last executing test programs: 31.023707773s ago: executing program 1 (id=549): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x163440, 0x10) close(r1) r2 = socket(0xa, 0x3, 0x87) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f00000001c0)=0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(r3, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000020603000000000000000000070000000c000780080012400000000d0500010006000000050005000200000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) sendto(r2, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x80000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x29}, &(0x7f00000000c0)=0x8) r9 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r9, &(0x7f0000000100)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10, 0x0}, 0x2000c8c0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0x8, 0x9, 0x6, 0x7, 0x0, 0x9, 0x0, 0xffff, r8}, 0x20) 29.318612616s ago: executing program 1 (id=554): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x400ccc0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) 28.98012668s ago: executing program 1 (id=557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a300000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 28.433682238s ago: executing program 1 (id=560): ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f00000000c0)=0x9) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x13f, 0x9}}, 0x20) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x80, @any, "221db995f57d44fa8fd4d5a3ff9762fcb84b6f2475ef0a283233cf946be6fa03a9674fed9062067b5b0b1e8d88bde5d3bbbeebe3be34811978f38b1c4752b1622ccd0f67d41182bd1fce7083125b1c654f2a80a04a2a232a5cd38947fdd5af7f388488655653a0e0c6ffab159d29bb1a837b099c54b60beb4e08f921c7377a8d265d8ea6f982417e9a84350f5fbb8c568c4ec69a66b3b9f9f26d018f62b6eaa2638b9e98001acbd917d2e02a444ed84d479bbabadf8060fc10b992eddae8defe10699ff1263e72f8734942e2b3c4ef0b2adee092f6a6f4dc607db2187fbd37d1c8670ad2ff41ace7b35b0b2ceddf8fc6b0d67c90e00ec89d"}}}, 0x102) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0xb5, 0x1, 0x5}]}) r3 = syz_open_dev$vim2m(&(0x7f0000000240), 0x500000000ff, 0x2) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000001400)='Q', 0x1}], 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r5 = syz_open_dev$video4linux(&(0x7f0000000100), 0xc41, 0xc8400) ioctl$VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000580)) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000180)=@userptr={0x0, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x48, 0x3, 0x8}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x496000}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000480)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_mixed}, {@uni_xlate}, {@fat=@tz_utc}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@utf8no}, {@numtail}, {@rodir}, {@numtail}, {@shortname_lower}, {@utf8no}], [{@smackfsroot={'smackfsroot', 0x3d, 'iocharset'}}, {@subj_user={'subj_user', 0x3d, 'uni_xlate=0'}}]}, 0x2, 0x289, &(0x7f00000001c0)="$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") mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008"], 0x5c}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) listns(0x0, 0x0, 0xfffffd79, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="54010000100001002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008200200140003006e657464657673696d300000000000000c011680980001800c00070006000000030000000c000700bafbffff07000000280001"], 0x154}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, r2, 0x0) syz_read_part_table(0x403a, &(0x7f0000004040)="$eJzs0D1KA2EQBuBZQbCxsBAs5wiyspZ6AQ+hrAsKi40/mCLN5l6BXCNFjpArJLAJSbtFElI8T/O98DHDy7x8fv3+Zz1qs8y39ifv8+M9y6rK76bOx4c4gWKXrmISRXRxE5dDBl+vF8tjFjsXt3dxsY1Fn1bxvP99mm1u2L8RMe6G7p1Pm79DdwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM0OHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8FAAD//8QZE0c=") r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r7) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x18c, r8, 0x20, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x9}}, {0x8, 0xb, 0x7b}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x21, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x64a}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x400}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x24044801}, 0x0) 27.19767181s ago: executing program 1 (id=564): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) (async) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) (async) listen(r0, 0x0) (async) 26.775983574s ago: executing program 1 (id=566): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x1001, @none, 0x0, 0x3}, 0x7) syz_open_dev$dri(0x0, 0x401, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf648, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x12, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = dup(0xffffffffffffffff) r7 = syz_open_procfs(0x0, 0x0) fchdir(r7) mount(0x0, 0x0, 0x0, 0x0, 0x0) r8 = gettid() syz_open_procfs(r8, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11.44367833s ago: executing program 32 (id=566): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x1001, @none, 0x0, 0x3}, 0x7) syz_open_dev$dri(0x0, 0x401, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf648, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x12, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = dup(0xffffffffffffffff) r7 = syz_open_procfs(0x0, 0x0) fchdir(r7) mount(0x0, 0x0, 0x0, 0x0, 0x0) r8 = gettid() syz_open_procfs(r8, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.946494685s ago: executing program 2 (id=653): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) r0 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0x0, &(0x7f0000000280)={0x943, 0xbb77}, 0x0) setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@nolazytime}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x46d, &(0x7f00000008c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) pwrite64(r1, &(0x7f0000000180)="95", 0xffaf, 0x10001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000280)=0x1b0, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000004c0)=0x20f2b, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000180)=0x38) 5.889586535s ago: executing program 0 (id=655): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="7c0000001800051105000000000000000a400000fe040001000000001400010020010db800d0000000000000000000011c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x7c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xfdb5, 0x0, &(0x7f0000000180)="e02742e8680d85ff9782762f86dd", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000001c0)={0xb9, 0x5, 0x7, 0x69f, 0x7, "eba04578f85dc8c60a0fe64b54e68e61087eb9"}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25150000002c002b8020000380080002000300000006000100000000000cfd04000203aaaaaaaaaaaa08000100000000000c00060001"], 0x54}, 0x1, 0x0, 0x0, 0x4045}, 0x8004) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042bbd70a294981ec718f845000c00060002000000000000810000000200000102000000050000020000000000000000000800000100000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000010) 5.667143702s ago: executing program 0 (id=657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x38, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}]}]}]}, 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r4, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000200)='p', 0x8200, 0x600}]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0xf, &(0x7f00000000c0)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x900, 0x63, 0x11, 0x1c}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0xa, 0x2, 0x1, 0x20, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, r3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040054}, 0x24000001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7ff, 0x80000001, 0xe, 0x0, 0xff}, 0xf3ee, 0x0, 0x3, 0x2, 0x8, 0x1d, 0x11, 0x9, 0x5, 0xfffffff9, {0x98a934e4, 0xffff0629, 0x80000000, 0xdf, 0x3800000, 0x9}}}}]}, 0x78}}, 0x0) ptrace$setregset(0x4205, r5, 0x403, &(0x7f0000000000)={0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b7495d2c000000", @ANYRES16=r10, @ANYBLOB="010029bd7000fcdbdf25010000000000000002410000001000137564703a73797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) 4.888652869s ago: executing program 2 (id=659): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r0, 0xffffff56, 0xfffffffffffffffe) (async) r1 = syz_clone3(&(0x7f0000000380)={0x80002100, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x1e}, &(0x7f00000001c0)=""/239, 0xef, &(0x7f00000002c0)=""/4, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000200000000007400", @ANYRES32=r4, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) sched_setscheduler(r1, 0x6, &(0x7f0000000400)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000680)={r3, &(0x7f00000000c0)='GPL\x00', 0x400000, &(0x7f0000000100)={@align=0x5, {0xfffe, 0x8, 0x25, 0x1}}, 0x2, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)=0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) fstat(r7, &(0x7f0000000740)) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0xe, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r11, 0x1, 0x10, 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 4.863998092s ago: executing program 0 (id=660): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 4.796352799s ago: executing program 3 (id=661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6375fd82}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x110}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff00000000800000001f010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0xffffffff}) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000340)={0x1}) fcntl$lock(r4, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x0, 0x8}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0x0, 0x0}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000002c000480280001800d00010073796e70726f7879000000001400028005000200"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r2, 0xcf, 0x2, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002b40)={'batadv0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r9, 0x4) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='autogroup\x00') write$cgroup_int(r10, &(0x7f0000000180)=0xffffffff7fffffff, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1c, 0x11, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000001b40)=""/4096, 0x41100, 0x2, '\x00', r8, @fallback=0x35, r2, 0x8, &(0x7f0000002b80)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, r9, r10, 0x3, &(0x7f0000002bc0)=[r2, r2, r2, r2, r2, r2, r2], &(0x7f0000002c00)=[{0x1, 0x3, 0xa, 0x6}, {0x2, 0x4, 0x5, 0xc}, {0x3, 0x4, 0xb, 0x8}], 0x10, 0xf}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r5, 0x4) 4.717283653s ago: executing program 0 (id=662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1c0000000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x98}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 4.470591903s ago: executing program 0 (id=664): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000000002090001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a0d301fb7c62e36dba0"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r1, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$XFS_IOC_OPEN_BY_HANDLE(r7, 0xc038586b, &(0x7f0000000180)={r7, &(0x7f0000000080)='\x00', 0x800, &(0x7f00000000c0)={@align=0xffffffffffffffff, {0x3, 0x2, 0xa, 0x6}}, 0xb7, &(0x7f0000000100), &(0x7f0000000140)=0x8000}) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r7, 0xc038586b, &(0x7f0000000180)={r7, &(0x7f0000000080)='\x00', 0x800, &(0x7f00000000c0)={@align=0xffffffffffffffff, {0x3, 0x2, 0xa, 0x6}}, 0xb7, &(0x7f0000000100), &(0x7f0000000140)=0x8000}) 4.459716704s ago: executing program 3 (id=665): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) get_mempolicy(0x0, 0x0, 0x100, &(0x7f0000131000/0x3000)=nil, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x6, 0xfe, 0x1, 0x27}, {0x4000, 0x7, 0x7, 0x40}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0, 0x1, 0x80000}) setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$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") r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000040)={0xc000003, 0x1, &(0x7f0000000080)=[0x0]}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xc) getsockopt$inet6_int(r7, 0x29, 0x4c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0xa, @sliced={0x3, [0xf, 0x100, 0x7, 0x9, 0x5, 0x8, 0xf01b, 0x9, 0x3, 0x8, 0x2, 0x1000, 0x0, 0x49bd, 0xffff, 0xf878, 0x6, 0xf711, 0xff81, 0x0, 0x6092, 0x6, 0x0, 0x2, 0x5, 0x7ff, 0x0, 0xc, 0x9, 0xfff5, 0x40, 0x8, 0x1, 0x17ff, 0x9, 0x0, 0x2, 0x6, 0x8001, 0x7ff, 0x400, 0x2, 0x802, 0x4, 0x0, 0x3, 0x9, 0x104], 0x2}}) 2.717510027s ago: executing program 3 (id=668): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) r0 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0x0, &(0x7f0000000280)={0x943, 0xbb77}, 0x0) setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@nolazytime}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x46d, &(0x7f00000008c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) pwrite64(r1, &(0x7f0000000180)="95", 0xffaf, 0x10001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000280)=0x1b0, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000004c0)=0x20f2b, 0x4) 2.483461783s ago: executing program 0 (id=670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d40), &(0x7f0000000180), 0x831f, r0}, 0x38) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r0}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f00001b5000/0x2000)=nil, 0x2000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18) 2.297169867s ago: executing program 2 (id=671): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = timerfd_create(0x0, 0x800) timerfd_settime(r1, 0x3, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x80000037db, 0x538d28a0, 0x0, 0x0, 0x0, 0x1000000081, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x10000}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00\x00\x00', 0x3}], 0x1}}], 0x1, 0x20008000) close(r2) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0xd5ca0000, 0x9, 0xe, 0x6, 0x3, 0x7f}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0xff, 0x9, 0x2, 0x8, 0x1, 0x0, [{0x0, 0x4, 0x28, '\x00', 0x2203}]}) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000003d500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20741, 0x0) writev(r3, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000100)="48a0f96c33a017488c1e064596ff779d12d911fb4b43cad0091e548d2cacb792e462020a5282d0d3e4181c9e55936f8e960bc2dc05fc85170d5f1af7c76fd0bcab2b11b28e5c4a73c92e6143667ec57676dd15681015cd980e583c160f671f1ea3bf24c6f8d5d9b14a9596b2664eb142351962cfb4eda29f922ab26db2716dc720ebef96d4f6df0005d7f744ec8204c46aff0db8225878a8dd190a8af4d31a9d", 0xfeb7}], 0x2) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000020101010000000000000000020000000400018018000a801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 1.801364858s ago: executing program 4 (id=674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1c0000000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x98}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 1.610109602s ago: executing program 3 (id=675): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000100)={[{@resgid}, {@errors_remount}, {@quota}, {@sysvgroups}, {@usrquota}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x0, 0x2}], 0xee00}, 0x18, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x11, 0xa20, 0x8000c65) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x3, 0x0, 0x2, 0xfffff010}]}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'vlan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000200)=ANY=[@ANYBLOB="33ffffef", @ANYRES16=r11, @ANYBLOB="05002abd7000000000002e00000008000300", @ANYRES32=r10, @ANYBLOB="0a00340001010101010100000800c9006c0900000400e200"], 0x34}}, 0x810) sendmsg$NL80211_CMD_START_P2P_DEVICE(r8, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="100028bd7000fddbdf5e5900000086a3410acb3d6ada7713920d68dde8fdcb4a906d4d96905807308f0928d0639e9bb1dab8856bddf769c94b6f6b63650f1ecc917388a29bf68783939c08c729da5a88a67a3fa6baa17b30d47ff898f1b81592e64e831d400185a1cec701f57812d7938d229b4fb1ea30ae5baf5d41876ca9b5d564ed554302cb080d7625ceac3d12117fa1df73a4932fdc9a87a1c845ded31dc4dc6b0d6d6cc3fa85bef28e02cd1a44cc1bc0d28829394ebfd034"], 0x14}}, 0x4000800) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20004004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r12 = socket$can_j1939(0x1d, 0x2, 0x7) mknodat$null(r2, &(0x7f0000000540)='./bus\x00', 0x100, 0x103) connect$can_j1939(r12, &(0x7f0000000140), 0x18) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x10, 0x2}, {0xa, 0xb}, {0xd, 0xfff2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c080}, 0x200040c0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003540)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r4, @ANYRES8=r1, @ANYRES8, @ANYRES16=r0, @ANYRESOCT=r7, @ANYRESHEX=r8, @ANYBLOB="17a1b49b6ce1c0631856c5683dfd5066ba3ad8855be2d0c9b7493dd34052a4c7e38d7160779efa43e114ff93d489109822c8865084740152c18517bffdf84cd99c60e023568061e4b93ffc57e950f57ba3bb0110dba1634eacb2f838fdea33d95ce722a1cb263d3823c3a38774ce603abb88851ffeefb37b3d61dcdaa3450e94c99b108d76fbbb0ae168af5e668d0bed17f5b5aa2c7c59e89605254a10eb3d13afb0194272d2a7baf8bbcbea663b75095a3d58b8a4896d4bbf475c7452dffc2ea42192a0227587cb114b87bd", @ANYBLOB="d85e9fde706ac730e299aea355092bb17d7201552ade95e46c46640889427e9262b8aa61a6a14d0a4e34cfaa20c1b96ee5aca64ea4d444be5510c3246cd5f08dc24e08230558a72797a8c8094e954429a3ee94319378224c80224ebeb584ad2aa4c6f4705887015444ed1a7dece45d9fb2dd2cde91be45e3f5754c37a51482c98d82a10d1c7597d7e7e6d14b87454af5980cb4db390168fdcf9b157c313ce8456a62f8d9f3a7e0af142ff44f97c6149346c08d26587dfef4d18e8bec218382e66635efa106abdcff124c21829eb95a5d2ccfbf4ea686cbfc0638de0a2e1a895fae4d760c65a45a97e8e8ca86e8", @ANYRES32=r0, @ANYBLOB="15ada7c322ae08b285f0e6426cafe52d63f383bd28921e78ee99094fd6df719668d264251f2d3db66d3e651280e45db33fa9d6a7dead304bfb2a90e501e202558202f7f5204bdc4958b0a3d28087b81b5e382417792f159729e3d2679dfc39ab8ce34b1098416ba84f0e8b3b276e23a6b2b4a30cffb771128f966017f8bfe46db2eb3dd29a1892624e4c577bc0658d0ff57a873d9c08fac0e4619593b22ac1f5fe3430e02b4edda6eb8f168791e3b73f2df011f5ce2ee9e5b5aa2e086a8d964a0c52fae8908f53696a1fc31d6929c13361e6fd7880f4bb17316110abcdcff77ff71f0f29", @ANYBLOB="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", @ANYRESHEX=r1, @ANYRESOCT=r7], 