357124a3c9017243bdbb849c7538f63ab854a66f00509f28546c29616255d2fa246c0f5ab047c7a820ca1f034eae38f20129235033e472ada5cb2653882c6c98e5cf1f569746ce70de3a6ef3186a8b3e19c5d202030b67a268ceca6b82cda80b643555c12771a8ee9133e524e5ab394742b76c066f9f69305891c877660c578e9b30af2d50e421a4049cbc52d526e7dc8cc8ce8573c8e5beb07a1a6da17a6b1ede2fa4956db88b23e5eba27d9cdfa3697b58f65c2d890f0a5d40ba069ea55aa9605c3bb6b6c8d57f4ff51feb3b9c6e9ffc2c1a709a55dce8e8805319cf54dc3d619d62e38d365e44f2b0b01299aba41efb318ec95fbc0bb5211dbe6043e5d2b275673a0756257c71da3748db0b619a6301dae59d63e7dfe6f81ef10d787b8636dbc52eb0c2d87ac2edbbc307428b1a5c9a8814fe19c9bb3154cc81a789b69e598387b15cfa295bea1e464625b0813529066b541328eafc3d1d048b5783148e8f059a62bcd82f98cbbe7f4c487a0612373e45f0a7b3bc7581ed6a5bc20b569b6999866f20aa58f25904bfcba6356165a4a35e0423810def0a647fffc9e49eeb21104d45e89a1c1cb88997c173de13c04c6d8dd9bb96f8a6d9e32238b0e88ab2da0ea910b3249c501f696d4264fc594a01c7e01993292d15c1f784fb30fadc003484bbb3be51f0d0d3943e3e919c4f1e326f98043a0707c00349625d4e499c917819161186b79f6e0b368d6e3aac01243d75bf56a28b55b1e470f941869b6988373b9ad69a1ae6f179d06e1725c81a30f183a9802adfc46abd420fb196c8b7772f7b199238e170f501f87d56cbdd838282e3f237900329d071cbe3e56651598c6a9b2b0f1e159a2eb9f9a1a100907a4f46e3ab0a630c7857ed38e8e0ae9e4d0037a44ea0a0ee7b65964b0c6da97143489d92bdd7a2041d0698242b1253d3a2f94a74c3b49b694f7ece44d272183370dd05e7e34f49f402bf858654034440861e2582c34e002d3fe7380cc8461e5b22d2f4917bb07f528dcda8b031e5a97153e8e531760e69784ad2195eb4d7d057e2b88cfc5240268736af804dafabdf0b076efd62142d71f3922ba6eeebe0fa2eec060cd10f723e10c6a9cb4bf0940de006ab8599b0760d6a61d400d990e47d2209098564550a71eff7cfdafa2488e67aa458918ee58d0e603d095c6ef3214b426cd573610ae2f2f5ed25171eb6dd9ab0b036f8e91ef98eb57f9aaba913bff0c7ecbc8d4580c97205f48127d8eaae197b16b12a0c125ccc3b873b44a9fbef233ab8aa9abfb94dba6aaaacb962cdb3f6600f9ccc254419d1cb600724de6b50c3d408cb00b6c8d7dd86658d9cd2cf2af62dc1ffe29f499f28788dcd7d05d39c7e4a53be5d6b736a01bda3c0d4a2678b5174f68b6b7b009c5ad845e7d1677bd71a0ad6f88c4435998f77675536995d7dbc6f4304c9da423bdb42a4ef38180f238af3cc54db8a3bd0c36a9a6b0ec8279bc884e0c714b6e1c297db60e513398e5590662a077266b2439f3a7f23cc85d4c1df5a233e8d4017145c61bfca641839b5243699d6c82a92209415204052bfcb426be7d3e5ef8972909a9163f85ca48cf1899bd5edabb840c085e366630ba4eb995a5a5024f7281b1ae459f66e5296ef107634ac0734d48c3c3b90a5447d545a92b8dab2e826b451f12e2a5faba437b998907ae39280bf5cd51cfa9cd2d207c4d1a11c6172672bc5e7ec78b51f873d74cfba717c08e38ea9adaca1d07a0565e6823acb4a8a63ab0b13597d22390ce01011fd95bd931e2952a3a178dedd0bfc7aceaabc04216c4ff9d103dff63599090c76b02c4c48ebad2a8b30dd0129758d1b53631111f1d79fd83cfd0351d277d70e45f7eb56d5599066601525a90896451e37c6e34e1039e9741cbbea0c9981805da518c213b03be0813d9b9310401814c418c12ca49638dc5704132740c62f3e9fc57058eddfb6fffcb1a1603b2f444c389ad190475b865b2e4d2ae6b8673d9b8969bc6463d5884d338c0adb28d168761fd68b1a8d3e961a619a9c799a02b271"], 0x1, 0x2e6, &(0x7f0000000540)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 1.070727071s ago: executing program 6 (id=1879): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000100)={0x2d, &(0x7f00000002c0)=[{0x14, '\x00', @buffer={"eee713e999fc4d6a82d774dcf206a0dd631170a3991abae1ccbb88521c42f8c6", 0x20}, 0x4}]}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SCHED_CORE(0x25, 0x8020000000000002, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x48, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) 104.116216ms ago: executing program 2 (id=1880): r0 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x820, 0x0, {0x0, 0xea60}, {r1, r2/1000+10000}, {0x0, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1, 0x1}, 0xd, 0x2, 0x0, 0x0, "9f54e00e2192551a700b3dc36934292b1f33e922167da0f4d60ebc1bfec2e86b37d2090fb95e5253d673412e224f56b3433a6050ba31d0e93bd1db24da6f5d6b"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000001240)={0x2020000, &(0x7f0000000000), 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x0], 0x1}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 32.001547ms ago: executing program 4 (id=1881): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x10000000, 0x3, {0xa, 0x3, 0x9, 0xfffffffe}}) (fail_nth: 3) 6.275081ms ago: executing program 3 (id=1882): r0 = fsopen(&(0x7f0000000080)='ext3\x00', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'ip_vti0\x00', 0x7101}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000000)=0x1) r2 = socket(0x10, 0x803, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000300)="c94d728f", 0x4}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r6, 0x16, 0x0, @void}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(r7, 0x1, 0x2f, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0xffffffff, 0x1000, 0x4}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x14, 0x2, @remote}]}, 0x48}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f00000001c0)='vR\x92bn\x90Gw\xd6\v\x90\x1c\x86\x06\xdf\xb1\xa4M\xe4\xe4\xd9\xf4!\x89\x00G\x937\xc5Z\x16\xbavP;U\xc6\x04\xce,\xa5!\xb5\x11=', 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) r9 = syz_open_procfs(r8, &(0x7f0000000280)='net/udplite\x00') preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/45, 0x2d}], 0x1, 0x80000000, 0xffffff7c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) read$smackfs_access(r9, &(0x7f0000000140), 0x14) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000014000000020a030700000000000000000000000514000000020a0500"], 0x70}}, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$BLKGETSIZE64(r11, 0x80081272, &(0x7f0000000440)) 0s ago: executing program 2 (id=1883): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009340)='/sys/kernel/notes', 0x80400, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) fcntl$setlease(r1, 0x400, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000100)='./file7\x00') (async) chdir(&(0x7f0000000100)='./file7\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x40, &(0x7f00000001c0)={[{@nouid32}, {@errors_remount}, {@grpjquota}, {@nodiscard}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1842, 0x267) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1842, 0x267) fcntl$getflags(r1, 0x401) lseek(r0, 0xdc, 0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000200)={0x9e0000, 0xb, 0x0, r2, 0x0, &(0x7f00000001c0)={0x98091e, 0x4, '\x00', @string=&(0x7f0000000080)=0x5}}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x25, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x34324142}}) kernel console output (not intermixed with test programs): 470] Soft offlining pfn 0x21959e at process virtual address 0x2056d000 [ 190.256522][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256531][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2056e000 [ 190.256536][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256545][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2056f000 [ 190.256551][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256560][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20570000 [ 190.256565][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256574][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20571000 [ 190.256579][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256589][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20572000 [ 190.256594][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256603][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20573000 [ 190.256608][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256617][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20574000 [ 190.256622][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256632][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20575000 [ 190.256637][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256646][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20576000 [ 190.256651][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256661][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20577000 [ 190.256666][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256675][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20578000 [ 190.256680][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256690][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20579000 [ 190.256695][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256704][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2057a000 [ 190.256709][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256719][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2057b000 [ 190.256747][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256759][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2057c000 [ 190.256765][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256775][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2057d000 [ 190.256780][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256789][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2057e000 [ 190.256795][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256804][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2057f000 [ 190.256809][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256818][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20580000 [ 190.256824][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256833][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20581000 [ 190.256838][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256848][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20582000 [ 190.256853][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256862][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20583000 [ 190.256867][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256876][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20584000 [ 190.256882][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256891][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20585000 [ 190.256896][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256908][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20586000 [ 190.256913][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256923][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20587000 [ 190.256928][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256937][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20588000 [ 190.256942][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256952][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20589000 [ 190.256957][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256966][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2058a000 [ 190.256971][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256981][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2058b000 [ 190.256986][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.256995][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2058c000 [ 190.257000][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257010][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2058d000 [ 190.257015][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257024][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2058e000 [ 190.257029][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257039][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2058f000 [ 190.257044][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257053][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20590000 [ 190.257058][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257067][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20591000 [ 190.257073][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257082][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20592000 [ 190.257087][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257096][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20593000 [ 190.257101][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257111][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20594000 [ 190.257116][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257125][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20595000 [ 190.257130][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257140][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20596000 [ 190.257145][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257154][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20597000 [ 190.257159][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257169][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20598000 [ 190.257174][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257183][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x20599000 [ 190.257188][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257198][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2059a000 [ 190.257203][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257213][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2059b000 [ 190.257218][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257227][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2059c000 [ 190.257232][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257242][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2059d000 [ 190.257247][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257256][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2059e000 [ 190.257262][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257271][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x2059f000 [ 190.257276][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257285][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205a0000 [ 190.257290][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257300][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205a1000 [ 190.257305][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257314][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205a2000 [ 190.257319][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257329][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205a3000 [ 190.257334][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257343][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205a4000 [ 190.257348][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257358][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205a5000 [ 190.257363][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257372][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205a6000 [ 190.257377][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257387][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205a7000 [ 190.257392][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257401][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205a8000 [ 190.257406][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257416][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205a9000 [ 190.257421][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257430][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205aa000 [ 190.257435][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257445][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205ab000 [ 190.257450][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257459][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205ac000 [ 190.257464][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257474][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205ad000 [ 190.257479][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257488][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205ae000 [ 190.257493][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257503][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205af000 [ 190.257508][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257517][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205b0000 [ 190.257522][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257532][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205b1000 [ 190.257537][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257546][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205b2000 [ 190.257551][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257560][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205b3000 [ 190.257566][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257575][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205b4000 [ 190.257580][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257589][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205b5000 [ 190.257595][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257604][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205b6000 [ 190.257609][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257618][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205b7000 [ 190.257623][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257633][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205b8000 [ 190.257638][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257647][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205b9000 [ 190.257652][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257662][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205ba000 [ 190.257667][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257676][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205bb000 [ 190.257681][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257691][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205bc000 [ 190.257696][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257705][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205bd000 [ 190.257710][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257719][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205be000 [ 190.257725][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257734][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205bf000 [ 190.257739][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257748][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205c0000 [ 190.257754][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257763][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205c1000 [ 190.257768][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257777][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205c2000 [ 190.257783][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257818][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205c3000 [ 190.257824][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257833][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205c4000 [ 190.257838][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257848][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205c5000 [ 190.257853][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257862][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205c6000 [ 190.257868][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257877][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205c7000 [ 190.257882][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257891][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205c8000 [ 190.257896][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257908][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205c9000 [ 190.257913][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257923][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205ca000 [ 190.257928][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257937][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205cb000 [ 190.257942][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257952][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205cc000 [ 190.257957][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257966][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205cd000 [ 190.257971][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257981][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205ce000 [ 190.257986][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.257995][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205cf000 [ 190.258000][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258009][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205d0000 [ 190.258015][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258024][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205d1000 [ 190.258029][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258038][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205d2000 [ 190.258044][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258053][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205d3000 [ 190.258058][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258067][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205d4000 [ 190.258072][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258082][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205d5000 [ 190.258087][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258096][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205d6000 [ 190.258102][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258111][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205d7000 [ 190.258116][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258125][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205d8000 [ 190.258130][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258140][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205d9000 [ 190.258145][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258154][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205da000 [ 190.258159][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258169][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205db000 [ 190.258174][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258183][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205dc000 [ 190.258188][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258198][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205dd000 [ 190.258203][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258212][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205de000 [ 190.258217][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258227][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205df000 [ 190.258232][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258241][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205e0000 [ 190.258246][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258256][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205e1000 [ 190.258261][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258270][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205e2000 [ 190.258275][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258285][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205e3000 [ 190.258290][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258299][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205e4000 [ 190.258304][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258314][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205e5000 [ 190.258320][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258329][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205e6000 [ 190.258335][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258344][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205e7000 [ 190.258350][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258359][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205e8000 [ 190.258364][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258374][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205e9000 [ 190.258379][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258389][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205ea000 [ 190.258394][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258404][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205eb000 [ 190.258409][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258419][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205ec000 [ 190.258424][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258434][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205ed000 [ 190.258439][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258448][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205ee000 [ 190.258453][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258463][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205ef000 [ 190.258468][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258478][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205f0000 [ 190.258483][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258493][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205f1000 [ 190.258498][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258507][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205f2000 [ 190.258513][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258522][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205f3000 [ 190.258528][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258537][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205f4000 [ 190.258542][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258552][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205f5000 [ 190.258557][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258567][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205f6000 [ 190.258572][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258581][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205f7000 [ 190.258587][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258596][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205f8000 [ 190.258602][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258611][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205f9000 [ 190.258616][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258626][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205fa000 [ 190.258631][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258641][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205fb000 [ 190.258646][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258655][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205fc000 [ 190.258661][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258670][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205fd000 [ 190.258676][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258685][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205fe000 [ 190.258690][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.258700][ T9470] Soft offlining pfn 0x21959e at process virtual address 0x205ff000 [ 190.258705][ T9470] Soft offline: 0x21959e: page already poisoned [ 190.516937][ T9478] gretap0: entered promiscuous mode [ 190.552252][ T9478] gretap0: left promiscuous mode [ 191.222258][ T6331] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 191.222275][ T6331] EXT4-fs (loop3): This should not happen!! Data will be lost [ 191.222275][ T6331] [ 191.222283][ T6331] EXT4-fs (loop3): Total free blocks count 0 [ 191.222290][ T6331] EXT4-fs (loop3): Free/Dirty block details [ 191.222298][ T6331] EXT4-fs (loop3): free_blocks=0 [ 191.222305][ T6331] EXT4-fs (loop3): dirty_blocks=32 [ 191.222312][ T6331] EXT4-fs (loop3): Block reservation details [ 191.225821][ T4715] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 191.501542][ T9499] netlink: 'syz.2.1296': attribute type 10 has an invalid length. [ 191.501743][ T9499] veth0_vlan: left promiscuous mode [ 191.502108][ T9499] veth0_vlan: entered promiscuous mode [ 191.502515][ T9499] team0: Device veth0_vlan failed to register rx_handler [ 191.575429][ T9504] loop3: detected capacity change from 0 to 512 [ 191.776368][ T9507] loop5: detected capacity change from 0 to 8192 [ 192.514244][ T5582] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 192.514263][ T5582] EXT4-fs (loop1): This should not happen!! Data will be lost [ 192.514263][ T5582] [ 192.515635][ T4704] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 192.520426][ T4704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.653613][ T9515] gretap0: entered promiscuous mode [ 192.664851][ T9515] gretap0: left promiscuous mode [ 192.956359][ T9526] syzkaller0: entered promiscuous mode [ 192.956375][ T9526] syzkaller0: entered allmulticast mode [ 193.094959][ T9538] __nla_validate_parse: 8 callbacks suppressed [ 193.094973][ T9538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1307'. [ 193.094993][ T9538] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1307'. [ 193.095632][ T9538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1307'. [ 193.095645][ T9538] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1307'. [ 193.508239][ T9554] loop1: detected capacity change from 0 to 128 [ 193.508600][ T9554] vfat: Unknown parameter 'func' [ 193.602661][ T9560] loop3: detected capacity change from 0 to 512 [ 193.612096][ T9560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.623531][ T9560] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 193.623563][ T9560] System zones: 1-2, 4-12, 8-8 [ 193.625060][ T9560] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1315: iget: bad i_size value: 38620345925642 [ 193.625082][ T9560] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.625413][ T9560] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1315: couldn't read orphan inode 15 (err -117) [ 193.625429][ T9560] loop3: lost filesystem error report for type 5 error -117 [ 193.626412][ T9560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.436096][ T9566] can: request_module (can-proto-3) failed. [ 194.537087][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.555437][ T9572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1317'. [ 194.555458][ T9572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1317'. [ 194.880377][ T30] audit: type=1326 audit(4294967489.860:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9569 comm="syz.1.1317" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff82177b68 code=0x0 [ 194.982495][ T9579] syzkaller0: entered promiscuous mode [ 194.982511][ T9579] syzkaller0: entered allmulticast mode [ 194.983678][ T9579] FAULT_INJECTION: forcing a failure. [ 194.983678][ T9579] name failslab, interval 1, probability 0, space 0, times 0 [ 194.983699][ T9579] CPU: 0 UID: 0 PID: 9579 Comm: syz.3.1318 Tainted: G L syzkaller #0 PREEMPT [ 194.983711][ T9579] Tainted: [L]=SOFTLOCKUP [ 194.983715][ T9579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 194.983720][ T9579] Call trace: [ 194.983723][ T9579] show_stack+0x2c/0x3c (C) [ 194.983742][ T9579] __dump_stack+0x30/0x40 [ 194.983754][ T9579] dump_stack_lvl+0xd8/0x12c [ 194.983764][ T9579] dump_stack+0x1c/0x28 [ 194.983773][ T9579] should_fail_ex+0x41c/0x590 [ 194.983783][ T9579] should_failslab+0xc4/0x120 [ 194.983792][ T9579] kmem_cache_alloc_noprof+0x8c/0x610 [ 194.983802][ T9579] skb_clone+0x1ac/0x320 [ 194.983813][ T9579] netem_enqueue+0x994/0x230c [ 194.983821][ T9579] dev_qdisc_enqueue+0x60/0x450 [ 194.983830][ T9579] __dev_queue_xmit+0x13f4/0x2ba4 [ 194.983841][ T9579] packet_xmit+0x6c/0x314 [ 194.983849][ T9579] packet_sendmsg+0x319c/0x4110 [ 194.983859][ T9579] __sock_sendmsg+0xc8/0x138 [ 194.983869][ T9579] ____sys_sendmsg+0x3d0/0x6c8 [ 194.983876][ T9579] ___sys_sendmsg+0x198/0x224 [ 194.983883][ T9579] __sys_sendmsg+0x160/0x214 [ 194.983896][ T9579] __arm64_sys_sendmsg+0x80/0x94 [ 194.983904][ T9579] invoke_syscall+0x98/0x244 [ 194.983914][ T9579] el0_svc_common+0xec/0x23c [ 194.983924][ T9579] do_el0_svc+0x4c/0x5c [ 194.983933][ T9579] el0_svc+0x64/0x260 [ 194.983942][ T9579] el0t_64_sync_handler+0x48/0x148 [ 194.983949][ T9579] el0t_64_sync+0x198/0x19c [ 194.999350][ T9584] misc userio: Invalid payload size [ 195.013353][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1320'. [ 195.445224][ T4705] Bluetooth: hci0: unexpected subevent 0x0e length: 32 > 15 [ 195.445259][ T4705] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 195.459003][ T9598] syzkaller0: entered promiscuous mode [ 195.459036][ T9598] syzkaller0: entered allmulticast mode [ 195.860082][ T9601] loop1: detected capacity change from 0 to 128 [ 195.860552][ T9601] vfat: Unknown parameter 'appraise_type' [ 195.882807][ T9604] can: request_module (can-proto-3) failed. [ 