last executing test programs: 1m29.138151779s ago: executing program 32 (id=52): r0 = socket(0x10, 0x3, 0xce2) r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x66, 0x66, 0x64, 0x38, 0x35, 0x32, 0x61, 0x35, 0x6, 0x61, 0x36, 0x64, 0x62, 0x39, 0x30]}, &(0x7f0000000480)={0x0, "f7e1079ebed44e1d14462cde86302dfe161cc16f4fded90bccaa2e628b493a44f7d1b96d3069d966566ce0f2d97947eef831a2fa846b91da3be5e3ab41f8ee16", 0x2d}, 0x48, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, r1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8400001e}, 0x10) (async) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) (async) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x214b, 0x1faf, 0x80000001}) (async) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1c6, &(0x7f00000001c0)="$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") 1m27.642561s ago: executing program 5 (id=89): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x42}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x804, 0x0, 0x0, {0x1, 0x0, 0x6}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x1f0, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xa6, 0x8, "c939748487134c01c5ff8891f282a446b49317136c45c1f9e41ba1f59411c756a44802c7f72bdbc42ff528711eda9e25a7d6e0fc41fdc5dd5b4cf9d9288dadf5493f1dce37daa518709cfa757757d249fdbd009f0e4a8ea83b47f3be07ba92e8d4a489b0c246d353e0b27e1706621d398c3ea90eb4d38dc9849746be4cadb441c03a91091d9df549c76acaaa36ea6f9bac765d9688a38d574c13acc564b1b3c2d42f"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_USERDATA={0xee, 0x8, "73357089156756f1c237ff2be50d00299c0c07bf4f08d0d26d7af1674549c59266e68523f0f7b717b8cb1a311c39f47e0e6ad3dc5da21c4d3748c1dfaec0fc686340148af7eadf05f5ae741e8b7587f675ac4326b9dc31817b63c3bfbbd47e3910d52ad4b3a58deeeb057bbeb321aa60ba8b9eb07a8ddb09ddba03d1ec408e1cfc54f0f86b5618e5816c43c3ee4c623816980e099c34b90ff26ec291069ca6af7ce32f7617178dd88dfc76fefef97879374518cfa7f2059a284559ba7a792f355e5bc0456e4a14d93f97b71e900fc73db77aa13ccdf31f7dc3c779924160b4c6737403c5243af5cd9ac2"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x14) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x42}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x804, 0x0, 0x0, {0x1, 0x0, 0x6}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x1f0, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xa6, 0x8, "c939748487134c01c5ff8891f282a446b49317136c45c1f9e41ba1f59411c756a44802c7f72bdbc42ff528711eda9e25a7d6e0fc41fdc5dd5b4cf9d9288dadf5493f1dce37daa518709cfa757757d249fdbd009f0e4a8ea83b47f3be07ba92e8d4a489b0c246d353e0b27e1706621d398c3ea90eb4d38dc9849746be4cadb441c03a91091d9df549c76acaaa36ea6f9bac765d9688a38d574c13acc564b1b3c2d42f"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_USERDATA={0xee, 0x8, "73357089156756f1c237ff2be50d00299c0c07bf4f08d0d26d7af1674549c59266e68523f0f7b717b8cb1a311c39f47e0e6ad3dc5da21c4d3748c1dfaec0fc686340148af7eadf05f5ae741e8b7587f675ac4326b9dc31817b63c3bfbbd47e3910d52ad4b3a58deeeb057bbeb321aa60ba8b9eb07a8ddb09ddba03d1ec408e1cfc54f0f86b5618e5816c43c3ee4c623816980e099c34b90ff26ec291069ca6af7ce32f7617178dd88dfc76fefef97879374518cfa7f2059a284559ba7a792f355e5bc0456e4a14d93f97b71e900fc73db77aa13ccdf31f7dc3c779924160b4c6737403c5243af5cd9ac2"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x14) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000480)=0x4, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000480)=0x4, 0x4) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000640)=0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$bpf(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x1088080, &(0x7f00000026c0)={[{@gid={'gid', 0x3d, r2}}, {@uid={'uid', 0x3d, r3}}, {@uid={'uid', 0x3d, r5}}, {@uid={'uid', 0x3d, r6}}], [{@subj_user={'subj_user', 0x3d, 'quota\x00'}}, {@smackfshat={'smackfshat', 0x3d, '&\\%,^]/'}}, {@context={'context', 0x3d, 'user_u'}}]}) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000002780)={0x1, 0x1}, &(0x7f00000027c0)=0x8) setsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000002800)={r7, 0x7}, 0x8) mount$9p_fd(0x0, &(0x7f0000002840)='./file1\x00', &(0x7f0000002880), 0x0, &(0x7f00000028c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noxattr}, {@version_L}, {@ignoreqv}, {@aname={'aname', 0x3d, '@'}}, {@fscache}, {@version_u}, {@cache_none}, {@directio}], [{@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '\\/'}}, {@euid_lt={'euid<', r3}}]}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000029c0)={'wg1\x00'}) fsetxattr$smack_xattr_label(0xffffffffffffffff, &(0x7f0000002a00)='security.SMACK64IPIN\x00', &(0x7f0000002a40)={'quota\x00'}, 0x7, 0x0) ioctl$DVB_DEMUX_DMX_DQBUF(r0, 0xc0186f40, &(0x7f0000002a80)={0xb, 0x7, 0x1, 0x100, 0x1, 0x7}) (async) ioctl$DVB_DEMUX_DMX_DQBUF(r0, 0xc0186f40, &(0x7f0000002a80)={0xb, 0x7, 0x1, 0x100, 0x1, 0x7}) write$binfmt_script(r0, &(0x7f0000002ac0)={'#! ', './file0', [{}, {}], 0xa, "30f637fdce76825626"}, 0x16) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000002e00)={0x2, &(0x7f0000002b00)=""/132, &(0x7f0000002dc0)=[{0x8, 0xe7, 0x8, &(0x7f0000002bc0)=""/231}, {0x7, 0xe8, 0xe, &(0x7f0000002cc0)=""/232}]}) r8 = openat$cgroup_ro(r0, &(0x7f0000002e40)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000002e80)={0x30, 0x5, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x7}}, 0x30) lsetxattr$security_ima(&(0x7f0000002ec0)='./file1\x00', &(0x7f0000002f00), &(0x7f0000002f40)=@md5={0x1, "540814223227cd16dcad912dbe70a068"}, 0x11, 0x2) write(r8, &(0x7f0000002f80)="287c8d7ce82eac2d469db622dfa703beeff1df07314229438395e9546bbb488452a646142694e1d64977f847c8c4ec5fdbe09013147fa6485c313ad9c589775ed0cde4a21febf402c5f9cfb3feafd67f1111081352a1c1f29ddd83cd98e650a726d764f7b44f5639446db74e772505b6ad1ce9e22f2bb07266627c36ad63cf6995a947e39d1954f8677912db320a83ddec37b14f002f3c3ec87366f91a09c05dce90e1d9bd46755c30aa3b03e20310c103650ba48800e0d9fd0956211a172b424314a5f90b004b2f82fed2993b6f2e9443d64bf40356", 0xd6) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000003080)={{0x0, 0x7, 0xffffffffffff81f9, 0x4, 0x4, 0x1, 0x10, 0x5e4, 0x9, 0x222, 0x50af, 0xfffffffffffffffd, 0x6, 0x3, 0x1}}) recvmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000004080)=""/132, 0x84}], 0x1, &(0x7f0000004180)}, 0x6}], 0x1, 0x40000041, &(0x7f0000004200)={0x0, 0x989680}) (async) recvmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000004080)=""/132, 0x84}], 0x1, &(0x7f0000004180)}, 0x6}], 0x1, 0x40000041, &(0x7f0000004200)={0x0, 0x989680}) setxattr$system_posix_acl(&(0x7f0000004240)='./file1\x00', &(0x7f0000004280)='system.posix_acl_access\x00', &(0x7f00000042c0)={{}, {0x1, 0x6}, [{0x2, 0x4, r1}, {0x2, 0x1, r3}, {0x2, 0x2, r1}, {0x2, 0x4, r1}], {}, [{0x8, 0x3, r4}], {0x10, 0x4}, {0x20, 0x5}}, 0x4c, 0x3) (async) setxattr$system_posix_acl(&(0x7f0000004240)='./file1\x00', &(0x7f0000004280)='system.posix_acl_access\x00', &(0x7f00000042c0)={{}, {0x1, 0x6}, [{0x2, 0x4, r1}, {0x2, 0x1, r3}, {0x2, 0x2, r1}, {0x2, 0x4, r1}], {}, [{0x8, 0x3, r4}], {0x10, 0x4}, {0x20, 0x5}}, 0x4c, 0x3) pipe2$9p(&(0x7f00000043c0), 0x0) (async) pipe2$9p(&(0x7f00000043c0)={0xffffffffffffffff}, 0x0) getuid() (async) r11 = getuid() mount$9p_fd(0x0, &(0x7f0000004340)='./file0/file0\x00', &(0x7f0000004380), 0x10, &(0x7f0000004400)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_user}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@posixacl}, {@afid={'afid', 0x3d, 0x9}}], [{@fowner_eq={'fowner', 0x3d, r11}}]}}) (async) mount$9p_fd(0x0, &(0x7f0000004340)='./file0/file0\x00', &(0x7f0000004380), 0x10, &(0x7f0000004400)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_user}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@posixacl}, {@afid={'afid', 0x3d, 0x9}}], [{@fowner_eq={'fowner', 0x3d, r11}}]}}) setxattr$security_evm(&(0x7f00000044c0)='./file0/file0\x00', &(0x7f0000004500), &(0x7f0000004540)=@sha1={0x1, "1314fbfc3965d5d4902317258c99115d56831a6c"}, 0x15, 0x2) io_setup(0xf8, &(0x7f0000004580)=0x0) io_submit(r12, 0x1, &(0x7f0000004640)=[&(0x7f0000004600)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000045c0)="1ced400e2c14090a8626227899d9b8f055b0d45f53840908471985ebbc13e95a255a82245388a815eeb6b048d074ac35a88054868509284799", 0x39, 0x0, 0x0, 0x3, r8}]) (async) io_submit(r12, 0x1, &(0x7f0000004640)=[&(0x7f0000004600)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000045c0)="1ced400e2c14090a8626227899d9b8f055b0d45f53840908471985ebbc13e95a255a82245388a815eeb6b048d074ac35a88054868509284799", 0x39, 0x0, 0x0, 0x3, r8}]) 1m27.57014173s ago: executing program 5 (id=91): mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x3, 0x5, 0x800, 0x0, 0xfffbffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) 1m27.478021898s ago: executing program 33 (id=92): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000280)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000300)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@can={{0x3}, 0x3, 0x0, 0x0, 0x0, "ee0d702fac00008a"}, 0x10}, 0x1, 0x0, 0x0, 0x4092}, 0xd209f6d83486bb56) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x482}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x82, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) geteuid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0), 0x3af4701e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x4030582b, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x154, 0x10, 0x401, 0x70bd29, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0xa}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x80}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x2}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_VF_PORTS={0xd4, 0x18, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a7d9fbfd8aba24efa14615ae6b235887"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "af30e5684d37a252ddf52eb05df29e9b"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xe, 0x2, 'ip6gretap\x00'}, @IFLA_PORT_PROFILE={0xc, 0x2, 'batadv0\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x1ff}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7597eb034a182fc5d007aa9e5d96ec59"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3efcf87d3f894367baf18fa8c7cf3b3f"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffffe}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}, {0x4}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x8000}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "928114bb3916f4e85abf59ab4f05273b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bd41da8977f3d5575691617a04677eb4"}, @IFLA_PORT_VF={0x8, 0x1, 0x8}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x11, 0xa, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000040)) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m27.474621832s ago: executing program 5 (id=94): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0x6, @empty, 0xfffffffd}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r1, &(0x7f0000000440)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@file={0x0, './proc\x00'}, 0xfffffffffffffe20) sendmmsg$unix(r4, &(0x7f00000002c0), 0x400000000000041, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x20008005, &(0x7f00000004c0)={0x2, 0x4e20}, 0x10) shutdown(0xffffffffffffffff, 0x1) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0) memfd_create(&(0x7f0000000540)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff~\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19j\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xda\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\x03\x00\x00\x00\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x4) getrlimit(0x4, &(0x7f0000000100)) setns(0xc9, 0x0) r5 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x40106183, &(0x7f0000000e00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000c60001001000000085100000010000009500000000000000852000001e06030095"], &(0x7f0000000680)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000700)='./bus\x00', &(0x7f0000000740), 0x8, &(0x7f0000000780)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) r6 = syz_mount_image$vfat(&(0x7f0000000340), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000340)=ANY=[], 0x0, 0x385, &(0x7f0000000a40)="$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") inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001) r7 = openat(r6, &(0x7f0000000040)='./file1\x00', 0x400042, 0x0) fallocate(r7, 0x0, 0x8e14, 0x8ffff) copy_file_range(r7, 0x0, r7, &(0x7f0000000500)=0xffff, 0x9, 0x0) 1m27.041410449s ago: executing program 5 (id=95): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file3\x00', 0x4010, &(0x7f0000000180)={[{@nodelalloc}]}, 0x2, 0xbd8, &(0x7f00000001c0)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000dc0)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./tracing\x00', 0xbd) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x6, 0xc, &(0x7f0000001200)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000885000000a000000095"], &(0x7f0000001280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r3, 0x0, 0x2100, 0x0, &(0x7f0000001340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$VHOST_VDPA_SET_STATUS(r2, 0x4001af72, 0xffffffffffffffff) syz_emit_ethernet(0x2b1, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./dev\x00', 0x147) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000001340)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001540)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./tracing\x00', 0x178f88e27c29bfe4, 0x8d) r6 = gettid() timer_create(0x7, &(0x7f00000015c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000001600)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000001100)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001640)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x545c, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000001680)=@req={0x6, 0x6, 0x5, 0x80}, 0x10) setresuid(r1, 0xee01, 0xffffffffffffffff) 1m26.871868709s ago: executing program 5 (id=97): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140), 0x0, 0x20004080) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) (async) r1 = io_uring_setup(0x1b56, &(0x7f0000000cc0)={0x0, 0x1, 0x400, 0x3, 0x2c1}) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000d80)={0xe, "1a03e5090200030091000041392e00", 0xffffffffffffffff}) (async) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000dc0), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000e00)={0x4, "fa02790d2a69a2610f020a0000000000001100010000070042000000677c00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000e40)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r3}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5c00000012006bab9a3ff36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb00"/74, 0x4a}, {&(0x7f0000000540)="1ed68483068e7e7b115365cde0c05b774875", 0x12}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000880)=""/212, 0xd4}], 0x1}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4c03000017"], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000080)={0x1, 0x10000, 0x762765b6, 0x9, 0x40}) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m25.576220298s ago: executing program 5 (id=118): unshare(0x22020600) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x9, 0x9d5c, 0x0, 0xfffc}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r1 = socket(0x2b, 0x1, 0x1) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x2, 0x0, 0x401, 0x2}) 1m25.348652201s ago: executing program 34 (id=118): unshare(0x22020600) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x9, 0x9d5c, 0x0, 0xfffc}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r1 = socket(0x2b, 0x1, 0x1) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x2, 0x0, 0x401, 0x2}) 1m22.946631532s ago: executing program 6 (id=145): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x804000, &(0x7f0000000e00), 0xfe, 0x54a, &(0x7f0000001140)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000000c0), 0x3, 0x589, &(0x7f0000000180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x107) mount(0x0, &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000840)='9', 0x1) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000580140006"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000f40)={{r0, &(0x7f0000000980)='ext4\x00', 0x800, &(0x7f00000009c0)={@align=0x8, {0xc, 0x3, 0x1, 0x5}}, 0x0, &(0x7f0000000a00)={@_ha_fsid}, &(0x7f0000000a40)=0x4}, 0x4, &(0x7f0000000ec0)=[{0x3, 0x3, &(0x7f0000000a80)=':%\x00', &(0x7f0000000ac0)="8d6dbb901e8853ac3f0db025847484e3e3c1c36cf135e9d0679dde7569232798f3a54703b8c1bf8dbeda76a00a094d07c99deae221985f64bffff2cd600edce80d5b5401e7a0a9ac53faedf181b37053617158736ec3e1f00f7b4cb41bb538fe61838ddb15839abcd30183c8e46d8d6c19755947e4d004b52e14c4b3c3fdfea2059b", 0x82}, {0x1, 0x1, &(0x7f0000000b80)='proc\x00', &(0x7f0000000bc0)="1ac22e45767c292346da88fa02fd140be283dd6f167ae286b489d1b3d539db5907a5ee03f5d2dc0ce0d29eddeeb3b534b73ce632e4adcdd62b0db20570171b2c0ec36fdea0d34a02e5f665f364f9ace6c5ebe27943262e4c05dd4443b80f09c5c51674e9dd3a9615ce4e217a56701acc6248f15d4ad0d8b0f9637edc985a78d9b3603123fa6f1300b50f30c855c2b2b0f8bd8361ae0ab262297d1d9d26d531581fccec312e114757777715ba2591f1ff785fab5fead2c6adf3cf9074af6b288bac0857f12c4f487af66eb1b89ff47c120366b677cec0ef30864a0276d724", 0xde, 0x38}, {0x2, 0x874a, &(0x7f0000000cc0)=']\x00', &(0x7f0000000d00)="e2e4e1415395a1478c6be6c1eb55146548e7f3f70d0f3c219bb0fbfdc987e64a4bbbd0051815fbdd9248604a48d06013af21a39627c7688f57ef48d2650c094ced86e1fa0c9b516a072574e5ff35bc4b874a2b6be315559543f6f25ad67dbcdb9b473dca488243ca79a5", 0x6a, 0x22}, {0x2, 0x0, &(0x7f0000000d80)='ext4\x00', &(0x7f0000000e40)="be8c4d9d3cf57f93e72dbd2066f169ae3163221bc13c54b0bc4247fb21948693590716ee545308d332d73025f4222a72c26005029fb2724275dc8d3cae61750486bce1c830803c4b04cdf37b37ec150716b0c4cc5dda307425912965e36b0395ed37e317c879f04a7a90e6ce07bd774af0f6a25c7a9692cf48bf940fe4fc", 0x7e, 0x2}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dev\x00', 0x1d1) truncate(&(0x7f00000029c0)='./file2\x00', 0x6002) 1m22.496137133s ago: executing program 6 (id=147): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000f10d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x400000a}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x400000a}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) 1m22.298692471s ago: executing program 6 (id=152): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0xfffffffffffffffa, 0x104101) ioctl$RTC_WIE_ON(r0, 0x700f) (async) ioctl$RTC_WIE_ON(r0, 0x700f) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xa}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xa}}, './file0\x00'}) timerfd_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000000c0)) (async) timerfd_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000000c0)) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r1, 0x1, 0x1000000, 0xfffffffff0000000}) (async) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r1, 0x1, 0x1000000, 0xfffffffff0000000}) timerfd_settime(r1, 0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f0000000180)) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x50500, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0xfffa, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040000}, 0x44010) umount2(&(0x7f00000003c0)='./file1\x00', 0x1) (async) umount2(&(0x7f00000003c0)='./file1\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xffffffff}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000480)='syzkaller\x00', 0x9, 0xe1, &(0x7f00000004c0)=""/225, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xc, 0x4, 0xaf}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000640)=[r2], &(0x7f0000000680)=[{0x4, 0x2, 0x1, 0x4}], 0x10, 0x100}, 0x94) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xffffffff}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000480)='syzkaller\x00', 0x9, 0xe1, &(0x7f00000004c0)=""/225, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xc, 0x4, 0xaf}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000640)=[r2], &(0x7f0000000680)=[{0x4, 0x2, 0x1, 0x4}], 0x10, 0x100}, 0x94) fcntl$addseals(r5, 0x409, 0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)=0x0) ptrace(0x8, r6) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000007c0)=r6) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000800)=0x9) fcntl$getownex(r2, 0x10, &(0x7f0000000840)) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000840)) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xec, r3, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d546631}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4b7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3628a18d}]}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x24008094}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xec, r3, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d546631}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4b7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3628a18d}]}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x24008094}, 0x0) umount2(&(0x7f0000000a40)='./file0\x00', 0x8) r7 = socket(0xa, 0x6, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0xd, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x1c}}, 0x40) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, r8, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x48004) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, r8, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x48004) syz_pidfd_open(r6, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000cc0)='syzkaller\x00') sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x68, 0xd, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000) (async) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x68, 0xd, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001200)={0xfffffff8, 0x0, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/100, 0x64}, {&(0x7f0000000ec0)=""/244, 0xf4}, {&(0x7f0000000fc0)=""/195, 0xc3}, {&(0x7f00000010c0)=""/168, 0xa8}], &(0x7f00000011c0)=[0x7, 0x9, 0x6, 0x7ff, 0x4, 0x2, 0x5], 0x4}, 0x20) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001240)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0xc, 0x29, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x37}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x2, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x455e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @printk={@d}]}, &(0x7f0000001440)='syzkaller\x00', 0x6, 0x44, &(0x7f0000001480)=""/68, 0x41100, 0x52, '\x00', 0x0, @fallback=0x2c, r1, 0x8, &(0x7f0000001580)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000015c0)={0x3, 0x6, 0xe64f, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001680)=[r1, 0xffffffffffffffff, r4, r2], 0x0, 0x10, 