0x7c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x2) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYRES16=r2], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="7c5b911c0f0f63bb285c704420b468796c1aa87892d13c849f0d337db1ea79299c5d8ab2a6642cc791e661970568ba3316a17bd3aacde615f158eed91f7b124e5bb5d519d116f9c44f40c4afa8a895b3f4b6397a4ded11684c56603bcce56ae88b52cb6c1eee5bdde9b2faa87506e3f06384d4a1f037f429b26824d88e97aaada51a9681ea3a1013b8720e1fdacbf9c909c7647669c91d66e161e8c68446b2a1dce71419af3a9f3b776d4422990eb9a2beffa522ee6a2f6dfd4a2c645d7af7edd3b623a74ddf79237dd304992a0c22aef02e4252f25f02eae92bb128aea721e195f663709947e8a9593d525ca7a84303f05e"], 0x3c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8004) r13 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x44c200, 0x0) ioctl$RTC_WKALM_RD(r13, 0x80287010, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r14 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r14, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4, 0x0, 0xfe}) 1.515981817s ago: executing program 4 (id=676): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0xbf, &(0x7f0000001e00)=""/4081, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") removexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00') socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x128, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xd}, {0xa, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf8, 0x2, {{0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_LOSS={0xd0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xc3, 0x9, 0xf, 0x3, 0xc7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x10001, 0x4, 0x4, 0x7, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x280de21d, 0x4, 0x8485, 0x8, 0x10001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x8, 0x5, 0x7, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfffffff7, 0xe, 0xa13, 0x1, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x9, 0x6, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfffff952, 0x100, 0x7, 0x1, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xc, 0xf09, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0xfffffffa, 0x1b, 0x6, 0x1}}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x128}}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000380), 0x7c59, 0x400) ioctl$BLKROSET(r6, 0x125d, &(0x7f00000003c0)=0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x4c, r8, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x4c}}, 0x0) 1.359858802s ago: executing program 2 (id=677): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0xbf, &(0x7f0000001e00)=""/4081, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") removexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00') socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x128, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xd}, {0xa, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf8, 0x2, {{0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_LOSS={0xd0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xc3, 0x9, 0xf, 0x3, 0xc7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x10001, 0x4, 0x4, 0x7, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x280de21d, 0x4, 0x8485, 0x8, 0x10001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x8, 0x5, 0x7, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfffffff7, 0xe, 0xa13, 0x1, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x9, 0x6, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfffff952, 0x100, 0x7, 0x1, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xc, 0xf09, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0xfffffffa, 0x1b, 0x6, 0x1}}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x128}}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000380), 0x7c59, 0x400) ioctl$BLKROSET(r6, 0x125d, &(0x7f00000003c0)=0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x4c, r8, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x4c}}, 0x0) 886.765326ms ago: executing program 2 (id=678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fchdir(r0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)) sendto$inet6(r0, 0x0, 0x0, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='highspeed', 0x9) shutdown(r0, 0x1) 883.807098ms ago: executing program 4 (id=679): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000640)='#', 0x1}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x4, 0x20}, 0xc) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$watch_queue(r5, &(0x7f0000003e00)=""/1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 868.968607ms ago: executing program 3 (id=680): r0 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(0x0, r1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x311}) r3 = syz_io_uring_setup(0x5344, &(0x7f0000000040)={0x0, 0x33f, 0x800, 0x0, 0x4, 0x0, r2}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) setns(0xc9, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/102, 0x66}, {0x0}], 0x2, 0x80000000, 0x5) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x8, 0xfffffffffffffa7f}) r5 = socket(0x8, 0x5, 0x5) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000180)=[r2], 0x1) ftruncate(r5, 0x7) process_vm_writev(r0, &(0x7f0000001700)=[{0xfffffffffffffffe}], 0x1, &(0x7f0000000200)=[{0x0}], 0x1, 0x0) 520.039404ms ago: executing program 2 (id=681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x2e, &(0x7f0000000000)=r5, 0x4) recvmsg$unix(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000002000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) syz_clone3(&(0x7f00000005c0)={0x8000, &(0x7f0000000100), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, 0x0, 0x100) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{}, {0x1, 0x4}, [{0x2, 0x6}], {}, [], {0x10, 0x3}}, 0x2c, 0x2) setns(0xffffffffffffffff, 0x24020000) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) 447.735621ms ago: executing program 4 (id=682): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) (fail_nth: 4) 237.6027ms ago: executing program 4 (id=683): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='P', 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386d16a00000000082b01fe8000000000000000000000000000bbfe8000004000e8087ec50000000000aa3200040001100000"], 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2900, 0x0) 123.766644ms ago: executing program 4 (id=684): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000001080)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_mixed}, {@utf8}, {@fat=@tz_utc}, {@uni_xlateno}, {@fat=@flush}, {@rodir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_mixed}, {@rodir}, {@utf8}, {@fat=@discard}, {@utf8no}, {@rodir}]}, 0x1, 0x28e, &(0x7f0000001500)="$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") (async) syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000001080)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_mixed}, {@utf8}, {@fat=@tz_utc}, {@uni_xlateno}, {@fat=@flush}, {@rodir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_mixed}, {@rodir}, {@utf8}, {@fat=@discard}, {@utf8no}, {@rodir}]}, 0x1, 0x28e, &(0x7f0000001500)="$eJzs3c1qO1UUAPAz+c6/i2ThSoQO6MJVaX2CFqkgFgQlC3WhxaYgTSi0EKiKsSufwCdw48u4EV/AB1Dc2YU4kk4+yyS2kjbF/++3upxzT+fcm9t0NbefvdY/Ozm/PL3++tdoNJIo7cd+3CTRjlJMfBuFfvm9OA4APHM3WRZ/ZLl6HrpanFFdUlkpPXpzAMCjmP/7v+leAICn8eFHH793cHR0+EGaNiL63w06SURjlj84jS+iF93YjVb8FZFN5eN33j06jEo60o43+sNBZ9CJ6H/606T+t4jb+r1oRbu4fi/NzdUPB51qvBg/f78X3fd/iFa8Ulz/VkF9dGrx5utz/e9EK37+PM6jFyfj3ib13+yl6dvZ939+9ckoOqpPhoNOfTpvPLv8ZB8KAAAAAAAAAAAAAAAAAAAAAAD/ezvpVHvx/p3Jxf8r8ivuBxrO3c+zm6ZpluTzZ/WVeLUSlU2uHQAAAAAAAAAAAAAAAAAAAJ6Ly6svz457ve7FWgeT1/oLUvH3YqQeEff5yfXC1Pb9G8v7ifK4tV4S8bB1VaN+W/nvk8sP3LHmqJ/uRVKJ9X0EyTTSnE9tR/6sUaSZD+Yi937Ej1v5Lt5NNfLI5HSdHSfRLa3csUbRIVnDICs4fuWlVbW7kWYUL3CUWvH02tZ/6jlrLUklEVGdbubinNtfshezA1ld7x4Wfl3UHuErCAAAAAAAAAAAAAAAAAAAGJu99FuQvN5AQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwAbP///+AwXBcvGxOVh4NKjGObHiJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvAT+CQAA///Zl1yY") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fb340100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0xbe9b75eceb0d266a) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0xbe9b75eceb0d266a) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x800, 0x1, 0x1c9}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x80, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x26d}}], 0x1, 0x0, 0x0) (async) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x800, 0x1, 0x1c9}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x80, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x26d}}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x20, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x20, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'batadv_slave_1\x00', 0x0}) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000001180)={r6, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000001200)={0x4, &(0x7f00000011c0)=[{0x5, 0x4, 0x4, 0x7}, {0xd7a5, 0x6, 0xff, 0x2}, {0x5, 0xd, 0x2, 0x1}, {0x2b7, 0x44, 0xdf, 0x7}]}, 0x10) r7 = io_uring_setup(0x4238, &(0x7f0000000180)={0x0, 0x0, 0x40, 0x100000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000040)=[0x8, 0x5], 0x2) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000040)=[0x8, 0x5], 0x2) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f00000004c0), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, 0x0, 0x2) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, 0x0, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800011, &(0x7f0000001a80), 0x8, 0x62c, &(0x7f0000000200)="$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") 0s ago: executing program 3 (id=685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1c0000000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x98}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) kernel console output (not intermixed with test programs): reating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.817123][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.817159][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.894461][ T4909] geneve2: entered promiscuous mode [ 31.895624][ T4909] geneve2: entered allmulticast mode [ 31.901377][ T4911] loop1: detected capacity change from 0 to 1024 [ 31.930076][ T4911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.944996][ T4718] Bluetooth: hci1: command tx timeout [ 31.945141][ T4718] Bluetooth: hci0: command tx timeout [ 31.945236][ T4718] Bluetooth: hci3: command tx timeout [ 31.945314][ T4718] Bluetooth: hci2: command tx timeout [ 31.948770][ T4729] Bluetooth: hci4: command tx timeout [ 31.953948][ T4917] syz.4.9 uses obsolete (PF_INET,SOCK_PACKET) [ 31.975321][ T4917] loop4: detected capacity change from 0 to 256 [ 31.975804][ T4917] vfat: Bad value for 'shortname' [ 32.159507][ T4923] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 32.159944][ T4923] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 32.160038][ T4923] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.160038][ T4923] [ 32.160087][ T4923] EXT4-fs (loop1): Total free blocks count 0 [ 32.160122][ T4923] EXT4-fs (loop1): Free/Dirty block details [ 32.160170][ T4923] EXT4-fs (loop1): free_blocks=68451041280 [ 32.160223][ T4923] EXT4-fs (loop1): dirty_blocks=64 [ 32.160264][ T4923] EXT4-fs (loop1): Block reservation details [ 32.160302][ T4923] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 32.807796][ T4712] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 32.812527][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.136638][ T4729] Bluetooth: hci4: command tx timeout [ 34.136806][ T4729] Bluetooth: hci2: command tx timeout [ 34.136985][ T4729] Bluetooth: hci3: command tx timeout [ 34.137144][ T4729] Bluetooth: hci0: command tx timeout [ 34.137405][ T4729] Bluetooth: hci1: command tx timeout [ 34.268851][ T4945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.269087][ T4945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.974921][ T4964] tipc: Started in network mode [ 34.974959][ T4964] tipc: Node identity 4, cluster identity 4711 [ 34.974981][ T4964] tipc: Node number set to 4 [ 35.296595][ T4967] loop1: detected capacity change from 0 to 512 [ 35.303676][ T4967] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 35.306812][ T4967] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 35.308705][ T4967] System zones: 1-12 [ 35.309792][ T4967] EXT4-fs (loop1): orphan cleanup on readonly fs [ 35.315278][ T4967] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.22: iget: bad i_size value: 12154761577498 [ 35.318220][ T4967] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 35.318895][ T4967] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.22: couldn't read orphan inode 13 (err -117) [ 35.323996][ T4967] loop1: lost filesystem error report for type 5 error -117 [ 35.324203][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 35.324228][ C0] EXT4-fs (loop1): initial error at time 35: ext4_orphan_get:1399: inode 13 [ 35.324267][ C0] EXT4-fs (loop1): last error at time 35: ext4_orphan_get:1399: inode 13 [ 35.332615][ T4967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 35.347978][ T4973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 35.385190][ T4967] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.22: lblock 0 mapped to illegal pblock 3 (length 1) [ 35.389505][ T4976] input: syz0 as /devices/virtual/input/input2 [ 35.394922][ T4967] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.22: error -EUCLEAN reading directory block [ 35.398476][ T4967] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.22: lblock 0 mapped to illegal pblock 3 (length 1) [ 35.401008][ T4977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 35.417850][ T4980] loop2: detected capacity change from 0 to 512 [ 35.419170][ T4967] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.22: error -EUCLEAN reading directory block [ 35.422096][ T4980] ======================================================= [ 35.422096][ T4980] WARNING: The mand mount option has been deprecated and [ 35.422096][ T4980] and is ignored by this kernel. Remove the mand [ 35.422096][ T4980] option from the mount to silence this warning. [ 35.422096][ T4980] ======================================================= [ 35.437568][ T4980] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.24: bad orphan inode 15 [ 35.437604][ T4980] loop2: lost filesystem error report for type 5 error -117 [ 35.437725][ T4980] ext4_test_bit(bit=14, block=18) = 1 [ 35.437734][ T4980] is_bad_inode(inode)=0 [ 35.437739][ T4980] NEXT_ORPHAN(inode)=1023 [ 35.437744][ T4980] max_ino=32 [ 35.437748][ T4980] i_nlink=0 [ 35.438400][ T4980] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #15: comm syz.2.24: corrupted xattr block 19: invalid header [ 35.438417][ T4980] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.438629][ T4980] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 35.439116][ T4980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 35.446160][ T4980] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.24: bg 0: block 449: padding at end of block bitmap is not set [ 35.467555][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 35.487966][ T4984] loop2: detected capacity change from 0 to 1024 [ 35.493215][ T4984] EXT4-fs: Ignoring removed bh option [ 35.497153][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.512774][ T4984] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 35.516757][ T4986] loop3: detected capacity change from 0 to 1024 [ 35.518364][ T4986] ext2: Unknown parameter 'nouser_xattr' [ 35.550963][ T4984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.568307][ T4984] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.592819][ T4993] netlink: 136 bytes leftover after parsing attributes in process `syz.3.28'. [ 35.592876][ T4993] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 35.618989][ T4995] loop0: detected capacity change from 0 to 512 [ 35.619390][ T4995] journal_path: not usable as path [ 35.619399][ T4995] EXT4-fs: error: could not find journal device path [ 35.655658][ T5000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.655832][ T5000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.675881][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.200831][ T4718] Bluetooth: hci3: command tx timeout [ 36.200930][ T4718] Bluetooth: hci2: command tx timeout [ 36.202005][ T4718] Bluetooth: hci4: command tx timeout [ 36.204049][ T4729] Bluetooth: hci0: command tx timeout [ 36.206494][ T4715] Bluetooth: hci1: command tx timeout [ 36.246700][ T5007] tipc: Started in network mode [ 36.246741][ T5007] tipc: Node identity 4, cluster identity 4711 [ 36.246762][ T5007] tipc: Node number set to 4 [ 36.693444][ T5024] loop2: detected capacity change from 0 to 1024 [ 36.712063][ T5024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.099867][ T5038] loop3: detected capacity change from 0 to 512 [ 37.105694][ T5038] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 37.105726][ T5038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 37.105775][ T5038] System zones: 1-12 [ 37.105884][ T5038] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.106545][ T5038] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.38: iget: bad i_size value: 12154761577498 [ 37.106573][ T5038] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 37.106989][ T5038] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.38: couldn't read orphan inode 13 (err -117) [ 37.107472][ T5038] loop3: lost filesystem error report for type 5 error -117 [ 37.130104][ T5038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 37.195314][ T5040] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 37.195772][ T5040] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 37.195795][ T5040] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.195795][ T5040] [ 37.195809][ T5040] EXT4-fs (loop2): Total free blocks count 0 [ 37.195821][ T5040] EXT4-fs (loop2): Free/Dirty block details [ 37.195834][ T5040] EXT4-fs (loop2): free_blocks=68451041280 [ 37.195848][ T5040] EXT4-fs (loop2): dirty_blocks=64 [ 37.195858][ T5040] EXT4-fs (loop2): Block reservation details [ 37.195868][ T5040] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 37.384943][ T5038] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 3: comm syz.3.38: lblock 0 mapped to illegal pblock 3 (length 1) [ 37.385522][ T5038] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.38: error -EUCLEAN reading directory block [ 37.385753][ T5038] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 3: comm syz.3.38: lblock 0 mapped to illegal pblock 3 (length 1) [ 37.389750][ T5038] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.38: error -EUCLEAN reading directory block [ 37.443867][ T5047] loop0: detected capacity change from 0 to 512 [ 37.458478][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.470327][ T5047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.564695][ T5055] loop3: detected capacity change from 0 to 256 [ 37.568040][ T4721] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 37.569509][ T5055] vfat: Unknown parameter 'iocharset3iso8859-13' [ 37.573038][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.573281][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.573539][ T5055] netlink: 196 bytes leftover after parsing attributes in process `syz.3.41'. [ 37.616546][ T5058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 37.618556][ T5058] loop2: detected capacity change from 0 to 512 [ 37.622208][ T5058] EXT4-fs (loop2): Test dummy encryption mode enabled [ 37.626947][ T5060] loop0: detected capacity change from 0 to 512 [ 37.627346][ T5060] journal_path: not usable as path [ 37.627355][ T5060] EXT4-fs: error: could not find journal device path [ 37.643378][ T5058] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.44: corrupted in-inode xattr: invalid ea_ino [ 37.643419][ T5058] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.644067][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 37.644084][ C1] EXT4-fs (loop2): initial error at time 37: ext4_iget_extra_inode:5180: inode 15 [ 37.644100][ C1] EXT4-fs (loop2): last error at time 37: ext4_iget_extra_inode:5180: inode 15 [ 37.656130][ T5058] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.44: couldn't read orphan inode 15 (err -117) [ 37.656174][ T5058] loop2: lost filesystem error report for type 5 error -117 [ 37.659977][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 37.660711][ T5058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.663810][ T5058] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 38.028872][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.133586][ T5080] IPv6: NLM_F_CREATE should be specified when creating new route [ 38.175554][ T5083] loop2: detected capacity change from 0 to 512 [ 38.184247][ T5083] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 38.184405][ T5083] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 38.184448][ T5083] System zones: 1-12 [ 38.184577][ T5083] EXT4-fs (loop2): orphan cleanup on readonly fs [ 38.189994][ T5083] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.53: iget: bad i_size value: 12154761577498 [ 38.190015][ T5083] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.192572][ T5083] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.53: couldn't read orphan inode 13 (err -117) [ 38.192601][ T5083] loop2: lost filesystem error report for type 5 error -117 [ 38.194588][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 38.194608][ C0] EXT4-fs (loop2): initial error at time 38: ext4_orphan_get:1399: inode 13 [ 38.194645][ C0] EXT4-fs (loop2): last error at time 38: ext4_orphan_get:1404 [ 38.206057][ T5083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 38.235932][ T5083] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.53: lblock 0 mapped to illegal pblock 3 (length 1) [ 38.239247][ T5083] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.53: error -EUCLEAN reading directory block [ 38.243635][ T5083] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.53: lblock 0 mapped to illegal pblock 3 (length 1) [ 38.247332][ T5083] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.53: error -EUCLEAN reading directory block [ 38.264183][ T4728] Bluetooth: hci1: command tx timeout [ 38.264229][ T4728] Bluetooth: hci0: command tx timeout [ 38.264256][ T4728] Bluetooth: hci4: command tx timeout [ 38.264275][ T4728] Bluetooth: hci2: command tx timeout [ 38.264291][ T4728] Bluetooth: hci3: command tx timeout [ 38.275652][ T5089] x_tables: duplicate underflow at hook 1 [ 38.336490][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.353215][ T5093] loop1: detected capacity change from 0 to 512 [ 38.366807][ T5095] loop2: detected capacity change from 0 to 8 [ 38.370591][ T5095] Major/Minor mismatch, trying to mount newer 5.0 filesystem [ 38.372472][ T5095] Please update your kernel [ 38.375438][ T5093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.412482][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.463914][ T5104] capability: warning: `syz.0.60' uses deprecated v2 capabilities in a way that may be insecure [ 38.570124][ T5116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.65'. [ 38.570183][ T5118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.65'. [ 38.581021][ T5121] Zero length message leads to an empty skb [ 38.602850][ T5125] loop2: detected capacity change from 0 to 512 [ 38.617960][ T5125] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 38.617990][ T5125] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 38.618046][ T5125] System zones: 1-12 [ 38.618158][ T5125] EXT4-fs (loop2): orphan cleanup on readonly fs [ 38.624268][ T5125] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.67: iget: bad i_size value: 12154761577498 [ 38.624311][ T5125] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.624730][ T5125] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.67: couldn't read orphan inode 13 (err -117) [ 38.631434][ T5125] loop2: lost filesystem error report for type 5 error -117 [ 38.634571][ T5125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 38.654781][ T5125] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.67: lblock 0 mapped to illegal pblock 3 (length 1) [ 38.657781][ T5125] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.67: error -EUCLEAN reading directory block [ 38.660513][ T5125] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.67: lblock 0 mapped to illegal pblock 3 (length 1) [ 38.663935][ T5125] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.67: error -EUCLEAN reading directory block [ 38.696225][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 38.726539][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.748216][ T5130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.772598][ T5134] EXT4-fs: inline encryption not supported [ 38.772640][ T5134] ext4: Unknown parameter 'fsuuid' [ 38.801380][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.807341][ T5134] evm: overlay not supported [ 38.924741][ T5141] tipc: Started in network mode [ 38.924785][ T5141] tipc: Node identity 4, cluster identity 4711 [ 38.924806][ T5141] tipc: Node number set to 4 [ 39.138914][ T5142] EXT4-fs: Ignoring removed bh option [ 39.148836][ T5142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.165774][ T4388] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 39.190953][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.215294][ T5146] fido_id[5146]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.308179][ T5156] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.311335][ T5156] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.317590][ T5156] EXT4-fs (loop1): 1 truncate cleaned up [ 39.318210][ T5156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.343129][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.419991][ T5164] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.433415][ T5164] EXT4-fs error (device loop1): __ext4_iget:5533: inode #11: block 2: comm syz.1.78: invalid block [ 39.433445][ T5164] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.435768][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 39.435784][ C0] EXT4-fs (loop1): initial error at time 39: __ext4_iget:5533: inode 11: block 2 [ 39.435810][ C0] EXT4-fs (loop1): last error at time 39: __ext4_iget:5533: inode 11: block 2 [ 39.444109][ T5164] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.78: couldn't read orphan inode 11 (err -117) [ 39.444143][ T5164] loop1: lost filesystem error report for type 5 error -117 [ 39.448862][ T5164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.544139][ T4729] Bluetooth: hci5: command 0xfc11 tx timeout [ 39.544214][ T4715] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 39.558743][ T5167] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 39.558771][ T5167] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 39.558824][ T5167] System zones: 1-12 [ 39.558958][ T5167] EXT4-fs (loop2): orphan cleanup on readonly fs [ 39.571145][ T5167] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.80: iget: bad i_size value: 12154761577498 [ 39.573935][ T5167] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 39.574061][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 39.574084][ C1] EXT4-fs (loop2): initial error at time 39: ext4_orphan_get:1399: inode 13 [ 39.574125][ C1] EXT4-fs (loop2): last error at time 39: ext4_orphan_get:1399: inode 13 [ 39.582387][ T5167] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.80: couldn't read orphan inode 13 (err -117) [ 39.582422][ T5167] loop2: lost filesystem error report for type 5 error -117 [ 39.588132][ T5167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 39.625941][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 39.628555][ T5167] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.80: lblock 0 mapped to illegal pblock 3 (length 1) [ 39.632481][ T5167] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.80: error -EUCLEAN reading directory block [ 39.667441][ T5184] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.679630][ T5184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.703344][ T5186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.709448][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.748580][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.760506][ T4715] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 39.813350][ T5202] overlayfs: failed to verify upper root origin [ 39.822152][ T5202] EXT4-fs: Ignoring removed bh option [ 39.824635][ T5202] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 39.828801][ T5202] EXT4-fs (loop0): 1 truncate cleaned up [ 39.830718][ T5202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.868126][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.020311][ T5226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.058599][ T5233] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 40.060453][ T5233] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 40.064296][ T5233] System zones: 1-12 [ 40.064463][ T5233] EXT4-fs (loop0): orphan cleanup on readonly fs [ 40.066754][ T5233] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #13: comm syz.0.94: iget: bad i_size value: 12154761577498 [ 40.069689][ T5233] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 40.073051][ T5233] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.94: couldn't read orphan inode 13 (err -117) [ 40.073092][ T5233] loop0: lost filesystem error report for type 5 error -117 [ 40.075273][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 40.075290][ C0] EXT4-fs (loop0): initial error at time 40: ext4_orphan_get:1399: inode 13 [ 40.075305][ C0] EXT4-fs (loop0): last error at time 40: ext4_orphan_get:1404 [ 40.082332][ T5233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.125189][ T5233] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 3: comm syz.0.94: lblock 0 mapped to illegal pblock 3 (length 1) [ 40.128440][ T5233] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.94: error -EUCLEAN reading directory block [ 40.207171][ T5239] tipc: Started in network mode [ 40.207307][ T5239] tipc: Node identity 4, cluster identity 4711 [ 40.207348][ T5239] tipc: Node number set to 4 [ 40.435927][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.485950][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.509131][ T5241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.537271][ T1319] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 40.538112][ T1319] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 40.538128][ T1319] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.538128][ T1319] [ 40.543968][ T1319] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 512 with max blocks 2048 with error 28 [ 40.543988][ T1319] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.543988][ T1319] [ 40.543998][ T1319] EXT4-fs (loop4): Total free blocks count 0 [ 40.544006][ T1319] EXT4-fs (loop4): Free/Dirty block details [ 40.546513][ T1319] EXT4-fs (loop4): free_blocks=0 [ 40.546538][ T1319] EXT4-fs (loop4): dirty_blocks=3600 [ 40.546545][ T1319] EXT4-fs (loop4): Block reservation details [ 40.555631][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.568924][ T4720] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 40.613778][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.640975][ T5253] netlink: 'syz.1.100': attribute type 4 has an invalid length. [ 40.641013][ T5253] __nla_validate_parse: 2 callbacks suppressed [ 40.641594][ T5253] netlink: 156 bytes leftover after parsing attributes in process `syz.1.100'. [ 40.642485][ T5253] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 40.759951][ T5269] FAT-fs (loop3): bogus number of FAT sectors [ 40.759997][ T5269] FAT-fs (loop3): Can't find a valid FAT filesystem [ 40.794519][ T5271] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 40.794553][ T5271] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 40.794609][ T5271] System zones: 1-12 [ 40.794734][ T5271] EXT4-fs (loop1): orphan cleanup on readonly fs [ 40.796600][ T5271] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.107: iget: bad i_size value: 12154761577498 [ 40.796620][ T5271] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 40.800763][ T5271] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.107: couldn't read orphan inode 13 (err -117) [ 40.800781][ T5271] loop1: lost filesystem error report for type 5 error -117 [ 40.804098][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 40.804116][ C0] EXT4-fs (loop1): initial error at time 40: ext4_orphan_get:1399: inode 13 [ 40.804132][ C0] EXT4-fs (loop1): last error at time 40: ext4_orphan_get:1404 [ 40.817003][ T5271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.844850][ T5271] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.107: lblock 0 mapped to illegal pblock 3 (length 1) [ 40.848118][ T5271] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.107: error -EUCLEAN reading directory block [ 40.907769][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.935675][ T5275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.105'. [ 40.956487][ T5277] EXT4-fs: Ignoring removed orlov option [ 40.960842][ T5277] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 40.960871][ T5277] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 40.960885][ T5277] EXT4-fs (loop1): group descriptors corrupted! [ 41.044811][ T5286] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.048119][ T5286] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.089101][ T5277] netlink: 'syz.1.108': attribute type 16 has an invalid length. [ 41.089134][ T5277] netlink: 'syz.1.108': attribute type 17 has an invalid length. [ 41.103509][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.103573][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.107094][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.107137][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.117847][ T5288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.135617][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.183189][ T5292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.112'. [ 41.186360][ T5295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.112'. [ 41.200649][ T5286] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 41.244772][ T5300] comedi comedi0: comedi_config --init_data is deprecated [ 41.345475][ T5307] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 41.347292][ T5307] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 41.348747][ T5307] System zones: 1-12 [ 41.349704][ T5307] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.351193][ T5307] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.118: iget: bad i_size value: 12154761577498 [ 41.353732][ T5307] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 41.353948][ T5307] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.118: couldn't read orphan inode 13 (err -117) [ 41.355915][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 41.355930][ C0] EXT4-fs (loop1): initial error at time 41: ext4_orphan_get:1399: inode 13 [ 41.355946][ C0] EXT4-fs (loop1): last error at time 41: ext4_orphan_get:1399: inode 13 [ 41.363024][ T5309] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.366016][ T5307] loop1: lost filesystem error report for type 5 error -117 [ 41.369181][ T5307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 41.372814][ T5309] EXT4-fs (loop3): Test dummy encryption mode enabled [ 41.383675][ T5309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.401727][ T5309] macvtap1: entered promiscuous mode [ 41.402962][ T5309] vlan0: entered promiscuous mode [ 41.404235][ T5309] macvtap1: entered allmulticast mode [ 41.404434][ T5307] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.118: lblock 0 mapped to illegal pblock 3 (length 1) [ 41.404778][ T5307] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.118: error -EUCLEAN reading directory block [ 41.404965][ T5307] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.118: lblock 0 mapped to illegal pblock 3 (length 1) [ 41.405376][ T5307] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.118: error -EUCLEAN reading directory block [ 41.418010][ T5309] vlan0: entered allmulticast mode [ 41.419073][ T5309] veth0_vlan: entered allmulticast mode [ 41.434707][ T5309] macvtap2: entered promiscuous mode [ 41.434744][ T5309] macvtap2: entered allmulticast mode [ 41.436492][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.479094][ T5318] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 41.481798][ T5314] ±ÿ: renamed from lo (while UP) [ 41.510335][ T5322] netlink: 'syz.0.121': attribute type 2 has an invalid length. [ 41.823423][ T5328] netlink: 'syz.0.123': attribute type 1 has an invalid length. [ 41.831401][ T5328] bond1: entered promiscuous mode [ 41.832564][ T5328] bond1: entered allmulticast mode [ 41.833821][ T5328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.840059][ T5328] erspan1: entered allmulticast mode [ 41.843189][ T5328] bond1: (slave erspan1): making interface the new active one [ 41.844285][ T5328] erspan1: entered promiscuous mode [ 41.846009][ T5328] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 41.865645][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.915565][ T5334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 41.945057][ T5334] bond1 (unregistering): (slave erspan1): Releasing active interface [ 41.947985][ T5334] erspan1: left promiscuous mode [ 41.955280][ T5338] set_capacity_and_notify: 20 callbacks suppressed [ 41.955318][ T5338] loop2: detected capacity change from 0 to 4096 [ 41.974167][ T5334] bond1 (unregistering): Released all slaves [ 42.074707][ T5350] netlink: 'syz.0.130': attribute type 13 has an invalid length. [ 42.118729][ T5352] loop4: detected capacity change from 0 to 512 [ 42.147632][ T5352] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 42.147668][ T5352] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 42.147721][ T5352] System zones: 1-12 [ 42.147839][ T5352] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.148090][ T5352] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.131: iget: bad i_size value: 12154761577498 [ 42.148116][ T5352] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 42.148356][ T5352] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.131: couldn't read orphan inode 13 (err -117) [ 42.148380][ T5352] loop4: lost filesystem error report for type 5 error -117 [ 42.154063][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 42.154075][ C1] EXT4-fs (loop4): initial error at time 42: ext4_orphan_get:1399: inode 13 [ 42.154093][ C1] EXT4-fs (loop4): last error at time 42: ext4_orphan_get:1404 [ 42.155330][ T5352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 42.214525][ T5352] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 3: comm syz.4.131: lblock 0 mapped to illegal pblock 3 (length 1) [ 42.217762][ T5352] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.131: error -EUCLEAN reading directory block [ 42.217991][ T5352] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 3: comm syz.4.131: lblock 0 mapped to illegal pblock 3 (length 1) [ 42.227036][ T5352] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.131: error -EUCLEAN reading directory block [ 42.231494][ T5358] team0: Caught tx_queue_len zero misconfig [ 42.277805][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.307196][ T5363] 9p: Bad value for 'rfdno' [ 42.312015][ T5362] loop2: detected capacity change from 0 to 4096 [ 42.314693][ T5362] EXT4-fs: inline encryption not supported [ 42.314742][ T5362] ext4: Unknown parameter 'noacl' [ 42.370370][ T5363] netlink: 120 bytes leftover after parsing attributes in process `syz.3.134'. [ 42.370413][ T5363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.134'. [ 42.370424][ T5363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 42.379522][ T5363] loop3: detected capacity change from 0 to 512 [ 42.383463][ T5363] ext4: Unknown parameter 'noacl' [ 42.456744][ T5378] sock: sock_timestamping_bind_phc: sock not bind to device [ 42.458682][ T5358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.495411][ T5385] Injecting memory failure for pfn 0x12060d at process virtual address 0x201bd000 [ 42.499579][ T5385] Memory failure: 0x12060d: Sending SIGBUS to syz.4.140:5385 due to hardware memory corruption [ 42.499976][ T5385] Memory failure: 0x12060d: recovery action for dirty LRU page: Recovered [ 42.499992][ T5385] Injecting memory failure for pfn 0x12060c at process virtual address 0x201be000 [ 42.500041][ T5385] Memory failure: 0x12060c: Sending SIGBUS to syz.4.140:5385 due to hardware memory corruption [ 42.500059][ T5385] Memory failure: 0x12060c: recovery action for dirty LRU page: Recovered [ 42.500066][ T5385] Injecting memory failure for pfn 0x12060b at process virtual address 0x201bf000 [ 42.500093][ T5385] Memory failure: 0x12060b: Sending SIGBUS to syz.4.140:5385 due to hardware memory corruption [ 42.500109][ T5385] Memory failure: 0x12060b: recovery action for dirty LRU page: Recovered [ 42.559255][ T5358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.589676][ T5391] loop2: detected capacity change from 0 to 512 [ 42.596502][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 42.609819][ T5391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.610790][ T5387] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 42.619194][ T5387] bond1 (unregistering): Released all slaves [ 42.669920][ T5358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.763362][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.820185][ T5410] loop2: detected capacity change from 0 to 512 [ 42.822595][ T5358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.844902][ T5410] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 42.845926][ T5410] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 42.845974][ T5410] System zones: 1-12 [ 42.846077][ T5410] EXT4-fs (loop2): orphan cleanup on readonly fs [ 42.846326][ T5410] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.147: iget: bad i_size value: 12154761577498 [ 42.846341][ T5410] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 42.846521][ T5410] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.147: couldn't read orphan inode 13 (err -117) [ 42.846534][ T5410] loop2: lost filesystem error report for type 5 error -117 [ 42.847071][ T5410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 42.878407][ T5410] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.147: lblock 0 mapped to illegal pblock 3 (length 1) [ 42.880501][ T5410] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.147: error -EUCLEAN reading directory block [ 42.885319][ T5410] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.147: lblock 0 mapped to illegal pblock 3 (length 1) [ 42.887457][ T5410] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.147: error -EUCLEAN reading directory block [ 43.177583][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.235505][ T1319] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.235556][ T1319] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.235590][ T1319] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.235610][ T1319] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.270546][ T5419] netlink: 'syz.0.150': attribute type 64 has an invalid length. [ 43.270583][ T5419] netlink: 36 bytes leftover after parsing attributes in process `syz.0.150'. [ 43.272523][ T5419] openvswitch: netlink: Duplicate or invalid key (type 0). [ 43.272538][ T5419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 43.540361][ T5436] loop1: detected capacity change from 0 to 1024 [ 43.540662][ T5436] EXT4-fs: Ignoring removed i_version option [ 43.540710][ T5436] EXT4-fs: Ignoring removed bh option [ 43.542324][ T5436] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 43.578374][ T5436] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c028, mo2=0002] [ 43.578446][ T5436] System zones: 0-1, 3-12 [ 43.579004][ T5436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.586497][ T5436] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.605945][ T5443] loop3: detected capacity change from 0 to 512 [ 43.612154][ T5443] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 43.612199][ T5443] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 43.612268][ T5443] System zones: 1-12 [ 43.612386][ T5443] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.612915][ T5443] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.159: iget: bad i_size value: 12154761577498 [ 43.612933][ T5443] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 43.613363][ T5443] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.159: couldn't read orphan inode 13 (err -117) [ 43.613383][ T5443] loop3: lost filesystem error report for type 5 error -117 [ 43.615122][ T5443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.678802][ T5443] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 3: comm syz.3.159: lblock 0 mapped to illegal pblock 3 (length 1) [ 43.681795][ T5443] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.159: error -EUCLEAN reading directory block [ 43.761958][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.859129][ T5456] overlayfs: overlapping lowerdir path [ 43.983109][ T5473] cgroup: Unknown subsys name 'subj_user' [ 43.985765][ T5474] FAULT_INJECTION: forcing a failure. [ 43.985765][ T5474] name failslab, interval 1, probability 0, space 0, times 1 [ 43.988958][ T5474] CPU: 1 UID: 0 PID: 5474 Comm: syz.3.167 Not tainted syzkaller #0 PREEMPT [ 43.988975][ T5474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 43.988980][ T5474] Call trace: [ 43.988984][ T5474] show_stack+0x2c/0x3c (C) [ 43.989007][ T5474] __dump_stack+0x30/0x40 [ 43.989018][ T5474] dump_stack_lvl+0xd8/0x12c [ 43.989030][ T5474] dump_stack+0x1c/0x28 [ 43.989040][ T5474] should_fail_ex+0x41c/0x590 [ 43.989049][ T5474] should_failslab+0xc4/0x120 [ 43.989057][ T5474] kmem_cache_alloc_noprof+0x94/0x5d8 [ 43.989066][ T5474] taskstats_exit+0x30c/0x89c [ 43.989075][ T5474] do_exit+0x50c/0x1a74 [ 43.989086][ T5474] do_group_exit+0x198/0x238 [ 43.989092][ T5474] get_signal+0xfb0/0x1094 [ 43.989100][ T5474] arch_do_signal_or_restart+0x288/0x444c [ 43.989110][ T5474] exit_to_user_mode_loop+0x70/0x17c [ 43.989119][ T5474] el0_svc+0x18c/0x260 [ 43.989129][ T5474] el0t_64_sync_handler+0x44/0x104 [ 43.989137][ T5474] el0t_64_sync+0x198/0x19c [ 44.011342][ T5477] loop3: detected capacity change from 0 to 128 [ 44.015640][ T5477] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.532851][ T5504] netlink: 'syz.2.171': attribute type 8 has an invalid length. [ 44.541999][ T5504] veth1_to_team: entered promiscuous mode [ 44.547847][ T5504] gretap0: entered promiscuous mode [ 44.549233][ T5504] veth1_to_team: left promiscuous mode [ 44.553338][ T5504] gretap0: left promiscuous mode [ 44.803228][ T5527] nvmet: adding nsid 1 to subsystem testnqn [ 44.863309][ T5527] nvmet: failed to open block device (null): (-22) [ 44.966013][ T4713] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.686967][ T5609] __nla_validate_parse: 4 callbacks suppressed [ 45.687263][ T5609] netlink: 36 bytes leftover after parsing attributes in process `syz.1.190'. [ 45.764340][ T5620] loop1: detected capacity change from 0 to 512 [ 45.768974][ T5620] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 45.770933][ T5620] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 45.772811][ T5620] System zones: 1-12 [ 45.772954][ T5620] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.772995][ T5620] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.194: iget: bad i_size value: 12154761577498 [ 45.773019][ T5620] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 45.774060][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 45.774075][ C1] EXT4-fs (loop1): initial error at time 45: ext4_orphan_get:1399: inode 13 [ 45.774091][ C1] EXT4-fs (loop1): last error at time 45: ext4_orphan_get:1399: inode 13 [ 45.789490][ T5620] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.194: couldn't read orphan inode 13 (err -117) [ 45.789527][ T5620] loop1: lost filesystem error report for type 5 error -117 [ 45.800897][ T5620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 45.849060][ T5620] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.194: lblock 0 mapped to illegal pblock 3 (length 1) [ 45.851006][ T5620] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.194: error -EUCLEAN reading directory block [ 45.851332][ T5620] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.194: lblock 0 mapped to illegal pblock 3 (length 1) [ 45.855676][ T5620] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.194: error -EUCLEAN reading directory block [ 45.921854][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.962577][ T5624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 46.147153][ T5632] sctp: [Deprecated]: syz.2.199 (pid 5632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 46.147153][ T5632] Use struct sctp_sack_info instead [ 46.322333][ T5644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.202'. [ 46.453396][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 46.525600][ T5658] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 46.525634][ T5658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 46.525686][ T5658] System zones: 1-12 [ 46.525806][ T5658] EXT4-fs (loop1): orphan cleanup on readonly fs [ 46.530803][ T5658] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.207: iget: bad i_size value: 12154761577498 [ 46.530840][ T5658] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 46.533259][ T5659] journal_path: Non-blockdev passed as './file1' [ 46.533277][ T5659] EXT4-fs: error: could not find journal device path [ 46.535318][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 46.535333][ C1] EXT4-fs (loop1): initial error at time 46: ext4_orphan_get:1399: inode 13 [ 46.535354][ C1] EXT4-fs (loop1): last error at time 46: ext4_orphan_get:1399: inode 13 [ 46.555291][ T5658] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.207: couldn't read orphan inode 13 (err -117) [ 46.555332][ T5658] loop1: lost filesystem error report for type 5 error -117 [ 46.557189][ T5662] fuse: fd is not a fuse device [ 46.562024][ T5662] netlink: 'syz.2.209': attribute type 1 has an invalid length. [ 46.562057][ T5662] netlink: 'syz.2.209': attribute type 2 has an invalid length. [ 46.594375][ T5658] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.207: lblock 0 mapped to illegal pblock 3 (length 1) [ 46.599063][ T5658] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.207: error -EUCLEAN reading directory block [ 46.599376][ T5658] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.207: lblock 0 mapped to illegal pblock 3 (length 1) [ 46.599552][ T5658] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.207: error -EUCLEAN reading directory block [ 46.738739][ T5612] Set syz1 is full, maxelem 65536 reached [ 46.782688][ T5683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 46.782725][ T5683] netlink: 14 bytes leftover after parsing attributes in process `syz.2.215'. [ 47.096577][ T5717] Bluetooth: ISO socket layer initialized [ 47.113373][ T5726] set_capacity_and_notify: 5 callbacks suppressed [ 47.113408][ T5726] loop0: detected capacity change from 0 to 256 [ 47.121524][ T5727] syz.0.227: attempt to access beyond end of device [ 47.121524][ T5727] loop0: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 47.121611][ T5727] syz.0.227: attempt to access beyond end of device [ 47.121611][ T5727] loop0: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 47.121646][ T5727] syz.0.227: attempt to access beyond end of device [ 47.121646][ T5727] loop0: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 47.121678][ T5727] syz.0.227: attempt to access beyond end of device [ 47.121678][ T5727] loop0: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 47.121709][ T5727] syz.0.227: attempt to access beyond end of device [ 47.121709][ T5727] loop0: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 47.121738][ T5727] syz.0.227: attempt to access beyond end of device [ 47.121738][ T5727] loop0: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 47.121767][ T5727] syz.0.227: attempt to access beyond end of device [ 47.121767][ T5727] loop0: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 47.121795][ T5727] syz.0.227: attempt to access beyond end of device [ 47.121795][ T5727] loop0: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 47.121823][ T5727] syz.0.227: attempt to access beyond end of device [ 47.121823][ T5727] loop0: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 