196.253463][ T9619] loop5: detected capacity change from 0 to 128 [ 196.257960][ T9619] vfat: Unknown parameter 'appraise_type' [ 196.394114][ T9617] can: request_module (can-proto-3) failed. [ 196.435642][ T9627] loop3: detected capacity change from 0 to 1024 [ 196.436000][ T9627] EXT4-fs: Ignoring removed bh option [ 196.488796][ T4692] udevd[4692]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 196.508341][ T9627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.508413][ T9627] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.991855][ T9640] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1335'. [ 196.991904][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1335'. [ 197.310305][ T30] audit: type=1326 audit(4294967492.290:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9638 comm="syz.5.1335" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7d77b68 code=0x0 [ 197.349711][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 197.709500][ T9654] loop3: detected capacity change from 0 to 8192 [ 198.034836][ T9661] loop1: detected capacity change from 0 to 128 [ 198.035310][ T9661] vfat: Unknown parameter 'appraise_type' [ 198.063796][ T9663] can: request_module (can-proto-3) failed. [ 198.074220][ T9654] loop3: AHDI p1 p2 p3 p4 [ 198.075160][ T9654] loop3: p1 size 67109119 extends beyond EOD, truncated [ 198.584879][ T9654] loop3: p2 start 16741127 is beyond EOD, truncated [ 198.584951][ T9654] loop3: p3 start 1671679 is beyond EOD, truncated [ 198.760676][ T9683] loop1: detected capacity change from 0 to 1024 [ 198.761041][ T9683] EXT4-fs: Ignoring removed bh option [ 198.775922][ T4694] udevd[4694]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 198.787185][ T9683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 198.787250][ T9683] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.169789][ T4704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 199.173187][ T9688] can: request_module (can-proto-3) failed. [ 199.179057][ T9692] netlink: 'syz.5.1348': attribute type 10 has an invalid length. [ 199.179089][ T9692] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1348'. [ 199.180414][ T9692] dummy0: entered promiscuous mode [ 199.182674][ T9692] dummy0: entered allmulticast mode [ 199.190046][ T9692] bridge0: port 3(dummy0) entered blocking state [ 199.191230][ T9692] bridge0: port 3(dummy0) entered disabled state [ 199.193142][ T9692] bridge0: port 3(dummy0) entered blocking state [ 199.193191][ T9692] bridge0: port 3(dummy0) entered forwarding state [ 199.201452][ T9693] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 199.348444][ T9711] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1354'. [ 199.348934][ T9702] loop3: detected capacity change from 0 to 8192 [ 199.351623][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1354'. [ 199.378837][ T9702] loop3: p1 < > p3[EZD] [ 199.405106][ T9702] loop3: p3 start 3238002688 is beyond EOD, truncated [ 199.712611][ T30] audit: type=1326 audit(4294967494.560:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9710 comm="syz.5.1354" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7d77b68 code=0x0 [ 200.001851][ T9728] loop3: detected capacity change from 0 to 1024 [ 200.002248][ T9728] EXT4-fs: Ignoring removed bh option [ 200.010086][ T4694] udevd[4694]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 200.019789][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1362'. [ 200.026159][ T9733] macvtap1: entered promiscuous mode [ 200.026261][ T9733] vlan0: entered promiscuous mode [ 200.028313][ T9728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 200.028368][ T9728] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.075298][ T9735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1363'. [ 200.075345][ T9735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1363'. [ 200.132048][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 200.275860][ T9747] loop2: detected capacity change from 0 to 512 [ 200.295646][ T9747] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 200.295723][ T9747] System zones: 1-12 [ 200.295848][ T9747] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.1369: Directory hole found for htree index block 0 [ 200.295863][ T9747] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 200.296029][ T9747] EXT4-fs (loop2): Remounting filesystem read-only [ 200.296048][ T9747] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 200.296074][ T9747] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 200.296525][ T9747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.310408][ T9747] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 201.220894][ T9768] loop3: detected capacity change from 0 to 128 [ 201.392964][ T9768] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.394783][ T9768] ext4 filesystem being mounted at /258/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.502490][ T9780] loop5: detected capacity change from 0 to 128 [ 201.503875][ T9779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1378'. [ 201.503905][ T9779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1378'. [ 201.872762][ T9780] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.874397][ T9780] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.881589][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.966806][ T30] audit: type=1326 audit(4295491784.984:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.4.1378" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cd77b68 code=0x0 [ 202.571587][ T8699] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.576757][ T4715] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.675871][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1383'. [ 202.838776][ T9810] loop2: detected capacity change from 0 to 1024 [ 202.840636][ T9810] EXT4-fs: Ignoring removed bh option [ 202.861469][ T9810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 202.861542][ T9810] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.996930][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 204.466041][ T9859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1402'. [ 204.466074][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1402'. [ 204.914997][ T9871] comedi comedi0: comedi_config --init_data is deprecated [ 205.420865][ T9891] loop5: detected capacity change from 0 to 128 [ 205.424195][ T9891] vfat: Unknown parameter 'appraise_type' [ 205.572518][ T9890] can: request_module (can-proto-3) failed. [ 206.019600][ T9902] netlink: 'syz.3.1416': attribute type 2 has an invalid length. [ 206.020291][ T9902] netlink: 'syz.3.1416': attribute type 2 has an invalid length. [ 206.020303][ T9902] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1416'. [ 206.118608][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1421'. [ 206.126979][ T9917] macvtap1: entered promiscuous mode [ 206.127006][ T9917] vlan0: entered promiscuous mode [ 206.250609][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1425'. [ 206.253024][ T9929] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 207.413474][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'. [ 207.417294][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'. [ 207.469459][ T9964] loop1: detected capacity change from 0 to 512 [ 207.472686][ T9964] EXT4-fs (loop1): Test dummy encryption mode enabled [ 207.472728][ T9964] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 207.480726][ T9964] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1438: bad orphan inode 131083 [ 207.480763][ T9964] loop1: lost filesystem error report for type 5 error -117 [ 207.483198][ T9964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.501264][ T4814] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.509261][ T9964] overlayfs: upper fs needs to support d_type. [ 207.515355][ T4814] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 207.542838][ T9964] 9p: Bad value for 'rfdno' [ 207.581825][ T9971] fido_id[9971]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 208.095284][ T4704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.624294][ T4711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.625499][ T4711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.625876][ T4711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.629587][ T4711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.631070][ T4711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.879364][ T9994] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.879450][ T9994] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.879516][ T9994] bridge_slave_0: entered allmulticast mode [ 208.880048][ T9994] bridge_slave_0: entered promiscuous mode [ 208.881082][ T9994] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.881539][ T9994] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.881655][ T9994] bridge_slave_1: entered allmulticast mode [ 208.882431][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1455'. [ 208.882448][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1455'. [ 208.882457][T10034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1455'. [ 208.882678][ T9994] bridge_slave_1: entered promiscuous mode [ 208.910145][ T9994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.914562][ T9994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.927308][ T9994] team0: Port device team_slave_0 added [ 208.929167][ T9994] team0: Port device team_slave_1 added [ 208.937561][T10035] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 208.940718][T10035] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 208.944152][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.945558][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.949671][ T9994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.952163][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.953533][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.957653][ T9994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.971615][ T9994] hsr_slave_0: entered promiscuous mode [ 208.973136][ T9994] hsr_slave_1: entered promiscuous mode [ 208.974622][ T9994] debugfs: 'hsr0' already exists in 'hsr' [ 208.975684][ T9994] Cannot create hsr debugfs directory [ 209.033556][ T9994] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 209.036124][ T9994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 209.037762][ T9994] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 209.039830][ T9994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 209.041467][ T9994] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 209.044451][ T9994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 209.046421][ T9994] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 209.048844][ T9994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 209.108806][ T9994] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.108851][ T9994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.108962][ T9994] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.109004][ T9994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.138766][ T9994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.145851][ T1412] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.147212][ T1412] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.153582][ T9994] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.156001][ T1412] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.156050][ T1412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.159135][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.159175][ T5581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.206758][ T9994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.266219][T10047] syzkaller0: entered promiscuous mode [ 209.266258][T10047] syzkaller0: entered allmulticast mode [ 209.280788][T10047] loop3: detected capacity change from 0 to 1024 [ 209.289687][T10047] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 209.294314][T10047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 ro without journal. Quota mode: none. [ 209.398874][T10059] __nla_validate_parse: 3 callbacks suppressed [ 209.400017][T10059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1459'. [ 209.432307][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 209.519293][ T9994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.946450][T10072] can: request_module (can-proto-3) failed. [ 210.044134][T10080] loop5: detected capacity change from 0 to 128 [ 210.048903][T10080] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.053115][T10080] EXT4-fs (loop5): Test dummy encryption mode enabled [ 210.058659][T10080] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.060785][T10080] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.080702][T10080] EXT4-fs error (device loop5): htree_dirblock_to_tree:1051: inode #2: comm syz.5.1462: Directory block failed checksum [ 210.085516][ T9994] veth0_vlan: entered promiscuous mode [ 210.087434][ T9994] veth1_vlan: entered promiscuous mode [ 210.102422][T10085] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 210.109968][ T9994] veth0_macvtap: entered promiscuous mode [ 210.116244][ T9994] veth1_macvtap: entered promiscuous mode [ 210.122945][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.125344][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.138252][ T8699] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.149725][ T1412] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.151292][ T1412] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.163900][ T1412] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.163960][ T1412] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.176069][T10085] bdev: Unknown parameter 'sourceU§³ÂB®COô…7-^cØh)榎d©²|£„­ó@­·Ï4QÏ´>Ö»™XLÌÚ`ù?;áVjQ©Ï‡&£8Á¯'LÒî…Ù~éúqôÙr8•ëR•0ŒÄ!