0x400}, 0x94) 1m22.072113255s ago: executing program 6 (id=155): mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000900)='./file2\x00', 0x8, &(0x7f0000000940), 0x4, 0x526, &(0x7f0000000980)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file1\x00', 0x1d3942, 0x4) io_setup(0x2, &(0x7f0000000f00)=0x0) io_submit(r3, 0x1, &(0x7f0000000f40)=[&(0x7f0000000f80)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x4000, 0x600}]) syz_mount_image$fuse(0x0, &(0x7f0000000fc0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001000)='./file0\x00', &(0x7f0000001040), 0x4008, &(0x7f0000001080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r1, 0x20, &(0x7f00000001c0)={&(0x7f0000000200)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) ppoll(&(0x7f0000000300)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x20, 0x7, 0x8, 0x8001, 0x100, r5, 0x7ff, '\x00', 0x0, r1, 0x1, 0x1, 0x2}, 0x50) r6 = open$dir(&(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x32002, 0xae) openat(r6, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m20.241710611s ago: executing program 6 (id=171): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f00000000c0)=0x78) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) write(r1, &(0x7f0000000000)="3d4d47fc95cb331571fce36d73", 0xd) 1m19.866042269s ago: executing program 6 (id=179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f000037f000/0x2000)=nil, 0x2000}, 0x1}) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0xe8, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x0, 0x26}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x2000010}}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$TCSETS2(r2, 0x5453, 0x0) 1m19.789153277s ago: executing program 35 (id=179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f000037f000/0x2000)=nil, 0x2000}, 0x1}) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0xe8, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x0, 0x26}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x2000010}}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$TCSETS2(r2, 0x5453, 0x0) 1m9.534231166s ago: executing program 8 (id=327): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100007b00000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m8.669571646s ago: executing program 8 (id=330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x11ea, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1m8.551469957s ago: executing program 8 (id=334): ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x3152, 0x0, 0xffffffffffffffff}) pwrite64(r0, &(0x7f0000000040)="a74e5477093ee39b5eac39f164d4777cf505b6d6e8", 0x15, 0x8001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x21, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r0}, 0x50) 1m8.507703111s ago: executing program 8 (id=336): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@jqfmt_vfsv0}, {@auto_da_alloc}, {@noblock_validity}, {@inlinecrypt}, {@inlinecrypt}, {@delalloc}, {@nomblk_io_submit}, {@errors_remount}, {@dioread_nolock}]}, 0x1, 0x5af, &(0x7f0000000d00)="$eJzs3U1sG1UeAPD/jOOmH9mmK+1Ku6seqgWpSFWdpB9QOLVXRKVKPSBxgch1oypOXcUONFEk0nuF6AEB6qXc4MARxIED4sKRKxc+zkgVjUBqegAjx+PUTZ3ghDqG+PeTxn5vZuz//3n8nmdGM3IAA+tI4yGN+G9EXEgiRtuWDUW28EhzvZXlxeKD5cViEvX6xZ+SSCLi/vJisbV+kj0fiIiliPhPRHyZjziWrr3lnlahOr8wPVkul2az+lht5tpYdX7h+JWZyanSVOnqyeeeP33m1OmJExPt6T6ot9fyW2vrze9uvXXz6xfv3Pro48NLxXcmkzgbI9my9nY8Sc3PJB9n180/1YtgfZT0OwG2JZf180ZX+neMRi7r9Z3U2weH4R1JD+ih+nBEfU1bERgAiU4PA6q1H9A4/m1NO7n/cfdc8wCkEXdlebH4ZrTiDzXPTcTe1WOT/T8njxyZNI43D+1kouxKSzciYnxo6PHvf5J9/7Zv/EkkSE99ca65oR7f/una+BMdxp+R1rnTP6k1/q1k499Kh/i5Dca/C13G+PWVH97fMP6N4fhfx/jJWvykQ/w0Il7rMv7tlz87s9Gy+gcRR6Nz/MxYsvn54bHLV8ql8eZjxxifHz38wsbtj9i/QfzmOdu9q4m0t39Pll3aZfs//eqT/y9tEv+Zpzbf/p0+/30R8XaX8f95/8OXNlp290Zyr7EXsNXtn0Q+7nQZ/9mzR77Nis4aAgAAAAAAAADAE5SuXsuWpIW1cpoWCs17eP8V+9NypVo7drkyl8uueTsU+bR1pdVos5406hPZ9bit+ol19ZO5LGBu32q9UKyUL/W57QAAAAAAAAAAAAAAAAAAAPBXcWDd/f+/5Fbv/1//d9XAbrXxX34Du53+D4Pr0f6f9C0PYOf5/YeBVd+8/9sfgN3M7z8MLv0fBpf+D4OrY//ft/N5ADvP7z8MLv0fAAAAAAAAAAAAAAAAAAAAAAAAAAB64sL5842p/mB5sdioXxqan5uuvH78Uqk6XZiZKxaKldlrhalKZapcKhQrM3/0fkmlcm08rs5dH6uVqrWx6vzCqzOVuaut/xAr5XveIgAAAAAAAAAAAAAAAAAAAPj7GVmdkrQQkW/W07RQiPhHRBxKIrl8pVwaj4iDEfFNLj/cqE/0O2kAAAAAAAAAAAAAAAAAAADYZarzC9OT5XJptneFoSxUd6/6vtbTfIa2snJELG26Tj5rWtdpNN5xyzm3ovR2Mw1IIdfl93DgC30akAAAAAAAAAAAAAAAAAAAYIA9vOm3fe7BTV7xW++TAgAAAAAAAAAAAAAAAAAAgIGT/phERGM6Ovr0yPqle5KV3OpzRLxx++K71ydrtdmJxvx7a/Nr72XzT/Qjf6BbrX6aRkSjHwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPVecXpifL5dLsNgvDXazT7zYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbMfvAQAA///2XcrH") r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='.\x00', 0x80000, 0x1) open_by_handle_at(r0, &(0x7f0000000bc0)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r1 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x2, 0x7}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500)={0x0, 0x0}) r7 = getpid() r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40)='./cgroup/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000c80)={0x200040000, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240), {0x2}, &(0x7f0000000300)=""/236, 0xec, &(0x7f0000000400)=""/223, &(0x7f0000000c00)=[r6, r7], 0x2, {r8}}, 0x58) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x48810) recvmsg(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000012c0)=""/4089, 0xff9}, {&(0x7f00000022c0)=""/63, 0x3f}], 0x2}, 0x40000020) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000700)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r10, &(0x7f0000000740)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000780)={@random="c5a500429b3a", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}, 0x0) io_uring_enter(r1, 0x1, 0x1, 0x61, 0x0, 0x0) syz_pidfd_open(r5, 0x0) 1m8.437769087s ago: executing program 8 (id=338): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500540600fe800000dd86ffffffffffff000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 1m7.150535275s ago: executing program 8 (id=344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x54, 0xb, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}]}]}, 0x54}}, 0x0) (fail_nth: 4) 1m7.084115118s ago: executing program 36 (id=344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x54, 0xb, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}]}]}, 0x54}}, 0x0) (fail_nth: 4) 58.446137767s ago: executing program 1 (id=434): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000003c0)=0x7, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$SO_NETNS_COOKIE(r1, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000b40)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x1, 0x24008800) 58.376150199s ago: executing program 1 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, 0x3e, 0x107, 0x0, 0x5, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str=';\x00'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x19, 0x0, 0x0, @fd=r0}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) (async) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, 0x3e, 0x107, 0x0, 0x5, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str=';\x00'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x19, 0x0, 0x0, @fd=r0}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000140)={r4, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000200)=0x84) sendmmsg$inet_sctp(r2, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x44040}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x44040}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000002c0), &(0x7f0000000300)=0x8) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c00028005000100000000001400018008000100"], 0x5c}}, 0x0) 58.375898192s ago: executing program 1 (id=436): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000001c0)={[{}, {@i_version}, {@errors_remount}, {@bh}]}, 0x1, 0x4d5, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) socket$inet_udp(0x2, 0x2, 0x0) gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x1, 0x80000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) writev(r1, &(0x7f0000000380)=[{0x0}], 0x1) msgctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) 57.640291193s ago: executing program 1 (id=444): mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xbd}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SET_ARRAY_INFO(r0, 0x40480923, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRK(r2, 0x5409, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f00000001c0)='./md0\x00', 0x10000, 0x0) ioctl$HOT_ADD_DISK(r0, 0x928, 0x0) 57.511045563s ago: executing program 1 (id=445): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x208009, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB="0c4790024e1440a952d2a3ea5e2bf7fd721f89b57eb9bd8467ccdf94672236109b9229a62ce21e59c501838b3a9be7a971ca959f7851488bf8e4bf334d6062a7b8284a9108654d806b3bfde2c12c40adca71b27d18f979d1b324d5f511d5b79d5b22c345f399a9fe4a14e7d2382a4ac625eea3eb2b486914b332c44c228060b1e163a2fb04b721d6a55fcc08835fd75df27fd017c66d4086dfdbf7427d691134ded3ace0e56a2fb5e4321e40f84ce52f44fdaac2d192223bb1c9d5c3e21841c1b29864c12440d98ef404d92f99478409a74bdb5506860bf7ecbf39afda5145b58d1abf79164eee38071574"], 0x1, 0x32b, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x4) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./sys/class/net/bridge0/brif/bridge_slave_0/multicast_router\x00', 0x2, 0x0) readv(r0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/66, 0x42}], 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fd5f89f10000000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500182c00fe8000"], 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x6, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000940)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r2, 0x27, 0xe, 0x0, &(0x7f0000000a00)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x2000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) 57.404942691s ago: executing program 1 (id=448): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES32], 0x50) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x0, @none, 0x8}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="0410e64445a40108"], 0x4) syz_open_dev$mtd(&(0x7f0000000500), 0xb06a, 0x400) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$ECCGETLAYOUT(0xffffffffffffffff, 0x81484d11, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "f9ac1a", 0x2}}}, 0xd) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000580)) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000005c0)={0x27, 0x0, 0xfffffffd, 0x2, 0x80, 0x4, "cb7ac308c2e4fd2c225809eb35054d7b40220df69f497622498061be9d7c75cd55b37c17ee07081820dc12deaf8b596ee94ebe23421286b525410ce50a03b2", 0x22}, 0x60) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) accept(r5, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) write$cgroup_pid(r4, &(0x7f00000001c0)=r6, 0x12) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x60000, 0x80000, r4}) r8 = syz_open_dev$usbfs(&(0x7f0000000280), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0x80045505, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x3, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x4000000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) 42.189608238s ago: executing program 37 (id=448): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES32], 0x50) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x0, @none, 0x8}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="0410e64445a40108"], 0x4) syz_open_dev$mtd(&(0x7f0000000500), 0xb06a, 0x400) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$ECCGETLAYOUT(0xffffffffffffffff, 0x81484d11, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "f9ac1a", 0x2}}}, 0xd) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000580)) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000005c0)={0x27, 0x0, 0xfffffffd, 0x2, 0x80, 0x4, "cb7ac308c2e4fd2c225809eb35054d7b40220df69f497622498061be9d7c75cd55b37c17ee07081820dc12deaf8b596ee94ebe23421286b525410ce50a03b2", 0x22}, 0x60) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) accept(r5, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) write$cgroup_pid(r4, &(0x7f00000001c0)=r6, 0x12) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x60000, 0x80000, r4}) r8 = syz_open_dev$usbfs(&(0x7f0000000280), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0x80045505, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x3, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x4000000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) 29.772318237s ago: executing program 7 (id=687): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100005060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012000d00010076736f636b6d6f6e00000000"], 0x44}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000040), 0x4) (async) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x26, 0x0, 0x100}, 0xc) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x40401) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000110005000000000000000000000000000000000000000000000000000e00030076736f636b6d6f6e30000000"], 0x30}}, 0x0) (rerun: 64) 29.713182348s ago: executing program 7 (id=688): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) statx(0xffffffffffffff9c, &(0x7f0000001640)='./file0\x00', 0x4000, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="8db2bdd09ae85de20500000022bf000000000000a20675247eb96ad80422cff6c9b79692b2653afb2f2817caf211e35407827a109a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 32) socket$inet6(0xa, 0x3, 0x6) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000e40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000ec0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r5, 0x1}}, 0x48) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000200)={&(0x7f0000001680)=@in={0x2, 0x4e20, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000001700)=[@txtime={{0x18, 0x1, 0x4f, 0x7fffffffffffffff}}], 0x18}, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000f40)={0x16, 0x98, 0xfa00, {0x0, 0x4, r5, 0x30, 0x0, @ib={0x1b, 0x6, 0x0, {"d5846e824963e285148d4490bf8820c6"}, 0x1000, 0xbab2, 0x9}}}, 0xa0) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) (async) r8 = fanotify_init(0xf00, 0x1) fanotify_mark(r8, 0x105, 0x40009965, r7, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000140), &(0x7f0000000dc0)=@tcp=r7}, 0x20) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r9, &(0x7f0000000380)='27', 0x2) (async) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000400)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) mount$9p_unix(&(0x7f0000000500)='./proc/file0\x00', &(0x7f0000000540)='./proc\x00', &(0x7f0000000580), 0x48, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=unix,context=sysadm_u,euid=', @ANYRESDEC=r10, @ANYBLOB="2c7375626a5f757365723d5b2a2c736d61636b050000006f743d70726f63002c00"]) (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in6, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000000)=0x2e) (rerun: 64) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000001000)='ext4\x00', &(0x7f0000001040)='./file1\x00', 0x2a0479a, &(0x7f0000001080)={[{@dax_inode}, {@data_err_ignore}, {@nouid32}, {@oldalloc}, {@dioread_lock}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x489, &(0x7f0000001100)="$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") (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f00000015c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./file0/file0\x00', 0x4) (async, rerun: 64) r14 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000840)=0xc) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000880)=@loop={'/dev/loop', 0x0}, r16, &(0x7f00000008c0)) (async, rerun: 64) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x840, &(0x7f0000000940)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x45f1e23da065df4f}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other}, {@default_permissions}], [{@audit}, {@euid_gt={'euid>', r10}}, {@euid_eq={'euid', 0x3d, r12}}, {@fowner_eq={'fowner', 0x3d, r13}}, {@context={'context', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r16}}, {@fsname={'fsname', 0x3d, '(+'}}, {@subj_role={'subj_role', 0x3d, '\\\xbd^-'}}, {@permit_directio}]}}, 0x1, 0x0, &(0x7f0000000ac0)="f8fdfb6cdbb8bc1b15834a71b9796e41fc4c1f938ae0060b0bd1fb166bd5025a17edd5356a2320060f81271e") (async, rerun: 64) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r17, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000000401000000000000000100"/28], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYRESHEX=r17, @ANYRES32=0x0, @ANYBLOB="4191cf0819f57ed6ebc89b56f3a41a6d66c2205ab3ed4d7bcbbb560ffa000000008bd1747285b716d8ede6835c08daa099683abeec577f5602cb17449504d1823361be0000000000000000baf3f303bd52e7055c4872d9ede5c0089c212d1193dc75b5ce5b28137403c46ea74af985fa2f54e407cf8fe313754cc1590c2870395af21c3364733302fa383335affdd63d48f96ebf12bc6ff03883cd1882abc1d3a69fcce3d88d929a9f0822ba48f083b25c7a5b589ea9d5b6654c1194eeefa2c5d909ebb6c6bf71d4823e8dee40f82fdb04686e1f0df4b685c1cf3de3b4ca953f223c7fdb6a0402f1c76426e5d7e5af0dae314a808d8f4721cbe1c39091576d1a9652445e0faf6e0400c865ae0d7ba2f3a203f305958b227062f1f390659e3bff5c66", @ANYRESDEC=r15, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=0x0, @ANYRESOCT=r11], 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x400c4) 29.426354861s ago: executing program 7 (id=690): mkdirat(0xffffffffffffff9c, 0x0, 0x158) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x404, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002680)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002700)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)={0x90, 0x0, 0x10001, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x8, 0xfffffffffffffff6, 0x7f, 0x1ff, 0x75, 0xfffffffe, 0x7, 0x1, 0x4000, 0xfffffff4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000004880)='./file0/file1/file0\x00', &(0x7f00000048c0), 0x0, 0x0, 0x1) umount2(&(0x7f0000004940)='./file0\x00', 0x9) 29.423685338s ago: executing program 7 (id=691): r0 = syz_ublk_setup_io_uring(0x277c, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, r0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000a40)='ext4\x00', &(0x7f0000000a80)='./file1\x00', 0x200000, &(0x7f0000000ac0)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000000c40)="$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") sigaltstack(0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x2, &(0x7f00000011c0)={0x0, 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="ef5e2dcc001a0500140003006e657464657673696d30000000000000300016802c8fea802800010010000000bbbbbbbbbbbb000000000000df00000000000000007f00000000000000000000050011"], 0x6c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) setns(0xc9, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000007c0)={0x1, &(0x7f0000000800)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, r4, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000840)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000009c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x48, r7, 0x1, 0x0, 0x200, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'xfrm0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x4000014) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0xd, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @broadcast}, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001200)=ANY=[@ANYBLOB="58010000200001"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r12, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x10, &(0x7f0000001280)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r10, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000007b000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x5ddb343c6bddcfb5, 0x0, '\x00', 0x0, @sched_cls=0x36, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a030000000000000000000300000009000b0073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c0001"], 0xcc}, 0x1, 0x0, 0x0, 0x840}, 0x0) 29.293745125s ago: executing program 7 (id=695): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500540600fe80000000007c0000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 28.940878467s ago: executing program 7 (id=700): r0 = syz_clone3(&(0x7f00000005c0)={0x60a0600, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x32}, &(0x7f0000000440)=""/241, 0xf1, &(0x7f0000000540)=""/64, &(0x7f0000000580)}, 0x58) r1 = getpgid(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x1008, 0x0) write(0xffffffffffffffff, &(0x7f0000000f00)='3', 0x4e) write$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000640)={0x0, 0xffff, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write$smackfs_logging(r3, &(0x7f0000000740)=0xffffffffffffffff, 0xfffffe99) syz_clone3(&(0x7f0000000780)={0x18800000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140), {0x39}, &(0x7f0000000e00)=""/162, 0xa2, &(0x7f0000000280)=""/49, &(0x7f00000006c0)=[r0, r1, r2], 0x3, {r3}}, 0x58) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f0000000840)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '3\x00'}}}) ioctl$DM_TABLE_LOAD(r5, 0xc138fd09, &(0x7f0000000980)={0x4, 0x0, 0x0, 0x188, 0x138, 0x1, 0x0, 0xc11, 0x0, 0x0, @by_dev={r6}, [@writecache={0x0, 0x80, 0x0, 0x50, 'writecache\x00', {0x73, 0x20, @ram={'/dev/ram', 0x0}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, '512', 0x20, '1 nofua'}}]}) r7 = fanotify_init(0x20, 0x1000) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/netdevsim/del_device\x00', 0x210000, 0xa) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000000)) fanotify_mark(r7, 0x40, 0x22, r8, &(0x7f0000000b40)='./sys/bus/netdevsim/del_device\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'bridge0\x00', @local}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x3, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r9, 0x0, 0xe80, 0x0, &(0x7f0000000dc0)="c1dfb080cd21d308098e00008100568186ddaf3856ea907f82ca6470229e17cb10c9054b0f025470", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000700000000000000c00000009500000000000000bfb4e95983083c0656e93c229bed8957090f6459ba86cec7ec14af279fa980a733d794fc4c14817c021ba046fa83dbc3342d764c20fe880144b55cdec4e2f832d74b5d1f94e8238911d24590d347bfe6e8f86391a615dbb913a09801"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 28.84720018s ago: executing program 38 (id=700): r0 = syz_clone3(&(0x7f00000005c0)={0x60a0600, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x32}, &(0x7f0000000440)=""/241, 0xf1, &(0x7f0000000540)=""/64, &(0x7f0000000580)}, 0x58) r1 = getpgid(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x1008, 0x0) write(0xffffffffffffffff, &(0x7f0000000f00)='3', 