47.121851][ T5727] syz.0.227: attempt to access beyond end of device [ 47.121851][ T5727] loop0: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 47.222612][ T5730] xt_l2tp: missing protocol rule (udp|l2tpip) [ 47.236550][ T4715] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 47.236607][ T4715] Bluetooth: hci3: Injecting HCI hardware error event [ 47.237225][ T4729] Bluetooth: hci3: hardware error 0x00 [ 47.435189][ T5746] loop0: detected capacity change from 0 to 1024 [ 47.438525][ T5746] EXT4-fs: Ignoring removed bh option [ 47.467941][ T5746] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 47.492525][ T4719] EXT4-fs error (device loop0): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /55/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 47.499559][ T4719] EXT4-fs (loop0): Remounting filesystem read-only [ 47.670568][ T5760] netlink: 'syz.3.236': attribute type 10 has an invalid length. [ 47.689317][ T5760] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 48.029918][ T5772] loop1: detected capacity change from 0 to 512 [ 48.031840][ T5772] EXT4-fs: Ignoring removed bh option [ 48.033310][ T5772] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.037376][ T5772] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 48.040505][ T5772] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 48.040627][ T5772] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.045877][ T5772] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4 [ 48.049491][ T5772] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 48.052359][ T5772] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.242: Failed to acquire dquot type 1 [ 48.057138][ T5772] loop1: lost filesystem error report for type 5 error -5 [ 48.057708][ T5772] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.242: Invalid block bitmap block 0 in block_group 0 [ 48.062205][ T5772] loop1: lost filesystem error report for type 5 error -117 [ 48.064065][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 48.064097][ C1] EXT4-fs (loop1): last error at time 48: ext4_read_block_bitmap_nowait:483 [ 48.069810][ T5772] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.242: Invalid block bitmap block 0 in block_group 0 [ 48.073497][ T5772] loop1: lost filesystem error report for type 5 error -117 [ 48.075497][ T5778] x_tables: ip6_tables: time.0 match: invalid size 24 (kernel) != (user) 32 [ 48.083179][ T5772] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.242: Invalid block bitmap block 0 in block_group 0 [ 48.083231][ T5772] loop1: lost filesystem error report for type 5 error -117 [ 48.086659][ T5772] Quota error (device loop1): write_blk: dquota write failed [ 48.087154][ T5772] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 48.087194][ T5772] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.242: Failed to acquire dquot type 1 [ 48.087211][ T5772] loop1: lost filesystem error report for type 5 error -28 [ 48.094772][ T5772] Quota error (device loop1): write_blk: dquota write failed [ 48.094818][ T5772] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 48.094836][ T5772] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.242: Failed to acquire dquot type 1 [ 48.094847][ T5772] loop1: lost filesystem error report for type 5 error -28 [ 48.101879][ T5772] EXT4-fs (loop1): 1 orphan inode deleted [ 48.115916][ T5772] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.242: deleted inode referenced: 12 [ 48.190942][ T5791] IPv6: addrconf: prefix option has invalid lifetime [ 48.227602][ T5784] input: syz1 as /devices/virtual/input/input4 [ 48.263128][ T5784] loop4: detected capacity change from 0 to 1024 [ 48.263591][ T5784] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.263875][ T5784] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.266988][ T5784] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 48.267019][ T5784] System zones: 0-1, 3-36 [ 48.337851][ T5802] loop0: detected capacity change from 0 to 512 [ 48.338233][ T5802] EXT4-fs: Ignoring removed bh option [ 48.347751][ T5802] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 48.347816][ T5802] System zones: 0-2, 18-18, 34-35 [ 48.360024][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 48.360064][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'. [ 48.360082][ T5802] netlink: 'syz.0.252': attribute type 14 has an invalid length. [ 48.360092][ T5802] netlink: 'syz.0.252': attribute type 13 has an invalid length. [ 49.083097][ T5821] loop1: detected capacity change from 0 to 512 [ 49.083504][ T5821] EXT4-fs: Ignoring removed i_version option [ 49.083547][ T5821] EXT4-fs: Ignoring removed bh option [ 49.102214][ T5821] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.257: inode #13: comm syz.1.257: iget: illegal inode # [ 49.102259][ T5821] loop1: lost filesystem error report for type 5 error -117 [ 49.104961][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 49.104975][ C1] EXT4-fs (loop1): initial error at time 49: ext4_orphan_get:1399 [ 49.104989][ C1] EXT4-fs (loop1): last error at time 49: ext4_orphan_get:1399 [ 49.107954][ T5823] vlan2: entered allmulticast mode [ 49.107966][ T5823] veth0_vlan: entered allmulticast mode [ 49.112513][ T5821] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.257: couldn't read orphan inode 13 (err -117) [ 49.112548][ T5821] loop1: lost filesystem error report for type 5 error -117 [ 49.177642][ T5838] netlink: 'syz.1.260': attribute type 8 has an invalid length. [ 49.188253][ T5842] FAULT_INJECTION: forcing a failure. [ 49.188253][ T5842] name failslab, interval 1, probability 0, space 0, times 0 [ 49.191105][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: syz.0.261 Not tainted syzkaller #0 PREEMPT [ 49.191129][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 49.191135][ T5842] Call trace: [ 49.191140][ T5842] show_stack+0x2c/0x3c (C) [ 49.191166][ T5842] __dump_stack+0x30/0x40 [ 49.191185][ T5842] dump_stack_lvl+0xd8/0x12c [ 49.191197][ T5842] dump_stack+0x1c/0x28 [ 49.191209][ T5842] should_fail_ex+0x41c/0x590 [ 49.191222][ T5842] should_failslab+0xc4/0x120 [ 49.191232][ T5842] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 49.191242][ T5842] __alloc_skb+0x1f0/0x610 [ 49.191253][ T5842] sctp_packet_transmit+0x230/0x248c [ 49.191265][ T5842] sctp_packet_singleton+0x1d8/0x398 [ 49.191276][ T5842] sctp_outq_flush+0x400/0x26bc [ 49.191286][ T5842] sctp_outq_uncork+0x84/0xc0 [ 49.191295][ T5842] sctp_do_sm+0x3ebc/0x4570 [ 49.191304][ T5842] sctp_primitive_ASSOCIATE+0x98/0xcc [ 49.191312][ T5842] sctp_sendmsg_to_asoc+0xf9c/0x13c0 [ 49.191321][ T5842] sctp_sendmsg+0xc70/0x17bc [ 49.191330][ T5842] inet_sendmsg+0xb4/0xd8 [ 49.191339][ T5842] __sock_sendmsg+0xc8/0x17c [ 49.191347][ T5842] __sys_sendto+0x250/0x328 [ 49.191356][ T5842] __arm64_sys_sendto+0xec/0x10c [ 49.191365][ T5842] invoke_syscall+0x98/0x244 [ 49.191375][ T5842] el0_svc_common+0xec/0x23c [ 49.191385][ T5842] do_el0_svc+0x4c/0x5c [ 49.191394][ T5842] el0_svc+0x64/0x260 [ 49.191403][ T5842] el0t_64_sync_handler+0x44/0x104 [ 49.191411][ T5842] el0t_64_sync+0x198/0x19c [ 49.301382][ T5855] loop4: detected capacity change from 0 to 1024 [ 49.301782][ T5855] EXT4-fs: Ignoring removed orlov option [ 49.315434][ T5855] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 49.339857][ T5859] loop3: detected capacity change from 0 to 256 [ 49.350868][ T5859] warning: `syz.3.268' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.384934][ T4729] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 49.400275][ T5868] loop0: detected capacity change from 0 to 512 [ 49.400848][ T5868] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.420869][ T5868] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.522345][ T5883] autofs: Bad value for 'fd' [ 50.167839][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.170034][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.215497][ T5867] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.217778][ T5867] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.222031][ T5867] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.224698][ T5867] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.226046][ T5867] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.229638][ T5867] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.231607][ T5867] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.232846][ T5867] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.236674][ T5867] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.239323][ T5867] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 50.240065][ T5867] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 50.244394][ T5867] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 50.307334][ T5910] loop1: detected capacity change from 0 to 512 [ 50.317391][ T5911] fuse: fd is not a fuse device [ 50.360148][ T5913] mmap: syz.4.283 (5913) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.378352][ T5915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.399074][ T5917] binder: 5916:5917 ioctl c0306201 20000080 returned -14 [ 50.401119][ T5917] binder: 5916:5917 tried to acquire reference to desc 0, got 1 instead [ 50.401339][ T5917] binder: 5916:5917 ioctl c0306201 200003c0 returned -14 [ 50.401678][ T5917] binder: 5916:5917 parent offset not aligned correctly. [ 50.401707][ T5917] binder: 5917:5916 translate fd array failed [ 50.401824][ T5917] binder: 5916:5917 transaction call to 5916:0 failed 5/29201/-22, code 0 size 96-24 line 3664 [ 50.402077][ T1054] binder: undelivered TRANSACTION_ERROR: 29201 [ 50.684630][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 50.870225][ T5946] process 'syz.3.294' launched './file1' with NULL argv: empty string added [ 50.945121][ T5948] netlink: 56 bytes leftover after parsing attributes in process `syz.3.295'. [ 51.222084][ T5969] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.222127][ T5969] EXT4-fs (loop1): unsupported descriptor size 0 [ 51.464341][ T4729] Bluetooth: hci0: command 0x0c1a tx timeout [ 51.557874][ T5981] EXT4-fs warning (device loop3): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 51.611149][ T5985] FAT-fs (loop3): bogus sectors per cluster 223 [ 51.611193][ T5985] FAT-fs (loop3): Can't find a valid FAT filesystem [ 51.660568][ T5990] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 51.660645][ T5990] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 51.660661][ T5990] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.309: Failed to acquire dquot type 1 [ 51.660672][ T5990] loop3: lost filesystem error report for type 5 error -117 [ 51.662983][ T5990] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 51.663023][ T5990] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 51.663034][ T5990] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.309: Failed to acquire dquot type 1 [ 51.663044][ T5990] loop3: lost filesystem error report for type 5 error -117 [ 51.664066][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 51.664079][ C1] EXT4-fs (loop3): last error at time 51: ext4_acquire_dquot:7041 [ 51.675258][ T5990] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.309: bg 0: block 248: padding at end of block bitmap is not set [ 51.675280][ T5990] loop3: lost filesystem error report for type 5 error -117 [ 51.677648][ T5990] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 51.677663][ T5990] loop3: lost filesystem error report for type 5 error -117 [ 51.678015][ T5990] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.309: Failed to acquire dquot type 1 [ 51.678027][ T5990] loop3: lost filesystem error report for type 5 error -117 [ 51.678621][ T5990] EXT4-fs (loop3): 1 orphan inode deleted [ 51.702237][ T4729] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 52.121050][ T12] wlan1: Trigger new scan to find an IBSS to join [ 52.265010][ T4718] Bluetooth: hci1: command 0x0c1a tx timeout [ 52.272414][ T4728] Bluetooth: hci2: command 0x0c1a tx timeout [ 52.281818][ T4715] Bluetooth: hci4: command 0x0c1a tx timeout [ 52.428329][ T6024] FAT-fs (nbd1): unable to read boot sector [ 52.453603][ T6028] set_capacity_and_notify: 8 callbacks suppressed [ 52.455161][ T6028] loop1: detected capacity change from 0 to 128 [ 52.456835][ T6028] ext4: Unknown parameter 'fsname' [ 52.470141][ T4703] udevd[4703]: incorrect ext4 checksum on /dev/loop1 [ 52.544745][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 52.551050][ T6028] Injecting memory failure for pfn 0x13c6e6 at process virtual address 0x20276000 [ 52.560780][ T6028] Memory failure: 0x13c6e6: keeping poisoned page in swap cache [ 52.561062][ T6028] Memory failure: 0x13c6e6: recovery action for clean swapcache page: Recovered [ 52.561094][ T6028] Injecting memory failure for pfn 0x13c6e5 at process virtual address 0x20277000 [ 52.561127][ T6028] Memory failure: 0x13c6e5: keeping poisoned page in swap cache [ 52.561150][ T6028] Memory failure: 0x13c6e5: recovery action for clean swapcache page: Recovered [ 53.554097][ T4715] Bluetooth: hci0: command 0x0c1a tx timeout [ 54.344156][ T4715] Bluetooth: hci4: command 0x0c1a tx timeout [ 54.344199][ T4715] Bluetooth: hci1: command 0x0c1a tx timeout [ 54.344233][ T4715] Bluetooth: hci2: command 0x0c1a tx timeout [ 54.901533][ T6074] netlink: 128 bytes leftover after parsing attributes in process `syz.4.332'. [ 54.946717][ T6078] FAULT_INJECTION: forcing a failure. [ 54.946717][ T6078] name failslab, interval 1, probability 0, space 0, times 0 [ 54.946762][ T6078] CPU: 1 UID: 0 PID: 6078 Comm: syz.2.333 Not tainted syzkaller #0 PREEMPT [ 54.946780][ T6078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 54.946786][ T6078] Call trace: [ 54.946790][ T6078] show_stack+0x2c/0x3c (C) [ 54.946811][ T6078] __dump_stack+0x30/0x40 [ 54.946822][ T6078] dump_stack_lvl+0xd8/0x12c [ 54.946832][ T6078] dump_stack+0x1c/0x28 [ 54.946842][ T6078] should_fail_ex+0x41c/0x590 [ 54.946850][ T6078] should_failslab+0xc4/0x120 [ 54.946858][ T6078] __kmalloc_noprof+0x108/0x6b8 [ 54.946867][ T6078] security_prepare_creds+0x60/0x35c [ 54.946876][ T6078] prepare_creds+0x500/0x7d0 [ 54.946886][ T6078] lookup_user_key+0x284/0xd4c [ 54.946894][ T6078] __arm64_sys_add_key+0x34c/0x43c [ 54.946901][ T6078] invoke_syscall+0x98/0x244 [ 54.946911][ T6078] el0_svc_common+0xec/0x23c [ 54.946921][ T6078] do_el0_svc+0x4c/0x5c [ 54.946930][ T6078] el0_svc+0x64/0x260 [ 54.946939][ T6078] el0t_64_sync_handler+0x44/0x104 [ 54.946948][ T6078] el0t_64_sync+0x198/0x19c [ 55.080916][ T6093] xt_hashlimit: size too large, truncated to 1048576 [ 55.602500][ T6112] loop3: detected capacity change from 0 to 256 [ 55.610553][ T6113] loop3: detected capacity change from 0 to 512 [ 55.624904][ T4715] Bluetooth: hci0: command 0x0c1a tx timeout [ 55.626513][ T6113] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 55.633201][ T6113] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 55.633258][ T6113] EXT4-fs (loop3): failed to initialize system zone (-117) [ 55.633938][ T6113] EXT4-fs (loop3): mount failed [ 55.835818][ T6131] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 55.890840][ T6132] netlink: 44 bytes leftover after parsing attributes in process `syz.3.352'. [ 55.895358][ T6135] loop3: detected capacity change from 0 to 256 [ 56.092946][ T6151] loop4: detected capacity change from 0 to 512 [ 56.108674][ T6151] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 56.108717][ T6151] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 56.108782][ T6151] System zones: 1-12 [ 56.108912][ T6151] EXT4-fs (loop4): orphan cleanup on readonly fs [ 56.115367][ T6151] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.354: iget: bad i_size value: 12154761577498 [ 56.115406][ T6151] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 56.120563][ T6151] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.354: couldn't read orphan inode 13 (err -117) [ 56.120606][ T6151] loop4: lost filesystem error report for type 5 error -117 [ 56.131123][ T6154] netlink: 'syz.2.357': attribute type 10 has an invalid length. [ 56.146374][ T6154] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.151338][ T6154] bond0: (slave team0): Enslaving as an active interface with an up link [ 56.208796][ T6158] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 3: comm syz.4.354: lblock 0 mapped to illegal pblock 3 (length 1) [ 56.212185][ T6158] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.354: error -EUCLEAN reading directory block [ 56.217028][ T6158] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 3: comm syz.4.354: lblock 0 mapped to illegal pblock 3 (length 1) [ 56.220609][ T6158] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.354: error -EUCLEAN reading directory block [ 56.285088][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 56.343348][ T6164] loop1: detected capacity change from 0 to 512 [ 56.346453][ T6164] vfat: Unknown parameter 'i737' [ 56.424303][ T4715] Bluetooth: hci1: command 0x0c1a tx timeout [ 56.424347][ T4715] Bluetooth: hci2: command 0x0c1a tx timeout [ 56.424377][ T4715] Bluetooth: hci4: command 0x0c1a tx timeout [ 56.629410][ T6168] futex_wake_op: syz.2.362 tries to shift op by 32; fix this program [ 56.652950][ T6170] fuse: Unknown parameter 'pC½"Tñ]ߟÙÛ­ù40x0000000000000003' [ 56.832999][ T6176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.361'. [ 56.879893][ T6181] netlink: 'syz.2.365': attribute type 11 has an invalid length. [ 57.902387][ T6190] loop1: detected capacity change from 0 to 1024 [ 57.980177][ T6202] syz_tun: entered allmulticast mode [ 58.002015][ T6202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.373'. [ 58.002373][ T6203] netlink: 48 bytes leftover after parsing attributes in process `syz.0.373'. [ 58.002785][ T6202] netlink: 48 bytes leftover after parsing attributes in process `syz.0.373'. [ 58.299268][ T40] wlan1: Trigger new scan to find an IBSS to join [ 58.315450][ T6208] loop3: detected capacity change from 0 to 512 [ 58.315810][ T6208] EXT4-fs: Ignoring removed bh option [ 58.315839][ T6208] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.320151][ T6208] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 58.326724][ T6208] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 58.326849][ T6208] EXT4-fs (loop3): orphan cleanup on readonly fs [ 58.329983][ T6208] __quota_error: 4 callbacks suppressed [ 58.330003][ T6208] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 58.330038][ T6208] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 58.330075][ T6208] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.371: Failed to acquire dquot type 1 [ 58.330091][ T6208] loop3: lost filesystem error report for type 5 error -5 [ 58.334881][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 58.334896][ C0] EXT4-fs (loop3): last error at time 58: ext4_acquire_dquot:7041 [ 58.342326][ T6201] syz_tun: left allmulticast mode [ 58.345579][ T6208] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.371: Invalid block bitmap block 0 in block_group 0 [ 58.345613][ T6208] loop3: lost filesystem error report for type 5 error -117 [ 58.348334][ T6208] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.371: Invalid block bitmap block 0 in block_group 0 [ 58.348359][ T6208] loop3: lost filesystem error report for type 5 error -117 [ 58.352479][ T6208] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.371: Invalid block bitmap block 0 in block_group 0 [ 58.352506][ T6208] loop3: lost filesystem error report for type 5 error -117 [ 58.356888][ T6208] Quota error (device loop3): write_blk: dquota write failed [ 58.356934][ T6208] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 58.356955][ T6208] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.371: Failed to acquire dquot type 1 [ 58.356970][ T6208] loop3: lost filesystem error report for type 5 error -28 [ 58.363632][ T6208] Quota error (device loop3): write_blk: dquota write failed [ 58.363674][ T6208] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 58.363693][ T6208] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.371: Failed to acquire dquot type 1 [ 58.363709][ T6208] loop3: lost filesystem error report for type 5 error -28 [ 58.363892][ T6208] EXT4-fs (loop3): 1 orphan inode deleted [ 58.487277][ T6220] netlink: 'syz.1.375': attribute type 13 has an invalid length. [ 58.504142][ T4729] Bluetooth: hci4: command 0x0c1a tx timeout [ 58.621737][ T6223] netlink: 'syz.0.376': attribute type 4 has an invalid length. [ 58.846187][ T6224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.888434][ T6226] loop3: detected capacity change from 0 to 256 [ 58.902975][ T6228] loop4: detected capacity change from 0 to 128 [ 58.962863][ T6228] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 58.962921][ T6228] System zones: 1-3, 19-19, 35-36 [ 58.972185][ T6228] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 3391 (only 1 groups) [ 58.979009][ T6228] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 3391 (only 1 groups) [ 59.095748][ T6238] overlay: filesystem on ./bus not supported [ 59.595565][ T1265] wlan1: Creating new IBSS network, BSSID 6a:b1:e5:93:81:61 [ 59.760716][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'. [ 59.763556][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'. [ 59.766663][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'. [ 59.766694][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'. [ 59.766756][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'. [ 59.775474][ T6243] fuse: Bad value for 'fd' [ 60.119157][ T6259] loop3: detected capacity change from 0 to 2048 [ 60.526429][ T6277] netlink: 'syz.3.394': attribute type 1 has an invalid length. [ 60.526466][ T6277] netlink: 'syz.3.394': attribute type 1 has an invalid length. [ 60.532181][ T6278] loop3: detected capacity change from 0 to 512 [ 60.538437][ T6278] EXT4-fs: Ignoring removed i_version option [ 60.543667][ T6278] EXT4-fs (loop3): failed to initialize system zone (-117) [ 60.546729][ T6278] EXT4-fs (loop3): mount failed [ 60.579952][ T6282] trusted_key: encrypted_key: insufficient parameters specified [ 60.647441][ T6286] FAULT_INJECTION: forcing a failure. [ 60.647441][ T6286] name failslab, interval 1, probability 0, space 0, times 0 [ 60.647478][ T6286] CPU: 0 UID: 0 PID: 6286 Comm: syz.3.397 Tainted: G L syzkaller #0 PREEMPT [ 60.647493][ T6286] Tainted: [L]=SOFTLOCKUP [ 60.647497][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 60.647503][ T6286] Call trace: [ 60.647507][ T6286] show_stack+0x2c/0x3c (C) [ 60.647529][ T6286] __dump_stack+0x30/0x40 [ 60.647542][ T6286] dump_stack_lvl+0xd8/0x12c [ 60.647552][ T6286] dump_stack+0x1c/0x28 [ 60.647562][ T6286] should_fail_ex+0x41c/0x590 [ 60.647570][ T6286] should_failslab+0xc4/0x120 [ 60.647580][ T6286] __kmalloc_cache_noprof+0x94/0x5ec [ 60.647592][ T6286] shrinker_alloc+0x68/0x97c [ 60.647602][ T6286] sget_fc+0xb78/0x13e8 [ 60.647611][ T6286] vfs_get_super+0x40/0x148 [ 60.647619][ T6286] get_tree_nodev+0x2c/0x3c [ 60.647627][ T6286] proc_get_tree+0x28/0x38 [ 60.647638][ T6286] vfs_get_tree+0x90/0x28c [ 60.647646][ T6286] fc_mount+0x24/0xac [ 60.647654][ T6286] do_new_mount+0x2a4/0x538 [ 60.647663][ T6286] path_mount+0x5f0/0xa88 [ 60.647671][ T6286] do_mount+0xe8/0x148 [ 60.647680][ T6286] __arm64_sys_mount+0x33c/0x388 [ 60.647689][ T6286] invoke_syscall+0x98/0x244 [ 60.647699][ T6286] el0_svc_common+0xec/0x23c [ 60.647709][ T6286] do_el0_svc+0x4c/0x5c [ 60.647718][ T6286] el0_svc+0x64/0x260 [ 60.647727][ T6286] el0t_64_sync_handler+0x44/0x104 [ 60.647736][ T6286] el0t_64_sync+0x198/0x19c [ 60.751697][ T6296] loop1: detected capacity change from 0 to 512 [ 60.780819][ T6299] netlink: 'syz.3.403': attribute type 22 has an invalid length. [ 60.787058][ T6299] netlink: 'syz.3.403': attribute type 22 has an invalid length. [ 60.790618][ T6299] loop3: detected capacity change from 0 to 512 [ 60.805027][ T14] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.807028][ T14] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.809831][ T14] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.811790][ T14] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.406964][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 61.407017][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 62.103834][ T6342] loop1: detected capacity change from 0 to 512 [ 62.123632][ T6345] loop3: detected capacity change from 0 to 512 [ 62.127802][ T6345] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.175622][ T6345] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.416: invalid indirect mapped block 4294967295 (level 0) [ 62.175687][ T6345] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 62.182999][ T6345] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.416: invalid indirect mapped block 4294967295 (level 1) [ 62.183061][ T6345] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 62.184124][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 62.184160][ C1] EXT4-fs (loop3): initial error at time 62: ext4_free_branches:1023: inode 16 [ 62.184240][ C1] EXT4-fs (loop3): last error at time 62: ext4_free_branches:1023: inode 16 [ 62.188081][ T6342] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.417: bg 0: block 184: padding at end of block bitmap is not set [ 62.188138][ T6342] loop1: lost filesystem error report for type 5 error -117 [ 62.192446][ T6342] EXT4-fs (loop1): Remounting filesystem read-only [ 62.193047][ T6342] EXT4-fs (loop1): 1 truncate cleaned up [ 62.198387][ T6345] EXT4-fs (loop3): 1 orphan inode deleted [ 62.198428][ T6345] EXT4-fs (loop3): 1 truncate cleaned up [ 62.365439][ T4947] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 62.365463][ T4947] Quota error (device loop1): write_blk: dquota write failed [ 62.365476][ T4947] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 62.365489][ T4947] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 62.365503][ T4947] Quota error (device loop1): write_blk: dquota write failed [ 62.365515][ T4947] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 62.365594][ T4947] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 62.753105][ T6361] binder: 6355:6361 tried to acquire reference to desc 0, got 1 instead [ 62.757529][ T6361] binder: 6355:6361 got transaction with invalid parent offset or type [ 62.760842][ T6361] binder: 6355:6361 transaction call to 6355:0 failed 11/29201/-22, code 0 size 96-24 line 3617 [ 62.810546][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.145452][ T6369] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 63.153704][ T6368] overlayfs: failed to resolve './cgroup': -2 [ 63.653636][ T6379] loop2: detected capacity change from 0 to 7 [ 64.510443][ T26] cfg80211: failed to load regulatory.db [ 64.518486][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.518592][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.572235][ T6379] Dev loop2: unable to read RDB block 7 [ 64.573019][ T6379] loop2: unable to read partition table [ 64.573254][ T6379] loop2: partition table beyond EOD, truncated [ 64.573309][ T6379] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 65.095045][ T6386] x_tables: duplicate underflow at hook 2 [ 65.690982][ T6399] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 65.878374][ T6399] loop1: detected capacity change from 0 to 4096 [ 65.896597][ T6399] EXT4-fs (loop1): unsupported descriptor size 320 [ 66.217562][ T6407] veth1_macvtap: left promiscuous mode [ 66.226849][ T4388] IPVS: starting estimator thread 0... [ 66.245592][ T4729] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 66.281243][ T6413] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 66.315994][ T6410] IPVS: using max 11 ests per chain, 26400 per kthread [ 67.324886][ T6448] fuse: fd is not a fuse device [ 67.593470][ T6465] __nla_validate_parse: 10 callbacks suppressed [ 67.593925][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 67.593948][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 67.665363][ T6456] loop3: detected capacity change from 0 to 8192 [ 67.713224][ T4403] veth1_macvtap: entered promiscuous mode [ 68.175454][ T6484] tipc: Started in network mode [ 68.175514][ T6484] tipc: Node identity 4, cluster identity 4711 [ 68.175559][ T6484] tipc: Node number set to 4 [ 68.251796][ T6491] netlink: 4660 bytes leftover after parsing attributes in process `syz.2.457'. [ 68.253718][ T6491] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 68.318639][ T6490] netlink: 'syz.0.455': attribute type 15 has an invalid length. [ 69.167916][ T6525] loop1: detected capacity change from 0 to 512 [ 69.211140][ T6525] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 69.211200][ T6525] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 69.211317][ T6525] System zones: 1-12 [ 69.211583][ T6525] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.212555][ T6525] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.463: iget: bad i_size value: 12154761577498 [ 69.212580][ T6525] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 69.213146][ T6525] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.463: couldn't read orphan inode 13 (err -117) [ 69.213165][ T6525] loop1: lost filesystem error report for type 5 error -117 [ 69.216079][ T6525] EXT4-fs mount: 38 callbacks suppressed [ 69.216095][ T6525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 69.286407][ T6535] Illegal XDP return value 4294967294 on prog (id 43) dev syz_tun, expect packet loss! [ 69.293839][ T6535] tipc: Enabling of bearer rejected, failed to enable media [ 69.340999][ T6539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 69.354971][ T6525] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.463: lblock 0 mapped to illegal pblock 3 (length 1) [ 69.355720][ T6525] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.463: error -EUCLEAN reading directory block [ 69.356334][ T6525] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.463: lblock 0 mapped to illegal pblock 3 (length 1) [ 69.356876][ T6525] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.463: error -EUCLEAN reading directory block [ 69.689396][ T6545] loop4: detected capacity change from 0 to 256 [ 69.895620][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.948030][ T6511] IPVS: Unknown mcast interface: pimreg [ 70.201931][ T6557] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 70.202014][ T6557] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 70.754653][ T6569] loop1: detected capacity change from 0 to 256 [ 70.776662][ T6569] FAT-fs (loop1): bogus sectors per cluster 223 [ 70.776726][ T6569] FAT-fs (loop1): Can't find a valid FAT filesystem [ 70.857696][ T6569] loop1: detected capacity change from 0 to 128 [ 71.759338][ T6591] capability: warning: `syz.2.480' uses 32-bit capabilities (legacy support in use) [ 71.831298][ T6593] loop3: detected capacity change from 0 to 512 [ 71.862022][ T6593] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 71.863892][ T6593] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 71.866822][ T6593] System zones: 1-12 [ 71.869845][ T6593] EXT4-fs (loop3): orphan cleanup on readonly fs [ 71.874933][ T6593] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.481: iget: bad i_size value: 12154761577498 [ 71.878260][ T6593] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 71.878978][ T6593] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.481: couldn't read orphan inode 13 (err -117) [ 71.884103][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 71.884117][ C1] EXT4-fs (loop3): initial error at time 71: ext4_orphan_get:1399: inode 13 [ 71.884143][ C1] EXT4-fs (loop3): last error at time 71: ext4_orphan_get:1399: inode 13 [ 71.889434][ T6593] loop3: lost filesystem error report for type 5 error -117 [ 71.905630][ T6593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.006347][ T6595] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 3: comm syz.3.481: lblock 0 mapped to illegal pblock 3 (length 1) [ 72.010338][ T6595] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.481: error -EUCLEAN reading directory block [ 72.020530][ T6595] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 3: comm syz.3.481: lblock 0 mapped to illegal pblock 3 (length 1) [ 72.030104][ T6595] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.481: error -EUCLEAN reading directory block [ 72.483112][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.684559][ T6607] netlink: 104 bytes leftover after parsing attributes in process `syz.0.487'. [ 72.764995][ T6611] loop4: detected capacity change from 0 to 512 [ 72.768094][ T6610] netlink: 32 bytes leftover after parsing attributes in process `syz.3.485'. [ 72.769907][ T6610] netlink: 32 bytes leftover after parsing attributes in process `syz.3.485'. [ 72.780659][ T6616] loop1: detected capacity change from 0 to 512 [ 72.783078][ T6616] ext3: Unknown parameter '.' [ 72.841138][ T6611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.261716][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.297004][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 74.425490][ T6635] netlink: 132 bytes leftover after parsing attributes in process `syz.3.493'. [ 74.486944][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 74.487008][ T30] audit: type=1326 audit(74.450:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.1.488" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d792a8 code=0x7ffc0000 [ 74.487063][ T30] audit: type=1326 audit(74.450:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.1.488" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d792a8 code=0x7ffc0000 [ 74.487115][ T30] audit: type=1326 audit(74.450:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.1.488" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d792a8 code=0x7ffc0000 [ 74.487165][ T30] audit: type=1326 audit(74.450:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.1.488" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d792a8 code=0x7ffc0000 [ 74.487215][ T30] audit: type=1326 audit(74.450:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.1.488" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffffb7d792a8 code=0x7ffc0000 [ 74.487271][ T30] audit: type=1326 audit(74.450:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.1.488" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d792a8 code=0x7ffc0000 [ 74.487320][ T30] audit: type=1326 audit(74.450:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.1.488" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d792a8 code=0x7ffc0000 [ 74.487368][ T30] audit: type=1326 audit(74.450:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.1.488" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d792a8 code=0x7ffc0000 [ 74.487417][ T30] audit: type=1326 audit(74.450:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.1.488" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d792a8 code=0x7ffc0000 [ 74.487464][ T30] audit: type=1326 audit(74.450:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.1.488" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb7d792a8 code=0x7ffc0000 [ 74.798101][ T6616] netlink: 'syz.1.488': attribute type 10 has an invalid length. [ 74.850694][ T6616] team0: Port device dummy0 added [ 75.024008][ T6640] fuse: fd is not a fuse device [ 75.385849][ T6647] syzkaller0: entered promiscuous mode [ 75.385915][ T6647] syzkaller0: entered allmulticast mode [ 75.911359][ T6659] binder: 6657:6659 tried to acquire reference to desc 0, got 1 instead [ 75.912012][ T6659] binder: 6657:6659 IncRefs 0 refcount change on invalid ref -1 ret -22 [ 76.364983][ T6663] netlink: 'syz.2.496': attribute type 10 has an invalid length. [ 76.406016][ T6663] macvlan1: entered promiscuous