µ\œA¡#øˆÉÃñ4ª]MÉð‚¶s«p¯øe' [ 210.182510][ T5582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.182536][ T5582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.199695][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.199725][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.200875][T10091] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1465'. [ 210.203167][T10091] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1465'. [ 210.322314][T10100] binder: tried to use weak ref as strong ref [ 210.322346][T10100] binder: 10097:10100 Acquire 1 refcount change on invalid ref 0 ret -22 [ 210.322493][T10100] binder: 10097:10100 got transaction to invalid handle, 1 [ 210.322503][T10100] binder: 10097:10100 cannot find target node [ 210.322516][T10100] binder: 10097:10100 transaction call to 0:0 failed 17/29201/-22, code 0 size 72-24 line 3236 [ 210.322608][T10100] binder: 10097:10100 ioctl 40246f4c 20000280 returned -22 [ 210.324272][ T11] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.384031][T10106] loop6: detected capacity change from 0 to 1024 [ 210.384423][T10106] EXT4-fs: Ignoring removed bh option [ 210.419921][T10106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 210.419991][T10106] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.433028][T10106] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 3: comm syz.6.1472: lblock 3 mapped to illegal pblock 3 (length 3) [ 210.433455][T10112] netem: change failed [ 210.436651][T10106] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 210.436681][T10106] EXT4-fs (loop6): This should not happen!! Data will be lost [ 210.436681][T10106] [ 210.450843][T10106] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1472: lblock 3 mapped to illegal pblock 3 (length 1) [ 210.451270][T10106] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1472: lblock 3 mapped to illegal pblock 3 (length 1) [ 210.451531][T10106] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1472: lblock 3 mapped to illegal pblock 3 (length 1) [ 210.451711][T10106] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1472: lblock 3 mapped to illegal pblock 3 (length 1) [ 210.451866][T10106] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1472: lblock 3 mapped to illegal pblock 3 (length 1) [ 210.452107][T10106] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1472: lblock 3 mapped to illegal pblock 3 (length 1) [ 210.454989][T10106] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1472: lblock 3 mapped to illegal pblock 3 (length 1) [ 210.459999][T10106] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1472: lblock 3 mapped to illegal pblock 3 (length 1) [ 210.460273][T10106] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1472: lblock 3 mapped to illegal pblock 3 (length 1) [ 210.510982][T10116] loop3: detected capacity change from 0 to 2048 [ 210.627432][ T5581] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 210.627673][ T5581] EXT4-fs (loop6): This should not happen!! Data will be lost [ 210.627673][ T5581] [ 210.628574][ T9994] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 210.629336][ T9994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 210.644291][ T4705] Bluetooth: hci0: command tx timeout [ 210.659913][T10123] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1477'. [ 210.661966][T10123] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1477'. [ 210.846449][T10124] loop6: detected capacity change from 0 to 128 [ 210.941385][T10137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1481'. [ 210.947218][T10136] binder: 10134:10136 ioctl c0306201 0 returned -14 [ 210.982245][T10139] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1483'. [ 210.982288][T10139] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1483'. [ 210.982301][T10139] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1483'. [ 210.982316][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1483'. [ 210.988242][T10141] loop3: detected capacity change from 0 to 2048 [ 210.990614][T10139] syzkaller0: entered promiscuous mode [ 210.990647][T10139] syzkaller0: entered allmulticast mode [ 210.991632][T10139] TC_ACT_REPEAT abuse ? [ 210.994770][T10143] loop2: detected capacity change from 0 to 256 [ 211.001637][T10143] vfat filesystem being mounted at /319/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 211.062111][T10141] loop3: p1 < > p4 [ 211.062111][T10141] p4: [ 211.063230][T10141] loop3: p4 size 722688 extends beyond EOD, truncated [ 211.065239][T10141] loop3: p6 start 262464109 is beyond EOD, truncated [ 211.065648][T10141] loop3: p7 size 2304 extends beyond EOD, truncated [ 211.160123][T10155] FAULT_INJECTION: forcing a failure. [ 211.160123][T10155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.160156][T10155] CPU: 0 UID: 0 PID: 10155 Comm: syz.2.1484 Tainted: G L syzkaller #0 PREEMPT [ 211.160172][T10155] Tainted: [L]=SOFTLOCKUP [ 211.160176][T10155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 211.160183][T10155] Call trace: [ 211.160187][T10155] show_stack+0x2c/0x3c (C) [ 211.160206][T10155] __dump_stack+0x30/0x40 [ 211.160217][T10155] dump_stack_lvl+0xd8/0x12c [ 211.160227][T10155] dump_stack+0x1c/0x28 [ 211.160237][T10155] should_fail_ex+0x41c/0x590 [ 211.160246][T10155] should_fail+0x14/0x24 [ 211.160255][T10155] should_fail_usercopy+0x20/0x30 [ 211.160263][T10155] _inline_copy_from_user+0x3c/0x188 [ 211.160274][T10155] wext_handle_ioctl+0xbc/0x288 [ 211.160283][T10155] sock_ioctl+0x154/0x7ec [ 211.160291][T10155] __arm64_sys_ioctl+0x14c/0x1c4 [ 211.160302][T10155] invoke_syscall+0x98/0x244 [ 211.160312][T10155] el0_svc_common+0xec/0x23c [ 211.160322][T10155] do_el0_svc+0x4c/0x5c [ 211.160331][T10155] el0_svc+0x64/0x260 [ 211.160339][T10155] el0t_64_sync_handler+0x48/0x148 [ 211.160346][T10155] el0t_64_sync+0x198/0x19c [ 211.238146][T10160] loop3: detected capacity change from 0 to 1024 [ 211.238977][T10161] loop5: detected capacity change from 0 to 1024 [ 211.242152][T10161] EXT4-fs: Ignoring removed bh option [ 211.242367][T10160] EXT4-fs: Ignoring removed bh option [ 211.280036][T10161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 211.280111][T10161] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.284628][T10160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 211.284703][T10161] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm syz.5.1488: lblock 3 mapped to illegal pblock 3 (length 3) [ 211.286445][T10160] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.286778][T10161] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 211.286799][T10161] EXT4-fs (loop5): This should not happen!! Data will be lost [ 211.286799][T10161] [ 211.289289][T10161] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1488: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.291434][T10161] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1488: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.291658][T10161] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1488: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.291802][T10161] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1488: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.291951][T10161] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1488: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.292090][T10161] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1488: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.292220][T10161] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1488: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.292352][T10161] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1488: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.292480][T10161] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1488: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.297023][T10160] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.1487: lblock 3 mapped to illegal pblock 3 (length 3) [ 211.298829][T10160] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 211.298855][T10160] EXT4-fs (loop3): This should not happen!! Data will be lost [ 211.298855][T10160] [ 211.301861][T10160] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1487: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.314278][T10160] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1487: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.315383][T10160] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1487: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.316325][T10160] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1487: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.320772][T10160] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1487: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.322281][T10160] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1487: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.328828][T10160] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1487: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.329896][T10160] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1487: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.330956][T10160] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1487: lblock 3 mapped to illegal pblock 3 (length 1) [ 211.477016][ T6334] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 211.477056][ T6334] EXT4-fs (loop5): This should not happen!! Data will be lost [ 211.477056][ T6334] [ 211.477845][ T8699] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 211.478599][ T8699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 211.564431][ T5581] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 211.564468][ T5581] EXT4-fs (loop3): This should not happen!! Data will be lost [ 211.564468][ T5581] [ 211.566743][ T4715] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 211.567510][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 211.598237][T10174] EXT4-fs (loop3): bad geometry: block count 16776960 exceeds size of device (256 blocks) [ 211.659131][T10176] vfat: Unknown parameter 'uni_x|ate' [ 212.209158][T10197] vfat filesystem being mounted at /62/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 212.691495][ T4705] Bluetooth: hci0: command tx timeout [ 213.020297][T10220] set_capacity_and_notify: 3 callbacks suppressed [ 213.020329][T10220] loop2: detected capacity change from 0 to 128 [ 213.075392][T10222] loop2: detected capacity change from 0 to 1024 [ 213.077625][T10222] EXT4-fs: Ignoring removed bh option [ 213.102177][T10222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 213.102246][T10222] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.109602][T10222] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.1505: lblock 3 mapped to illegal pblock 3 (length 3) [ 213.111379][T10222] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 213.111402][T10222] EXT4-fs (loop2): This should not happen!! Data will be lost [ 213.111402][T10222] [ 213.112242][T10222] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1505: lblock 3 mapped to illegal pblock 3 (length 1) [ 213.113433][T10222] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1505: lblock 3 mapped to illegal pblock 3 (length 1) [ 213.113686][T10222] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1505: lblock 3 mapped to illegal pblock 3 (length 1) [ 213.113839][T10222] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1505: lblock 3 mapped to illegal pblock 3 (length 1) [ 213.136941][T10222] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1505: lblock 3 mapped to illegal pblock 3 (length 1) [ 213.139723][T10222] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1505: lblock 3 mapped to illegal pblock 3 (length 1) [ 213.145525][T10222] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1505: lblock 3 mapped to illegal pblock 3 (length 1) [ 213.148083][T10222] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1505: lblock 3 mapped to illegal pblock 3 (length 1) [ 213.150643][T10222] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1505: lblock 3 mapped to illegal pblock 3 (length 1) [ 213.592821][ T6333] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 213.592857][ T6333] EXT4-fs (loop2): This should not happen!! Data will be lost [ 213.592857][ T6333] [ 213.593945][ T4706] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 213.594692][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 213.614865][T10255] loop6: detected capacity change from 0 to 128 [ 213.688103][T10264] binder: 10263:10264 tried to acquire reference to desc 0, got 1 instead [ 213.744955][T10277] syzkaller0: entered promiscuous mode [ 213.744994][T10277] syzkaller0: entered allmulticast mode [ 213.794078][T10283] netlink: 'syz.4.1527': attribute type 1 has an invalid length. [ 213.800563][T10283] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.812974][T10283] bond0: (slave veth0_to_bond): Releasing backup interface [ 213.847565][T10286] loop6: detected capacity change from 0 to 128 [ 213.851932][T10283] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 215.298229][T10306] FAULT_INJECTION: forcing a failure. [ 215.298229][T10306] name failslab, interval 1, probability 0, space 0, times 0 [ 215.298280][T10306] CPU: 0 UID: 0 PID: 10306 Comm: syz.4.1533 Tainted: G L syzkaller #0 PREEMPT [ 215.298294][T10306] Tainted: [L]=SOFTLOCKUP [ 215.298297][T10306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 215.298302][T10306] Call trace: [ 215.298305][T10306] show_stack+0x2c/0x3c (C) [ 215.298325][T10306] __dump_stack+0x30/0x40 [ 215.298336][T10306] dump_stack_lvl+0xd8/0x12c [ 215.298346][T10306] dump_stack+0x1c/0x28 [ 215.298356][T10306] should_fail_ex+0x41c/0x590 [ 215.298366][T10306] should_failslab+0xc4/0x120 [ 215.298375][T10306] kmem_cache_alloc_node_noprof+0x94/0x6c8 [ 215.298384][T10306] __alloc_skb+0x1f0/0x610 [ 215.298396][T10306] __ip6_append_data+0x289c/0x383c [ 215.298405][T10306] ip6_append_data+0x100/0x270 [ 215.298412][T10306] rawv6_sendmsg+0xe3c/0x1438 [ 215.298422][T10306] inet_sendmsg+0xb4/0xd8 [ 215.298431][T10306] __sock_sendmsg+0xc8/0x138 [ 215.298440][T10306] ____sys_sendmsg+0x3f8/0x6c8 [ 215.298447][T10306] ___sys_sendmsg+0x198/0x224 [ 215.298454][T10306] __sys_sendmmsg+0x208/0x588 [ 215.298461][T10306] __arm64_sys_sendmmsg+0xa4/0xc0 [ 215.298468][T10306] invoke_syscall+0x98/0x244 [ 215.298478][T10306] el0_svc_common+0xec/0x23c [ 215.298488][T10306] do_el0_svc+0x4c/0x5c [ 215.298497][T10306] el0_svc+0x64/0x260 [ 215.298506][T10306] el0t_64_sync_handler+0x48/0x148 [ 215.298513][T10306] el0t_64_sync+0x198/0x19c [ 215.395734][T10306] lo speed is unknown, defaulting to 1000 [ 215.395799][T10306] lo speed is unknown, defaulting to 1000 [ 215.396820][T10306] lo speed is unknown, defaulting to 1000 [ 215.398340][T10306] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 215.400663][T10306] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 215.875133][T10306] lo speed is unknown, defaulting to 1000 [ 215.882087][T10306] lo speed is unknown, defaulting to 1000 [ 215.888182][T10306] lo speed is unknown, defaulting to 1000 [ 215.893955][T10306] lo speed is unknown, defaulting to 1000 [ 215.900040][T10306] lo speed is unknown, defaulting to 1000 [ 215.906411][T10306] lo speed is unknown, defaulting to 1000 [ 215.918133][T10307] siw: device registration error -23 [ 216.041446][ T4705] Bluetooth: hci0: command tx timeout [ 216.186900][T10322] __nla_validate_parse: 4 callbacks suppressed [ 216.188319][T10322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1540'. [ 216.189836][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1540'. [ 216.266028][T10324] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1539'. [ 216.267891][T10324] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1539'. [ 216.659345][T10332] loop3: detected capacity change from 0 to 256 [ 216.677979][T10332] FAT-fs (loop3): Directory bread(block 64) failed [ 216.678012][T10332] FAT-fs (loop3): Directory bread(block 65) failed [ 216.678053][T10332] FAT-fs (loop3): Directory bread(block 66) failed [ 216.678072][T10332] FAT-fs (loop3): Directory bread(block 67) failed [ 216.678103][T10332] FAT-fs (loop3): Directory bread(block 68) failed [ 216.678118][T10332] FAT-fs (loop3): Directory bread(block 69) failed [ 216.678144][T10332] FAT-fs (loop3): Directory bread(block 70) failed [ 216.678829][T10332] FAT-fs (loop3): Directory bread(block 71) failed [ 216.678883][T10332] FAT-fs (loop3): Directory bread(block 72) failed [ 216.678909][T10332] FAT-fs (loop3): Directory bread(block 73) failed [ 216.834567][T10346] loop6: detected capacity change from 0 to 128 [ 216.874905][T10346] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.878121][T10346] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.967240][T10360] FAULT_INJECTION: forcing a failure. [ 216.967240][T10360] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 216.967309][T10360] CPU: 0 UID: 0 PID: 10360 Comm: syz.3.1547 Tainted: G L syzkaller #0 PREEMPT [ 216.967325][T10360] Tainted: [L]=SOFTLOCKUP [ 216.967329][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 216.967334][T10360] Call trace: [ 216.967337][T10360] show_stack+0x2c/0x3c (C) [ 216.967356][T10360] __dump_stack+0x30/0x40 [ 216.967366][T10360] dump_stack_lvl+0xd8/0x12c [ 216.967376][T10360] dump_stack+0x1c/0x28 [ 216.967386][T10360] should_fail_ex+0x41c/0x590 [ 216.967395][T10360] should_fail_alloc_page+0xec/0x10c [ 216.967404][T10360] prepare_alloc_pages+0x194/0x4a4 [ 216.967414][T10360] __alloc_frozen_pages_noprof+0x134/0x320 [ 216.967422][T10360] alloc_pages_mpol+0x1ec/0x3c0 [ 216.967431][T10360] alloc_frozen_pages_noprof+0xc4/0x10c [ 216.967441][T10360] alloc_pages_noprof+0x30/0x148 [ 216.967449][T10360] get_free_pages_noprof+0x1c/0xbc [ 216.967458][T10360] __kasan_populate_vmalloc+0x48/0x1d0 [ 216.967469][T10360] alloc_vmap_area+0xdf4/0x13e8 [ 216.967478][T10360] __get_vm_area_node+0x210/0x32c [ 216.967488][T10360] __vmalloc_node_range_noprof+0x2c8/0x105c [ 216.967497][T10360] __vmalloc_node_noprof+0xec/0x14c [ 216.967507][T10360] vzalloc_noprof+0x3c/0x4c [ 216.967516][T10360] bpf_check+0x148/0x3bd8 [ 216.967524][T10360] bpf_prog_load+0xf20/0x1448 [ 216.967534][T10360] __sys_bpf+0x3f4/0x5f0 [ 216.967543][T10360] __arm64_sys_bpf+0x80/0x98 [ 216.967552][T10360] invoke_syscall+0x98/0x244 [ 216.967563][T10360] el0_svc_common+0xec/0x23c [ 216.967572][T10360] do_el0_svc+0x4c/0x5c [ 216.967581][T10360] el0_svc+0x64/0x260 [ 