0x4e) write$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000640)={0x0, 0xffff, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write$smackfs_logging(r3, &(0x7f0000000740)=0xffffffffffffffff, 0xfffffe99) syz_clone3(&(0x7f0000000780)={0x18800000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140), {0x39}, &(0x7f0000000e00)=""/162, 0xa2, &(0x7f0000000280)=""/49, &(0x7f00000006c0)=[r0, r1, r2], 0x3, {r3}}, 0x58) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f0000000840)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '3\x00'}}}) ioctl$DM_TABLE_LOAD(r5, 0xc138fd09, &(0x7f0000000980)={0x4, 0x0, 0x0, 0x188, 0x138, 0x1, 0x0, 0xc11, 0x0, 0x0, @by_dev={r6}, [@writecache={0x0, 0x80, 0x0, 0x50, 'writecache\x00', {0x73, 0x20, @ram={'/dev/ram', 0x0}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, '512', 0x20, '1 nofua'}}]}) r7 = fanotify_init(0x20, 0x1000) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/netdevsim/del_device\x00', 0x210000, 0xa) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000000)) fanotify_mark(r7, 0x40, 0x22, r8, &(0x7f0000000b40)='./sys/bus/netdevsim/del_device\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'bridge0\x00', @local}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x3, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r9, 0x0, 0xe80, 0x0, &(0x7f0000000dc0)="c1dfb080cd21d308098e00008100568186ddaf3856ea907f82ca6470229e17cb10c9054b0f025470", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000700000000000000c00000009500000000000000bfb4e95983083c0656e93c229bed8957090f6459ba86cec7ec14af279fa980a733d794fc4c14817c021ba046fa83dbc3342d764c20fe880144b55cdec4e2f832d74b5d1f94e8238911d24590d347bfe6e8f86391a615dbb913a09801"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 3.38334964s ago: executing program 4 (id=969): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e80), 0x0, 0x10, &(0x7f0000000ec0), 0xfffffffffffffd00}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000240)={0xffffffff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0x14, 0xa01, 0x0, 0x25dfdbfd, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x40) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010729bd700002dcdf25010000000c00060003000000030000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x4000) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x24e, 0x101000) ioctl$EVIOCGVERSION(r3, 0x80044501, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 3.276076265s ago: executing program 4 (id=970): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000005000000182300ff", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.354497133s ago: executing program 4 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r3, @ANYRES32=r1, @ANYBLOB="18005a8014000080050002000b00edff04000100"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x800) (rerun: 32) 2.144119302s ago: executing program 4 (id=980): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x103) setresuid(0x0, 0x0, 0xee00) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2000, 0x800, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="79028be98c2dfb42e79b3e89c978a960c593724b5113b8cc73cace302990d23849630a9d43f497f30f04c7de94ba4587e460", 0x32, 0xb, 0x0, 0x0) 1.968334671s ago: executing program 9 (id=982): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="14010000210001ffffffffffffffff00010100800c000100"], 0x114}], 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb702000000b0000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.584130862s ago: executing program 2 (id=985): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000004c0)={0x0, 0xfffffffffffffbc1, 0x4, 0x1}) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000008c0)={0xa, 0x8b}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, &(0x7f0000000900)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000a00)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a80), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000b00)) 1.529941579s ago: executing program 4 (id=986): syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xb02, 0x20) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000880)=""/187, 0xbb}, {0x0}], 0x2, 0x8, 0x80000001) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r2, &(0x7f0000000840)='270', 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b7020000000df100bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f00000005c0)='syzkaller\x00', 0x5e1a9f18, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r2, 0x8, &(0x7f0000000600)={0x0, 0x80000}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x0, 0x7f}, 0x10}, 0xfffffffffffffe49) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x4) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r4, &(0x7f0000000780)='7', 0x1) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r3, 0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000a40)={0x1, &(0x7f0000000a80)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000ac0)={0x0}) r8 = socket$nl_audit(0x10, 0x3, 0x9) connect$bt_l2cap(r0, &(0x7f0000000bc0)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0xe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000b40)={r7, 0x3, r8, 0x3, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000b80)={r7, 0xd349505a17428eec, r5, 0x1}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c) write(r9, &(0x7f00000001c0)='\\0', 0x2) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000940)={0x60, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000a00)={0xf893, 0x30314742, 0x2, @stepwise={0xa, 0xe, 0xb, 0x9, 0x40000, 0x519}}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x1000, 0x0, 0xfffffff9, 0x81}, 0x10) 1.41721885s ago: executing program 2 (id=988): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5813}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001e008d2a28bd7000ffdbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = memfd_secret(0x80000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000040), 0x1000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0x4}) getsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000280), &(0x7f0000000940)=0x4) 1.390814867s ago: executing program 3 (id=989): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfbf, &(0x7f00000003c0)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000003c0)={[{@prjquota}, {@errors_remount}, {@discard}, {@errors_remount}, {@grpid, 0x0}, {@orlov}, {@jqfmt_vfsv1}, {@nolazytime}, {@nobh}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@mblk_io_submit}, {@usrjquota_path={'usrjquota', 0x3d, './file0/../file0/../file0'}}], [], 0x2c}, 0xfe, 0x52e, &(0x7f00000010c0)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000a00)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0x6}, {0xfff1, 0xfff2}, {0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x99b7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000001}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x9, 0x1ff, 0x4, 0x2, 0x320, 0xb, 0x6}}, {0x10, 0x2, [0x8000, 0x1000, 0x3, 0x4, 0x0, 0x80]}}]}]}, 0x64}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)={0x34, r7, 0x303, 0x70bd27, 0x1, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000840}, 0x80) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x22000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x15, 0x1a, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffc5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd7}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0xdaf, 0xdf, &(0x7f00000005c0)=""/223, 0x40f00, 0x20, '\x00', r6, @fallback=0x2, r9, 0x8, &(0x7f0000000840)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0xb, 0xc, 0x88b}, 0x10, 0xffffffffffffffff, r3, 0x2, 0x0, &(0x7f00000008c0)=[{0x5, 0x2, 0x0, 0x4}, {0x4, 0x5, 0xd, 0x9}]}, 0x94) 1.29601436s ago: executing program 2 (id=990): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000840), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x1f2f, 0xe80, 0x3253, &(0x7f0000000940)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000980)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000a40)}, 0x23) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x4, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x11}]}, &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000240), 0x5a}, 0xfffffffe}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x40000000, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x543000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000b80), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r4, 0x7808b000) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000300)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000240)={'veth1_to_hsr\x00', {0x2, 0x0, @empty}}) 1.270246952s ago: executing program 0 (id=991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a1040, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) write$tun(r0, &(0x7f00000044c0)={@void, @val={0x1, 0x3, 0xfffb, 0x41a, 0x0, 0x4}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @multicast1, @empty, @multicast1}}, 0x26) syz_emit_ethernet(0x46, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002240)={0x50, 0x0, r2, {0x7, 0x2b, 0x7, 0x800, 0x101, 0x2, 0x2, 0x3ff, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000022c0)="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", 0x2000, &(0x7f00000042c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004380)={0x78, 0x0, 0xd, {0xb, 0x5, 0x0, {0x4, 0x8000000000000001, 0xfffffffffffffc01, 0x0, 0x1cc2f0c7, 0x101, 0x4, 0x6, 0xbfb, 0xc000, 0x20009, r3, r4, 0x9, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$smack_xattr_label(&(0x7f0000004400)='./file0\x00', &(0x7f0000004440)='security.SMACK64\x00', &(0x7f0000004480)=ANY=[@ANYBLOB='l'], 0x9, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @local, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) 1.260018151s ago: executing program 2 (id=992): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@dax_never}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101242, 0x97) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000100)=0x9, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) 1.23426993s ago: executing program 3 (id=993): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps\x00') read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='efivarfs\x00', 0x8000, 0x0) 1.136168959s ago: executing program 2 (id=994): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31600000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c0001000000e4ff0000000010000a800c000100", @ANYRES64], 0x100}, 0x1, 0x0, 0x0, 0x8894}, 0x0) 1.135432989s ago: executing program 3 (id=995): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) r5 = socket(0x2, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000003c0)={0x3, &(0x7f0000000400)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfbfff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000140)={0x6, 'syz_tun\x00', {0x2}}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000180)={0x0, 'syz_tun\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000240)={'syz_tun\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000002c0)={'vlan0\x00', 0x101}) getpeername$tipc(r0, &(0x7f0000000340), &(0x7f0000000380)=0x10) (async) syz_emit_ethernet(0x26, &(0x7f0000000300)={@random="122233445566", @random="aabbccddeeff", @val={@void}, {@generic={0x800, "4500001400000000400100000102030405060708"}}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x9, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.069604936s ago: executing program 0 (id=996): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'pimreg1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x8, 0x7800, 0xfffffffd, 0x5, {{0x25, 0x4, 0x0, 0x29, 0x94, 0x64, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp_prespec={0x44, 0x0, 0x48, 0x3, 0xb, [{@local}, {@broadcast}, {@multicast2, 0xfffffff9}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x5e6}, {@remote}]}, @cipso={0x86, 0x60, 0x3, [{0x7, 0x49, "46ad4c6f7fdbd0a5114659f1c5"}, {0x3, 0xd, "00008f32ce7d0d5c5a3f00"}, {0x1, 0x3, "f6"}, {0x1, 0x3, 'f'}, {0x7, 0xa, "1f1feab11437f0b9"}, {0x7, 0x7, "8562785fb2"}, {0x2, 0x12, "000000000100000800000000001400de"}, {0x6, 0xd, "c64aec66f9f044af66b0a5"}, {0x0, 0x3, 'S'}, {0x5, 0x5, '\aaA'}]}, @timestamp_addr={0x44, 0x0, 0xd6, 0x1, 0x6, [{@private=0xa010100}, {@empty, 0xb}, {@local, 0x2}]}, @end, @noop, @rr={0x7, 0xb, 0xd9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}]}]}}}}}) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f00000009c0)=0xd, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000a40)="14045200d3fc", 0x6, 0x4, &(0x7f0000000a80)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'vxcan1\x00', 0x0}) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000b00)=0x0, &(0x7f0000000b40)=0x4) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'ip_vti0\x00', 0x0, 0x10, 0x7800, 0x9, 0x5, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x68, 0x0, 0x3, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x32}, {[@generic={0x89, 0x4, "8b1e"}]}}}}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000c00)={'ip6gre0\x00', 0x0, 0x2f, 0xe6, 0x5, 0x401, 0x4, @empty, @rand_addr=' \x01\x00', 0x1, 0x8000, 0x800, 0x712e}}) (async, rerun: 32) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000cc0)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f0000000d00)={0x1d, r9}, 0x10) (async, rerun: 64) r10 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000d40)={'wg0\x00', 0x0}) setsockopt$inet_mreqn(r10, 0x0, 0x20, &(0x7f0000000d80)={@loopback, @remote, r11}, 0xc) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e40)={'syztnl2\x00', &(0x7f0000000dc0)={'syztnl2\x00', 0x0, 0x4, 0x40, 0x82, 0x7, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8, 0x4386, 0xc63}}) (rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e80)={0x17c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000014) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}]}, 0x1, 0x27e, &(0x7f0000000180)="$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") (async, rerun: 64) setrlimit(0x1, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r13 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x88c2, 0x1) (async) munmap$binder(0x0, 0xffffffff) (async) r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) r15 = dup(r14) ioctl$TIOCL_SETSEL(r15, 0x541c, &(0x7f0000000480)={0x2, {0x2, 0x103, 0x100, 0x551}}) (async) ioctl$TIOCL_SETSEL(r15, 0x541c, &(0x7f00000004c0)={0x2, {0x2, 0x107, 0x500, 0x100, 0x1, 0x4000}}) (async) pwrite64(r13, &(0x7f0000000480), 0xfdcf, 0x404042ffe) ioctl$sock_FIOGETOWN(r14, 0x8903, &(0x7f0000000540)) (async) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0xff6c, 0x5e) 1.048077483s ago: executing program 9 (id=997): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000140)={0x0, 0xfffffffe, 0x800, 0x3, 0x800000c3}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000a80)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) write(r0, &(0x7f0000000b00)="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", 0xff) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000000)={[{@nomblk_io_submit}, {@noload}]}, 0x2, 0x792, &(0x7f00000002c0)="$eJzs3c1rXOUaAPDnTDNJm/be5sKFe+sqIGigdGJqbBVcVFyIYKGga9swmYaaSaZkJqUJAS0iuBFUXAi66dpq3bn1Y6t/gHsX0lo1LUZcSORMzqTTZiZN0kynZX4/ONP3PR99znPe8/FmzmFOAD1rOP3IRRyKiPeTiIPZ+CQi8vVSX8SJtflWlpeK6ZDE6uqrvyX1eW4tLxWjaZnU/qzy/4j49p2Iw7mNcasLi9MT5XJpLquP1mbOj1YXFo+cm5mYKk2VZo+NjY8fPf7M8WO7l+sfPyweuP7BS09+ceKvt/939b3vkjgRB7JpzXnsluEYzrZJPt2Ed3gx3tztcF2VdHsF2JH00NyzdpTHoSQt93V7lQCADkt7oasAQI9JXP8BoMc0vge4tbxUbAzd/UbiwbrxQkTsXcu/cX9zbUpfds8uX78POngruePOSBIRQ7sQfzgiPv3q9SvpEB26DwnQyluXIuLM0PDG83+y4ZmF7XpqC/MM31Vfj/9j/j6jA/fyddr/ebZV/y+XHf976593938GWhy7O9H2+F+Xu7YLYdpK+3/PNz3bttKUf2ZoT1b7V73Pl0/OniuX0nPbvyNiJPIDaX1skxgjN/++2W5ac//v9w/f+CyNn/57e47ctb6BO5eZnKhN3E/OzW5cinisr1X+yXr7J236v6e2GOPl5979pN20NP8038awMf/OWr0c8UTL9r/9RFuy6fOJo/XdYbSxU7Tw5U8fD7aL39z+6bCyvLSaRFzZ/UxbS9t/cPP8h5Lm5zWr24/x/eWD37Sb1iL/YuNvoTWt9//+5LV6uT8bd3GiVpsbi+hPXtk4/ujtZRv1xvxp/iOPtz7+N9v/097JmS3m33f91893nn9npflPbqv9t1+4ujK9p138tfwbrdWu/cfrpZFszFbOf1tdwZ1uNwAAAAAAAAAAAAAAAAAAAAAAAADYjlxEHIgkV1gv53KFwto7vP8bg7lypVo7fLYyPzsZ9XdlD0U+1/ipy4NNv4c6lv0efqN+9K760xHxn4j4aGBfvV4oVsqT3U4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADL727z/P/XzwD0X39f5NQQAOmJvt1cAAHjgXP8BoPe4/gNA73H9B4De4/oPAL3H9R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAOO3XyZDqs/rm8VEzrkxcW5qcrF45MlqrThZn5YqFYmTtfmKpUpsqlQrEyc6//r1ypnB+P2fmLo7VStTZaXVg8PVOZn62dPjczMVU6Xco/kKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYHuqC4vTE+VyaU7hESj0Za32sKzPjgq5RhKdjPVL05j+TmXxEGzMzhW6eFICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeIT8EwAA//8umh0q") 632.057893ms ago: executing program 3 (id=998): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000004c0)={0x0, 0xfffffffffffffbc1, 0x4, 0x1}) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000008c0)={0xa, 0x8b}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, &(0x7f0000000900)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000a00)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a80), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000b00)) 600.735512ms ago: executing program 0 (id=999): r0 = socket(0x400000000010, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='GPL\x00'}, 0xfffffffffffffd59) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x80, 0x0, &(0x7f0000000400)="5becbcc49b8e46effefff01d299ed260f58f69471e01e2ef2a82d221b859650ba401cfa1fb93fc5a8b58776c485bd15749a6ab22b3b25dd961c303c74e26b7463b1d77f6293f0f5fb13e6a6be89405040c8cbc78285440945aeab3ff8b7d92549d540f545e6a2db689dca2b9bff69365b8cc07abe21c7a2a9dbe3581fba5e8ea", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', r2, 0x29, 0xb, 0x0, 0x6, 0x40, @private1, @mcast2, 0x50, 0x700, 0x1616, 0x52}}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000019c0)=@newtfilter={0xb4, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x84, 0x2, [@TCA_FLOWER_ACT={0x80, 0x3, [@m_csum={0x30, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xffffffff, 0xffffffffbffffffe, 0x101, 0xc}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) bind(r1, &(0x7f0000000540)=@ethernet={0x6, @remote}, 0x80) 557.048372ms ago: executing program 9 (id=1000): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nodelalloc}, {@minixdf}, {@nolazytime}]}, 0x1, 0xbaf, &(0x7f0000002480)="$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") syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x103482) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) (async) r2 = syz_open_dev$mtd(&(0x7f0000000040), 0x260c, 0x8a42) ioctl$MEMREAD(r2, 0xc0404d1a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) (async) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 532.614943ms ago: executing program 3 (id=1001): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="c2ba464dcbf7ee86bb00bbbb81d1450000380000000000019078ac1e0001ac1414aa030490781200183f250000000000000000320000ffffffff7f00000103a50857de3cf18b"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019480)={0x8, 0x3, &(0x7f0000019540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019580)={0x8, 0x3, &(0x7f0000019640)=ANY=[], &(0x7f0000019680)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000196c0)={r1, 0xffffffffffffffff, 0x1e, 0x0, @val=@tracing}, 0x20) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x3) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) r2 = socket(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r3, &(0x7f0000019700)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(0xca, &(0x7f0000019780)="040e0c01031000ffffffffff40ffff", 0xf) write(0xca, &(0x7f00000197c0)="040e0c01032000ffffffffffffffff", 0xf) nanosleep(&(0x7f0000019800)={0x0, 0x2faf080}, 0x0) write(r3, &(0x7f0000019880)="0d000000010001", 0x7) nanosleep(&(0x7f00000198c0)={0x0, 0x2faf080}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000019900)={0x0, 0x3e8}, 0x10) connect(r4, &(0x7f0000019940)=@un=@file={0x1f, '\x00\x00\x00\x00\x00\x00\x01\x00'}, 0xa) setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000180)=0x1000020f, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = socket(0x1d, 0x2, 0x6) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r6, &(0x7f0000000440)=[{&(0x7f0000000480)=""/102400, 0x19000}, {0x0, 0x300}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000002c0)={0x1d, r7, 0x8000000000000003}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', r7, 0x4, 0xff, 0x3, 0x80000001, 0x4c, @mcast2, @dev={0xfe, 0x80, '\x00', 0xd}, 0x80, 0x7800, 0xffffff01, 0x6}}) 448.092245ms ago: executing program 4 (id=1002): r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xc00) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001740)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001800), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001840)=0x6) socket$netlink(0x10, 0x3, 0x4) openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r5, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf61000000000000070100003f00000085000000c2000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 447.569658ms ago: executing program 0 (id=1003): r0 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300), 0x1, 0x246, &(0x7f0000000340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x20000090001) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x1}]}, 0x10) close(0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl(r2, 0x404c4701, &(0x7f0000000100)="0100000000000000000000000000000001000000000000000000000040000000400000000000000002") r3 = socket$inet6(0xa, 0xa, 0x1) accept$inet6(r3, 0x0, &(0x7f0000000600)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r4, 0x0) 299.086662ms ago: executing program 9 (id=1004): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @auto=[0x61, 0x63, 0x36, 0x36, 0x66, 0x30, 0x61, 0x35, 0x32, 0x36, 0x31, 0x33, 0x62, 0x62, 0x62, 0x32]}, &(0x7f00000001c0)={0x0, "afc3c4459e7febdd10caee313669e9520ba0a002eebdf972d024059d4bcd6db5c4d8f3d09874638fa59c21a752b67a293647f237ec76459bf4bcac916e9ef29f", 0x2f}, 0x48, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r1) keyctl$read(0xb, r1, &(0x7f0000000100)=""/4, 0x4) keyctl$describe(0x6, r2, &(0x7f0000000240)=""/206, 0xce) open_tree(0xffffffffffffff9c, 0x0, 0x81901) 259.635671ms ago: executing program 2 (id=1005): sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x1404, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x400c011) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x76dc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x1000404, &(0x7f0000000e40)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000f00)=r3) close(r3) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000bc0)={0x2, 