mode [ 76.430755][ T6663] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 76.481484][ T6665] loop1: detected capacity change from 0 to 512 [ 76.549351][ T6665] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 77.441472][ T6678] xt_hl: Unknown Hop Limit match mode: 221 [ 77.543539][ T6681] loop4: detected capacity change from 0 to 256 [ 78.061801][ T6685] loop1: detected capacity change from 0 to 512 [ 78.147685][ T6685] EXT4-fs error (device loop1): ext4_get_journal_inode:5900: comm syz.1.504: inode #2147418112: comm syz.1.504: iget: illegal inode # [ 78.150328][ T6685] loop1: lost filesystem error report for type 5 error -117 [ 78.154144][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 78.154189][ C0] EXT4-fs (loop1): initial error at time 78: ext4_get_journal_inode:5900 [ 78.154245][ C0] EXT4-fs (loop1): last error at time 78: ext4_get_journal_inode:5900 [ 78.177310][ T6685] EXT4-fs (loop1): no journal found [ 78.178463][ T6685] EXT4-fs (loop1): can't get journal size [ 78.188988][ T6685] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 78.218729][ T6685] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 78.221183][ T6685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.310188][ T6691] loop4: detected capacity change from 0 to 256 [ 78.351932][ T6693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.508'. [ 79.054546][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 79.143748][ T6685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.301758][ T6714] FAULT_INJECTION: forcing a failure. [ 79.301758][ T6714] name failslab, interval 1, probability 0, space 0, times 0 [ 79.305003][ T6714] CPU: 0 UID: 0 PID: 6714 Comm: syz.3.514 Tainted: G L syzkaller #0 PREEMPT [ 79.305028][ T6714] Tainted: [L]=SOFTLOCKUP [ 79.305034][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 79.305042][ T6714] Call trace: [ 79.305047][ T6714] show_stack+0x2c/0x3c (C) [ 79.305072][ T6714] __dump_stack+0x30/0x40 [ 79.305087][ T6714] dump_stack_lvl+0xd8/0x12c [ 79.305101][ T6714] dump_stack+0x1c/0x28 [ 79.305115][ T6714] should_fail_ex+0x41c/0x590 [ 79.305127][ T6714] should_failslab+0xc4/0x120 [ 79.305140][ T6714] kmem_cache_alloc_lru_noprof+0x98/0x5dc [ 79.305153][ T6714] __d_alloc+0x50/0x690 [ 79.305165][ T6714] d_alloc_pseudo+0x2c/0xd8 [ 79.305177][ T6714] alloc_path_pseudo+0xe8/0x1d4 [ 79.305189][ T6714] alloc_file_pseudo+0xb0/0x198 [ 79.305201][ T6714] sock_alloc_file+0xb4/0x1ac [ 79.305221][ T6714] __sys_socket+0x90/0xec [ 79.305234][ T6714] __arm64_sys_socket+0x84/0x9c [ 79.305248][ T6714] invoke_syscall+0x98/0x244 [ 79.305262][ T6714] el0_svc_common+0x19c/0x23c [ 79.305276][ T6714] do_el0_svc+0x4c/0x5c [ 79.305290][ T6714] el0_svc+0x64/0x260 [ 79.305303][ T6714] el0t_64_sync_handler+0x44/0x104 [ 79.305317][ T6714] el0t_64_sync+0x198/0x19c [ 82.381584][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 82.473420][ T6758] vhci_hcd vhci_hcd.3: invalid port number 9 [ 82.478958][ T6758] vhci_hcd vhci_hcd.3: invalid port number 9 [ 83.285360][ T4729] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.905286][ T6774] fuse: fd is not a fuse device [ 84.026444][ T6778] fuse: fd is not a fuse device [ 84.091076][ T6779] loop1: detected capacity change from 0 to 512 [ 84.114764][ T6779] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 84.114830][ T6779] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 84.114922][ T6779] System zones: 1-12 [ 84.115184][ T6779] EXT4-fs (loop1): orphan cleanup on readonly fs [ 84.115525][ T6779] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.526: iget: bad i_size value: 12154761577498 [ 84.115545][ T6779] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 84.116077][ T6779] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.526: couldn't read orphan inode 13 (err -117) [ 84.116095][ T6779] loop1: lost filesystem error report for type 5 error -117 [ 84.140482][ T6779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 84.198063][ T6779] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.526: lblock 0 mapped to illegal pblock 3 (length 1) [ 84.209619][ T6779] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.526: error -EUCLEAN reading directory block [ 84.213115][ T6779] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.526: lblock 0 mapped to illegal pblock 3 (length 1) [ 84.217272][ T6779] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.526: error -EUCLEAN reading directory block [ 84.477077][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.491102][ T6820] overlayfs: workdir and upperdir must be separate subtrees [ 86.316715][ T6846] loop3: detected capacity change from 0 to 512 [ 86.351923][ T6846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.367894][ T6846] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.537: No space for directory leaf checksum. Please run e2fsck -D. [ 86.367960][ T6846] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.537: checksumming directory block 0 [ 86.374602][ T6846] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.537: No space for directory leaf checksum. Please run e2fsck -D. [ 86.374664][ T6846] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.537: checksumming directory block 0 [ 86.389405][ T6846] EXT4-fs (loop3): shut down requested (2) [ 86.390138][ T6846] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.537: No space for directory leaf checksum. Please run e2fsck -D. [ 86.663933][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.886455][ T6862] netlink: 'syz.3.540': attribute type 1 has an invalid length. [ 86.886511][ T6862] netlink: 'syz.3.540': attribute type 3 has an invalid length. [ 86.886553][ T6862] netlink: 188 bytes leftover after parsing attributes in process `syz.3.540'. [ 86.886583][ T6862] NCSI netlink: No device for ifindex 3808428034 [ 86.929881][ T6862] loop3: detected capacity change from 0 to 1024 [ 87.027637][ T6862] __quota_error: 54 callbacks suppressed [ 87.033667][ T6862] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 87.033769][ T6862] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 87.033817][ T6862] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.540: Failed to acquire dquot type 0 [ 87.033853][ T6862] loop3: lost filesystem error report for type 5 error -5 [ 87.034184][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 87.034226][ C0] EXT4-fs (loop3): initial error at time 87: ext4_acquire_dquot:7041 [ 87.034280][ C0] EXT4-fs (loop3): last error at time 87: ext4_acquire_dquot:7041 [ 87.053465][ T6862] EXT4-fs (loop3): 1 truncate cleaned up [ 87.086306][ T6862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.120905][ T6862] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 87.121063][ T6862] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 87.121083][ T6862] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.540: Failed to acquire dquot type 0 [ 87.330878][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.365860][ T6879] 9p: Bad value for 'rfdno' [ 87.493082][ T6885] loop1: detected capacity change from 0 to 512 [ 87.537476][ T6885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.607816][ T6885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.545'. [ 87.609801][ T6885] netlink: 'syz.1.545': attribute type 1 has an invalid length. [ 87.894426][ T6900] loop4: detected capacity change from 0 to 512 [ 87.912340][ T6900] EXT4-fs error (device loop4): ext4_get_journal_inode:5900: comm syz.4.547: inode #2147418112: comm syz.4.547: iget: illegal inode # [ 87.915909][ T6900] loop4: lost filesystem error report for type 5 error -117 [ 87.924122][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 87.924171][ C1] EXT4-fs (loop4): initial error at time 87: ext4_get_journal_inode:5900 [ 87.924226][ C1] EXT4-fs (loop4): last error at time 87: ext4_get_journal_inode:5900 [ 87.927800][ T6900] EXT4-fs (loop4): no journal found [ 87.927826][ T6900] EXT4-fs (loop4): can't get journal size [ 87.953955][ T6900] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 87.963939][ T6900] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 88.085782][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.106742][ T6900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.610119][ T6912] loop3: detected capacity change from 0 to 256 [ 88.761879][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 88.772089][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 88.772459][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 88.772692][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 88.772896][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 88.773097][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 88.773303][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 88.773517][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 89.625619][ T4978] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 89.754333][ T6853] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 89.922350][ T6900] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.156025][ T6921] batadv_slave_1: Caught tx_queue_len zero misconfig [ 90.191516][ T6922] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 90.456280][ T6929] netlink: 'syz.0.555': attribute type 4 has an invalid length. [ 90.511660][ T6931] loop3: detected capacity change from 0 to 512 [ 90.534895][ T6929] .`: renamed from bond0 (while UP) [ 90.561537][ T6931] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 90.561599][ T6931] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c01c, mo2=0002] [ 90.561712][ T6931] System zones: 1-12 [ 90.561967][ T6931] EXT4-fs (loop3): orphan cleanup on readonly fs [ 90.563108][ T6931] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.567: iget: bad i_size value: 12154761577498 [ 90.563130][ T6931] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 90.563833][ T6931] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.567: couldn't read orphan inode 13 (err -117) [ 90.563854][ T6931] loop3: lost filesystem error report for type 5 error -117 [ 90.567620][ T6931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 90.632290][ T6936] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 90.717495][ T6931] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 3: comm syz.3.567: lblock 0 mapped to illegal pblock 3 (length 1) [ 90.722523][ T6931] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.567: error -EUCLEAN reading directory block [ 90.723996][ T6931] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 3: comm syz.3.567: lblock 0 mapped to illegal pblock 3 (length 1) [ 90.728697][ T6931] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.567: error -EUCLEAN reading directory block [ 91.636287][ T30] audit: type=1326 audit(91.580:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6941 comm="syz.1.560" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d792a8 code=0x0 [ 91.698755][ T6949] loop1: detected capacity change from 0 to 256 [ 91.872156][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.337175][ T6951] Injecting memory failure for pfn 0x135b5e at process virtual address 0x20001000 [ 92.377984][ T6951] Memory failure: 0x135b5e: Sending SIGBUS to syz.0.562:6951 due to hardware memory corruption [ 92.378127][ T6951] Memory failure: 0x135b5e: recovery action for dirty LRU page: Recovered [ 92.378182][ T6951] Injecting memory failure for pfn 0x219070 at process virtual address 0x20002000 [ 92.378420][ T6951] Memory failure: 0x219070: unhandlable page. [ 92.378433][ T6951] Memory failure: 0x219070: recovery action for get hwpoison page: Ignored [ 92.809700][ T6964] 9p: Bad value for 'rfdno' [ 93.060564][ T6968] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 93.126835][ T6973] __nla_validate_parse: 34 callbacks suppressed [ 93.128416][ T6973] netlink: 40 bytes leftover after parsing attributes in process `syz.2.571'. [ 94.016146][ T6985] loop3: detected capacity change from 0 to 256 [ 94.017170][ T6985] vfat: Unknown parameter '0x000000000000015e' [ 94.040595][ T6985] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 94.040626][ T6985] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 94.041683][ T6985] vhci_hcd vhci_hcd.0: Device attached [ 94.045650][ T6987] vhci_hcd: connection closed [ 94.048944][ T14] vhci_hcd vhci_hcd.3: stop threads [ 94.049323][ T14] vhci_hcd vhci_hcd.3: release socket [ 94.049404][ T14] vhci_hcd vhci_hcd.3: disconnect device [ 96.938694][ T7013] netlink: 'syz.3.580': attribute type 4 has an invalid length. [ 97.438535][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 97.863595][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 97.863667][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 98.493774][ T7021] fuse: Unknown parameter 'default_permissions.bfq.dequeue' [ 98.965135][ T7033] netlink: 44 bytes leftover after parsing attributes in process `syz.2.590'. [ 98.965201][ T7033] tipc: Enabling of bearer rejected, media not registered [ 99.066910][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 99.068803][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 99.076328][ T7036] tipc: Enabled bearer , priority 0 [ 99.083746][ T7036] syzkaller0: entered promiscuous mode [ 99.083819][ T7036] syzkaller0: entered allmulticast mode [ 99.116531][ T7036] tipc: Resetting bearer [ 99.143063][ T7035] tipc: Resetting bearer [ 99.150658][ T7035] tipc: Disabling bearer [ 99.424839][ T7049] netlink: 48 bytes leftover after parsing attributes in process `syz.3.596'. [ 99.458606][ T7049] netlink: 48 bytes leftover after parsing attributes in process `syz.3.596'. [ 99.824574][ T7061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.599'. [ 100.039046][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 100.053616][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.600'. [ 100.108107][ T4800] Process accounting resumed [ 100.209971][ T7066] Process accounting resumed [ 100.857036][ T6811] Bluetooth: Error in BCSP hdr checksum [ 101.106421][ T6809] Bluetooth: Error in BCSP hdr checksum [ 102.135299][ T7094] 9p: Bad value for 'rfdno' [ 102.463087][ T7092] pimreg: entered allmulticast mode [ 102.467491][ T7092] pimreg: left allmulticast mode [ 102.904717][ T4715] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 103.554401][ T7139] netlink: 148 bytes leftover after parsing attributes in process `syz.4.618'. [ 103.686966][ T7132] loop3: detected capacity change from 0 to 4096 [ 103.687939][ T7132] EXT4-fs: Ignoring removed orlov option [ 103.692881][ T7132] EXT4-fs (loop3): Test dummy encryption mode enabled [ 103.849959][ T7132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.024247][ T7151] netlink: 124 bytes leftover after parsing attributes in process `syz.2.619'. [ 105.383876][ T7157] netlink: 124 bytes leftover after parsing attributes in process `syz.0.621'. [ 106.245440][ T7160] pimreg3: entered allmulticast mode [ 106.700335][ T7165] syz.0.624 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 106.853377][ T7168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.079147][ T7171] FAULT_INJECTION: forcing a failure. [ 107.079147][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 107.081878][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.2.626 Tainted: G L syzkaller #0 PREEMPT [ 107.081903][ T7171] Tainted: [L]=SOFTLOCKUP [ 107.081909][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 107.081918][ T7171] Call trace: [ 107.081924][ T7171] show_stack+0x2c/0x3c (C) [ 107.081951][ T7171] __dump_stack+0x30/0x40 [ 107.081969][ T7171] dump_stack_lvl+0xd8/0x12c [ 107.081986][ T7171] dump_stack+0x1c/0x28 [ 107.082002][ T7171] should_fail_ex+0x41c/0x590 [ 107.082016][ T7171] should_failslab+0xc4/0x120 [ 107.082030][ T7171] __kmalloc_cache_noprof+0x94/0x5ec [ 107.082045][ T7171] sget_fc+0x5c8/0x13e8 [ 107.082059][ T7171] vfs_get_super+0x40/0x148 [ 107.082073][ T7171] get_tree_nodev+0x2c/0x3c [ 107.082087][ T7171] mqueue_get_tree+0xac/0xe8 [ 107.082103][ T7171] vfs_get_tree+0x90/0x28c [ 107.082118][ T7171] fc_mount+0x24/0xac [ 107.082132][ T7171] fc_mount_longterm+0x20/0x74 [ 107.082147][ T7171] mq_init_ns+0x3c8/0x638 [ 107.082161][ T7171] copy_ipcs+0x3c8/0x63c [ 107.082178][ T7171] create_new_namespaces+0x1a8/0x50c [ 107.082193][ T7171] unshare_nsproxy_namespaces+0x120/0x170 [ 107.082208][ T7171] ksys_unshare+0x3d4/0x6d8 [ 107.082226][ T7171] __arm64_sys_unshare+0x40/0x54 [ 107.082241][ T7171] invoke_syscall+0x98/0x244 [ 107.082257][ T7171] el0_svc_common+0x19c/0x23c [ 107.082274][ T7171] do_el0_svc+0x4c/0x5c [ 107.082290][ T7171] el0_svc+0x64/0x260 [ 107.082305][ T7171] el0t_64_sync_handler+0x44/0x104 [ 107.082320][ T7171] el0t_64_sync+0x198/0x19c [ 107.602489][ T7176] batadv_slave_0: entered promiscuous mode [ 107.625354][ T7175] batadv_slave_0: left promiscuous mode [ 109.216252][ T4715] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 109.225442][ T4715] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 109.228445][ T4715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 109.233469][ T4715] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 109.237537][ T4715] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.848470][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.635'. [ 109.943792][ T7206] veth2: entered allmulticast mode [ 109.981775][ T7206] bond1: (slave veth3): Enslaving as an active interface with an up link [ 110.015265][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.635'. [ 110.059796][ T7206] veth4: entered allmulticast mode [ 110.130515][ T7206] bond1: (slave veth5): Enslaving as an active interface with an up link [ 110.147119][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.152511][ T7203] pimreg: entered allmulticast mode [ 110.201394][ T6811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.511492][ T6811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.737070][ T6811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.414680][ T4715] Bluetooth: hci5: command tx timeout [ 111.747704][ T6811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.946770][ T7240] loop3: detected capacity change from 0 to 512 [ 112.054601][ T7240] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.645: invalid indirect mapped block 11 (level 0) [ 112.054674][ T7240] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 112.055408][ T7240] EXT4-fs (loop3): Remounting filesystem read-only [ 112.064095][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 112.064145][ C1] EXT4-fs (loop3): initial error at time 112: ext4_free_branches:1023: inode 13 [ 112.064212][ C1] EXT4-fs (loop3): last error at time 112: ext4_free_branches:1023: inode 13 [ 112.072453][ T7240] EXT4-fs (loop3): 1 truncate cleaned up [ 112.082210][ T7240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.278446][ T7244] futex_wake_op: syz.4.646 tries to shift op by -1; fix this program [ 112.289168][ T7244] binder: 7243:7244 got transaction to invalid handle, 1 [ 112.289239][ T7244] binder: 7243:7244 cannot find target node [ 112.289294][ T7244] binder: 7243:7244 transaction async to 0:0 failed 19/29201/-22, code 0 size 0-0 line 3252 [ 112.289582][ T7244] binder: 7243:7244 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 112.289598][ T7244] binder: 7244 RLIMIT_NICE not set [ 112.322849][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.383071][ T7247] binder: BINDER_SET_CONTEXT_MGR already set [ 112.383127][ T7247] binder: 7243:7247 ioctl 4018620d 200000c0 returned -16 [ 112.383684][ T7247] binder: 7243:7247 tried to acquire reference to desc 0, got 1 instead [ 112.388641][ T7247] futex_wake_op: syz.4.646 tries to shift op by -1; fix this program [ 112.388845][ T7248] binder_alloc: binder_alloc_mmap_handler: 7243 20ffd000-21000000 already mapped failed -16 [ 112.389167][ T7249] binder: BINDER_SET_CONTEXT_MGR already set [ 112.389175][ T7249] binder: 7243:7249 ioctl 4018620d 20000300 returned -16 [ 112.391451][ T7248] binder: 7243:7248 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 112.391469][ T7248] binder: 7248 RLIMIT_NICE not set [ 112.391641][ T7247] binder: tried to use weak ref as strong ref [ 112.391652][ T7247] binder: 7243:7247 got transaction to invalid handle, 1 [ 112.391665][ T7247] binder: 7243:7247 cannot find target node [ 112.391689][ T7247] binder: 7243:7247 transaction async to 0:0 failed 21/29201/-22, code 0 size 0-0 line 3252 [ 112.501979][ T6811] bridge_slave_1: left allmulticast mode [ 112.502060][ T6811] bridge_slave_1: left promiscuous mode [ 112.503279][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.527586][ T6811] bridge_slave_0: left allmulticast mode [ 112.527656][ T6811] bridge_slave_0: left promiscuous mode [ 112.527837][ T6811] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.691215][ T7257] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 112.691418][ T7257] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 112.691597][ T7257] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 112.691702][ T7257] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 112.691846][ T7257] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 112.691950][ T7257] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 112.692131][ T7257] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 112.692238][ T7257] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 112.692381][ T7257] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 112.692512][ T7257] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 113.016731][ T6811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.040289][ T6811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.067225][ T6811] bond0 (unregistering): Released all slaves [ 113.081587][ T4884] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.081664][ T4884] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.226021][ T6811] tipc: Left network mode [ 113.466613][ T4715] Bluetooth: hci5: command tx timeout [ 113.581624][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.584565][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.584813][ T7191] bridge_slave_0: entered allmulticast mode [ 113.605363][ T7191] bridge_slave_0: entered promiscuous mode [ 113.667939][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.668042][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.668345][ T7191] bridge_slave_1: entered allmulticast mode [ 113.694298][ T7191] bridge_slave_1: entered promiscuous mode [ 113.859052][ T7284] loop4: detected capacity change from 0 to 512 [ 113.875729][ T7284] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.948012][ T7284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.968424][ T7191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.002624][ T7191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.130270][ T7191] team0: Port device team_slave_0 added [ 114.134822][ T7191] team0: Port device team_slave_1 added [ 114.343095][ T6811] hsr_slave_0: left promiscuous mode [ 114.344840][ T6811] hsr_slave_1: left promiscuous mode [ 114.345671][ T6811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.345699][ T6811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.348670][ T6811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.348689][ T6811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.378245][ T6811] veth1_macvtap: left promiscuous mode [ 114.379583][ T6811] veth0_macvtap: left promiscuous mode [ 114.380955][ T6811] veth1_vlan: left promiscuous mode [ 114.382305][ T6811] veth0_vlan: left promiscuous mode [ 114.542674][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 114.544814][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 114.546714][ T7310] netlink: 'syz.2.659': attribute type 12 has an invalid length. [ 114.548271][ T7310] netlink: 'syz.2.659': attribute type 13 has an invalid length. [ 114.736848][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.979136][ T7328] netlink: 428 bytes leftover after parsing attributes in process `syz.0.664'. [ 115.015360][ T7330] loop3: detected capacity change from 0 to 512 [ 115.021359][ T7330] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.058869][ T7330] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #17: comm syz.3.665: inode has both inline data and extents flags [ 115.058938][ T7330] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 115.059672][ T7330] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.665: couldn't read orphan inode 17 (err -117) [ 115.059693][ T7330] loop3: lost filesystem error report for type 5 error -117 [ 115.093596][ T7330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.357938][ T7335] loop4: detected capacity change from 0 to 512 [ 115.368311][ T7335] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 115.382179][ T7335] EXT4-fs (loop4): invalid journal inode [ 115.382341][ T7335] EXT4-fs (loop4): can't get journal size [ 115.393276][ T7335] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.666: blocks 4-4 from inode overlap system zone [ 115.394222][ T7335] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 115.397059][ T7335] EXT4-fs (loop4): Remounting filesystem read-only [ 115.397168][ T7335] EXT4-fs (loop4): failed to initialize system zone (-117) [ 115.397375][ T7335] EXT4-fs (loop4): mount failed [ 115.404088][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 115.404139][ C0] EXT4-fs (loop4): initial error at time 115: ext4_protect_reserved_inode:182: inode 2 [ 115.404211][ C0] EXT4-fs (loop4): last error at time 115: ext4_protect_reserved_inode:182: inode 2 [ 116.078397][ T6811] team0 (unregistering): Port device team_slave_1 removed [ 116.141143][ T6811] team0 (unregistering): Port device team_slave_0 removed [ 116.365214][ T7342] loop4: detected capacity change from 0 to 8192 [ 116.461436][ T6811] team0 (unregistering): Port device dummy0 removed [ 116.633858][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.648158][ T7191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.648214][ T7191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.648260][ T7191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.651000][ T7191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.651012][ T7191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.651027][ T7191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.722598][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 116.723215][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.664'. [ 116.868564][ T7348] loop3: detected capacity change from 0 to 512 [ 116.884591][ T7348] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 116.936049][ T7191] hsr_slave_0: entered promiscuous mode [ 116.937263][ T7191] hsr_slave_1: entered promiscuous mode [ 116.938014][ T7191] debugfs: 'hsr0' already exists in 'hsr' [ 116.938038][ T7191] Cannot create hsr debugfs directory [ 116.954914][ T7348] EXT4-fs (loop3): 1 truncate cleaned up [ 116.958540][ T7348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.125291][ T7355] FAULT_INJECTION: forcing a failure. [ 117.125291][ T7355] name failslab, interval 1, probability 0, space 0, times 0 [ 117.125393][ T7355] CPU: 0 UID: 0 PID: 7355 Comm: syz.4.672 Tainted: G L syzkaller #0 PREEMPT [ 117.125409][ T7355] Tainted: [L]=SOFTLOCKUP [ 117.125414][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 117.125421][ T7355] Call trace: [ 117.125425][ T7355] show_stack+0x2c/0x3c (C) [ 117.125448][ T7355] __dump_stack+0x30/0x40 [ 117.125463][ T7355] dump_stack_lvl+0xd8/0x12c [ 117.125476][ T7355] dump_stack+0x1c/0x28 [ 117.125490][ T7355] should_fail_ex+0x41c/0x590 [ 117.125502][ T7355] should_failslab+0xc4/0x120 [ 117.125514][ T7355] __kmalloc_noprof+0x108/0x6b8 [ 117.125527][ T7355] tomoyo_encode2+0x10c/0x330 [ 117.125541][ T7355] tomoyo_encode+0x34/0x50 [ 117.125553][ T7355] tomoyo_realpath_from_path+0x488/0x4dc [ 117.125565][ T7355] tomoyo_path_number_perm+0x1f0/0x500 [ 117.125577][ T7355] tomoyo_file_ioctl+0x2c/0x3c [ 117.125589][ T7355] security_file_ioctl+0xdc/0x2b0 [ 117.125601][ T7355] __arm64_sys_ioctl+0xb0/0x1cc [ 117.125616][ T7355] invoke_syscall+0x98/0x244 [ 117.125630][ T7355] el0_svc_common+0x19c/0x23c [ 117.125643][ T7355] do_el0_svc+0x4c/0x5c [ 117.125657][ T7355] el0_svc+0x64/0x260 [ 117.125670][ T7355] el0t_64_sync_handler+0x44/0x104 [ 117.125682][ T7355] el0t_64_sync+0x198/0x19c [ 117.125707][ T7355] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.157317][ T7348] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.668: invalid indirect mapped block 2185560079 (level 0) [ 117.191715][ T7348] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.668: invalid indirect mapped block 65535 (level 2) [ 117.780706][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.875357][ T7191] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.888375][ T7191] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.889311][ T7191] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.980635][ T7191] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.981517][ T7191] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 118.006203][ T7374] loop3: detected capacity change from 0 to 512 [ 118.019744][ T7191] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.036712][ T7191] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 118.069565][ T7191] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.078216][ T7370] loop4: detected capacity change from 0 to 512 [ 118.117782][ T7370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.124045][ T7374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.167659][ T7374] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.675: bg 0: block 217: padding at end of block bitmap is not set [ 118.205025][ T7374] EXT4-fs (loop3): Remounting filesystem read-only [ 118.423749][ T7191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.476893][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.477500][ T7191] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.492835][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.499294][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.499379][ T6804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.502974][ T4713] Trying to write to read-only block-device loop3 [ 118.569512][ T6798] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.569617][ T6798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.035331][ T7414] FAULT_INJECTION: forcing a failure. [ 119.035331][ T7414] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 119.035472][ T7414] CPU: 1 UID: 0 PID: 7414 Comm: syz.4.682 Tainted: G L syzkaller #0 PREEMPT [ 119.035491][ T7414] Tainted: [L]=SOFTLOCKUP [ 119.035496][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 119.035502][ T7414] Call trace: [ 119.035507][ T7414] show_stack+0x2c/0x3c (C) [ 119.035529][ T7414] __dump_stack+0x30/0x40 [ 119.035543][ T7414] dump_stack_lvl+0xd8/0x12c [ 119.035557][ T7414] dump_stack+0x1c/0x28 [ 119.035570][ T7414] should_fail_ex+0x41c/0x590 [ 119.035582][ T7414] should_fail+0x14/0x24 [ 119.035593][ T7414] should_fail_usercopy+0x20/0x30 [ 119.035604][ T7414] _inline_copy_from_user+0x3c/0x174 [ 119.035617][ T7414] kstrtouint_from_user+0xcc/0x174 [ 119.035629][ T7414] proc_fail_nth_write+0x9c/0x234 [ 119.035641][ T7414] vfs_write+0x2a4/0xa0c [ 119.035653][ T7414] ksys_write+0x12c/0x228 [ 119.035664][ T7414] __arm64_sys_write+0x84/0x98 [ 119.035674][ T7414] invoke_syscall+0x98/0x244 [ 119.035689][ T7414] el0_svc_common+0x19c/0x23c [ 119.035702][ T7414] do_el0_svc+0x4c/0x5c [ 119.035716][ T7414] el0_svc+0x64/0x260 [ 119.035729][ T7414] el0t_64_sync_handler+0x44/0x104 [ 119.035741][ T7414] el0t_64_sync+0x198/0x19c [ 119.375981][ T7407] Unable to handle kernel paging request at virtual address fffffffffffffc10 [ 119.376028][ T7407] KASAN: maybe wild-memory-access in range [0x0003ffffffffe080-0x0003ffffffffe087] [ 119.376070][ T7407] Mem abort info: [ 119.376090][ T7407] ESR = 0x0000000096000006 [ 119.376111][ T7407] EC = 0x25: DABT (current EL), IL = 32 bits [ 119.376133][ T7407] SET = 0, FnV = 0 [ 119.376153][ T7407] EA = 0, S1PTW = 0 [ 119.376172][ T7407] FSC = 0x06: level 2 translation fault [ 119.376193][ T7407] Data abort info: [ 119.376216][ T7407] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [ 119.376239][ T7407] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 119.376260][ T7407] GCS = 0, Overlay = 0, DirtyBit = 0 [ 119.376281][ T7407] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000021ae49000 [ 119.376302][ T7407] [fffffffffffffc10] pgd=0000000000000000, p4d=0000000221136403, pud=0000000221137403, pmd=0000000000000000 [ 119.376489][ T7407] Internal error: Oops: 0000000096000006 [#1] SMP [ 119.392442][ T7407] Modules linked in: [ 119.393157][ T7407] CPU: 0 UID: 0 PID: 7407 Comm: syz.2.681 Tainted: G L syzkaller #0 PREEMPT [ 119.395063][ T7407] Tainted: [L]=SOFTLOCKUP [ 119.395888][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 119.397642][ T7407] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 119.398998][ T7407] pc : strlen+0x38/0x84 [ 119.399725][ T7407] lr : trace_event_raw_event_drv_net_setup_tc+0x11c/0x51c [ 119.400984][ T7407] sp : ffff800095726cf0 [ 119.401714][ T7407] x29: ffff800095726d10 x28: 1fffe0001e484751 x27: dfff800000000000 [ 119.403182][ T7407] x26: ffff700012ae4da8 x25: 0000000000000006 x24: ffff0000f3a30f60 [ 119.404645][ T7407] x23: fffffffffffffc10 x22: ffff0000c10cc700 x21: fffffffffffff198 [ 119.406149][ T7407] x20: 0000000000000203 x19: ffff0000f2423a88 x18: 0000000000000000 [ 119.407645][ T7407] x17: 00000000ffff0000 x16: ffff000000000000 x15: ffff800084beab10 [ 119.409149][ T7407] x14: ffff800084bea7b8 x13: 0000000000000006 x12: 0000000000000000 [ 119.410636][ T7407] x11: 0000000000000000 x10: dfff800000000000 x9 : 0000000000000000 [ 119.412098][ T7407] x8 : fffffffffffffc10 x7 : 0000000000000000 x6 : 0000000000000000 [ 119.413552][ T7407] x5 : ffff8000957275a0 x4 : 0000000000000000 x3 : ffff800086310828 [ 119.415064][ T7407] x2 : 0000000000000000 x1 : ffff0000f2423a80 x0 : fffffffffffffc10 [ 119.416505][ T7407] Call trace: [ 119.417093][ T7407] strlen+0x38/0x84 (P) [ 119.417886][ T7407] trace_event_raw_event_drv_net_setup_tc+0x11c/0x51c [ 119.419100][ T7407] __traceiter_drv_net_setup_tc+0x88/0xe0 [ 119.420136][ T7407] ieee80211_netdev_setup_tc+0x3cc/0x4f8 [ 119.421138][ T7407] tcf_block_offload_cmd+0x1b8/0x30c [ 119.422074][ T7407] tcf_block_get_ext+0xc18/0x1150 [ 119.422962][ T7407] tcf_block_get+0x64/0xa0 [ 119.423763][ T7407] multiq_init+0x70/0x278 [ 119.424561][ T7407] qdisc_create+0x588/0xb78 [ 119.425384][ T7407] tc_modify_qdisc+0xf64/0x17a8 [ 119.426264][ T7407] rtnetlink_rcv_msg+0x630/0x9bc [ 119.427184][ T7407] netlink_rcv_skb+0x238/0x414 [ 119.428075][ T7407] rtnetlink_rcv+0x28/0x38 [ 119.428881][ T7407] netlink_unicast+0x600/0x7f8 [ 119.429768][ T7407] netlink_sendmsg+0x648/0x948 [ 119.430627][ T7407] __sock_sendmsg+0xc8/0x17c [ 119.431439][ T7407] ____sys_sendmsg+0x3d0/0x6c8 [ 119.432310][ T7407] ___sys_sendmsg+0x198/0x224 [ 119.433194][ T7407] __sys_sendmsg+0x158/0x204 [ 119.434072][ T7407] __arm64_sys_sendmsg+0x88/0x9c [ 119.434990][ T7407] invoke_syscall+0x98/0x244 [ 119.435825][ T7407] el0_svc_common+0x19c/0x23c [ 119.436673][ T7407] do_el0_svc+0x4c/0x5c [ 119.437401][ T7407] el0_svc+0x64/0x260 [ 119.438110][ T7407] el0t_64_sync_handler+0x44/0x104 [ 119.439031][ T7407] el0t_64_sync+0x198/0x19c [ 119.439843][ T7407] Code: 38ea696b 7100017f 7a4b1188 540000ca (3869680b) [ 119.441052][ T7407] ---[ end trace 0000000000000000 ]--- [ 119.789648][ T7407] Kernel panic - not syncing: Oops: Fatal exception [ 119.790864][ T7407] SMP: stopping secondary CPUs [ 119.791718][ T7407] Kernel Offset: disabled [ 119.792462][ T7407] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 119.793644][ T7407] Memory Limit: none [ 120.092103][ T7407] Rebooting in 86400 seconds..