216.967590][T10360] el0t_64_sync_handler+0x48/0x148 [ 216.967597][T10360] el0t_64_sync+0x198/0x19c [ 216.967677][T10360] syz.3.1547: vmalloc error: size 816, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 216.967921][T10360] CPU: 0 UID: 0 PID: 10360 Comm: syz.3.1547 Tainted: G L syzkaller #0 PREEMPT [ 216.967934][T10360] Tainted: [L]=SOFTLOCKUP [ 216.967937][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 216.967941][T10360] Call trace: [ 216.967944][T10360] show_stack+0x2c/0x3c (C) [ 216.967954][T10360] __dump_stack+0x30/0x40 [ 216.967964][T10360] dump_stack_lvl+0xd8/0x12c [ 216.967973][T10360] dump_stack+0x1c/0x28 [ 216.967983][T10360] warn_alloc+0x1bc/0x2dc [ 216.967991][T10360] __vmalloc_node_range_noprof+0x2e8/0x105c [ 216.968001][T10360] __vmalloc_node_noprof+0xec/0x14c [ 216.968010][T10360] vzalloc_noprof+0x3c/0x4c [ 216.968020][T10360] bpf_check+0x148/0x3bd8 [ 216.968027][T10360] bpf_prog_load+0xf20/0x1448 [ 216.968037][T10360] __sys_bpf+0x3f4/0x5f0 [ 216.968046][T10360] __arm64_sys_bpf+0x80/0x98 [ 216.968055][T10360] invoke_syscall+0x98/0x244 [ 216.968064][T10360] el0_svc_common+0xec/0x23c [ 216.968074][T10360] do_el0_svc+0x4c/0x5c [ 216.968083][T10360] el0_svc+0x64/0x260 [ 216.968090][T10360] el0t_64_sync_handler+0x48/0x148 [ 216.968097][T10360] el0t_64_sync+0x198/0x19c [ 216.968120][T10360] Mem-Info: [ 216.968148][T10360] active_anon:76 inactive_anon:19809 isolated_anon:0 [ 216.968148][T10360] active_file:3036 inactive_file:14777 isolated_file:0 [ 216.968148][T10360] unevictable:768 dirty:214 writeback:0 [ 216.968148][T10360] slab_reclaimable:9213 slab_unreclaimable:104352 [ 216.968148][T10360] mapped:37473 shmem:8528 pagetables:1349 [ 216.968148][T10360] sec_pagetables:0 bounce:0 [ 216.968148][T10360] kernel_misc_reclaimable:0 [ 216.968148][T10360] free:1428739 free_pcp:25279 free_cma:7616 [ 216.968197][T10360] Node 0 active_anon:304kB inactive_anon:79236kB active_file:12144kB inactive_file:59108kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:149892kB dirty:856kB writeback:0kB shmem:34112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10124kB pagetables:5396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 216.968240][T10360] Node 0 DMA free:3077888kB boost:0kB min:20352kB low:25440kB high:30528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 216.968310][T10360] lowmem_reserve[]: 0 0 3652 3652 3652 [ 216.968501][T10360] Node 0 Normal free:2637068kB boost:0kB min:24700kB low:30872kB high:37044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:304kB inactive_anon:79236kB active_file:12144kB inactive_file:59108kB unevictable:3072kB writepending:856kB zspages:0kB present:5242880kB managed:3740468kB mlocked:0kB bounce:0kB free_pcp:101116kB local_pcp:36256kB free_cma:0kB [ 216.968570][T10360] lowmem_reserve[]: 0 0 0 0 0 [ 216.968759][T10360] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 216.969346][T10360] Node 0 Normal: 659*4kB (UM) 1536*8kB (UE) 1114*16kB (UME) 687*32kB (UM) 75*64kB (UME) 88*128kB (UME) 38*256kB (UME) 11*512kB (M) 3*1024kB (UM) 8*2048kB (UME) 618*4096kB (UM) = 2636940kB [ 216.970112][T10360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.970143][T10360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 216.970173][T10360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 216.970203][T10360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 216.970233][T10360] 26312 total pagecache pages [ 216.970260][T10360] 0 pages in swap cache [ 216.970287][T10360] Free swap = 124996kB [ 216.970313][T10360] Total swap = 124996kB [ 216.970344][T10360] 2097152 pages RAM [ 216.970370][T10360] 0 pages HighMem/MovableOnly [ 216.970397][T10360] 391987 pages reserved [ 216.970423][T10360] 8192 pages cma reserved [ 216.970450][T10360] 187 pages hwpoisoned [ 217.175858][T10367] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1554'. [ 217.177448][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1554'. [ 217.371168][T10373] syzkaller0: entered promiscuous mode [ 217.371204][T10373] syzkaller0: entered allmulticast mode [ 217.397276][T10377] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1555'. [ 217.548380][T10379] syzkaller0: entered promiscuous mode [ 217.548414][T10379] syzkaller0: entered allmulticast mode [ 217.593244][T10381] loop2: detected capacity change from 0 to 512 [ 217.613997][T10381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.690248][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.763745][T10399] loop2: detected capacity change from 0 to 1024 [ 217.771198][T10401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1566'. [ 217.771233][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1566'. [ 217.773654][T10399] EXT4-fs: Ignoring removed bh option [ 217.789785][ T9994] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.790527][T10399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 217.790581][T10399] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.795343][T10399] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.1564: lblock 3 mapped to illegal pblock 3 (length 3) [ 217.798559][T10399] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 217.798598][T10399] EXT4-fs (loop2): This should not happen!! Data will be lost [ 217.798598][T10399] [ 217.803002][T10399] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1564: lblock 3 mapped to illegal pblock 3 (length 1) [ 217.805658][T10399] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1564: lblock 3 mapped to illegal pblock 3 (length 1) [ 217.808022][T10399] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1564: lblock 3 mapped to illegal pblock 3 (length 1) [ 218.241615][T10405] loop5: detected capacity change from 0 to 128 [ 218.242125][T10405] vfat: Unknown parameter 'appraise_type' [ 218.385843][T10399] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1564: lblock 3 mapped to illegal pblock 3 (length 1) [ 218.394549][T10399] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1564: lblock 3 mapped to illegal pblock 3 (length 1) [ 218.395213][T10399] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1564: lblock 3 mapped to illegal pblock 3 (length 1) [ 218.395423][T10399] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1564: lblock 3 mapped to illegal pblock 3 (length 1) [ 218.396248][T10399] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1564: lblock 3 mapped to illegal pblock 3 (length 1) [ 218.397482][T10399] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1564: lblock 3 mapped to illegal pblock 3 (length 1) [ 218.447348][ T30] audit: type=1326 audit(4295491801.769:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10409 comm="syz.6.1567" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96577b68 code=0x0 [ 218.487511][ T30] audit: type=1326 audit(4295491801.809:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10418 comm="syz.6.1570" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96577b68 code=0x0 [ 218.526899][T10424] loop3: detected capacity change from 0 to 1024 [ 218.528511][T10424] ext4: Unknown parameter 'obj_user' [ 218.531389][T10424] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 218.533575][T10424] audit: out of memory in audit_log_start [ 218.554995][T10426] netlink: 'syz.4.1572': attribute type 1 has an invalid length. [ 218.578324][T10430] binder: 10428:10430 tried to acquire reference to desc 0, got 1 instead [ 218.579574][T10426] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.585495][T10430] FAULT_INJECTION: forcing a failure. [ 218.585495][T10430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.585527][T10430] CPU: 0 UID: 0 PID: 10430 Comm: syz.6.1574 Tainted: G L syzkaller #0 PREEMPT [ 218.585543][T10430] Tainted: [L]=SOFTLOCKUP [ 218.585548][T10430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 218.585555][T10430] Call trace: [ 218.585559][T10430] show_stack+0x2c/0x3c (C) [ 218.585579][T10430] __dump_stack+0x30/0x40 [ 218.585591][T10430] dump_stack_lvl+0xd8/0x12c [ 218.585601][T10430] dump_stack+0x1c/0x28 [ 218.585610][T10430] should_fail_ex+0x41c/0x590 [ 218.585621][T10430] should_fail+0x14/0x24 [ 218.585629][T10430] should_fail_usercopy+0x20/0x30 [ 218.585638][T10430] simple_read_from_buffer+0xc4/0x238 [ 218.585649][T10430] proc_fail_nth_read+0x1a8/0x248 [ 218.585657][T10430] vfs_read+0x230/0x8c8 [ 218.585667][T10430] ksys_read+0x12c/0x228 [ 218.585676][T10430] __arm64_sys_read+0x7c/0x90 [ 218.585686][T10430] invoke_syscall+0x98/0x244 [ 218.585696][T10430] el0_svc_common+0xec/0x23c [ 218.585706][T10430] do_el0_svc+0x4c/0x5c [ 218.585715][T10430] el0_svc+0x64/0x260 [ 218.585724][T10430] el0t_64_sync_handler+0x48/0x148 [ 218.585731][T10430] el0t_64_sync+0x198/0x19c [ 218.611340][T10426] bond3: (slave veth0_to_bond): Releasing backup interface [ 218.616656][ T6333] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 218.616694][ T6333] EXT4-fs (loop2): This should not happen!! Data will be lost [ 218.616694][ T6333] [ 218.617460][ T4706] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 218.618292][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 218.624757][T10429] overlay: ./file1 is not a directory [ 218.640137][T10426] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 218.657097][T10443] loop2: detected capacity change from 0 to 512 [ 218.658486][ T4790] binder: send failed reply for transaction 29 to 10428:10430 [ 218.659232][T10441] loop6: detected capacity change from 0 to 128 [ 218.673421][ T4790] binder: undelivered TRANSACTION_COMPLETE [ 218.673458][ T4790] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.684842][T10441] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.686866][T10441] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 218.690525][T10443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.704711][T10448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1579'. [ 218.765414][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.976482][T10463] loop2: detected capacity change from 0 to 1024 [ 218.977772][T10463] ext4: Unknown parameter 'obj_user' [ 219.434049][T10469] loop2: detected capacity change from 0 to 128 [ 219.434520][T10469] vfat: Unknown parameter 'appraise_type' [ 219.464658][T10470] can: request_module (can-proto-3) failed. [ 219.521810][ T9994] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.609242][T10480] loop6: detected capacity change from 0 to 1024 [ 219.611359][T10480] EXT4-fs: Ignoring removed bh option [ 219.638356][T10480] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 219.641038][T10480] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.652074][T10480] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 3: comm syz.6.1586: lblock 3 mapped to illegal pblock 3 (length 3) [ 219.659259][T10480] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 219.661523][T10480] EXT4-fs (loop6): This should not happen!! Data will be lost [ 219.661523][T10480] [ 219.667932][T10480] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1586: lblock 3 mapped to illegal pblock 3 (length 1) [ 219.672329][T10480] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1586: lblock 3 mapped to illegal pblock 3 (length 1) [ 219.674929][T10480] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1586: lblock 3 mapped to illegal pblock 3 (length 1) [ 219.678151][T10480] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1586: lblock 3 mapped to illegal pblock 3 (length 1) [ 219.680821][T10480] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1586: lblock 3 mapped to illegal pblock 3 (length 1) [ 219.683473][T10480] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1586: lblock 3 mapped to illegal pblock 3 (length 1) [ 219.686173][T10480] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1586: lblock 3 mapped to illegal pblock 3 (length 1) [ 219.692396][T10480] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1586: lblock 3 mapped to illegal pblock 3 (length 1) [ 219.697406][T10480] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: block 3: comm syz.6.1586: lblock 3 mapped to illegal pblock 3 (length 1) [ 220.448584][ T5581] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 220.448616][ T5581] EXT4-fs (loop6): This should not happen!! Data will be lost [ 220.448616][ T5581] [ 220.453604][ T9994] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 220.459977][ T9994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 221.328686][T10538] loop6: detected capacity change from 0 to 128 [ 221.329234][T10538] vfat: Unknown parameter 'appraise_type' [ 221.355512][T10534] can: request_module (can-proto-3) failed. [ 221.384113][T10540] __nla_validate_parse: 4 callbacks suppressed [ 221.384150][T10540] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1607'. [ 221.391153][T10540] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1607'. [ 221.527816][T10546] loop6: detected capacity change from 0 to 128 [ 221.761518][T10585] loop3: detected capacity change from 0 to 512 [ 221.845694][T10585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.886245][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.119855][T10548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.123175][T10548] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.557775][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.592957][T10607] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1619'. [ 222.594467][T10607] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1619'. [ 222.720456][T10609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.751866][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.943984][T10616] vfat: Unknown parameter 'appraise_type' [ 223.086987][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'. [ 223.095472][T10615] can: request_module (can-proto-3) failed. [ 223.149034][T10619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.217764][T10630] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1627'. [ 223.343333][T10641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1631'. [ 223.345098][T10641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1631'. [ 223.349518][T10641] gretap0: entered promiscuous mode [ 223.351404][T10641] gretap0: left promiscuous mode [ 223.556497][T10650] FAULT_INJECTION: forcing a failure. [ 223.556497][T10650] name failslab, interval 1, probability 0, space 0, times 0 [ 223.559389][T10650] CPU: 0 UID: 0 PID: 10650 Comm: syz.5.1634 Tainted: G L syzkaller #0 PREEMPT [ 223.559407][T10650] Tainted: [L]=SOFTLOCKUP [ 223.559411][T10650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 223.559418][T10650] Call trace: [ 223.559422][T10650] show_stack+0x2c/0x3c (C) [ 223.559446][T10650] __dump_stack+0x30/0x40 [ 223.559457][T10650] dump_stack_lvl+0xd8/0x12c [ 223.559467][T10650] dump_stack+0x1c/0x28 [ 223.559477][T10650] should_fail_ex+0x41c/0x590 [ 223.559487][T10650] should_failslab+0xc4/0x120 [ 223.559495][T10650] __kmalloc_node_track_caller_noprof+0x100/0x748 [ 223.559505][T10650] kstrdup+0x50/0x104 [ 223.559514][T10650] smack_inode_getsecurity+0x258/0x2f4 [ 223.559524][T10650] security_inode_getsecurity+0x150/0x378 [ 223.559535][T10650] vfs_getxattr+0x1cc/0x284 [ 223.559542][T10650] ovl_xattr_get+0x100/0x174 [ 223.559552][T10650] ovl_other_xattr_get+0x48/0x60 [ 223.559562][T10650] __vfs_getxattr+0x104/0x14c [ 223.559569][T10650] smack_d_instantiate+0x610/0x7a0 [ 223.559579][T10650] security_d_instantiate+0xf8/0x1dc [ 223.559589][T10650] d_splice_alias_ops+0x74/0x314 [ 223.559597][T10650] d_splice_alias+0x2c/0x3c [ 223.559605][T10650] ovl_lookup+0x560/0x162c [ 223.559614][T10650] lookup_one_qstr_excl+0xe8/0x200 [ 223.559624][T10650] __start_renaming+0x178/0x344 [ 223.559631][T10650] filename_renameat2+0x500/0x72c [ 223.559640][T10650] __arm64_sys_renameat2+0xec/0x11c [ 223.559649][T10650] invoke_syscall+0x98/0x244 [ 223.559659][T10650] el0_svc_common+0xec/0x23c [ 223.559669][T10650] do_el0_svc+0x4c/0x5c [ 223.559678][T10650] el0_svc+0x64/0x260 [ 223.559687][T10650] el0t_64_sync_handler+0x48/0x148 [ 223.559694][T10650] el0t_64_sync+0x198/0x19c [ 223.863944][T10661] set_capacity_and_notify: 3 callbacks suppressed [ 223.865259][T10661] loop5: detected capacity change from 0 to 512 [ 