0x4e20, @broadcast}, 0x10) writev(r5, &(0x7f0000000c00)=[{&(0x7f0000000f40)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418efffe0004fcff", 0x58}], 0x1) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="5800000000000000000000000000000061126000200000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r7, &(0x7f00000003c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000400)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)='X', 0x1}], 0x1) splice(r2, 0x0, r1, 0x0, 0x2, 0x0) r8 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@acl}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") copy_file_range(r0, &(0x7f00000003c0)=0x5, r8, &(0x7f0000000640)=0x7, 0x9, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x2, 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000cc0), &(0x7f0000000d00)=0x8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x804008, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) setsockopt$inet_int(r6, 0x0, 0x19, &(0x7f0000000d40)=0x35, 0x4) 210.958723ms ago: executing program 9 (id=1006): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8080, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x6, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x9, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, ' \x00'}]}}]}, 0x170}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r8}]}, 0x1c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="e38edaf1c20c95e94bbdc837892e02c01fdbe3232984ccbcf7a97fc94c145ef49ced11ebb297c3ed1fc5967b3e2f73f0de579e4c0b63fb2af6e4b3511395a1ca1b013534dd48e67d262929b768ec098b245255b892299d46e10ffad3fa4f6bdb16591b656fff65385317ec21a1373739c51d2d647a30756eb4c1888f661f3f7c2df3c3b7a117da42ae2b84807a810a7c8e322a37b7a9d011b705951620bdf00f9f9f2af172ee9930b02b4eb070b0e0d87b2c84f83a", @ANYRES32=r2, @ANYRES8=r1, @ANYRESOCT=r8, @ANYRESHEX=r1, @ANYRES32=r8, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES64, @ANYRES32=r0, @ANYBLOB="e3e0505b7cc7c383b3de444c82d07d02f96c1a205f5cd62ac39100cf12dfe735d83e201fa7243e8e3b878e9b3711edf011f06644085ee2b8246c1d2c24bf7ce84d502394f7716d31176508d46d0683c28890b43edf7580424e20a39b65b72aec9082efe641d7a1110edb2c6279dc5294994425da6c3b38724de65d529a91dad039bc6cffcb642c7045ea837698b8c86d5dd33d2ee0e823d3aba4fe42c53c24ef65a958990a86f371171638f22b166d78a1a4664dc2b202d29a53"], 0x40}}, 0x0) 108.135506ms ago: executing program 3 (id=1007): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="14010000210001ffffffffffffffff00010100800c000100"], 0x114}], 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb702000000f3000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 107.201267ms ago: executing program 9 (id=1008): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r4) (async) getsockname$packet(r4, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x56) sendmsg$nl_route(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000840)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6b, r5}) (async) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000380)={{0x1, 0x600, 0x18}, './file0\x00'}) connect$phonet_pipe(r2, &(0x7f0000000140)={0x23, 0x0, 0x58}, 0x10) (async) accept4(r0, 0x0, 0x0, 0x80000) (async) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_INSN(r8, 0x8028640c, &(0x7f0000000200)={0x4000000, 0x28, 0x0, 0x0, 0x2}) (async) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000240)=0x1, 0x4) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000828500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0xfca804a0, 0x14, 0x0, &(0x7f0000000880)="00c1b340bba9271c6d0a000009000100461bd4decb0f657cd3bcd3df3a90b15c8434ad4aca92654013be6cb6cd04c16fd616311130deb75fcd7c57c0963e45b202d0c7e3a000c39d8b085bd68a468cc1c68f8d3509737f0b228d394b8c07be82de5698494193cacdae6245404446e47975b443647db839245726137833e46260a55b58beb177e1d4db5dff9b1ee3a20d467a14600edbf572613733d35d3d039e32d2ada4fec93597a628f32fdb6c06541bcf51009cfa0b8686659675c5f8f21c0de729524040e2a391471a987d247b859ec971b01c12bfc44c745dcf93efb4cfa6", 0x0, 0x5, 0x0, 0xfffffffffffffe27, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc}, 0x50) (async) r11 = syz_open_dev$evdev(&(0x7f0000000280), 0x1bbc, 0x801) write$evdev(r11, &(0x7f00000002c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) ioctl$EVIOCSCLOCKID(r11, 0x400445a0, &(0x7f0000000300)=0x7) (async) close_range(r1, 0xffffffffffffffff, 0x2) (async) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000561000/0x4000)=nil, 0x4000, &(0x7f0000000100)='\x00') 40.028785ms ago: executing program 0 (id=1009): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fc, &(0x7f0000001000)="$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") r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0xa8800, 0x39) ioctl$HOT_ADD_DISK(r1, 0x928, 0x0) 0s ago: executing program 0 (id=1010): r0 = openat$md_new_array(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0xfffffffe) r1 = openat$md(0xffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000001c0)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, &(0x7f0000000240)) kernel console output (not intermixed with test programs): ss `syz.0.365'. [ 62.252194][ T6811] NCSI netlink: No device for ifindex 0 [ 62.346339][ T6818] Invalid ELF header magic: != ELF [ 62.511694][ T5706] team0 (unregistering): Port device team_slave_1 removed [ 62.516685][ T5706] team0 (unregistering): Port device team_slave_0 removed [ 62.522621][ T6823] binder: 6822:6823 BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 62.522636][ T6823] binder: 6822:6823 ioctl c0306201 20000100 returned -22 [ 62.653200][ T6828] netlink: 20 bytes leftover after parsing attributes in process `syz.7.369'. [ 62.653218][ T6828] netlink: 20 bytes leftover after parsing attributes in process `syz.7.369'. [ 62.653732][ T4814] tipc: Node number set to 2886997007 [ 62.654534][ T4398] 8021q: adding VLAN 0 to HW filter on device eth17 [ 62.657803][ T6676] team0: Port device team_slave_0 added [ 62.661539][ T6676] team0: Port device team_slave_1 added [ 62.674442][ T6676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.674460][ T6676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.674473][ T6676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.675603][ T6676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.675615][ T6676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.675626][ T6676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.734049][ T6676] hsr_slave_0: entered promiscuous mode [ 62.735440][ T6676] hsr_slave_1: entered promiscuous mode [ 62.848263][ T4714] Bluetooth: hci3: connection err: -111 [ 62.848368][ T4714] Bluetooth: hci3: hardware error 0x44 [ 62.849321][ T6838] FAULT_INJECTION: forcing a failure. [ 62.849321][ T6838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.849337][ T6838] CPU: 1 UID: 0 PID: 6838 Comm: syz.1.372 Not tainted syzkaller #0 PREEMPT [ 62.849348][ T6838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 62.849353][ T6838] Call trace: [ 62.849356][ T6838] show_stack+0x2c/0x3c (C) [ 62.849375][ T6838] __dump_stack+0x30/0x40 [ 62.849387][ T6838] dump_stack_lvl+0xd8/0x12c [ 62.849403][ T6838] dump_stack+0x1c/0x28 [ 62.849414][ T6838] should_fail_ex+0x418/0x58c [ 62.849423][ T6838] should_fail+0x14/0x24 [ 62.849431][ T6838] should_fail_usercopy+0x20/0x30 [ 62.849440][ T6838] put_timespec64+0xc8/0x208 [ 62.849452][ T6838] __arm64_sys_clock_gettime+0x1f0/0x260 [ 62.849462][ T6838] invoke_syscall+0x98/0x244 [ 62.849474][ T6838] el0_svc_common+0xec/0x23c [ 62.849485][ T6838] do_el0_svc+0x4c/0x5c [ 62.849497][ T6838] el0_svc+0x60/0x1d8 [ 62.849506][ T6838] el0t_64_sync_handler+0x44/0x104 [ 62.849514][ T6838] el0t_64_sync+0x198/0x19c [ 62.862048][ T4710] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 62.870272][ T6838] 9p: Bad value for 'wfdno' [ 63.075236][ T4710] Bluetooth: hci4: command tx timeout [ 63.103666][ T6676] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 63.116933][ T6676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.117291][ T6676] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 63.124573][ T6676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.127934][ T6676] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 63.135474][ T6676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.136092][ T4398] 8021q: adding VLAN 0 to HW filter on device eth18 [ 63.136221][ T6676] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 63.149408][ T6676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.192575][ T6852] FAULT_INJECTION: forcing a failure. [ 63.192575][ T6852] name failslab, interval 1, probability 0, space 0, times 0 [ 63.192595][ T6852] CPU: 0 UID: 0 PID: 6852 Comm: syz.0.374 Not tainted syzkaller #0 PREEMPT [ 63.192606][ T6852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 63.192613][ T6852] Call trace: [ 63.192617][ T6852] show_stack+0x2c/0x3c (C) [ 63.192637][ T6852] __dump_stack+0x30/0x40 [ 63.192650][ T6852] dump_stack_lvl+0xd8/0x12c [ 63.192661][ T6852] dump_stack+0x1c/0x28 [ 63.192672][ T6852] should_fail_ex+0x418/0x58c [ 63.192690][ T6852] should_failslab+0xc4/0x120 [ 63.192699][ T6852] kmem_cache_alloc_noprof+0x94/0x5d4 [ 63.192708][ T6852] skb_clone+0x1ac/0x320 [ 63.192721][ T6852] netlink_broadcast_filtered+0x520/0xd58 [ 63.192734][ T6852] netlink_broadcast+0x50/0x68 [ 63.192744][ T6852] kobject_uevent_net_broadcast+0x33c/0x53c [ 63.192756][ T6852] kobject_uevent_env+0x518/0x944 [ 63.192766][ T6852] kobject_uevent+0x2c/0x3c [ 63.192775][ T6852] device_add+0x4d0/0x9e0 [ 63.192786][ T6852] hci_register_dev+0x33c/0x8ac [ 63.192794][ T6852] vhci_create_device+0x328/0x624 [ 63.192804][ T6852] vhci_write+0x314/0x3d8 [ 63.192813][ T6852] vfs_write+0x51c/0xa0c [ 63.192821][ T6852] ksys_write+0x12c/0x228 [ 63.192829][ T6852] __arm64_sys_write+0x84/0x98 [ 63.192837][ T6852] invoke_syscall+0x98/0x244 [ 63.192849][ T6852] el0_svc_common+0xec/0x23c [ 63.192860][ T6852] do_el0_svc+0x4c/0x5c [ 63.192872][ T6852] el0_svc+0x60/0x1d8 [ 63.192879][ T6852] el0t_64_sync_handler+0x44/0x104 [ 63.192887][ T6852] el0t_64_sync+0x198/0x19c [ 63.286503][ T6862] nfs: Unknown parameter 'ext3' [ 63.297206][ T6676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.303296][ T6676] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.319962][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.319992][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.320508][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.320527][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.405772][ T6880] loop7: detected capacity change from 0 to 512 [ 63.441258][ T6878] fuse: Bad value for 'fd' [ 63.685713][ T6676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.811931][ T6923] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 63.811949][ T6923] netlink: 244 bytes leftover after parsing attributes in process `syz.1.384'. [ 63.811958][ T6923] NCSI netlink: No device for ifindex 0 [ 63.836446][ T4398] 8021q: adding VLAN 0 to HW filter on device eth19 [ 63.990829][ T6676] veth0_vlan: entered promiscuous mode [ 64.000113][ T6676] veth1_vlan: entered promiscuous mode [ 64.026598][ T6676] veth0_macvtap: entered promiscuous mode [ 64.055400][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.386'. [ 64.057645][ T6676] veth1_macvtap: entered promiscuous mode [ 64.064668][ T6935] loop7: detected capacity change from 0 to 512 [ 64.070597][ T6676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.076896][ T6676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.077562][ T6935] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 64.077607][ T6935] System zones: 1-12 [ 64.098363][ T6935] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #12: comm syz.7.386: missing EA_INODE flag [ 64.098391][ T6935] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 64.099555][ T6935] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.386: error while reading EA inode 12 err=-117 [ 64.099576][ T6935] loop7: lost filesystem error report for type 5 error -117 [ 64.099862][ T6935] EXT4-fs (loop7): 1 orphan inode deleted [ 64.101100][ T6935] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.120132][ T5694] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.121150][ T5694] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.121270][ T5694] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.121382][ T5694] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.127732][ T5694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.127745][ T5694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.143107][ T5694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.143121][ T5694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.212025][ T4711] Bluetooth: hci4: command tx timeout [ 65.212116][ T4714] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 65.214487][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.214520][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.216766][ T1090] cfg80211: failed to load regulatory.db [ 65.248086][ T4710] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 65.453486][ T5464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.470831][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 65.503604][ T6960] binder: 6957:6960 tried to acquire reference to desc 0, got 1 instead [ 65.507093][ T6960] binder: 6957:6960 got transaction to invalid handle, 3 [ 65.507112][ T6960] binder_debug: 11 callbacks suppressed [ 65.507119][ T6960] binder: 6957:6960 cannot find target node [ 65.507132][ T6960] binder: 6957:6960 transaction call to 0:0 failed 44/29201/-22, code 0 size 0-0 line 3253 [ 65.507503][ T1090] binder: release 6957:6960 transaction 39 out, still active [ 65.507515][ T1090] binder: undelivered TRANSACTION_COMPLETE [ 65.539330][ T6956] Bluetooth: MGMT ver 1.23 [ 65.561284][ T1090] binder: undelivered TRANSACTION_ERROR: 29201 [ 65.561331][ T1090] binder: send failed reply for transaction 39, target dead [ 65.661464][ T1090] kernel read not supported for file /vcs (pid: 1090 comm: kworker/0:2) [ 66.072274][ T6976] batadv_slave_1: entered promiscuous mode [ 66.077704][ T6975] batadv_slave_1: left promiscuous mode [ 66.164590][ T6984] loop0: detected capacity change from 0 to 1024 [ 66.192431][ T6984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.281141][ T6993] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 66.281158][ T6993] netlink: 244 bytes leftover after parsing attributes in process `syz.3.402'. [ 66.281167][ T6993] NCSI netlink: No device for ifindex 0 [ 66.312495][ T6994] netlink: 272 bytes leftover after parsing attributes in process `syz.1.401'. [ 66.519258][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.601882][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.9.405'. [ 66.619164][ T7009] binder: 7006:7009 tried to acquire reference to desc 0, got 1 instead [ 66.640305][ T7009] binder: 7006:7009 got transaction to invalid handle, 3 [ 66.640323][ T7009] binder: 7006:7009 cannot find target node [ 66.640338][ T7009] binder: 7006:7009 transaction call to 0:0 failed 54/29201/-22, code 0 size 0-0 line 3253 [ 66.640727][ T4813] binder: release 7006:7009 transaction 49 out, still active [ 66.640741][ T4813] binder: undelivered TRANSACTION_COMPLETE [ 66.677332][ T7012] openvswitch: netlink: Message has 2 unknown bytes. [ 66.801034][ T7024] loop7: detected capacity change from 0 to 8 [ 66.807891][ T7024] SQUASHFS error: Unable to read inode 0xe3 [ 66.944348][ T7020] netlink: 34 bytes leftover after parsing attributes in process `syz.9.406'. [ 67.014066][ T7034] syzkaller0: entered promiscuous mode [ 67.014084][ T7034] syzkaller0: entered allmulticast mode [ 67.079790][ T7037] netlink: 'syz.9.411': attribute type 1 has an invalid length. [ 67.149333][ T7040] fuse: Bad value for 'fd' [ 67.228526][ T4710] Bluetooth: hci4: command tx timeout [ 67.657106][ T7063] __nla_validate_parse: 1 callbacks suppressed [ 67.657122][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.9.417'. [ 67.698079][ T7063] binder: 7062:7063 tried to acquire reference to desc 0, got 1 instead [ 67.698943][ T7063] binder: 7062:7063 got transaction to invalid handle, 3 [ 67.882348][ T7073] netlink: 'syz.9.418': attribute type 39 has an invalid length. [ 68.456974][ T7100] FAULT_INJECTION: forcing a failure. [ 68.456974][ T7100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.457001][ T7100] CPU: 0 UID: 0 PID: 7100 Comm: syz.3.422 Not tainted syzkaller #0 PREEMPT [ 68.457013][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 68.457019][ T7100] Call trace: [ 68.457022][ T7100] show_stack+0x2c/0x3c (C) [ 68.457041][ T7100] __dump_stack+0x30/0x40 [ 68.457053][ T7100] dump_stack_lvl+0xd8/0x12c [ 68.457065][ T7100] dump_stack+0x1c/0x28 [ 68.457076][ T7100] should_fail_ex+0x418/0x58c [ 68.457085][ T7100] should_fail+0x14/0x24 [ 68.457092][ T7100] should_fail_usercopy+0x20/0x30 [ 68.457100][ T7100] put_timespec64+0xc8/0x208 [ 68.457112][ T7100] __arm64_sys_clock_gettime+0x1f0/0x260 [ 68.457122][ T7100] invoke_syscall+0x98/0x244 [ 68.457135][ T7100] el0_svc_common+0xec/0x23c [ 68.457147][ T7100] do_el0_svc+0x4c/0x5c [ 68.457158][ T7100] el0_svc+0x60/0x1d8 [ 68.457167][ T7100] el0t_64_sync_handler+0x44/0x104 [ 68.457175][ T7100] el0t_64_sync+0x198/0x19c [ 68.574641][ T7100] 9p: Bad value for 'wfdno' [ 68.660980][ T7112] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 68.660998][ T7112] overlayfs: failed to set xattr on upper [ 68.661003][ T7112] overlayfs: ...falling back to redirect_dir=nofollow. [ 68.661007][ T7112] overlayfs: ...falling back to xino=off. [ 68.733069][ T7117] overlay: Bad value for 'uuid' [ 68.774503][ T7120] netlink: 'syz.7.427': attribute type 5 has an invalid length. [ 69.016964][ T7120] netlink: 12 bytes leftover after parsing attributes in process `syz.7.427'. [ 69.309573][ T4710] Bluetooth: hci4: command tx timeout [ 69.471614][ T7140] loop7: detected capacity change from 0 to 512 [ 69.473413][ T7140] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 69.473431][ T7140] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.473437][ T7140] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 69.491179][ T7140] EXT4-fs error (device loop7): mb_free_blocks:2049: group 0, inode 11: block 198:freeing already freed block (bit 197); block bitmap corrupt. [ 69.491375][ T7140] EXT4-fs (loop7): Remounting filesystem read-only [ 69.491502][ T7140] EXT4-fs (loop7): 1 truncate cleaned up [ 69.491962][ T7140] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.529879][ T5464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.596601][ T7151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.596743][ T7151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.603688][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 69.642521][ T7154] loop1: detected capacity change from 0 to 512 [ 69.644057][ T7154] EXT4-fs: Ignoring removed i_version option [ 69.644074][ T7154] EXT4-fs: Ignoring removed bh option [ 69.656502][ T7154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.660519][ T7155] loop7: detected capacity change from 0 to 512 [ 69.671324][ T7155] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 69.707256][ T7155] __quota_error: 4294 callbacks suppressed [ 69.707273][ T7155] Quota error (device loop7): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 69.707322][ T7155] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 69.707344][ T7155] EXT4-fs error (device loop7): ext4_acquire_dquot:7070: comm syz.7.433: Failed to acquire dquot type 0 [ 70.091366][ T7167] netlink: 'syz.3.438': attribute type 1 has an invalid length. [ 70.091385][ T7167] netlink: 244 bytes leftover after parsing attributes in process `syz.3.438'. [ 70.091394][ T7167] NCSI netlink: No device for ifindex 0 [ 70.132781][ T30] audit: type=1107 audit(70.100:4671): pid=7163 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='üû?ú' [ 70.357060][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.431037][ T7188] md: array md1 already initialised! [ 70.491108][ T7198] loop1: detected capacity change from 0 to 128 [ 70.950176][ T4710] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 70.950192][ T4710] CPU: 1 UID: 0 PID: 4710 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT [ 70.950203][ T4710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 70.950209][ T4710] Workqueue: hci4 hci_rx_work [ 70.950224][ T4710] Call trace: [ 70.950227][ T4710] show_stack+0x2c/0x3c (C) [ 70.950244][ T4710] __dump_stack+0x30/0x40 [ 70.950256][ T4710] dump_stack_lvl+0xd8/0x12c [ 70.950268][ T4710] dump_stack+0x1c/0x28 [ 70.950280][ T4710] sysfs_warn_dup+0x9c/0xb8 [ 70.950289][ T4710] sysfs_create_dir_ns+0x190/0x1f4 [ 70.950297][ T4710] kobject_add_internal+0x290/0x6f0 [ 70.950307][ T4710] kobject_add_varg+0x9c/0xe8 [ 70.950316][ T4710] kobject_add+0x110/0x1c8 [ 70.950325][ T4710] device_add+0x394/0x9e0 [ 70.950335][ T4710] hci_conn_add_sysfs+0xbc/0x1e8 [ 70.950346][ T4710] le_conn_complete_evt+0xc84/0x122c [ 70.950356][ T4710] hci_le_conn_complete_evt+0x114/0x3d8 [ 70.950366][ T4710] hci_le_meta_evt+0x2b0/0x46c [ 70.950377][ T4710] hci_event_packet+0x4c0/0x9c8 [ 70.950387][ T4710] hci_rx_work+0x2f4/0xd78 [ 70.950394][ T4710] process_scheduled_works+0x91c/0x1250 [ 70.950406][ T4710] worker_thread+0x798/0xbd0 [ 70.950416][ T4710] kthread+0x304/0x3d4 [ 70.950425][ T4710] ret_from_fork+0x10/0x20 [ 70.950440][ T4710] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 70.950513][ T4710] Bluetooth: hci4: failed to register connection device [ 70.957349][ T5464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 71.170270][ T7218] FAULT_INJECTION: forcing a failure. [ 71.170270][ T7218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.170365][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.0.452 Not tainted syzkaller #0 PREEMPT [ 71.170381][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 71.170386][ T7218] Call trace: [ 71.170389][ T7218] show_stack+0x2c/0x3c (C) [ 71.170409][ T7218] __dump_stack+0x30/0x40 [ 71.170420][ T7218] dump_stack_lvl+0xd8/0x12c [ 71.170430][ T7218] dump_stack+0x1c/0x28 [ 71.170439][ T7218] should_fail_ex+0x418/0x58c [ 71.170447][ T7218] should_fail+0x14/0x24 [ 71.170454][ T7218] should_fail_usercopy+0x20/0x30 [ 71.170461][ T7218] _inline_copy_from_user+0x3c/0x174 [ 71.170474][ T7218] copy_msghdr_from_user+0xb8/0x194 [ 71.170481][ T7218] ___sys_sendmsg+0x14c/0x224 [ 71.170490][ T7218] __sys_sendmmsg+0x204/0x580 [ 71.170500][ T7218] __arm64_sys_sendmmsg+0xac/0xc8 [ 71.170510][ T7218] invoke_syscall+0x98/0x244 [ 71.170521][ T7218] el0_svc_common+0xec/0x23c [ 71.170530][ T7218] do_el0_svc+0x4c/0x5c [ 71.170540][ T7218] el0_svc+0x60/0x1d8 [ 71.170548][ T7218] el0t_64_sync_handler+0x44/0x104 [ 71.170555][ T7218] el0t_64_sync+0x198/0x19c [ 71.295635][ T7227] md: array md0 already initialised! [ 71.302893][ T7228] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 71.772847][ T7245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.459'. [ 71.820761][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 71.847465][ T7247] netlink: 'syz.3.460': attribute type 1 has an invalid length. [ 71.941961][ T7250] netlink: 'syz.3.461': attribute type 1 has an invalid length. [ 71.941978][ T7250] netlink: 244 bytes leftover after parsing attributes in process `syz.3.461'. [ 71.941987][ T7250] NCSI netlink: No device for ifindex 0 [ 72.387847][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.9.463'. [ 72.578736][ T7267] binder: 7266:7267 tried to acquire reference to desc 0, got 1 instead [ 72.579202][ T7267] binder: 7266:7267 got transaction to invalid handle, 3 [ 72.579213][ T7267] binder_debug: 8 callbacks suppressed [ 72.579219][ T7267] binder: 7266:7267 cannot find target node [ 72.579232][ T7267] binder: 7266:7267 transaction call to 0:0 failed 74/29201/-22, code 0 size 0-0 line 3253 [ 72.579501][ T4834] binder: release 7266:7267 transaction 69 out, still active [ 72.579520][ T4834] binder: undelivered TRANSACTION_COMPLETE [ 72.598013][ T5956] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.598055][ T5956] binder: send failed reply for transaction 69, target dead [ 72.636170][ T7269] binder: 7268:7269 tried to acquire reference to desc 0, got 1 instead [ 72.637935][ T7269] binder: 7268:7269 got transaction to invalid handle, 3 [ 72.637947][ T7269] binder: 7268:7269 cannot find target node [ 72.638155][ T7269] binder: 7268:7269 transaction call to 0:0 failed 84/29201/-22, code 0 size 0-0 line 3253 [ 72.638613][ T5956] binder: release 7268:7269 transaction 79 out, still active [ 72.638630][ T5956] binder: undelivered TRANSACTION_COMPLETE [ 72.682227][ T7271] netlink: 72 bytes leftover after parsing attributes in process `syz.9.468'. [ 72.790912][ T7273] loop9: detected capacity change from 0 to 1024 [ 72.802141][ T7277] netlink: 16 bytes leftover after parsing attributes in process `syz.7.471'. [ 72.849683][ T7273] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.851227][ T7275] FAULT_INJECTION: forcing a failure. [ 72.851227][ T7275] name failslab, interval 1, probability 0, space 0, times 0 [ 72.851242][ T7275] CPU: 1 UID: 0 PID: 7275 Comm: syz.3.470 Not tainted syzkaller #0 PREEMPT [ 72.851251][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 72.851256][ T7275] Call trace: [ 72.851259][ T7275] show_stack+0x2c/0x3c (C) [ 72.851277][ T7275] __dump_stack+0x30/0x40 [ 72.851288][ T7275] dump_stack_lvl+0xd8/0x12c [ 72.851297][ T7275] dump_stack+0x1c/0x28 [ 72.851307][ T7275] should_fail_ex+0x418/0x58c [ 72.851315][ T7275] should_failslab+0xc4/0x120 [ 72.851323][ T7275] kmem_cache_alloc_noprof+0x94/0x5d4 [ 72.851331][ T7275] security_inode_alloc+0x40/0x304 [ 72.851340][ T7275] inode_init_always_gfp+0x704/0xb20 [ 72.851349][ T7275] alloc_inode+0x9c/0x198 [ 72.851358][ T7275] sock_alloc+0x4c/0x204 [ 72.851368][ T7275] __sock_create+0x108/0x670 [ 72.851377][ T7275] sock_create_kern+0x4c/0x64 [ 72.851385][ T7275] inet_ctl_sock_create+0xa8/0x1fc [ 72.851396][ T7275] igmp6_net_init+0x150/0x35c [ 72.851404][ T7275] ops_init+0x2cc/0x528 [ 72.851414][ T7275] setup_net+0x118/0x2fc [ 72.851423][ T7275] copy_net_ns+0x454/0x698 [ 72.851432][ T7275] create_new_namespaces+0x304/0x50c [ 72.851441][ T7275] unshare_nsproxy_namespaces+0x120/0x170 [ 72.851450][ T7275] ksys_unshare+0x438/0x6e0 [ 72.851459][ T7275] __arm64_sys_unshare+0x40/0x54 [ 72.851467][ T7275] invoke_syscall+0x98/0x244 [ 72.851477][ T7275] el0_svc_common+0xec/0x23c [ 72.851486][ T7275] do_el0_svc+0x4c/0x5c [ 72.851495][ T7275] el0_svc+0x60/0x1d8 [ 72.851503][ T7275] el0t_64_sync_handler+0x44/0x104 [ 72.851510][ T7275] el0t_64_sync+0x198/0x19c [ 72.851532][ T7275] socket: no more sockets [ 72.851535][ T7275] Failed to initialize the IGMP6 autojoin socket (err -23) [ 73.146621][ T7297] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 73.392195][ T7308] netlink: 92 bytes leftover after parsing attributes in process `syz.3.477'. [ 73.627008][ T6676] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.967808][ T7324] FAULT_INJECTION: forcing a failure. [ 73.967808][ T7324] name fail_futex, interval 1, probability 0, space 0, times 0 [ 73.967828][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.7.481 Not tainted syzkaller #0 PREEMPT [ 73.967838][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 73.967846][ T7324] Call trace: [ 73.967849][ T7324] show_stack+0x2c/0x3c (C) [ 73.967874][ T7324] __dump_stack+0x30/0x40 [ 73.967887][ T7324] dump_stack_lvl+0xd8/0x12c [ 73.967897][ T7324] dump_stack+0x1c/0x28 [ 73.967906][ T7324] should_fail_ex+0x418/0x58c [ 73.967915][ T7324] should_fail+0x14/0x24 [ 73.967922][ T7324] get_futex_key+0x1ec/0x12b0 [ 73.967932][ T7324] futex_wait_setup+0x58/0x674 [ 73.967942][ T7324] __futex_wait+0x108/0x25c [ 73.967951][ T7324] futex_wait+0x108/0x2c0 [ 73.967961][ T7324] do_futex+0x320/0x378 [ 73.967969][ T7324] __arm64_sys_futex+0x2e4/0x418 [ 73.967979][ T7324] invoke_syscall+0x98/0x244 [ 73.967989][ T7324] el0_svc_common+0xec/0x23c [ 73.967999][ T7324] do_el0_svc+0x4c/0x5c [ 73.968008][ T7324] el0_svc+0x60/0x1d8 [ 73.968016][ T7324] el0t_64_sync_handler+0x44/0x104 [ 73.968023][ T7324] el0t_64_sync+0x198/0x19c [ 73.999209][ T7322] netlink: 'syz.9.480': attribute type 1 has an invalid length. [ 73.999225][ T7322] netlink: 244 bytes leftover after parsing attributes in process `syz.9.480'. [ 73.999235][ T7322] NCSI netlink: No device for ifindex 0 [ 74.052867][ T7331] netlink: 16 bytes leftover after parsing attributes in process `syz.7.482'. [ 74.477521][ T7351] device-mapper: table: 248:1: too large device [ 74.477534][ T7351] device-mapper: ioctl: error adding target to table [ 74.596249][ T7359] binder: 7358:7359 tried to acquire reference to desc 0, got 1 instead [ 74.602691][ T7359] binder: 7358:7359 got transaction to invalid handle, 3 [ 74.611433][ T7361] 9p: Bad value for 'rfdno' [ 75.064177][ T7378] netlink: 72 bytes leftover after parsing attributes in process `syz.9.492'. [ 75.159048][ T7386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.493'. [ 75.458846][ T4710] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 75.637794][ T7422] loop0: detected capacity change from 0 to 512 [ 75.665416][ T7422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 75.684966][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 75.783460][ T7429] netlink: 'syz.0.502': attribute type 1 has an invalid length. [ 75.783478][ T7429] netlink: 244 bytes leftover after parsing attributes in process `syz.0.502'. [ 75.783489][ T7429] NCSI netlink: No device for ifindex 0 [ 76.178904][ T7435] netlink: 16 bytes leftover after parsing attributes in process `syz.9.504'. [ 76.280275][ T7443] netlink: 132 bytes leftover after parsing attributes in process `syz.9.506'. [ 76.655411][ T7460] 9p: Bad value for 'rfdno' [ 76.735995][ T30] audit: type=1326 audit(76.700:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7456 comm="syz.3.507" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9497a228 code=0x0 [ 77.162781][ T7477] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 77.611538][ T7503] netlink: 'syz.7.518': attribute type 1 has an invalid length. [ 77.611558][ T7503] NCSI netlink: No device for ifindex 0 [ 77.839419][ T7512] binder: 7511:7512 tried to acquire reference to desc 0, got 1 instead [ 77.842252][ T7512] binder: 7511:7512 got transaction to invalid handle, 3 [ 77.842263][ T7512] binder_debug: 8 callbacks suppressed [ 77.842270][ T7512] binder: 7511:7512 cannot find target node [ 77.842283][ T7512] binder: 7511:7512 transaction call to 0:0 failed 104/29201/-22, code 0 size 0-0 line 3253 [ 77.843407][ T6098] binder: release 7511:7512 transaction 99 out, still active [ 77.843419][ T6098] binder: undelivered TRANSACTION_COMPLETE [ 77.882615][ T5956] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.882668][ T5956] binder: send failed reply for transaction 99, target dead [ 77.919584][ T7516] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 77.925822][ T7516] loop0: detected capacity change from 0 to 256 [ 77.927227][ T7518] FAULT_INJECTION: forcing a failure. [ 77.927227][ T7518] name failslab, interval 1, probability 0, space 0, times 0 [ 77.927246][ T7518] CPU: 0 UID: 0 PID: 7518 Comm: syz.9.523 Not tainted syzkaller #0 PREEMPT [ 77.927257][ T7518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 77.927263][ T7518] Call trace: [ 77.927266][ T7518] show_stack+0x2c/0x3c (C) [ 77.927284][ T7518] __dump_stack+0x30/0x40 [ 77.927296][ T7518] dump_stack_lvl+0xd8/0x12c [ 77.927308][ T7518] dump_stack+0x1c/0x28 [ 77.927319][ T7518] should_fail_ex+0x418/0x58c [ 77.927328][ T7518] should_failslab+0xc4/0x120 [ 77.927337][ T7518] __kmalloc_cache_noprof+0x94/0x5fc [ 77.927347][ T7518] bpf_prog_alloc_no_stats+0xdc/0x4e8 [ 77.927358][ T7518] bpf_prog_alloc+0x48/0x110 [ 77.927367][ T7518] bpf_prog_load+0x5e0/0x1554 [ 77.927377][ T7518] __sys_bpf+0x7d4/0x82c [ 77.927387][ T7518] __arm64_sys_bpf+0xd0/0xec [ 77.927396][ T7518] invoke_syscall+0x98/0x244 [ 77.927408][ T7518] el0_svc_common+0xec/0x23c [ 77.927420][ T7518] do_el0_svc+0x4c/0x5c [ 77.927431][ T7518] el0_svc+0x60/0x1d8 [ 77.927440][ T7518] el0t_64_sync_handler+0x44/0x104 [ 77.927448][ T7518] el0t_64_sync+0x198/0x19c [ 79.258381][ T7531] __nla_validate_parse: 3 callbacks suppressed [ 79.258398][ T7531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.528'. [ 79.336564][ T7538] 9p: Bad value for 'rfdno' [ 79.455078][ T7546] loop7: detected capacity change from 0 to 128 [ 79.997085][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.997272][ T7554] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.102164][ T7569] binder: 7564:7569 tried to acquire reference to desc 0, got 1 instead [ 80.102757][ T7569] binder: 7564:7569 got transaction to invalid handle, 3 [ 80.102769][ T7569] binder: 7564:7569 cannot find target node [ 80.102783][ T7569] binder: 7564:7569 transaction call to 0:0 failed 114/29201/-22, code 0 size 0-0 line 3253 [ 80.103144][ T7560] binder: release 7564:7569 transaction 109 out, still active [ 80.103155][ T7560] binder: undelivered TRANSACTION_COMPLETE [ 80.177919][ T7554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.184361][ T7572] loop7: detected capacity change from 0 to 512 [ 80.218758][ T7554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.226814][ T7572] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.536: inode has both inline data and extents flags [ 80.226836][ T7572] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.226941][ T7572] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.536: couldn't read orphan inode 15 (err -117) [ 80.226952][ T7572] loop7: lost filesystem error report for type 5 error -117 [ 80.228012][ C1] EXT4-fs (loop7): error count since last fsck: 2 [ 80.228024][ C1] EXT4-fs (loop7): initial error at time 80: ext4_orphan_get:1403: inode 15 [ 80.228042][ C1] EXT4-fs (loop7): last error at time 80: ext4_orphan_get:1408 [ 80.238486][ T7572] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.342180][ T5464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.514177][ T7595] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 80.539798][ T7587] loop7: detected capacity change from 0 to 256 [ 80.540251][ T7587] vfat: Unknown parameter '000000000000000000080x0000000000000000' [ 80.612556][ T7555] batman_adv: batadv0: Interface activated: syz_tun [ 80.622921][ T7555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.623565][ T7555] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.636892][ T7555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.680101][ T7555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.683209][ T7555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.699187][ T7555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.699206][ T7555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.704590][ T7555] veth1_vlan: left promiscuous mode [ 80.704909][ T7555] veth0_vlan: left promiscuous mode [ 80.706522][ T7555] veth0_vlan: entered promiscuous mode [ 80.707138][ T7555] veth1_vlan: entered promiscuous mode [ 80.729856][ T7555] veth1_macvtap: left promiscuous mode [ 80.730387][ T7555] veth0_macvtap: left promiscuous mode [ 80.730683][ T7555] veth0_macvtap: entered promiscuous mode [ 80.731014][ T7555] veth1_macvtap: entered promiscuous mode [ 80.734054][ T7555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.735704][ T7555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.736617][ T7555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.737666][ T7555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.739732][ T7555] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 80.741195][ T7555] batadv_slave_0: entered promiscuous mode [ 80.751094][ T4930] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.751141][ T4930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.751739][ T4930] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.751759][ T4930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.069163][ T4930] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.069200][ T4930] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.069216][ T4930] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.069230][ T4930] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.300809][ T7610] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.469214][ T7611] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.623384][ T7616] netlink: 'syz.3.544': attribute type 10 has an invalid length. [ 81.626548][ T7616] tipc: Enabling of bearer rejected, already enabled [ 81.766924][ T7621] netlink: 'syz.9.546': attribute type 5 has an invalid length. [ 82.032092][ T7621] loop9: detected capacity change from 0 to 8 [ 82.032508][ T7621] squashfs: Unknown parameter '' [ 82.034482][ T7621] rpc_pipefs: Unknown parameter 'context' [ 82.723043][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 82.724376][ T7634] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20002 [ 83.089635][ T7644] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 83.089653][ T7644] overlayfs: failed to set xattr on upper [ 83.089657][ T7644] overlayfs: ...falling back to redirect_dir=nofollow. [ 83.089661][ T7644] overlayfs: ...falling back to metacopy=off. [ 83.089665][ T7644] overlayfs: ...falling back to index=off. [ 83.089668][ T7644] overlayfs: ...falling back to uuid=null. [ 83.939945][ T7658] gre1: entered promiscuous mode [ 83.975488][ T7665] Could not find key with description: [syz0] [ 83.975499][ T7665] process_request_key_err: No key [ 83.975504][ T7665] Could not find valid key in user session keyring for sig specified in mount option: [syz0] [ 83.975509][ T7665] One or more global auth toks could not properly register; rc = [-2] [ 83.976176][ T7665] Error validating options; rc = [-2] [ 84.027570][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.560'. [ 84.573982][ T7687] binder: 7686:7687 ioctl 4018620d 0 returned -22 [ 84.580868][ T7687] binder: 7686:7687 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 84.584711][ T7687] binder: 7686:7687 got transaction to invalid handle, 1 [ 84.584727][ T7687] binder_debug: 2 callbacks suppressed [ 84.584734][ T7687] binder: 7686:7687 cannot find target node [ 84.584748][ T7687] binder: 7686:7687 transaction call to 0:0 failed 117/29201/-22, code 0 size 72-24 line 3253 [ 84.584857][ T7687] binder: 7686:7687 got transaction to invalid handle, 3 [ 84.584865][ T7687] binder: 7686:7687 cannot find target node [ 84.584875][ T7687] binder: 7686:7687 transaction call to 0:0 failed 118/29201/-22, code 0 size 0-0 line 3253 [ 84.590410][ T4834] binder: undelivered TRANSACTION_ERROR: 29201 [ 84.624532][ T4813] binder: undelivered TRANSACTION_ERROR: 29201 [ 84.627685][ T7689] fuse: Bad value for 'fd' [ 85.117847][ T7701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.572'. [ 85.141526][ T7701] bond0: (slave bond_slave_0): Releasing backup interface [ 85.146029][ T7703] fuse: Bad value for 'fd' [ 85.151961][ T7703] netlink: 28 bytes leftover after parsing attributes in process `syz.7.573'. [ 85.167587][ T7705] loop9: detected capacity change from 0 to 2048 [ 85.180006][ T7701] bond_slave_0: entered promiscuous mode [ 85.180024][ T7701] bond_slave_0: entered allmulticast mode [ 85.182088][ T7705] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.185906][ T7705] EXT4-fs error (device loop9): ext4_lookup:1779: inode #2: comm syz.9.574: bad inode number: 12 [ 85.186180][ T7705] EXT4-fs (loop9): Remounting filesystem read-only [ 85.202006][ T6676] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.393460][ T7715] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 85.444042][ T7721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.579'. [ 85.456283][ T7717] netlink: 36 bytes leftover after parsing attributes in process `syz.9.577'. [ 85.456299][ T7717] netlink: 16 bytes leftover after parsing attributes in process `syz.9.577'. [ 85.456311][ T7717] netlink: 36 bytes leftover after parsing attributes in process `syz.9.577'. [ 85.483748][ T7724] netlink: 36 bytes leftover after parsing attributes in process `syz.9.577'. [ 85.483765][ T7724] netlink: 16 bytes leftover after parsing attributes in process `syz.9.577'. [ 85.483775][ T7724] netlink: 36 bytes leftover after parsing attributes in process `syz.9.577'. [ 85.487492][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 85.918714][ T4710] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.920429][ T4710] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.920915][ T4710] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.921894][ T4710] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.922535][ T4710] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.996188][ T4709] tipc: Resetting bearer [ 86.299727][ T4709] tipc: Disabling bearer [ 86.345380][ T7753] tap0: tun_chr_ioctl cmd 1074025677 [ 86.345451][ T7753] tap0: linktype set to 774 [ 86.443454][ T3618] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.475418][ T7742] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.516531][ T3618] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.622987][ T3618] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.816734][ T3618] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.083539][ T7742] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.083604][ T7742] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.083663][ T7742] bridge_slave_0: entered allmulticast mode [ 87.084098][ T7742] bridge_slave_0: entered promiscuous mode [ 87.085022][ T7742] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.085072][ T7742] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.085118][ T7742] bridge_slave_1: entered allmulticast mode [ 87.085592][ T7742] bridge_slave_1: entered promiscuous mode [ 87.093638][ T7742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.094567][ T7742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.111982][ T7742] team0: Port device team_slave_0 added [ 87.113303][ T7742] team0: Port device team_slave_1 added [ 87.344770][ T7742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.344783][ T7742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.344799][ T7742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.345390][ T7742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.345396][ T7742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.345410][ T7742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.405835][ T5703] IPVS: starting estimator thread 0... [ 87.452856][ T7790] fuse: Bad value for 'fd' [ 87.462525][ T7742] hsr_slave_0: entered promiscuous mode [ 87.469866][ T7742] hsr_slave_1: entered promiscuous mode [ 87.470055][ T7742] debugfs: 'hsr0' already exists in 'hsr' [ 87.470066][ T7742] Cannot create hsr debugfs directory [ 87.518371][ T7791] IPVS: using max 45 ests per chain, 108000 per kthread [ 87.535076][ T3618] bridge_slave_1: left allmulticast mode [ 87.535094][ T3618] bridge_slave_1: left promiscuous mode [ 87.535172][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.537896][ T3618] bridge_slave_0: left allmulticast mode [ 87.537911][ T3618] bridge_slave_0: left promiscuous mode [ 87.539685][ T3618] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.883535][ T7808] 9p: Bad value for 'rfdno' [ 87.955525][ T4710] Bluetooth: hci5: command tx timeout [ 87.991037][ T3618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.991573][ T7813] 9p: Bad value for 'rfdno' [ 89.086852][ T3618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.102391][ T3618] bond0 (unregistering): Released all slaves [ 89.212631][ T7827] IPVS: Error connecting to the multicast addr [ 89.213466][ T3618] tipc: Left network mode [ 89.261447][ T7842] netlink: 'syz.7.606': attribute type 10 has an invalid length. [ 89.284883][ T7842] geneve1: entered promiscuous mode [ 89.287483][ T7842] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 89.331136][ T7849] netlink: 'syz.9.607': attribute type 1 has an invalid length. [ 89.417165][ T7857] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 89.456675][ T7868] warning: `syz.9.607' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.947409][ T3618] hsr_slave_0: left promiscuous mode [ 89.949290][ T3618] hsr_slave_1: left promiscuous mode [ 89.951462][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.951476][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.957056][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.957070][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.969754][ T3618] veth1_macvtap: left promiscuous mode [ 89.969790][ T3618] veth0_macvtap: left promiscuous mode [ 89.969835][ T3618] veth1_vlan: left promiscuous mode [ 89.969866][ T3618] veth0_vlan: left promiscuous mode [ 90.017920][ T7899] 9p: Bad value for 'rfdno' [ 90.038832][ T4710] Bluetooth: hci5: command tx timeout [ 90.092417][ T3618] team0 (unregistering): Port device team_slave_1 removed [ 90.096159][ T3618] team0 (unregistering): Port device team_slave_0 removed [ 90.474968][ T7894] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.587021][ T7912] loop9: detected capacity change from 0 to 4096 [ 90.587474][ T7912] EXT4-fs: Ignoring removed orlov option [ 90.597354][ T7912] EXT4-fs (loop9): Test dummy encryption mode enabled [ 90.612261][ T7912] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.763781][ T3618] IPVS: stop unused estimator thread 0... [ 90.891868][ T7941] FAULT_INJECTION: forcing a failure. [ 90.891868][ T7941] name