223.881464][T10661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.905711][ T8699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.939521][T10672] loop5: detected capacity change from 0 to 128 [ 223.972323][T10674] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1642'. [ 223.972368][T10674] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1642'. [ 223.978354][T10674] gretap0: entered promiscuous mode [ 223.984266][T10674] gretap0: left promiscuous mode [ 224.072733][T10683] loop5: detected capacity change from 0 to 512 [ 224.091484][T10683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.117172][ T8699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.252347][T10695] loop5: detected capacity change from 0 to 512 [ 224.261089][T10695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.283463][ T8699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.391350][T10702] loop3: detected capacity change from 0 to 128 [ 224.733255][T10713] gretap0: entered promiscuous mode [ 224.736826][T10713] gretap0: left promiscuous mode [ 224.779914][ T4705] Bluetooth: hci3: unexpected event for opcode 0x0c56 [ 224.785343][T10715] loop3: detected capacity change from 0 to 512 [ 224.861121][T10715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.892741][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.921092][T10734] loop3: detected capacity change from 0 to 128 [ 225.461021][T10752] loop6: detected capacity change from 0 to 128 [ 225.470701][T10752] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.471023][T10752] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.527988][T10749] block nbd5: shutting down sockets [ 225.751139][T10762] loop2: detected capacity change from 0 to 1024 [ 225.751530][T10762] EXT4-fs: Ignoring removed bh option [ 225.757457][T10762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 225.757513][T10762] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.765043][T10762] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.1673: lblock 3 mapped to illegal pblock 3 (length 3) [ 225.769096][T10762] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 225.769134][T10762] EXT4-fs (loop2): This should not happen!! Data will be lost [ 225.769134][T10762] [ 225.773688][T10762] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1673: lblock 3 mapped to illegal pblock 3 (length 1) [ 225.776214][T10762] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1673: lblock 3 mapped to illegal pblock 3 (length 1) [ 225.779266][T10762] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1673: lblock 3 mapped to illegal pblock 3 (length 1) [ 225.781586][T10762] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1673: lblock 3 mapped to illegal pblock 3 (length 1) [ 225.783720][T10762] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1673: lblock 3 mapped to illegal pblock 3 (length 1) [ 225.786059][T10762] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1673: lblock 3 mapped to illegal pblock 3 (length 1) [ 225.787026][T10762] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1673: lblock 3 mapped to illegal pblock 3 (length 1) [ 225.789685][T10762] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1673: lblock 3 mapped to illegal pblock 3 (length 1) [ 225.794398][T10762] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1673: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.355887][T10782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.381679][ T9994] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.416441][T10782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.471347][T10783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.568578][T10787] __nla_validate_parse: 5 callbacks suppressed [ 226.570797][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1681'. [ 226.606859][ T5582] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 226.606903][ T5582] EXT4-fs (loop2): This should not happen!! Data will be lost [ 226.606903][ T5582] [ 226.608392][ T4706] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 226.618755][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 226.810036][T10802] loop2: detected capacity change from 0 to 512 [ 226.833013][T10802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.883148][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.663357][T10818] vfat: Unknown parameter 'appraise_type' [ 227.719747][T10819] can: request_module (can-proto-3) failed. [ 227.729640][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1693'. [ 228.890648][T10844] set_capacity_and_notify: 1 callbacks suppressed [ 228.893957][T10844] loop2: detected capacity change from 0 to 512 [ 228.999879][T10844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.036340][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.744354][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1707'. [ 230.028315][T10883] loop3: detected capacity change from 0 to 128 [ 231.129602][T10887] loop2: detected capacity change from 0 to 512 [ 231.171448][T10887] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1712: corrupted in-inode xattr: bad e_name length [ 231.171491][T10887] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 231.171697][T10887] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1712: couldn't read orphan inode 15 (err -117) [ 231.171711][T10887] loop2: lost filesystem error report for type 5 error -117 [ 231.172287][T10887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.198424][T10887] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1712: bg 0: block 465: padding at end of block bitmap is not set [ 231.217370][T10887] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 231.220309][T10887] EXT4-fs (loop2): This should not happen!! Data will be lost [ 231.220309][T10887] [ 231.222140][T10887] EXT4-fs (loop2): Total free blocks count 0 [ 231.223636][T10887] EXT4-fs (loop2): Free/Dirty block details [ 231.224785][T10887] EXT4-fs (loop2): free_blocks=0 [ 231.226442][T10887] EXT4-fs (loop2): dirty_blocks=6 [ 231.226470][T10887] EXT4-fs (loop2): Block reservation details [ 231.226485][T10887] EXT4-fs (loop2): i_reserved_data_blocks=6 [ 231.267429][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1717'. [ 231.283996][T10899] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.288359][ T5582] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 4 with max blocks 4 with error 28 [ 231.292900][ T4706] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 231.295525][T10899] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 231.386153][T10911] syzkaller1: entered allmulticast mode [ 231.411908][T10915] loop5: detected capacity change from 0 to 1024 [ 231.412292][T10915] EXT4-fs: Ignoring removed bh option [ 231.425502][T10915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 231.427106][T10915] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.442137][T10915] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm syz.5.1723: lblock 3 mapped to illegal pblock 3 (length 3) [ 231.442411][T10915] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 231.442436][T10915] EXT4-fs (loop5): This should not happen!! Data will be lost [ 231.442436][T10915] [ 231.687173][T10915] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1723: lblock 3 mapped to illegal pblock 3 (length 1) [ 231.690587][T10915] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1723: lblock 3 mapped to illegal pblock 3 (length 1) [ 231.693126][T10915] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1723: lblock 3 mapped to illegal pblock 3 (length 1) [ 231.695642][T10915] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1723: lblock 3 mapped to illegal pblock 3 (length 1) [ 231.698097][T10915] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1723: lblock 3 mapped to illegal pblock 3 (length 1) [ 231.700402][T10915] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1723: lblock 3 mapped to illegal pblock 3 (length 1) [ 231.702644][T10915] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1723: lblock 3 mapped to illegal pblock 3 (length 1) [ 231.704995][T10915] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1723: lblock 3 mapped to illegal pblock 3 (length 1) [ 231.707345][T10915] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1723: lblock 3 mapped to illegal pblock 3 (length 1) [ 231.741711][T10923] loop6: detected capacity change from 0 to 128 [ 231.753965][ T4705] Bluetooth: hci3: unexpected event for opcode 0x0c56 [ 231.760199][T10926] loop3: detected capacity change from 0 to 512 [ 231.786977][T10930] loop6: detected capacity change from 0 to 512 [ 231.791640][T10930] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 231.793126][T10926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.803729][T10930] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1727: bg 0: block 104: invalid block bitmap [ 231.806537][T10930] loop6: lost filesystem error report for type 5 error -117 [ 231.807540][T10930] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 231.810518][T10930] loop6: lost filesystem error report for type 5 error -117 [ 231.812664][T10930] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1727: invalid indirect mapped block 1 (level 1) [ 231.816562][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 231.816575][ C1] EXT4-fs (loop6): initial error at time 4295491823: ext4_validate_block_bitmap:432 [ 231.816591][ C1] EXT4-fs (loop6): last error at time 4295491823: ext4_mb_clear_bb:6679 [ 231.816673][T10930] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 231.822998][T10930] EXT4-fs (loop6): 1 truncate cleaned up [ 231.833350][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.841033][T10930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.848794][T10930] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 231.859928][T10930] overlayfs: failed to look up (fi) for ino (-13) [ 232.296366][ T1412] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 232.296412][ T1412] EXT4-fs (loop5): This should not happen!! Data will be lost [ 232.296412][ T1412] [ 232.303089][ T8699] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 232.307020][ T8699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 232.514924][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1738'. [ 232.920361][ T9994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.310497][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1746'. [ 233.349267][T10988] loop5: detected capacity change from 0 to 512 [ 233.362675][T10988] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 233.367826][T10988] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1748: Invalid block bitmap block 0 in block_group 0 [ 233.367866][T10988] loop5: lost filesystem error report for type 5 error -117 [ 233.370178][T10988] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 233.370204][T10988] loop5: lost filesystem error report for type 5 error -117 [ 233.372892][T10988] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.1748: attempt to clear invalid blocks 983261 len 1 [ 233.376289][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 233.376304][ C1] EXT4-fs (loop5): initial error at time 4295491824: ext4_read_block_bitmap_nowait:483 [ 233.376323][ C1] EXT4-fs (loop5): last error at time 4295491824: ext4_mb_clear_bb:6679 [ 233.383821][T10988] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 233.385100][T10988] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz.5.1748: Invalid inode table block 0 in block_group 0 [ 233.391295][T10988] loop5: lost filesystem error report for type 5 error -117 [ 233.394084][T10992] loop3: detected capacity change from 0 to 128 [ 233.398589][T10988] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 233.398624][T10988] loop5: lost filesystem error report for type 5 error -117 [ 233.400457][T10988] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 233.400493][T10988] loop5: lost filesystem error report for type 5 error -117 [ 233.403149][T10988] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz.5.1748: Invalid inode table block 0 in block_group 0 [ 233.403175][T10988] loop5: lost filesystem error report for type 5 error -117 [ 233.407361][T10988] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 233.407382][T10988] loop5: lost filesystem error report for type 5 error -117 [ 233.410250][T10988] EXT4-fs error (device loop5): ext4_truncate:4690: inode #11: comm syz.5.1748: mark_inode_dirty error [ 233.410286][T10988] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 233.413824][T10988] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 233.417236][T10988] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz.5.1748: Invalid inode table block 0 in block_group 0 [ 233.417616][T10988] EXT4-fs (loop5): 1 truncate cleaned up [ 233.418126][T10988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.480128][T10997] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 233.490154][T10988] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz.5.1748: Invalid inode table block 0 in block_group 0 [ 233.499153][T10988] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz.5.1748: Invalid inode table block 0 in block_group 0 [ 233.499968][T10988] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1748: Invalid inode bitmap blk 0 in block_group 0 [ 233.578364][ T8699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.613484][T11016] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 233.613524][T11016] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 233.613536][T11016] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 233.650572][T11018] loop3: detected capacity change from 0 to 8192 [ 233.809879][ C0] vcan0: j1939_tp_rxtimer: 0x000000002f6486e6: rx timeout, send abort [ 234.310808][ C0] vcan0: j1939_tp_rxtimer: 0x000000002f6486e6: abort rx timeout. Force session deactivation [ 234.310924][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b16ad86c: rx timeout, send abort [ 234.810950][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b16ad86c: abort rx timeout. Force session deactivation [ 234.823890][ C1] vcan0: j1939_tp_rxtimer: 0x000000001935f7e7: rx timeout, send abort [ 234.915089][T11042] loop5: detected capacity change from 0 to 128 [ 235.235687][T11047] can: request_module (can-proto-3) failed. [ 235.283533][T11054] FAULT_INJECTION: forcing a failure. [ 235.283533][T11054] name failslab, interval 1, probability 0, space 0, times 0 [ 235.283573][T11054] CPU: 1 UID: 0 PID: 11054 Comm: syz.5.1767 Tainted: G L syzkaller #0 PREEMPT [ 235.283588][T11054] Tainted: [L]=SOFTLOCKUP [ 235.283593][T11054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 235.283599][T11054] Call trace: [ 235.283603][T11054] show_stack+0x2c/0x3c (C) [ 235.283621][T11054] __dump_stack+0x30/0x40 [ 235.283631][T11054] dump_stack_lvl+0xd8/0x12c [ 235.283641][T11054] dump_stack+0x1c/0x28 [ 235.283651][T11054] should_fail_ex+0x41c/0x590 [ 235.283660][T11054] should_failslab+0xc4/0x120 [ 235.283669][T11054] kmem_cache_alloc_node_noprof+0x94/0x6c8 [ 235.283678][T11054] __alloc_skb+0x1f0/0x610 [ 235.283689][T11054] netlink_alloc_large_skb+0xd4/0x114 [ 235.283700][T11054] netlink_sendmsg+0x4c4/0x948 [ 235.283709][T11054] __sock_sendmsg+0xc8/0x138 [ 235.283719][T11054] ____sys_sendmsg+0x3d0/0x6c8 [ 235.283726][T11054] ___sys_sendmsg+0x198/0x224 [ 235.283733][T11054] __sys_sendmsg+0x160/0x214 [ 235.283739][T11054] __arm64_sys_sendmsg+0x80/0x94 [ 235.283746][T11054] invoke_syscall+0x98/0x244 [ 235.283756][T11054] el0_svc_common+0xec/0x23c [ 235.283765][T11054] do_el0_svc+0x4c/0x5c [ 235.283775][T11054] el0_svc+0x64/0x260 [ 235.283783][T11054] el0t_64_sync_handler+0x48/0x148 [ 235.283791][T11054] el0t_64_sync+0x198/0x19c [ 235.323954][ C1] vcan0: j1939_tp_rxtimer: 0x000000001935f7e7: abort rx timeout. Force session deactivation [ 235.328415][T11059] loop3: detected capacity change from 0 to 512 [ 235.330888][T11059] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 235.345118][T11059] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1768: Invalid block bitmap block 0 in block_group 0 [ 235.347521][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 235.347543][ C0] EXT4-fs (loop3): initial error at time 4295491826: ext4_read_block_bitmap_nowait:483 [ 235.347575][ C0] EXT4-fs (loop3): last error at time 4295491826: ext4_read_block_bitmap_nowait:483 [ 235.353651][T11059] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 235.356128][T11059] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.1768: attempt to clear invalid blocks 983261 len 1 [ 235.359440][T11059] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 235.359885][T11059] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.1768: Invalid inode table block 0 in block_group 0 [ 235.363936][T11059] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 235.366968][T11059] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 235.369303][T11059] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.1768: Invalid inode table block 0 in block_group 0 [ 235.371704][T11059] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 235.374374][T11059] EXT4-fs error (device loop3): ext4_truncate:4690: inode #11: comm syz.3.1768: mark_inode_dirty error [ 235.376409][T11059] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 235.377612][T11059] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 235.380839][T11059] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.1768: Invalid inode table block 0 in block_group 0 [ 235.383353][T11059] EXT4-fs (loop3): 1 truncate cleaned up [ 235.386317][T11059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.391276][T11059] FAULT_INJECTION: forcing a failure. [ 235.391276][T11059] name failslab, interval 1, probability 0, space 0, times 0 [ 235.394502][T11059] CPU: 0 UID: 0 PID: 11059 Comm: syz.3.1768 Tainted: G L syzkaller #0 PREEMPT [ 235.394528][T11059] Tainted: [L]=SOFTLOCKUP [ 235.394532][T11059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 235.394538][T11059] Call trace: [ 235.394542][T11059] show_stack+0x2c/0x3c (C) [ 235.394565][T11059] __dump_stack+0x30/0x40 [ 235.394578][T11059] dump_stack_lvl+0xd8/0x12c [ 235.394589][T11059] dump_stack+0x1c/0x28 [ 235.394600][T11059] should_fail_ex+0x41c/0x590 [ 235.394611][T11059] should_failslab+0xc4/0x120 [ 235.394620][T11059] kmem_cache_alloc_lru_noprof+0x94/0x618 [ 235.394630][T11059] ext4_alloc_inode+0x30/0x474 [ 235.394640][T11059] alloc_inode+0x68/0x198 [ 235.394649][T11059] new_inode+0x20/0x50 [ 235.394657][T11059] __ext4_new_inode+0x270/0x3308 [ 235.394666][T11059] ext4_mkdir+0x320/0x960 [ 235.394673][T11059] vfs_mkdir+0x2dc/0x464 [ 235.394682][T11059] filename_mkdirat+0x228/0x3f4 [ 235.394690][T11059] __arm64_sys_mkdirat+0x94/0xb8 [ 235.394698][T11059] invoke_syscall+0x98/0x244 [ 235.394708][T11059] el0_svc_common+0xec/0x23c [ 235.394718][T11059] do_el0_svc+0x4c/0x5c [ 235.394727][T11059] el0_svc+0x64/0x260 [ 235.394736][T11059] el0t_64_sync_handler+0x48/0x148 [ 235.394743][T11059] el0t_64_sync+0x198/0x19c [ 235.423014][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.845308][T11073] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1773'. [ 235.849374][T11073] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1773'. [ 235.872811][T11074] syzkaller0: entered promiscuous mode [ 235.872843][T11074] syzkaller0: entered allmulticast mode [ 235.889436][T11076] loop2: detected capacity change from 0 to 128 [ 235.958424][T11084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1778'. [ 235.959949][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1778'. [ 236.365034][T11103] binder: 11102:11103 tried to acquire reference to desc 0, got 1 instead [ 236.367170][T11103] binder: 11102:11103 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 236.370187][T11103] binder: 11103 RLIMIT_NICE not set [ 236.371299][T11103] binder: undelivered transaction 34, copy_to_user failed [ 236.372593][T11103] binder: 11102:11103 ioctl c0306201 20000440 returned -14 [ 236.374233][ T4805] binder: undelivered TRANSACTION_COMPLETE [ 236.826238][T11106] loop3: detected capacity change from 0 to 128 [ 236.826702][T11106] vfat: Unknown parameter 'appraise_type' [ 236.889604][T11112] can: request_module (can-proto-3) failed. [ 236.922402][T11119] loop5: detected capacity change from 0 to 128 [ 237.293630][T11132] loop6: detected capacity change from 0 to 1024 [ 237.294354][T11132] EXT4-fs: Ignoring removed bh option [ 237.295072][T11132] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 237.307595][T11132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.310429][T11130] 9pnet_fd: Insufficient options for proto=fd [ 237.346823][ T9994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.374074][T11141] syzkaller0: entered promiscuous mode [ 237.374115][T11141] syzkaller0: entered allmulticast mode [ 237.421313][T11146] netlink: 'syz.3.1795': attribute type 26 has an invalid length. [ 237.527114][T11157] loop6: detected capacity change from 0 to 128 [ 237.927007][T11164] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1800'. [ 237.927042][T11164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1800'. [ 238.000947][T11166] can: request_module (can-proto-3) failed. [ 238.007043][T11166] loop6: detected capacity change from 0 to 128 [ 238.007506][T11166] vfat: Unknown parameter 'appraise_type' [ 238.859022][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1808'. [ 238.914196][T11192] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1808'. [ 239.026297][T11196] loop6: detected capacity change from 0 to 128 [ 239.029056][T11196] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 239.029592][T11196] vfat filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 239.037789][T11196] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 239.037814][T11196] FAT-fs (loop6): Filesystem has been set read-only [ 239.094125][T11199] loop3: detected capacity change from 0 to 128 [ 239.095361][ T9994] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 239.124914][T11202] trusted_key: encrypted_key: keylen parameter is missing [ 239.138666][T11202] EXT4-fs (loop6): Invalid default hash set in the superblock [ 239.187274][T11209] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.187522][T11209] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 239.604365][ T8699] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.631186][T11218] FAULT_INJECTION: forcing a failure. [ 239.631186][T11218] name failslab, interval 1, probability 0, space 0, times 0 [ 239.631225][T11218] CPU: 1 UID: 0 PID: 11218 Comm: syz.2.1815 Tainted: G L syzkaller #0 PREEMPT [ 239.631240][T11218] Tainted: [L]=SOFTLOCKUP [ 239.631244][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 239.631251][T11218] Call trace: [ 239.631254][T11218] show_stack+0x2c/0x3c (C) [ 239.631273][T11218] __dump_stack+0x30/0x40 [ 239.631285][T11218] dump_stack_lvl+0xd8/0x12c [ 239.631295][T11218] dump_stack+0x1c/0x28 [ 239.631304][T11218] should_fail_ex+0x41c/0x590 [ 239.631314][T11218] should_failslab+0xc4/0x120 [ 239.631322][T11218] __kmalloc_cache_noprof+0x8c/0x624 [ 239.631331][T11218] __hw_addr_create+0x70/0x234 [ 239.631343][T11218] __hw_addr_add_ex+0x1b0/0x460 [ 239.631352][T11218] dev_addr_init+0x12c/0x1f0 [ 239.631361][T11218] alloc_netdev_mqs+0x22c/0xee4 [ 239.631369][T11218] rtnl_create_link+0x2b0/0xb78 [ 239.631378][T11218] rtnl_newlink_create+0x210/0x764 [ 239.631387][T11218] rtnl_newlink+0xdc4/0x1144 [ 239.631396][T11218] rtnetlink_rcv_msg+0x66c/0x9bc [ 239.631408][T11218] netlink_rcv_skb+0x238/0x414 [ 239.631419][T11218] rtnetlink_rcv+0x28/0x38 [ 239.631428][T11218] netlink_unicast+0x600/0x7f8 [ 239.631438][T11218] netlink_sendmsg+0x648/0x948 [ 239.631447][T11218] __sock_sendmsg+0xc8/0x138 [ 239.631457][T11218] ____sys_sendmsg+0x3d0/0x6c8 [ 239.631464][T11218] ___sys_sendmsg+0x198/0x224 [ 239.631471][T11218] __sys_sendmsg+0x160/0x214 [ 239.631478][T11218] __arm64_sys_sendmsg+0x80/0x94 [ 239.631485][T11218] invoke_syscall+0x98/0x244 [ 239.631495][T11218] el0_svc_common+0xec/0x23c [ 239.631504][T11218] do_el0_svc+0x4c/0x5c [ 239.631514][T11218] el0_svc+0x64/0x260 [ 239.631522][T11218] el0t_64_sync_handler+0x48/0x148 [ 239.631529][T11218] el0t_64_sync+0x198/0x19c [ 239.724135][T11224] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1817'. [ 239.724169][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1817'. [ 239.786111][T11225] can: request_module (can-proto-3) failed. [ 239.792072][T11225] vfat: Unknown parameter 'appraise_type' [ 240.535122][T11244] set_capacity_and_notify: 3 callbacks suppressed [ 240.539662][T11244] loop5: detected capacity change from 0 to 128 [ 240.702325][T11250] loop2: detected capacity change from 0 to 128 [ 241.558455][T11249] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1823'. [ 241.558525][T11249] FAULT_INJECTION: forcing a failure. [ 241.558525][T11249] name failslab, interval 1, probability 0, space 0, times 0 [ 241.558554][T11249] CPU: 1 UID: 0 PID: 11249 Comm: syz.2.1823 Tainted: G L syzkaller #0 PREEMPT [ 241.558570][T11249] Tainted: [L]=SOFTLOCKUP [ 241.558575][T11249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 241.558580][T11249] Call trace: [ 241.558583][T11249] show_stack+0x2c/0x3c (C) [ 241.558601][T11249] __dump_stack+0x30/0x40 [ 241.558612][T11249] dump_stack_lvl+0xd8/0x12c [ 241.558622][T11249] dump_stack+0x1c/0x28 [ 241.558631][T11249] should_fail_ex+0x41c/0x590 [ 241.558640][T11249] should_failslab+0xc4/0x120 [ 241.558649][T11249] __kmalloc_node_track_caller_noprof+0x100/0x748 [ 241.558658][T11249] kmemdup_noprof+0x44/0x8c [ 241.558668][T11249] tcf_pedit_init+0x5c4/0xbcc [ 241.558676][T11249] tcf_action_init_1+0x398/0x594 [ 241.558686][T11249] tcf_action_init+0x2d0/0x70c [ 241.558695][T11249] tc_ctl_action+0x354/0x778 [ 241.558705][T11249] rtnetlink_rcv_msg+0x630/0x9bc [ 241.558714][T11249] netlink_rcv_skb+0x238/0x414 [ 241.558725][T11249] rtnetlink_rcv+0x28/0x38 [ 241.558734][T11249] netlink_unicast+0x600/0x7f8 [ 241.558743][T11249] netlink_sendmsg+0x648/0x948 [ 241.558753][T11249] __sock_sendmsg+0xc8/0x138 [ 241.558763][T11249] ____sys_sendmsg+0x3d0/0x6c8 [ 241.558769][T11249] ___sys_sendmsg+0x198/0x224 [ 241.558776][T11249] __sys_sendmsg+0x160/0x214 [ 241.558783][T11249] __arm64_sys_sendmsg+0x80/0x94 [ 241.558790][T11249] invoke_syscall+0x98/0x244 [ 241.558800][T11249] el0_svc_common+0xec/0x23c [ 241.558809][T11249] do_el0_svc+0x4c/0x5c [ 241.558819][T11249] el0_svc+0x64/0x260 [ 241.558827][T11249] el0t_64_sync_handler+0x48/0x148 [ 241.558835][T11249] el0t_64_sync+0x198/0x19c [ 241.561010][T11252] loop6: detected capacity change from 0 to 128 [ 241.575090][T11252] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.575227][T11252] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 241.761334][ T9994] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.061870][T11272] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1829'. [ 242.859669][T11285] can: request_module (can-proto-3) failed. [ 242.866169][T11285] loop5: detected capacity change from 0 to 128 [ 242.866615][T11285] vfat: Unknown parameter 'appraise_type' [ 242.947761][T11291] loop6: detected capacity change from 0 to 128 [ 243.030908][T11299] loop2: detected capacity change from 0 to 128 [ 243.037663][T11299] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.039197][T11299] ext4 filesystem being mounted at /386/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 243.053813][T11306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1842'. [ 243.055979][T11306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1842'. [ 243.450045][ T4706] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.477311][T11319] loop2: detected capacity change from 0 to 512 [ 243.479907][T11319] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 243.489811][T11319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.490272][T11319] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.591583][T11319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.613035][ T30] audit: type=1326 audit(4295491834.930:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11325 comm="syz.2.1847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb4977b68 code=0x50000 [ 243.618930][ T30] audit: type=1326 audit(4295491834.950:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11325 comm="syz.2.1847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb4977b68 code=0x50000 [ 243.618973][ T30] audit: type=1326 audit(4295491834.950:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11325 comm="syz.2.1847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb4977b68 code=0x50000 [ 243.628571][ T30] audit: type=1326 audit(4295491834.960:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11325 comm="syz.2.1847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb4977b68 code=0x50000 [ 243.628618][ T30] audit: type=1326 audit(4295491834.960:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11325 comm="syz.2.1847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb4977b68 code=0x50000 [ 243.628645][ T30] audit: type=1326 audit(4295491834.960:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11325 comm="syz.2.1847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb4977b68 code=0x50000 [ 243.628662][ T30] audit: type=1326 audit(4295491834.960:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11325 comm="syz.2.1847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb4977b68 code=0x50000 [ 243.628678][ T30] audit: type=1326 audit(4295491834.960:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11325 comm="syz.2.1847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb4977b68 code=0x50000 [ 243.628696][ T30] audit: type=1326 audit(4295491834.960:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11325 comm="syz.2.1847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb4977b68 code=0x50000 [ 243.628716][ T30] audit: type=1326 audit(4295491834.960:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11325 comm="syz.2.1847" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb4977b68 code=0x50000 [ 243.694605][T11333] loop2: detected capacity change from 0 to 128 [ 243.919044][T11346] binder: 11345:11346 tried to acquire reference to desc 0, got 1 instead [ 243.959232][ T4358] binder: release 11345:11346 transaction 39 out, still active [ 244.036232][ T4358] binder: undelivered TRANSACTION_COMPLETE [ 244.057311][ T4358] binder: send failed reply for transaction 39, target dead [ 244.387873][T11352] can0: slcan on ttyS3. [ 244.404346][T11355] loop6: detected capacity change from 0 to 512 [ 244.420385][T11356] loop2: detected capacity change from 0 to 128 [ 244.426546][T11352] can0 (unregistered): slcan off ttyS3. [ 244.442801][T11356] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.442967][T11356] ext4 filesystem being mounted at /393/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 244.511388][T11363] syzkaller1: entered promiscuous mode [ 244.513732][T11363] syzkaller1: entered allmulticast mode [ 245.275933][ T4706] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.577945][T11410] set_capacity_and_notify: 1 callbacks suppressed [ 245.578134][T11410] loop3: detected capacity change from 0 to 1024 [ 245.578485][T11410] EXT4-fs: Ignoring removed bh option [ 245.598729][T11410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 245.598803][T11410] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.600841][T11410] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.1873: lblock 3 mapped to illegal pblock 3 (length 3) [ 245.603020][T11410] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 245.603042][T11410] EXT4-fs (loop3): This should not happen!! Data will be lost [ 245.603042][T11410] [ 245.603847][T11410] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1873: lblock 3 mapped to illegal pblock 3 (length 1) [ 245.605885][T11410] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1873: lblock 3 mapped to illegal pblock 3 (length 1) [ 245.608372][T11410] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1873: lblock 3 mapped to illegal pblock 3 (length 1) [ 245.610423][T11410] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1873: lblock 3 mapped to illegal pblock 3 (length 1) [ 245.611992][T11410] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1873: lblock 3 mapped to illegal pblock 3 (length 1) [ 245.614215][T11410] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1873: lblock 3 mapped to illegal pblock 3 (length 1) [ 245.616672][T11410] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1873: lblock 3 mapped to illegal pblock 3 (length 1) [ 245.619028][T11410] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1873: lblock 3 mapped to illegal pblock 3 (length 1) [ 245.621302][T11410] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1873: lblock 3 mapped to illegal pblock 3 (length 1) [ 245.780865][ T5581] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 245.780911][ T5581] EXT4-fs (loop3): This should not happen!! Data will be lost [ 245.780911][ T5581] [ 245.782342][ T4715] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 245.783458][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 245.844719][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1876'. [ 245.873570][T11424] lo: entered allmulticast mode [ 245.964199][T11430] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 246.965334][T11437] FAULT_INJECTION: forcing a failure. [ 246.965334][T11437] name failslab, interval 1, probability 0, space 0, times 0 [ 246.965383][T11437] CPU: 0 UID: 0 PID: 11437 Comm: syz.4.1881 Tainted: G L syzkaller #0 PREEMPT [ 246.965399][T11437] Tainted: [L]=SOFTLOCKUP [ 246.965404][T11437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 246.965411][T11437] Call trace: [ 246.965414][T11437] show_stack+0x2c/0x3c (C) [ 246.965433][T11437] __dump_stack+0x30/0x40 [ 246.965443][T11437] dump_stack_lvl+0xd8/0x12c [ 246.965453][T11437] dump_stack+0x1c/0x28 [ 246.965463][T11437] should_fail_ex+0x41c/0x590 [ 246.965475][T11437] should_failslab+0xc4/0x120 [ 246.965484][T11437] __kmalloc_noprof+0x100/0x6f0 [ 246.965493][T11437] tomoyo_encode2+0x10c/0x330 [ 246.965504][T11437] tomoyo_encode+0x34/0x50 [ 246.965514][T11437] tomoyo_realpath_from_path+0x488/0x4dc [ 246.965525][T11437] tomoyo_path_number_perm+0x1f0/0x500 [ 246.965534][T11437] tomoyo_file_ioctl+0x2c/0x3c [ 246.965541][T11437] security_file_ioctl+0xdc/0x2b0 [ 246.965551][T11437] __arm64_sys_ioctl+0xa8/0x1c4 [ 246.965562][T11437] invoke_syscall+0x98/0x244 [ 246.965571][T11437] el0_svc_common+0xec/0x23c [ 246.965581][T11437] do_el0_svc+0x4c/0x5c [ 246.965590][T11437] el0_svc+0x64/0x260 [ 246.965599][T11437] el0t_64_sync_handler+0x48/0x148 [ 246.965606][T11437] el0t_64_sync+0x198/0x19c [ 246.967754][T11437] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.046578][T11430] [ 247.047027][T11430] ====================================================== [ 247.048097][T11430] WARNING: possible circular locking dependency detected [ 247.049225][T11430] syzkaller #0 Tainted: G L [ 247.050154][T11430] ------------------------------------------------------ [ 247.051170][T11430] syz.6.1879/11430 is trying to acquire lock: [ 247.052205][T11430] ffff0000c827c678 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x188/0x35c [ 247.053767][T11430] [ 247.053767][T11430] but task is already holding lock: [ 247.054955][T11430] ffff0000c827c158 (&q->q_usage_counter(io)#38){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 247.056627][T11430] [ 247.056627][T11430] which lock already depends on the new lock. [ 247.056627][T11430] [ 247.058227][T11430] [ 247.058227][T11430] the existing dependency chain (in reverse order) is: [ 247.059622][T11430] [ 247.059622][T11430] -> #6 (&q->q_usage_counter(io)#38){++++}-{0:0}: [ 247.060973][T11430] blk_alloc_queue+0x488/0x590 [ 247.061810][T11430] blk_mq_alloc_queue+0x148/0x284 [ 247.062710][T11430] __blk_mq_alloc_disk+0x38/0x10c [ 247.063581][T11430] nbd_dev_add+0x3d0/0x880 [ 247.064380][T11430] nbd_init+0x15c/0x174 [ 247.064970][T11430] do_one_initcall+0x274/0xc38 [ 247.065776][T11430] do_initcall_level+0x12c/0x1c4 [ 247.066636][T11430] do_initcalls+0x70/0xd0 [ 247.067346][T11430] do_basic_setup+0x7c/0x90 [ 247.068149][T11430] kernel_init_freeable+0x268/0x3a8 [ 247.068967][T11430] kernel_init+0x24/0x1dc [ 247.069636][T11430] ret_from_fork+0x10/0x20 [ 247.070366][T11430] [ 247.070366][T11430] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 247.071397][T11430] fs_reclaim_acquire+0x90/0x110 [ 247.072269][T11430] kmem_cache_alloc_node_noprof+0x60/0x6c8 [ 247.073235][T11430] kmalloc_reserve+0xc4/0x214 [ 247.074053][T11430] __alloc_skb+0x230/0x610 [ 247.074831][T11430] __ip6_append_data+0x289c/0x383c [ 247.075701][T11430] ip6_append_data+0x100/0x270 [ 247.076504][T11430] rawv6_sendmsg+0xe3c/0x1438 [ 247.077182][T11430] inet_sendmsg+0xb4/0xd8 [ 247.077948][T11430] __sock_sendmsg+0xc8/0x138 [ 247.078750][T11430] ____sys_sendmsg+0x3d0/0x6c8 [ 247.079471][T11430] ___sys_sendmsg+0x198/0x224 [ 247.080213][T11430] __sys_sendmsg+0x160/0x214 [ 247.080987][T11430] __arm64_sys_sendmsg+0x80/0x94 [ 247.081857][T11430] invoke_syscall+0x98/0x244 [ 247.082727][T11430] el0_svc_common+0xec/0x23c [ 247.083505][T11430] do_el0_svc+0x4c/0x5c [ 247.084238][T11430] el0_svc+0x64/0x260 [ 247.084921][T11430] el0t_64_sync_handler+0x48/0x148 [ 247.085729][T11430] el0t_64_sync+0x198/0x19c [ 247.086443][T11430] [ 247.086443][T11430] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 247.087601][T11430] lock_sock_nested+0x58/0x110 [ 247.088348][T11430] inet_shutdown+0x74/0x354 [ 247.089109][T11430] kernel_sock_shutdown+0x6c/0x80 [ 247.089951][T11430] nbd_mark_nsock_dead+0x280/0x4f4 [ 247.090768][T11430] recv_work+0x1d58/0x1e74 [ 247.091516][T11430] process_scheduled_works+0x788/0x10b8 [ 247.092389][T11430] worker_thread+0x798/0xbd0 [ 247.093187][T11430] kthread+0x304/0x3d4 [ 247.093857][T11430] ret_from_fork+0x10/0x20 [ 247.094608][T11430] [ 247.094608][T11430] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 247.095787][T11430] __mutex_lock+0x164/0xed0 [ 247.096555][T11430] mutex_lock_nested+0x24/0x30 [ 247.097409][T11430] nbd_queue_rq+0x1f4/0xbd8 [ 247.098159][T11430] blk_mq_dispatch_rq_list+0x3d4/0x13a8 [ 247.099073][T11430] __blk_mq_sched_dispatch_requests+0xa48/0x10e8 [ 247.100102][T11430] blk_mq_sched_dispatch_requests+0xa8/0x158 [ 247.101032][T11430] blk_mq_run_hw_queue+0x300/0x4dc [ 247.101897][T11430] blk_mq_dispatch_list+0xa28/0xb2c [ 247.102672][T11430] blk_mq_flush_plug_list+0x3ac/0x494 [ 247.103407][T11430] __blk_flush_plug+0x364/0x440 [ 247.104149][T11430] __submit_bio+0x3a0/0x480 [ 247.104826][T11430] submit_bio_noacct_nocheck+0x288/0xaac [ 247.105683][T11430] submit_bio_noacct+0xd7c/0x17f0 [ 247.106456][T11430] submit_bio+0x38c/0x528 [ 247.107156][T11430] submit_bh_wbc+0x4c8/0x5ac [ 247.107854][T11430] block_read_full_folio+0x47c/0x754 [ 247.108620][T11430] blkdev_read_folio+0x28/0x38 [ 247.109341][T11430] filemap_read_folio+0xf0/0x2fc [ 247.110140][T11430] do_read_cache_folio+0x35c/0x5a8 [ 247.110919][T11430] read_cache_folio+0x68/0x88 [ 247.111640][T11430] read_part_sector+0xcc/0x708 [ 247.112371][T11430] adfspart_check_ICS+0xa4/0x720 [ 247.113115][T11430] bdev_disk_changed+0x6c4/0x11ec [ 247.113861][T11430] blkdev_get_whole+0x15c/0x240 [ 247.114617][T11430] bdev_open+0x2b4/0x880 [ 247.115263][T11430] blkdev_open+0x2d4/0x408 [ 247.115950][T11430] do_dentry_open+0x5c4/0xfb8 [ 247.116776][T11430] vfs_open+0x44/0x2dc [ 247.117490][T11430] path_openat+0x22d4/0x2b88 [ 247.118268][T11430] do_file_open+0x1c8/0x2e8 [ 247.119006][T11430] do_sys_openat2+0x114/0x1e8 [ 247.119811][T11430] do_sys_open+0xac/0xdc [ 247.120461][T11430] __arm64_sys_openat+0xa0/0xbc [ 247.121239][T11430] invoke_syscall+0x98/0x244 [ 247.121998][T11430] el0_svc_common+0xec/0x23c [ 247.122776][T11430] do_el0_svc+0x4c/0x5c [ 247.123414][T11430] el0_svc+0x64/0x260 [ 247.124053][T11430] el0t_64_sync_handler+0x48/0x148 [ 247.124641][T11441] loop2: detected capacity change from 0 to 512 [ 247.125748][T11430] el0t_64_sync+0x198/0x19c [ 247.126572][T11430] [ 247.126572][T11430] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 247.127767][T11430] __mutex_lock+0x164/0xed0 [ 247.128553][T11430] mutex_lock_nested+0x24/0x30 [ 247.129456][T11430] nbd_queue_rq+0xb0/0xbd8 [ 247.130200][T11430] blk_mq_dispatch_rq_list+0x3d4/0x13a8 [ 247.131124][T11430] __blk_mq_sched_dispatch_requests+0xa48/0x10e8 [ 247.132154][T11430] blk_mq_sched_dispatch_requests+0xa8/0x158 [ 247.133116][T11430] blk_mq_run_hw_queue+0x300/0x4dc [ 247.133993][T11430] blk_mq_dispatch_list+0xa28/0xb2c [ 247.134840][T11430] blk_mq_flush_plug_list+0x3ac/0x494 [ 247.135824][T11430] __blk_flush_plug+0x364/0x440 [ 247.136660][T11430] __submit_bio+0x3a0/0x480 [ 247.137400][T11430] submit_bio_noacct_nocheck+0x288/0xaac [ 247.138371][T11430] submit_bio_noacct+0xd7c/0x17f0 [ 247.139212][T11430] submit_bio+0x38c/0x528 [ 247.139932][T11430] submit_bh_wbc+0x4c8/0x5ac [ 247.140650][T11430] block_read_full_folio+0x47c/0x754 [ 247.141493][T11430] blkdev_read_folio+0x28/0x38 [ 247.142228][T11430] filemap_read_folio+0xf0/0x2fc [ 247.143101][T11430] do_read_cache_folio+0x35c/0x5a8 [ 247.143892][T11430] read_cache_folio+0x68/0x88 [ 247.144678][T11430] read_part_sector+0xcc/0x708 [ 247.145426][T11430] adfspart_check_ICS+0xa4/0x720 [ 247.146233][T11430] bdev_disk_changed+0x6c4/0x11ec [ 247.147064][T11430] blkdev_get_whole+0x15c/0x240 [ 247.147848][T11430] bdev_open+0x2b4/0x880 [ 247.148583][T11430] blkdev_open+0x2d4/0x408 [ 247.149285][T11430] do_dentry_open+0x5c4/0xfb8 [ 247.150074][T11430] vfs_open+0x44/0x2dc [ 247.150784][T11430] path_openat+0x22d4/0x2b88 [ 247.151578][T11430] do_file_open+0x1c8/0x2e8 [ 247.152404][T11430] do_sys_openat2+0x114/0x1e8 [ 247.153192][T11430] do_sys_open+0xac/0xdc [ 247.153927][T11430] __arm64_sys_openat+0xa0/0xbc [ 247.154654][T11430] invoke_syscall+0x98/0x244 [ 247.155430][T11430] el0_svc_common+0xec/0x23c [ 247.156150][T11430] do_el0_svc+0x4c/0x5c [ 247.156841][T11430] el0_svc+0x64/0x260 [ 247.157494][T11430] el0t_64_sync_handler+0x48/0x148 [ 247.158310][T11430] el0t_64_sync+0x198/0x19c [ 247.159019][T11430] [ 247.159019][T11430] -> #1 (set->srcu){.+.+}-{0:0}: [ 247.160149][T11430] __synchronize_srcu+0xc8/0x268 [ 247.160932][T11430] synchronize_srcu+0x41c/0x5d4 [ 247.161758][T11430] blk_mq_wait_quiesce_done+0x88/0xac [ 247.162731][T11430] blk_mq_quiesce_queue+0x70/0x8c [ 247.163558][T11430] elevator_switch+0x128/0x38c [ 247.164320][T11430] elevator_change+0x204/0x35c [ 247.165102][T11430] elevator_set_default+0x190/0x2b0 [ 247.165914][T11430] blk_register_queue+0x2fc/0x3d4 [ 247.166769][T11430] __add_disk+0x558/0xb44 [ 247.167523][T11430] add_disk_fwnode+0xd4/0x404 [ 247.168295][T11430] device_add_disk+0x38/0x4c [ 247.169016][T11430] nbd_dev_add+0x598/0x880 [ 247.169706][T11430] nbd_init+0x15c/0x174 [ 247.170372][T11430] do_one_initcall+0x274/0xc38 [ 247.171147][T11430] do_initcall_level+0x12c/0x1c4 [ 247.171989][T11430] do_initcalls+0x70/0xd0 [ 247.172755][T11430] do_basic_setup+0x7c/0x90 [ 247.173501][T11430] kernel_init_freeable+0x268/0x3a8 [ 247.174305][T11430] kernel_init+0x24/0x1dc [ 247.175007][T11430] ret_from_fork+0x10/0x20 [ 247.175711][T11430] [ 247.175711][T11430] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 247.176822][T11430] __lock_acquire+0x17c0/0x2ebc [ 247.177630][T11430] lock_acquire+0x140/0x364 [ 247.178384][T11430] __mutex_lock+0x164/0xed0 [ 247.179172][T11430] mutex_lock_nested+0x24/0x30 [ 247.179905][T11430] elevator_change+0x188/0x35c [ 247.180627][T11430] elevator_set_none+0xa8/0x13c [ 247.181378][T11430] blk_mq_update_nr_hw_queues+0x4c4/0x11e0 [ 247.182302][T11430] nbd_start_device+0x15c/0xa44 [ 247.183100][T11430] nbd_genl_connect+0xffc/0x15d4 [ 247.183865][T11430] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 247.184763][T11430] genl_rcv_msg+0x43c/0x620 [ 247.185471][T11430] netlink_rcv_skb+0x238/0x414 [ 247.186258][T11430] genl_rcv+0x38/0x50 [ 247.186918][T11430] netlink_unicast+0x600/0x7f8 [ 247.187693][T11430] netlink_sendmsg+0x648/0x948 [ 247.188554][T11430] __sock_sendmsg+0xc8/0x138 [ 247.189315][T11430] ____sys_sendmsg+0x3d0/0x6c8 [ 247.190054][T11430] ___sys_sendmsg+0x198/0x224 [ 247.190864][T11430] __sys_sendmsg+0x160/0x214 [ 247.191621][T11430] __arm64_sys_sendmsg+0x80/0x94 [ 247.192450][T11430] invoke_syscall+0x98/0x244 [ 247.193229][T11430] el0_svc_common+0xec/0x23c [ 247.193992][T11430] do_el0_svc+0x4c/0x5c [ 247.194714][T11430] el0_svc+0x64/0x260 [ 247.195439][T11430] el0t_64_sync_handler+0x48/0x148 [ 247.196202][T11430] el0t_64_sync+0x198/0x19c [ 247.196928][T11430] [ 247.196928][T11430] other info that might help us debug this: [ 247.196928][T11430] [ 247.198508][T11430] Chain exists of: [ 247.198508][T11430] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#38 [ 247.198508][T11430] [ 247.200418][T11430] Possible unsafe locking scenario: [ 247.200418][T11430] [ 247.201521][T11430] CPU0 CPU1 [ 247.202291][T11430] ---- ---- [ 247.203152][T11430] lock(&q->q_usage_counter(io)#38); [ 247.203924][T11430] lock(fs_reclaim); [ 247.204856][T11430] lock(&q->q_usage_counter(io)#38); [ 247.205991][T11430] lock(&q->elevator_lock); [ 247.206622][T11430] [ 247.206622][T11430] *** DEADLOCK *** [ 247.206622][T11430] [ 247.207872][T11430] 6 locks held by syz.6.1879/11430: [ 247.208659][T11430] #0: ffff800089d30d48 (cb_lock){++++}-{4:4}, at: genl_rcv+0x28/0x50 [ 247.209803][T11430] #1: ffff800089d30b80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0xec/0x620 [ 247.211159][T11430] #2: ffff0000c817b1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x98/0x11e0 [ 247.212866][T11430] #3: ffff0000c817b0d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa4/0x11e0 [ 247.214477][T11430] #4: ffff0000c827c158 (&q->q_usage_counter(io)#38){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 247.216301][T11430] #5: ffff0000c827c190 (&q->q_usage_counter(queue)#22){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 247.218227][T11430] [ 247.218227][T11430] stack backtrace: [ 247.219110][T11430] CPU: 0 UID: 0 PID: 11430 Comm: syz.6.1879 Tainted: G L syzkaller #0 PREEMPT [ 247.220697][T11430] Tainted: [L]=SOFTLOCKUP [ 247.221369][T11430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 247.222924][T11430] Call trace: [ 247.223473][T11430] show_stack+0x2c/0x3c (C) [ 247.224247][T11430] __dump_stack+0x30/0x40 [ 247.224917][T11430] dump_stack_lvl+0xd8/0x12c [ 247.225607][T11430] dump_stack+0x1c/0x28 [ 247.226240][T11430] print_circular_bug+0x328/0x330 [ 247.227032][T11430] check_noncircular+0x158/0x174 [ 247.227730][T11430] __lock_acquire+0x17c0/0x2ebc [ 247.228446][T11430] lock_acquire+0x140/0x364 [ 247.229098][T11430] __mutex_lock+0x164/0xed0 [ 247.229737][T11430] mutex_lock_nested+0x24/0x30 [ 247.230429][T11430] elevator_change+0x188/0x35c [ 247.231146][T11430] elevator_set_none+0xa8/0x13c [ 247.231899][T11430] blk_mq_update_nr_hw_queues+0x4c4/0x11e0 [ 247.232776][T11430] nbd_start_device+0x15c/0xa44 [ 247.233486][T11430] nbd_genl_connect+0xffc/0x15d4 [ 247.234364][T11430] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 247.235247][T11430] genl_rcv_msg+0x43c/0x620 [ 247.235952][T11430] netlink_rcv_skb+0x238/0x414 [ 247.236670][T11430] genl_rcv+0x38/0x50 [ 247.237224][T11430] netlink_unicast+0x600/0x7f8 [ 247.238009][T11430] netlink_sendmsg+0x648/0x948 [ 247.238706][T11430] __sock_sendmsg+0xc8/0x138 [ 247.239387][T11430] ____sys_sendmsg+0x3d0/0x6c8 [ 247.240092][T11430] ___sys_sendmsg+0x198/0x224 [ 247.240816][T11430] __sys_sendmsg+0x160/0x214 [ 247.241504][T11430] __arm64_sys_sendmsg+0x80/0x94 [ 247.242280][T11430] invoke_syscall+0x98/0x244 [ 247.243052][T11430] el0_svc_common+0xec/0x23c [ 247.243668][T11430] do_el0_svc+0x4c/0x5c [ 247.244305][T11430] el0_svc+0x64/0x260 [ 247.244842][T11430] el0t_64_sync_handler+0x48/0x148 [ 247.245698][T11430] el0t_64_sync+0x198/0x19c [ 247.252800][T11441] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 247.284962][T11439] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 247.312958][T11441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.313019][T11441] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.317868][T11441] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.342226][ T4705] block nbd5: Receive control failed (result -32) [ 247.342329][ T4705] block nbd5: Receive control failed (result -32) [ 248.455893][ T1595] ieee802154 phy1 wpan1: encryption failed: -22