failslab, interval 1, probability 0, space 0, times 0 [ 90.891888][ T7941] CPU: 1 UID: 0 PID: 7941 Comm: syz.7.620 Not tainted syzkaller #0 PREEMPT [ 90.891898][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 90.891903][ T7941] Call trace: [ 90.891906][ T7941] show_stack+0x2c/0x3c (C) [ 90.891925][ T7941] __dump_stack+0x30/0x40 [ 90.891937][ T7941] dump_stack_lvl+0xd8/0x12c [ 90.891949][ T7941] dump_stack+0x1c/0x28 [ 90.891960][ T7941] should_fail_ex+0x418/0x58c [ 90.891969][ T7941] should_failslab+0xc4/0x120 [ 90.891978][ T7941] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 90.891987][ T7941] alloc_inode+0x84/0x198 [ 90.891998][ T7941] create_pipe_files+0x60/0x650 [ 90.892007][ T7941] __do_pipe_flags+0x5c/0x204 [ 90.892015][ T7941] do_pipe2+0xa0/0x250 [ 90.892023][ T7941] __arm64_sys_pipe2+0x64/0x7c [ 90.892032][ T7941] invoke_syscall+0x98/0x244 [ 90.892044][ T7941] el0_svc_common+0xec/0x23c [ 90.892055][ T7941] do_el0_svc+0x4c/0x5c [ 90.892067][ T7941] el0_svc+0x60/0x1d8 [ 90.892075][ T7941] el0t_64_sync_handler+0x44/0x104 [ 90.892084][ T7941] el0t_64_sync+0x198/0x19c [ 90.982434][ T7742] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.002267][ T7742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.006827][ T7742] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.011999][ T7742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.012362][ T7742] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.032353][ T7742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.034548][ T7742] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.046620][ T7742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.179259][ T7742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.186432][ T7742] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.191718][ T4930] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.191750][ T4930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.204081][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.204110][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.661717][ T6676] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.770472][ T7995] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 91.832011][ T8001] loop9: detected capacity change from 0 to 512 [ 91.841093][ T8001] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.891556][ T7742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.909907][ T6676] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.981760][ T8015] __nla_validate_parse: 7 callbacks suppressed [ 91.981776][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.9.629'. [ 92.094954][ T8028] loop7: detected capacity change from 0 to 512 [ 92.108694][ T4710] Bluetooth: hci5: command tx timeout [ 92.155024][ T8028] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.172866][ T7742] veth0_vlan: entered promiscuous mode [ 92.176826][ T8043] 9p: Bad value for 'rfdno' [ 92.213601][ T7742] veth1_vlan: entered promiscuous mode [ 92.251781][ T7742] veth0_macvtap: entered promiscuous mode [ 92.252688][ T5464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.252996][ T7742] veth1_macvtap: entered promiscuous mode [ 92.256136][ T7742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.283407][ T7742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.541534][ T8049] bridge0: port 3(syz_tun) entered blocking state [ 92.541577][ T8049] bridge0: port 3(syz_tun) entered disabled state [ 92.541689][ T8049] syz_tun: entered allmulticast mode [ 92.542447][ T8049] syz_tun: entered promiscuous mode [ 92.542716][ T8049] bridge0: port 3(syz_tun) entered blocking state [ 92.542747][ T8049] bridge0: port 3(syz_tun) entered forwarding state [ 92.593337][ T8056] binder: 8055:8056 got transaction to invalid handle, 1 [ 92.593355][ T8056] binder: 8055:8056 cannot find target node [ 92.593371][ T8056] binder: 8055:8056 transaction call to 0:0 failed 122/29201/-22, code 0 size 72-24 line 3253 [ 92.595404][ T8056] binder: 8055:8056 got transaction to invalid handle, 3 [ 92.595417][ T8056] binder: 8055:8056 cannot find target node [ 92.595432][ T8056] binder: 8055:8056 transaction call to 0:0 failed 123/29201/-22, code 0 size 0-0 line 3253 [ 92.595750][ T4834] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.608280][ T6756] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.608339][ T6756] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.609337][ T6756] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.609362][ T6756] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.622338][ T3618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.622351][ T3618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.627807][ T4834] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.659588][ T6756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.659605][ T6756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.002993][ T8102] ip_tables: iptables: counters copy to user failed while replacing table [ 93.005847][ T8102] FAULT_INJECTION: forcing a failure. [ 93.005847][ T8102] name failslab, interval 1, probability 0, space 0, times 0 [ 93.005869][ T8102] CPU: 1 UID: 0 PID: 8102 Comm: syz.4.641 Not tainted syzkaller #0 PREEMPT [ 93.005883][ T8102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 93.005889][ T8102] Call trace: [ 93.005892][ T8102] show_stack+0x2c/0x3c (C) [ 93.005911][ T8102] __dump_stack+0x30/0x40 [ 93.005923][ T8102] dump_stack_lvl+0xd8/0x12c [ 93.005934][ T8102] dump_stack+0x1c/0x28 [ 93.005945][ T8102] should_fail_ex+0x418/0x58c [ 93.005954][ T8102] should_failslab+0xc4/0x120 [ 93.005963][ T8102] __kmalloc_cache_noprof+0x94/0x5fc [ 93.005973][ T8102] copy_net_ns+0x1d0/0x698 [ 93.005985][ T8102] create_new_namespaces+0x304/0x50c [ 93.005996][ T8102] unshare_nsproxy_namespaces+0x120/0x170 [ 93.006007][ T8102] ksys_unshare+0x438/0x6e0 [ 93.006016][ T8102] __arm64_sys_unshare+0x40/0x54 [ 93.006025][ T8102] invoke_syscall+0x98/0x244 [ 93.006037][ T8102] el0_svc_common+0xec/0x23c [ 93.006049][ T8102] do_el0_svc+0x4c/0x5c [ 93.006060][ T8102] el0_svc+0x60/0x1d8 [ 93.006069][ T8102] el0t_64_sync_handler+0x44/0x104 [ 93.006077][ T8102] el0t_64_sync+0x198/0x19c [ 93.186003][ T8108] fuse: Unknown parameter '184467440737095516150x0000000000000003' [ 93.197128][ T8108] loop4: detected capacity change from 0 to 1024 [ 93.217720][ T8108] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 93.221608][ T8108] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 93.222054][ T8108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.533692][ T7742] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.697256][ T8139] batadv_slave_1: entered promiscuous mode [ 93.795104][ T8138] batadv_slave_1: left promiscuous mode [ 94.004497][ T8163] binder: 8163 RLIMIT_NICE not set [ 94.004512][ T8163] binder: 8162:8163 ioctl c0306201 20000280 returned -11 [ 94.004577][ T8163] binder: 8163 RLIMIT_NICE not set [ 94.004583][ T8163] binder: 8162:8163 ioctl c0306201 20000280 returned -11 [ 94.188943][ T4710] Bluetooth: hci5: command tx timeout [ 95.784307][ T8078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.150189][ T8240] netlink: 72 bytes leftover after parsing attributes in process `syz.4.663'. [ 96.229552][ T8242] loop9: detected capacity change from 0 to 512 [ 96.231270][ T8242] EXT4-fs: Mount option(s) incompatible with ext3 [ 96.615644][ T8244] netlink: 'syz.3.667': attribute type 6 has an invalid length. [ 96.615661][ T8244] netlink: 168 bytes leftover after parsing attributes in process `syz.3.667'. [ 96.634058][ T8246] netlink: 32 bytes leftover after parsing attributes in process `syz.3.668'. [ 96.757663][ T8246] Soft offlining pfn 0x165e00 at process virtual address 0x20000000 [ 96.779268][ T8246] Soft offlining pfn 0x168400 at process virtual address 0x20200000 [ 96.780158][ T8246] Soft offlining pfn 0x168600 at process virtual address 0x20400000 [ 97.019972][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.7.672'. [ 97.020059][ T8264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.047234][ T8264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.065360][ T8267] netlink: 344 bytes leftover after parsing attributes in process `syz.4.676'. [ 97.097002][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.7.672'. [ 97.320927][ T8306] loop4: detected capacity change from 0 to 512 [ 97.325941][ T8257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.340354][ T8306] EXT4-fs error (device loop4): ext4_read_inode_bitmap:141: comm syz.4.681: Invalid inode bitmap blk 4 in block_group 0 [ 97.340380][ T8306] loop4: lost filesystem error report for type 5 error -117 [ 97.340950][ T8306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.494293][ T8309] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20ff9000 [ 97.495308][ T8309] Memory failure: 0x216bf1: unhandlable page. [ 97.495318][ T8309] Memory failure: 0x216bf1: recovery action for reserved kernel page: Ignored [ 97.497235][ T8314] netlink: 72 bytes leftover after parsing attributes in process `syz.0.680'. [ 98.165224][ T8325] loop7: detected capacity change from 0 to 256 [ 98.207260][ T8330] pim6reg: entered allmulticast mode [ 98.233720][ T8328] pim6reg: left allmulticast mode [ 98.313924][ T8335] loop7: detected capacity change from 0 to 512 [ 98.320904][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.688'. [ 98.321085][ T8333] fuse: fd is not a fuse device [ 98.321173][ T8333] fuse: fd is not a fuse device [ 98.323520][ T8333] fuse: fd is not a fuse device [ 98.323624][ T8333] fuse: fd is not a fuse device [ 98.323715][ T8333] fuse: fd is not a fuse device [ 98.323796][ T8333] fuse: fd is not a fuse device [ 98.323885][ T8333] fuse: fd is not a fuse device [ 98.323959][ T8333] fuse: fd is not a fuse device [ 98.324030][ T8333] fuse: fd is not a fuse device [ 98.324100][ T8333] fuse: fd is not a fuse device [ 98.324170][ T8333] fuse: fd is not a fuse device [ 98.324238][ T8333] fuse: fd is not a fuse device [ 98.324315][ T8333] fuse: fd is not a fuse device [ 98.324384][ T8333] fuse: fd is not a fuse device [ 98.324524][ T8335] loop7: detected capacity change from 0 to 512 [ 98.326510][ T8333] fuse: fd is not a fuse device [ 98.326654][ T8333] fuse: fd is not a fuse device [ 98.326732][ T8333] fuse: fd is not a fuse device [ 98.326807][ T8333] fuse: fd is not a fuse device [ 98.326877][ T8333] fuse: fd is not a fuse device [ 98.327047][ T8333] fuse: fd is not a fuse device [ 98.327118][ T8333] fuse: fd is not a fuse device [ 98.327192][ T8333] fuse: fd is not a fuse device [ 98.327260][ T8333] fuse: fd is not a fuse device [ 98.327341][ T8333] fuse: fd is not a fuse device [ 98.327418][ T8333] fuse: fd is not a fuse device [ 98.327509][ T8333] fuse: fd is not a fuse device [ 98.327575][ T8333] fuse: fd is not a fuse device [ 98.327665][ T8333] fuse: fd is not a fuse device [ 98.327744][ T8333] fuse: fd is not a fuse device [ 98.327818][ T8333] fuse: fd is not a fuse device [ 98.327884][ T8333] fuse: fd is not a fuse device [ 98.367271][ T8333] fuse: fd is not a fuse device [ 98.367403][ T8333] fuse: fd is not a fuse device [ 98.367481][ T8333] fuse: fd is not a fuse device [ 98.367553][ T8333] fuse: fd is not a fuse device [ 98.367628][ T8333] fuse: fd is not a fuse device [ 98.367706][ T8333] fuse: fd is not a fuse device [ 98.367780][ T8333] fuse: fd is not a fuse device [ 98.367873][ T8333] fuse: fd is not a fuse device [ 98.367946][ T8333] fuse: fd is not a fuse device [ 98.373108][ T8333] fuse: fd is not a fuse device [ 98.373208][ T8333] fuse: fd is not a fuse device [ 98.373283][ T8333] fuse: fd is not a fuse device [ 98.373365][ T8333] fuse: fd is not a fuse device [ 98.373440][ T8333] fuse: fd is not a fuse device [ 98.377055][ T8333] fuse: fd is not a fuse device [ 98.377151][ T8333] fuse: fd is not a fuse device [ 98.384738][ T8333] fuse: fd is not a fuse device [ 98.384849][ T8333] fuse: fd is not a fuse device [ 98.384921][ T8333] fuse: fd is not a fuse device [ 98.384994][ T8333] fuse: fd is not a fuse device [ 98.385070][ T8333] fuse: fd is not a fuse device [ 98.385156][ T8333] fuse: fd is not a fuse device [ 98.385222][ T8333] fuse: fd is not a fuse device [ 98.385301][ T8333] fuse: fd is not a fuse device [ 98.385372][ T8333] fuse: fd is not a fuse device [ 98.385443][ T8333] fuse: fd is not a fuse device [ 98.385509][ T8333] fuse: fd is not a fuse device [ 98.385579][ T8333] fuse: fd is not a fuse device [ 98.385644][ T8333] fuse: fd is not a fuse device [ 98.389437][ T8333] fuse: fd is not a fuse device [ 98.389512][ T8333] fuse: fd is not a fuse device [ 98.391441][ T8333] fuse: fd is not a fuse device [ 98.391515][ T8333] fuse: fd is not a fuse device [ 98.391585][ T8333] fuse: fd is not a fuse device [ 98.410950][ T8335] loop7: detected capacity change from 0 to 512 [ 98.416945][ T8335] loop7: detected capacity change from 0 to 512 [ 98.426363][ T8335] loop7: detected capacity change from 0 to 512 [ 98.434293][ T8335] loop7: detected capacity change from 0 to 512 [ 98.442379][ T8335] loop7: detected capacity change from 0 to 512 [ 98.449577][ T7566] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 98.598892][ T7566] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 98.600697][ T7566] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 98.600708][ T7566] usb 1-1: config 0 has no interface number 0 [ 98.600732][ T7566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.602129][ T7566] usb 1-1: config 0 descriptor?? [ 98.626456][ T8344] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.641191][ T8344] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 98.661039][ T8344] netlink: 268 bytes leftover after parsing attributes in process `syz.7.691'. [ 98.662544][ T8344] netlink: 'syz.7.691': attribute type 11 has an invalid length. [ 98.720720][ T5464] EXT4-fs error (device loop7): ext4_empty_dir:3116: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 98.722646][ T5464] EXT4-fs (loop7): Remounting filesystem read-only [ 98.729403][ T7566] viperboard 1-1:0.143: version 0.00 found at bus 001 address 003 [ 98.743556][ T7566] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 98.743581][ T7566] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 98.790219][ T7742] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.822536][ T7560] usb 1-1: USB disconnect, device number 3 [ 99.003279][ T8365] EXT4-fs: Ignoring removed orlov option [ 99.003294][ T8365] EXT4-fs: Ignoring removed i_version option [ 99.033297][ T8365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.050259][ T8348] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.081524][ T8362] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.199437][ T4714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.203286][ T4714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.203778][ T4714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.205522][ T4714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.206219][ T4714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.296994][ T8384] netlink: 44 bytes leftover after parsing attributes in process `syz.4.703'. [ 99.297695][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.703'. [ 99.323426][ T8373] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.484433][ T8396] EXT4-fs (loop9): Cannot use DAX on a filesystem that may contain inline data [ 99.762157][ T8396] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.707: corrupted in-inode xattr: bad e_name length [ 99.762185][ T8396] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.762354][ T8396] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.707: couldn't read orphan inode 15 (err -117) [ 99.762370][ T8396] loop9: lost filesystem error report for type 5 error -117 [ 99.763756][ T8396] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.826653][ T6676] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.851432][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.851668][ T8373] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.851733][ T8373] bridge_slave_0: entered allmulticast mode [ 99.852131][ T8373] bridge_slave_0: entered promiscuous mode [ 99.858759][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.858815][ T8373] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.858883][ T8373] bridge_slave_1: entered allmulticast mode [ 99.859869][ T8373] bridge_slave_1: entered promiscuous mode [ 99.886515][ T8373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.887367][ T8373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.921582][ T8408] bridge0: port 3(syz_tun) entered disabled state [ 99.921924][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.922070][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.954139][ T8408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.956700][ T8408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.111546][ T1145] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.112805][ T1145] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.112880][ T1145] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.112901][ T1145] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.127088][ T8373] team0: Port device team_slave_0 added [ 100.130956][ T8373] team0: Port device team_slave_1 added [ 100.150296][ T8373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.150313][ T8373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.150324][ T8373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.152402][ T8373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.152416][ T8373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.152427][ T8373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.191027][ T8410] bridge0: port 3(syz_tun) entered blocking state [ 100.191093][ T8410] bridge0: port 3(syz_tun) entered forwarding state [ 100.194146][ T8410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.195780][ T8410] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.199523][ T8410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.207566][ T8410] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.207635][ T8410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.209992][ T8410] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.210027][ T8410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.216502][ T8410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.217412][ T8410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.223339][ T8410] veth1_vlan: left promiscuous mode [ 100.223768][ T8410] veth0_vlan: left promiscuous mode [ 100.224454][ T8410] veth0_vlan: entered promiscuous mode [ 100.225602][ T8410] veth1_vlan: entered promiscuous mode [ 101.092316][ T8410] veth1_macvtap: left promiscuous mode [ 101.092665][ T8410] veth0_macvtap: left promiscuous mode [ 101.093168][ T8410] veth0_macvtap: entered promiscuous mode [ 101.093668][ T8410] veth1_macvtap: entered promiscuous mode [ 101.095445][ T8410] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.095857][ T8410] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.096267][ T8410] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.096657][ T8410] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.097321][ T8410] mac80211_hwsim hwsim20 wlan0: left promiscuous mode [ 101.148782][ T8410] gre1: left promiscuous mode [ 101.228643][ T4714] Bluetooth: hci1: command tx timeout [ 101.232816][ T8373] hsr_slave_0: entered promiscuous mode [ 101.237570][ T8373] hsr_slave_1: entered promiscuous mode [ 101.237837][ T8373] debugfs: 'hsr0' already exists in 'hsr' [ 101.237849][ T8373] Cannot create hsr debugfs directory [ 101.360573][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 101.360595][ T8422] netlink: 312 bytes leftover after parsing attributes in process `syz.3.713'. [ 101.719737][ T5703] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.719770][ T5703] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.719787][ T5703] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.719803][ T5703] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.786797][ T8443] set_capacity_and_notify: 14 callbacks suppressed [ 101.786812][ T8443] loop9: detected capacity change from 0 to 128 [ 101.800981][ T8443] EXT4-fs (loop9): Test dummy encryption mode enabled [ 101.805309][ T8443] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 101.805340][ T8443] System zones: 1-3, 19-19, 35-36 [ 101.808658][ T8443] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 101.987198][ T8479] WARNING! power/level is deprecated; use power/control instead [ 102.214923][ T8497] __nla_validate_parse: 1 callbacks suppressed [ 102.214937][ T8497] netlink: 144 bytes leftover after parsing attributes in process `syz.3.723'. [ 102.402352][ T8373] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.424915][ T8373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.425827][ T8373] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.435502][ T8373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.437636][ T6676] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.450448][ T8373] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.486817][ T8373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.497164][ T8373] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.515129][ T8373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.704085][ T8373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.717193][ T8544] pimreg: entered allmulticast mode [ 102.734641][ T8373] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.741176][ T4930] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.741204][ T4930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.747282][ T5703] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.747312][ T5703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.064969][ T8373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.119858][ T8373] veth0_vlan: entered promiscuous mode [ 103.133875][ T8574] loop9: detected capacity change from 0 to 256 [ 103.136874][ T8373] veth1_vlan: entered promiscuous mode [ 103.145780][ T8574] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.166388][ T8373] veth0_macvtap: entered promiscuous mode [ 103.202378][ T8578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.732'. [ 103.203801][ T8373] veth1_macvtap: entered promiscuous mode [ 103.207590][ T8373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.215374][ T8373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.226585][ T8583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.734'. [ 103.240074][ T5694] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.268208][ T5703] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.270137][ T5703] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.270167][ T5703] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.291490][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.291506][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.298965][ T8585] binder: 8584:8585 ioctl 4018620d 0 returned -22 [ 103.299505][ T8585] binder: tried to use weak ref as strong ref [ 103.299514][ T8585] binder: 8584:8585 Acquire 1 refcount change on invalid ref 0 ret -22 [ 103.299631][ T8585] binder: 8584:8585 got transaction to invalid handle, 1 [ 103.299640][ T8585] binder: 8584:8585 cannot find target node [ 103.299652][ T8585] binder: 8584:8585 transaction call to 0:0 failed 126/29201/-22, code 0 size 72-24 line 3253 [ 103.299765][ T8585] binder: 8584:8585 got transaction to invalid handle, 3 [ 103.299773][ T8585] binder: 8584:8585 cannot find target node [ 103.299783][ T8585] binder: 8584:8585 transaction call to 0:0 failed 127/29201/-22, code 0 size 0-0 line 3253 [ 103.300261][ T7561] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.308773][ T4714] Bluetooth: hci1: command tx timeout [ 103.324219][ T5694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.324233][ T5694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.329000][ T7561] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.459655][ T8601] loop9: detected capacity change from 0 to 2048 [ 103.482163][ T8604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.739'. [ 103.497013][ T8611] loop2: detected capacity change from 0 to 256 [ 103.506289][ T8601] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.514381][ T8601] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 103.514402][ T8601] overlayfs: failed to verify index dir 'upper' xattr [ 103.514408][ T8601] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 103.574293][ T8611] netlink: 'syz.2.742': attribute type 153 has an invalid length. [ 103.787498][ T8654] binder: 8653:8654 ioctl 4018620d 0 returned -22 [ 103.787661][ T8654] binder: tried to use weak ref as strong ref [ 103.787669][ T8654] binder: 8653:8654 Acquire 1 refcount change on invalid ref 0 ret -22 [ 103.787787][ T8654] binder: 8653:8654 got transaction to invalid handle, 1 [ 103.787796][ T8654] binder: 8653:8654 cannot find target node [ 103.787808][ T8654] binder: 8653:8654 transaction call to 0:0 failed 130/29201/-22, code 0 size 72-24 line 3253 [ 103.800452][ T8654] binder: 8653:8654 got transaction to invalid handle, 3 [ 103.800471][ T8654] binder: 8653:8654 cannot find target node [ 103.800485][ T8654] binder: 8653:8654 transaction call to 0:0 failed 131/29201/-22, code 0 size 0-0 line 3253 [ 104.012228][ T8667] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 104.113404][ T8677] fuse: Bad value for 'fd' [ 104.167696][ T8683] netlink: 'syz.4.754': attribute type 12 has an invalid length. [ 104.167714][ T8683] netlink: 'syz.4.754': attribute type 29 has an invalid length. [ 104.167723][ T8683] netlink: 148 bytes leftover after parsing attributes in process `syz.4.754'. [ 104.173647][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 104.245253][ T6676] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.368586][ T8698] loop9: detected capacity change from 0 to 128 [ 104.379312][ T8698] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.388370][ T8698] fscrypt (loop9, inode 12): Mutually exclusive encryption flags (0x0c) [ 104.411099][ T6676] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.579406][ T8718] netlink: 'syz.3.761': attribute type 1 has an invalid length. [ 104.615838][ T8718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.644573][ T8718] bond1: (slave bridge1): making interface the new active one [ 104.646118][ T8718] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 104.735335][ T8726] FAULT_INJECTION: forcing a failure. [ 104.735335][ T8726] name failslab, interval 1, probability 0, space 0, times 0 [ 104.735360][ T8726] CPU: 0 UID: 0 PID: 8726 Comm: syz.0.762 Not tainted syzkaller #0 PREEMPT [ 104.735374][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 104.735381][ T8726] Call trace: [ 104.735384][ T8726] show_stack+0x2c/0x3c (C) [ 104.735405][ T8726] __dump_stack+0x30/0x40 [ 104.735418][ T8726] dump_stack_lvl+0xd8/0x12c [ 104.735430][ T8726] dump_stack+0x1c/0x28 [ 104.735441][ T8726] should_fail_ex+0x418/0x58c [ 104.735450][ T8726] should_failslab+0xc4/0x120 [ 104.735459][ T8726] __kmalloc_noprof+0x108/0x6c8 [ 104.735469][ T8726] _ib_alloc_device+0x48/0x4c8 [ 104.735480][ T8726] siw_newlink+0xf0/0xbe0 [ 104.735492][ T8726] nldev_newlink+0x47c/0x4f4 [ 104.735501][ T8726] rdma_nl_rcv+0x4f0/0x814 [ 104.735513][ T8726] netlink_unicast+0x600/0x7f8 [ 104.735525][ T8726] netlink_sendmsg+0x648/0x948 [ 104.735537][ T8726] __sock_sendmsg+0xc8/0x17c [ 104.735548][ T8726] ____sys_sendmsg+0x3d0/0x6c8 [ 104.735559][ T8726] ___sys_sendmsg+0x198/0x224 [ 104.735571][ T8726] __sys_sendmsg+0x158/0x204 [ 104.735583][ T8726] __arm64_sys_sendmsg+0x88/0x9c [ 104.735595][ T8726] invoke_syscall+0x98/0x244 [ 104.735607][ T8726] el0_svc_common+0xec/0x23c [ 104.735619][ T8726] do_el0_svc+0x4c/0x5c [ 104.735631][ T8726] el0_svc+0x60/0x1d8 [ 104.735640][ T8726] el0t_64_sync_handler+0x44/0x104 [ 104.735648][ T8726] el0t_64_sync+0x198/0x19c [ 104.796293][ T8726] netlink: 256 bytes leftover after parsing attributes in process `syz.0.762'. [ 104.796311][ T8726] netlink: 27 bytes leftover after parsing attributes in process `syz.0.762'. [ 104.796322][ T8726] netlink: 256 bytes leftover after parsing attributes in process `syz.0.762'. [ 104.808836][ T8730] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 104.816781][ T8726] block device autoloading is deprecated and will be removed. [ 104.817126][ T8726] EXT4-fs (loop0): unable to read superblock [ 104.824787][ T8734] fuse: Bad value for 'fd' [ 104.921159][ T8742] 9p: Bad value for 'rfdno' [ 104.939916][ T8747] loop9: detected capacity change from 0 to 256 [ 104.940314][ T8747] vfat: Unknown parameter 'smackfshæ<' [ 104.984213][ T8755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.984462][ T8736] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 105.023867][ T8758] loop2: detected capacity change from 0 to 1024 [ 105.024229][ T8758] EXT4-fs: Ignoring removed oldalloc option [ 105.024239][ T8758] EXT4-fs: Ignoring removed orlov option [ 105.053035][ T8758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.104981][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 105.110075][ T4930] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 1) [ 105.112551][ T4930] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 105.112572][ T4930] EXT4-fs (loop2): This should not happen!! Data will be lost [ 105.112572][ T4930] [ 105.178437][ T8373] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 105.331440][ T8798] loop0: detected capacity change from 0 to 1024 [ 105.331822][ T8798] ext4: Unknown parameter 'nouser_xattr' [ 105.356353][ T8798] loop0: detected capacity change from 0 to 2048 [ 105.389168][ T4714] Bluetooth: hci1: command tx timeout [ 105.410356][ T8798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.671439][ T8835] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 105.755492][ T8850] fuse: Bad value for 'fd' [ 105.811429][ T8857] loop9: detected capacity change from 0 to 512 [ 105.829708][ T8857] EXT4-fs (loop9): Test dummy encryption mode enabled [ 105.838355][ T8857] EXT4-fs error (device loop9): dx_probe:791: inode #2: comm syz.9.779: Attempting to read directory block (0) that is past i_size (256) [ 105.838381][ T8857] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 105.840948][ T8861] libceph: secret too big 258 [ 105.842645][ T8857] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 105.843155][ T8857] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.889775][ T6676] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.895353][ T8874] netlink: 'syz.4.783': attribute type 1 has an invalid length. [ 105.904030][ T8872] fuse: Bad value for 'fd' [ 105.918038][ T8874] xfrm0: entered allmulticast mode [ 106.074653][ T8885] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.100902][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.700026][ T8885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.711400][ T8885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.885856][ T8890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.886438][ T8890] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.889344][ T8890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.902759][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.902792][ T8890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.917231][ T8890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.920951][ T8890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.934516][ T8890] veth1_macvtap: left promiscuous mode [ 106.934832][ T8890] veth0_macvtap: left promiscuous mode [ 106.937543][ T8890] veth0_macvtap: entered promiscuous mode [ 106.939475][ T8890] veth1_macvtap: entered promiscuous mode [ 106.954135][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.954549][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.954978][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.955480][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.955892][ T8890] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 106.957487][ T8890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.997245][ T1145] ip6_tunnel: K xmit: Local address not yet configured! [ 107.224406][ T8927] fuse: Bad value for 'fd' [ 107.362252][ T8939] loop0: detected capacity change from 0 to 128 [ 107.362684][ T8939] vfat: Unknown parameter 'dos1xfloppX' [ 107.427573][ T8941] __nla_validate_parse: 5 callbacks suppressed [ 107.427590][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.804'. [ 107.478165][ T4714] Bluetooth: hci1: command tx timeout [ 107.543996][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.544176][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.609600][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 107.645981][ T8943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.662581][ T8943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.666249][ T8960] netlink: 'syz.3.808': attribute type 1 has an invalid length. [ 107.666318][ T8960] netlink: 'syz.3.808': attribute type 3 has an invalid length. [ 107.666329][ T8960] netlink: 224 bytes leftover after parsing attributes in process `syz.3.808'. [ 107.668573][ T8960] netlink: 108 bytes leftover after parsing attributes in process `syz.3.808'. [ 107.822314][ T8964] netlink: 'syz.0.811': attribute type 1 has an invalid length. [ 107.822333][ T8964] netlink: 244 bytes leftover after parsing attributes in process `syz.0.811'. [ 107.822343][ T8964] NCSI netlink: No device for ifindex 0 [ 108.029785][ T8948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.030329][ T8948] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.031790][ T8948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.043267][ T8948] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.043296][ T8948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.050264][ T8948] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.050295][ T8948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.054297][ T8948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.055067][ T8948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.067037][ T8948] veth1_vlan: left promiscuous mode [ 108.067516][ T8948] veth0_vlan: left promiscuous mode [ 108.073255][ T8948] veth0_vlan: entered promiscuous mode [ 108.074559][ T8948] veth1_vlan: entered promiscuous mode [ 108.076577][ T8948] veth1_macvtap: left promiscuous mode [ 108.076910][ T8948] veth0_macvtap: left promiscuous mode [ 108.077346][ T8948] veth0_macvtap: entered promiscuous mode [ 108.086638][ T8948] veth1_macvtap: entered promiscuous mode [ 108.090781][ T8948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.091277][ T8948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.091921][ T8948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.092336][ T8948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.230084][ T8976] netlink: 32 bytes leftover after parsing attributes in process `syz.3.814'. [ 108.230106][ T8976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.814'. [ 108.288226][ T8981] tmpfs: Using encoding : utf8-12.1.0 [ 108.296076][ T8977] overlayfs: missing 'lowerdir' [ 108.674704][ T9007] tipc: Started in network mode [ 108.674722][ T9007] tipc: Node identity 4, cluster identity 4711 [ 108.674732][ T9007] tipc: Node number set to 4 [ 108.890679][ T9010] batman_adv: batadv0: Interface deactivated: syz_tun [ 108.919548][ T9010] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.919702][ T9010] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.144186][ T9010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.158473][ T9010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.520154][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 109.710034][ T5694] tipc: Subscription rejected, illegal request [ 109.802013][ T9039] loop9: detected capacity change from 0 to 512 [ 109.805874][ T9039] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.813477][ T9041] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 109.814032][ T9039] syz.9.834: attempt to access beyond end of device [ 109.814032][ T9039] loop9: rw=0, sector=17179852706, nr_sectors = 16 limit=512 [ 109.817685][ T9041] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 110.632169][ T9011] batman_adv: batadv0: Interface activated: syz_tun [ 110.642880][ T9011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.643950][ T9011] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.650696][ T9011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.673869][ T9011] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.673921][ T9011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.676790][ T9011] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.676817][ T9011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.691754][ T9011] batadv_slave_0: left promiscuous mode [ 110.692157][ T9011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.693038][ T9011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.696916][ T9011] veth1_vlan: left promiscuous mode [ 110.697324][ T9011] veth0_vlan: left promiscuous mode [ 110.698260][ T9011] veth0_vlan: entered promiscuous mode [ 110.700215][ T9011] veth1_vlan: entered promiscuous mode [ 110.703046][ T9011] veth1_macvtap: left promiscuous mode [ 110.703364][ T9011] veth0_macvtap: left promiscuous mode [ 110.703950][ T9011] veth0_macvtap: entered promiscuous mode [ 110.704462][ T9011] veth1_macvtap: entered promiscuous mode [ 110.706716][ T9011] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.707247][ T9011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.707637][ T9011] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.713670][ T9011] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.714275][ T9011] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 110.715081][ T9011] batadv_slave_0: entered promiscuous mode [ 110.741233][ T9024] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 110.979383][ T9070] loop9: detected capacity change from 0 to 512 [ 110.986751][ T9070] EXT4-fs (loop9): 1 truncate cleaned up [ 110.987153][ T9070] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.988255][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 111.015901][ T9074] loop0: detected capacity change from 0 to 512 [ 111.021688][ T9074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.142169][ T9096] FAULT_INJECTION: forcing a failure. [ 111.142169][ T9096] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 111.142191][ T9096] CPU: 0 UID: 0 PID: 9096 Comm: syz.3.847 Not tainted syzkaller #0 PREEMPT [ 111.142203][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 111.142209][ T9096] Call trace: [ 111.142212][ T9096] show_stack+0x2c/0x3c (C) [ 111.142233][ T9096] __dump_stack+0x30/0x40 [ 111.142246][ T9096] dump_stack_lvl+0xd8/0x12c [ 111.142258][ T9096] dump_stack+0x1c/0x28 [ 111.142269][ T9096] should_fail_ex+0x418/0x58c [ 111.142279][ T9096] should_fail_alloc_page+0xec/0x10c [ 111.142288][ T9096] prepare_alloc_pages+0x194/0x484 [ 111.142298][ T9096] alloc_pages_bulk_noprof+0x10c/0x7d8 [ 111.142307][ T9096] __kasan_populate_vmalloc+0xc0/0x1d0 [ 111.142319][ T9096] alloc_vmap_area+0xcd8/0x12ec [ 111.142329][ T9096] __get_vm_area_node+0x210/0x32c [ 111.142339][ T9096] get_vm_area+0x9c/0xd0 [ 111.142348][ T9096] arena_map_alloc+0x200/0x668 [ 111.142361][ T9096] map_create+0xa6c/0x153c [ 111.142371][ T9096] __sys_bpf+0x308/0x82c [ 111.142380][ T9096] __arm64_sys_bpf+0xd0/0xec [ 111.142389][ T9096] invoke_syscall+0x98/0x244 [ 111.142402][ T9096] el0_svc_common+0xec/0x23c [ 111.142414][ T9096] do_el0_svc+0x4c/0x5c [ 111.142425][ T9096] el0_svc+0x60/0x1d8 [ 111.142434][ T9096] el0t_64_sync_handler+0x44/0x104 [ 111.142442][ T9096] el0t_64_sync+0x198/0x19c [ 111.196380][ T9096] FAULT_INJECTION: forcing a failure. [ 111.196380][ T9096] name failslab, interval 1, probability 0, space 0, times 0 [ 111.196401][ T9096] CPU: 0 UID: 0 PID: 9096 Comm: syz.3.847 Tainted: G L syzkaller #0 PREEMPT [ 111.196414][ T9096] Tainted: [L]=SOFTLOCKUP [ 111.196417][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 111.196423][ T9096] Call trace: [ 111.196425][ T9096] show_stack+0x2c/0x3c (C) [ 111.196445][ T9096] __dump_stack+0x30/0x40 [ 111.196457][ T9096] dump_stack_lvl+0xd8/0x12c [ 111.196469][ T9096] dump_stack+0x1c/0x28 [ 111.196480][ T9096] should_fail_ex+0x418/0x58c [ 111.196489][ T9096] should_failslab+0xc4/0x120 [ 111.196498][ T9096] __kvmalloc_node_noprof+0x160/0x7fc [ 111.196508][ T9096] unix_net_init+0x108/0x270 [ 111.196518][ T9096] ops_init+0x2cc/0x528 [ 111.196530][ T9096] setup_net+0x118/0x2fc [ 111.196541][ T9096] copy_net_ns+0x454/0x698 [ 111.196551][ T9096] create_new_namespaces+0x304/0x50c [ 111.196563][ T9096] unshare_nsproxy_namespaces+0x120/0x170 [ 111.196574][ T9096] ksys_unshare+0x438/0x6e0 [ 111.196583][ T9096] __arm64_sys_unshare+0x40/0x54 [ 111.196592][ T9096] invoke_syscall+0x98/0x244 [ 111.196604][ T9096] el0_svc_common+0xec/0x23c [ 111.196616][ T9096] do_el0_svc+0x4c/0x5c [ 111.196627][ T9096] el0_svc+0x60/0x1d8 [ 111.196636][ T9096] el0t_64_sync_handler+0x44/0x104 [ 111.196644][ T9096] el0t_64_sync+0x198/0x19c [ 111.428524][ T9102] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 111.483442][ T9103] netlink: 52 bytes leftover after parsing attributes in process `syz.3.848'. [ 111.483458][ T9103] tipc: Invalid UDP bearer configuration [ 111.483474][ T9103] tipc: Enabling of bearer rejected, failed to enable media [ 111.775002][ T6676] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.919613][ T9109] bridge0: port 3(syz_tun) entered disabled state [ 111.919950][ T9109] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.920077][ T9109] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.953757][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.065008][ T9109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.078412][ T9109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.533042][ T9131] fuse: Bad value for 'fd' [ 112.598853][ T9114] bridge0: port 3(syz_tun) entered blocking state [ 112.598885][ T9114] bridge0: port 3(syz_tun) entered forwarding state [ 112.603550][ T9114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.605761][ T9114] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.614720][ T9114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.640044][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.640094][ T9114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.644985][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.645028][ T9114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.673800][ T9114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.680321][ T9114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.720237][ T9114] veth1_vlan: left promiscuous mode [ 112.720579][ T9114] veth0_vlan: left promiscuous mode [ 112.721281][ T9114] veth0_vlan: entered promiscuous mode [ 112.722327][ T9114] veth1_vlan: entered promiscuous mode [ 112.723967][ T9114] veth1_macvtap: left promiscuous mode [ 112.724318][ T9114] veth0_macvtap: left promiscuous mode [ 112.724802][ T9114] veth0_macvtap: entered promiscuous mode [ 112.725312][ T9114] veth1_macvtap: entered promiscuous mode [ 112.727151][ T9114] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.727550][ T9114] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.740640][ T9114] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.741183][ T9114] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.741592][ T9114] mac80211_hwsim hwsim20 wlan0: left promiscuous mode [ 112.863158][ T9149] 9p: Bad value for 'rfdno' [ 112.947664][ T9157] loop2: detected capacity change from 0 to 512 [ 112.962475][ T9157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.969327][ T9160] loop9: detected capacity change from 0 to 1024 [ 112.970028][ T9160] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 112.970064][ T9160] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 112.970302][ T9160] EXT4-fs error (device loop9): ext4_get_journal_inode:5928: inode #32: comm syz.9.868: iget: special inode unallocated [ 112.970314][ T9160] loop9: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 112.970395][ T9160] EXT4-fs (loop9): Remounting filesystem read-only [ 112.970429][ T9160] EXT4-fs (loop9): no journal found [ 112.970436][ T9160] EXT4-fs (loop9): can't get journal size [ 112.971803][ T9160] EXT4-fs (loop9): filesystem is read-only [ 112.972210][ T9160] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 113.285460][ T9157] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.867: corrupted xattr block 6: invalid header [ 113.289359][ T9157] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.867: corrupted xattr block 6: invalid header [ 113.289544][ T9157] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.867: corrupted xattr block 6: invalid header [ 113.289702][ T9157] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.867: corrupted xattr block 6: invalid header [ 113.304410][ T9157] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.867: corrupted xattr block 6: invalid header [ 113.310136][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.869'. [ 113.312529][ T9157] overlayfs: failed to get uuid (/file0, err=-117); falling back to uuid=null. [ 113.312600][ T9157] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.867: corrupted xattr block 6: invalid header [ 113.338882][ T9169] loop0: detected capacity change from 0 to 512 [ 113.352404][ T9169] EXT4-fs error (device loop0): ext4_xattr_inode_iget:473: comm syz.0.869: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 113.353314][ T9169] loop0: lost filesystem error report for type 5 error -117 [ 113.353636][ T9169] EXT4-fs (loop0): 1 orphan inode deleted [ 113.354873][ T9169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.364755][ T8373] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2933: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 113.364790][ T8373] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 113.365045][ T8373] EXT4-fs warning (device loop2): ext4_evict_inode:288: xattr delete (err -117) [ 113.365386][ T8373] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 113.366363][ T8373] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 113.366537][ T8373] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 113.367362][ T8373] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.368616][ T8373] EXT4-fs warning (device loop2): ext4_evict_inode:288: xattr delete (err -117) [ 113.382921][ T8373] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.797032][ T9185] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 113.819283][ T6676] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.864861][ T9187] fuse: Bad value for 'fd' [ 113.901200][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.901359][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.029462][ T9187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.041123][ T9187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.364379][ T9198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.364948][ T9198] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.369632][ T9198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.400881][ T9198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.403426][ T9198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.406443][ T9198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.406460][ T9198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.409437][ T9198] veth1_vlan: left promiscuous mode [ 114.409814][ T9198] veth0_vlan: left promiscuous mode [ 114.410577][ T9198] veth0_vlan: entered promiscuous mode [ 114.411417][ T9198] veth1_vlan: entered promiscuous mode [ 114.412945][ T9198] veth1_macvtap: left promiscuous mode [ 114.413263][ T9198] veth0_macvtap: left promiscuous mode [ 114.413656][ T9198] veth0_macvtap: entered promiscuous mode [ 114.414009][ T9198] veth1_macvtap: entered promiscuous mode [ 114.415916][ T9198] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.416363][ T9198] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.416866][ T9198] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.417362][ T9198] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.417834][ T9198] mac80211_hwsim hwsim22 wlan0: left promiscuous mode [ 114.421252][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.421281][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.423589][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.423611][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.769289][ T9219] block device autoloading is deprecated and will be removed. [ 115.771447][ T9219] block device autoloading is deprecated and will be removed. [ 115.777855][ T9219] device-mapper: table: 248:2: writecache: Invalid block size (-EINVAL) [ 115.777876][ T9219] device-mapper: ioctl: error adding target to table [ 116.292368][ T9169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.293739][ T9175] netlink: 'syz.2.870': attribute type 1 has an invalid length. [ 116.293756][ T9175] netlink: 244 bytes leftover after parsing attributes in process `syz.2.870'. [ 116.293765][ T9175] NCSI netlink: No device for ifindex 0 [ 116.409635][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.741735][ T9250] fuse: Bad value for 'fd' [ 116.771305][ T9250] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.771481][ T9250] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.782400][ T9252] loop9: detected capacity change from 0 to 256 [ 116.782957][ T9252] vfat: Unknown parameter ''7ÑCr' [ 116.806239][ T9250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.807874][ T9250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.928667][ T9252] batadv_slave_0: entered promiscuous mode [ 116.928919][ T9251] batadv_slave_0: left promiscuous mode [ 116.975129][ T9253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.979230][ T9253] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.985482][ T9253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.026555][ T9262] loop9: detected capacity change from 0 to 256 [ 117.028767][ T9253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.031243][ T9253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.038399][ T9253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 117.038414][ T9253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.042064][ T9253] veth1_vlan: left promiscuous mode [ 117.042789][ T9253] veth0_vlan: left promiscuous mode [ 117.044457][ T9253] veth0_vlan: entered promiscuous mode [ 117.045629][ T9253] veth1_vlan: entered promiscuous mode [ 117.050200][ T9253] veth1_macvtap: left promiscuous mode [ 117.051848][ T9253] veth0_macvtap: left promiscuous mode [ 117.052181][ T9253] veth0_macvtap: entered promiscuous mode [ 117.053088][ T9253] veth1_macvtap: entered promiscuous mode [ 117.059433][ T9253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.061542][ T9253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.061961][ T9253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.064001][ T9253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.113107][ T9264] netlink: 16 bytes leftover after parsing attributes in process `syz.9.891'. [ 117.181646][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.181682][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.182302][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.182322][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.206095][ T9268] loop9: detected capacity change from 0 to 4096 [ 117.267338][ T9268] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.328761][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 117.328851][ T9269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.330603][ T9273] netlink: 'syz.2.894': attribute type 1 has an invalid length. [ 117.330616][ T9273] netlink: 244 bytes leftover after parsing attributes in process `syz.2.894'. [ 117.330625][ T9273] NCSI netlink: No device for ifindex 0 [ 117.374297][ T9269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.375951][ T6676] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.612583][ T9279] team_slave_1: entered promiscuous mode [ 117.612604][ T9279] team_slave_1: entered allmulticast mode [ 117.716656][ T9288] fuse: Bad value for 'fd' [ 117.747165][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.898'. [ 117.747253][ T9292] batman_adv: batadv0: Interface deactivated: syz_tun [ 117.786917][ T9292] batman_adv: batadv0: Removing interface: syz_tun [ 118.149829][ T9301] binder: Binderfs stats mode cannot be changed during a remount [ 118.351606][ T9303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.902'. [ 118.527076][ T9312] loop2: detected capacity change from 0 to 512 [ 118.533911][ T9312] EXT4-fs (loop2): Test dummy encryption mode enabled [ 118.537397][ T9312] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.905: Attempting to read directory block (0) that is past i_size (256) [ 118.537422][ T9312] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 118.539033][ T9312] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 118.539488][ T9312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.585078][ T8373] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.608103][ T9316] loop2: detected capacity change from 0 to 128 [ 118.609301][ T9318] misc userio: The device must be registered before sending interrupts [ 118.651323][ T9316] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.677532][ T9324] loop9: detected capacity change from 0 to 512 [ 118.680243][ T9324] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 118.695294][ T9324] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082] [ 118.695342][ T9324] System zones: 0-2, 18-18, 34-34 [ 118.702145][ T9324] EXT4-fs (loop9): 1 orphan inode deleted [ 118.702657][ T9324] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.705643][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.9.907'. [ 118.716959][ T9315] syz.2.906 (pid 9315) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 118.721031][ T9316] netlink: 'syz.2.906': attribute type 12 has an invalid length. [ 118.721044][ T9316] netlink: 'syz.2.906': attribute type 29 has an invalid length. [ 118.721054][ T9316] netlink: 148 bytes leftover after parsing attributes in process `syz.2.906'. [ 118.739846][ T6676] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.783780][ T9329] TC_ACT_REPEAT abuse ? [ 118.877135][ T9341] evm: overlay not supported [ 118.918178][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 119.048117][ T9348] netlink: 'syz.0.912': attribute type 1 has an invalid length. [ 119.048135][ T9348] netlink: 244 bytes leftover after parsing attributes in process `syz.0.912'. [ 119.048144][ T9348] NCSI netlink: No device for ifindex 0 [ 119.638287][ T24] atkbd serio0: keyboard reset failed on [ 119.803726][ T9356] netlink: 16 bytes leftover after parsing attributes in process `syz.9.914'. [ 119.822340][ T9358] binder: 9357:9358 got transaction to invalid handle, 1 [ 119.822514][ T9358] binder_debug: 2 callbacks suppressed [ 119.822526][ T9358] binder: 9357:9358 cannot find target node [ 119.822543][ T9358] binder: 9357:9358 transaction call to 0:0 failed 135/29201/-22, code 0 size 72-24 line 3253 [ 119.822753][ T9358] binder: 9357:9358 got transaction to invalid handle, 3 [ 119.822763][ T9358] binder: 9357:9358 cannot find target node [ 119.822773][ T9358] binder: 9357:9358 transaction call to 0:0 failed 136/29201/-22, code 0 size 0-0 line 3253 [ 119.824797][ T4843] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.831446][ T7559] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.946826][ T9363] capability: warning: `syz.0.916' uses deprecated v2 capabilities in a way that may be insecure [ 120.001273][ T9370] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.919:9370 [ 120.300691][ T8373] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.324443][ T9376] loop2: detected capacity change from 0 to 8 [ 120.326521][ T9376] Major/Minor mismatch, older Squashfs 0.-12800 filesystems are unsupported [ 121.221477][ T9396] mmap: syz.0.924 (9396) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 121.236029][ T9396] Soft offlining pfn 0x216bf1 at process virtual address 0x205dd000 [ 121.236060][ T9396] Soft offline: 0x216bf1: page already poisoned [ 121.417338][ T9394] sctp: [Deprecated]: syz.9.925 (pid 9394) Use of int in max_burst socket option deprecated. [ 121.417338][ T9394] Use struct sctp_assoc_value instead [ 121.434518][ T9399] netlink: 16 bytes leftover after parsing attributes in process `syz.2.926'. [ 121.576165][ T9408] Console: switching to colour dummy device 80x25 [ 121.795196][ T9411] futex_wake_op: syz.3.930 tries to shift op by -1; fix this program [ 121.825742][ T4714] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 121.979114][ T9420] veth3: entered promiscuous mode [ 121.979132][ T9420] veth3: entered allmulticast mode [ 122.041454][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 122.041472][ T9426] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 122.093388][ T9430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.937'. [ 122.121557][ T9432] loop0: detected capacity change from 0 to 512 [ 122.124371][ T9432] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 122.125423][ T9432] EXT4-fs (loop0): orphan cleanup on readonly fs [ 122.125529][ T9432] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.938: bad orphan inode 15 [ 122.125542][ T9432] loop0: lost filesystem error report for type 5 error -117 [ 122.125704][ T9432] ext4_test_bit(bit=14, block=18) = 1 [ 122.125713][ T9432] is_bad_inode(inode)=0 [ 122.125766][ T9432] NEXT_ORPHAN(inode)=1023 [ 122.125773][ T9432] max_ino=32 [ 122.125780][ T9432] i_nlink=0 [ 122.127782][ T9432] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #15: comm syz.0.938: corrupted xattr block 19: e_value size too large [ 122.127804][ T9432] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.128002][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 122.128011][ C0] EXT4-fs (loop0): initial error at time 122: ext4_orphan_get:1429 [ 122.128022][ C0] EXT4-fs (loop0): last error at time 122: ext4_xattr_delete_inode:2933: inode 15 [ 122.128435][ T9432] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -117) [ 122.129056][ T9432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 122.156374][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.588904][ T9439] netlink: 'syz.2.940': attribute type 1 has an invalid length. [ 122.588925][ T9439] netlink: 244 bytes leftover after parsing attributes in process `syz.2.940'. [ 122.588937][ T9439] NCSI netlink: No device for ifindex 0 [ 123.124483][ T9460] loop0: detected capacity change from 0 to 512 [ 123.173813][ T9460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.184759][ T9460] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.946: iget: bad i_size value: 2533279085363199 [ 123.276185][ T9460] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.946: iget: bad i_size value: 2533279085363199 [ 123.276739][ T9460] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.946: iget: bad i_size value: 2533279085363199 [ 123.312507][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.416937][ T9480] binder: 9479:9480 tried to acquire reference to desc 0, got 1 instead [ 123.417105][ T9480] binder: 9479:9480 ioctl c0306201 0 returned -14 [ 123.417211][ T9480] binder: 9479:9480 got transaction to invalid handle, 3 [ 123.417221][ T9480] binder: 9479:9480 cannot find target node [ 123.417233][ T9480] binder: 9479:9480 transaction call to 0:0 failed 141/29201/-22, code 0 size 0-0 line 3253 [ 123.423495][ T4812] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.437408][ T9482] can0: slcan on ttyS3. [ 123.710030][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 123.733929][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 123.734075][ T9487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.951'. [ 123.734197][ T9487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.951'. [ 123.749893][ T9482] can0 (unregistered): slcan off ttyS3. [ 123.785079][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 123.827388][ T30] audit: type=1326 audit(123.790:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9494 comm="syz.2.954" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a228 code=0x7ffc0000 [ 123.827419][ T30] audit: type=1326 audit(123.790:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9494 comm="syz.2.954" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a228 code=0x7ffc0000 [ 123.827577][ T30] audit: type=1326 audit(123.790:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9494 comm="syz.2.954" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a228 code=0x7ffc0000 [ 123.827838][ T30] audit: type=1326 audit(123.790:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9494 comm="syz.2.954" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a228 code=0x7ffc0000 [ 123.848696][ T30] audit: type=1326 audit(123.790:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9494 comm="syz.2.954" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=444 compat=0 ip=0xffffbc97a228 code=0x7ffc0000 [ 123.849667][ T30] audit: type=1326 audit(123.790:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9494 comm="syz.2.954" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a228 code=0x7ffc0000 [ 123.849694][ T30] audit: type=1326 audit(123.820:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9494 comm="syz.2.954" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a228 code=0x7ffc0000 [ 123.849825][ T30] audit: type=1326 audit(123.820:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9494 comm="syz.2.954" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a228 code=0x7ffc0000 [ 123.849927][ T30] audit: type=1326 audit(123.820:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9494 comm="syz.2.954" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a228 code=0x7ffc0000 [ 123.850005][ T30] audit: type=1326 audit(123.820:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9494 comm="syz.2.954" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc97a228 code=0x7ffc0000 [ 123.856892][ T9497] sctp: Trying to GSO but underlying device doesn't support it. [ 123.918608][ T9500] loop2: detected capacity change from 0 to 512 [ 123.925321][ T9501] netlink: 4516 bytes leftover after parsing attributes in process `syz.3.956'. [ 123.944439][ T9500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.964791][ T9500] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.957: corrupted xattr block 33: invalid header [ 123.965613][ T9500] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.957: corrupted xattr block 33: invalid header [ 123.965804][ T9500] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.957: corrupted xattr block 33: invalid header [ 124.014713][ T9506] tipc: Enabling of bearer rejected, failed to enable media [ 124.032426][ T6756] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 124.033100][ T6756] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 124.033117][ T6756] EXT4-fs (loop2): This should not happen!! Data will be lost [ 124.033117][ T6756] [ 124.033124][ T6756] EXT4-fs (loop2): Total free blocks count 0 [ 124.033131][ T6756] EXT4-fs (loop2): Free/Dirty block details [ 124.033151][ T6756] EXT4-fs (loop2): free_blocks=65280 [ 124.033170][ T6756] EXT4-fs (loop2): dirty_blocks=31 [ 124.033176][ T6756] EXT4-fs (loop2): Block reservation details [ 124.033182][ T6756] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 124.057291][ T8373] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.162632][ T9517] netlink: 'syz.2.959': attribute type 1 has an invalid length. [ 124.162650][ T9517] netlink: 244 bytes leftover after parsing attributes in process `syz.2.959'. [ 124.162659][ T9517] NCSI netlink: No device for ifindex 0 [ 124.347162][ T9527] loop9: detected capacity change from 0 to 512 [ 124.364443][ T9529] overlayfs: empty lowerdir [ 124.402112][ T9527] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.426924][ T9521] FAULT_INJECTION: forcing a failure. [ 124.426924][ T9521] name failslab, interval 1, probability 0, space 0, times 0 [ 124.426948][ T9521] CPU: 1 UID: 0 PID: 9521 Comm: syz.0.960 Tainted: G L syzkaller #0 PREEMPT [ 124.426962][ T9521] Tainted: [L]=SOFTLOCKUP [ 124.426966][ T9521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 124.426972][ T9521] Call trace: [ 124.426975][ T9521] show_stack+0x2c/0x3c (C) [ 124.426996][ T9521] __dump_stack+0x30/0x40 [ 124.427009][ T9521] dump_stack_lvl+0xd8/0x12c [ 124.427021][ T9521] dump_stack+0x1c/0x28 [ 124.427032][ T9521] should_fail_ex+0x418/0x58c [ 124.427041][ T9521] should_failslab+0xc4/0x120 [ 124.427050][ T9521] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 124.427060][ T9521] kstrdup+0x50/0x104 [ 124.427069][ T9521] kstrdup_const+0x54/0x6c [ 124.427078][ T9521] __kernfs_new_node+0xb0/0x7d8 [ 124.427089][ T9521] kernfs_new_node+0xe8/0x130 [ 124.427100][ T9521] kernfs_create_link+0x98/0x1e4 [ 124.427112][ T9521] sysfs_do_create_link_sd+0x8c/0x120 [ 124.427120][ T9521] sysfs_create_link+0x74/0x94 [ 124.427128][ T9521] device_add_class_symlinks+0x1e0/0x254 [ 124.427140][ T9521] device_add+0x3fc/0x9e0 [ 124.427149][ T9521] rfkill_register+0x144/0x7bc [ 124.427163][ T9521] nfc_register_device+0x140/0x350 [ 124.427173][ T9521] nci_register_device+0x6b8/0x7e4 [ 124.427182][ T9521] virtual_ncidev_open+0x120/0x1a0 [ 124.427192][ T9521] misc_open+0x2dc/0x338 [ 124.427201][ T9521] chrdev_open+0x398/0x3e8 [ 124.427212][ T9521] do_dentry_open+0x5c4/0xfbc [ 124.427224][ T9521] vfs_open+0x44/0x2dc [ 124.427235][ T9521] path_openat+0x1084/0x18f0 [ 124.427246][ T9521] do_file_open+0x1c8/0x2e8 [ 124.427256][ T9521] do_sys_openat2+0x114/0x1e8 [ 124.427268][ T9521] do_sys_open+0xb0/0xe0 [ 124.427279][ T9521] __arm64_sys_openat+0xa8/0xc4 [ 124.427291][ T9521] invoke_syscall+0x98/0x244 [ 124.427303][ T9521] el0_svc_common+0xec/0x23c [ 124.427315][ T9521] do_el0_svc+0x4c/0x5c [ 124.427326][ T9521] el0_svc+0x60/0x1d8 [ 124.427335][ T9521] el0t_64_sync_handler+0x44/0x104 [ 124.427343][ T9521] el0t_64_sync+0x198/0x19c [ 124.491269][ T6676] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.160599][ T9566] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82 [ 125.216738][ T9571] netlink: 'syz.3.971': attribute type 21 has an invalid length. [ 125.446491][ T9586] loop9: detected capacity change from 0 to 512 [ 125.447586][ T9586] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 125.447598][ T9586] EXT4-fs (loop9): group descriptors corrupted! [ 125.832580][ T9603] fuse: Bad value for 'fd' [ 125.861217][ T9603] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.861387][ T9603] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.892002][ T9603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.959593][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.959623][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.977154][ T9594] bridge_slave_0: left allmulticast mode [ 125.977175][ T9594] bridge_slave_0: left promiscuous mode [ 125.977258][ T9594] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.011398][ T9594] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 126.055519][ T9606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.060386][ T9606] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.066618][ T9606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.135339][ T9611] netlink: 'syz.9.982': attribute type 1 has an invalid length. [ 126.135357][ T9611] netlink: 244 bytes leftover after parsing attributes in process `syz.9.982'. [ 126.135368][ T9611] NCSI netlink: No device for ifindex 0 [ 126.152916][ T9606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.154467][ T9606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.154481][ T9606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.155777][ T9606] veth1_vlan: left promiscuous mode [ 126.156082][ T9606] veth0_vlan: left promiscuous mode [ 126.156537][ T9606] veth0_vlan: entered promiscuous mode [ 126.157130][ T9606] veth1_vlan: entered promiscuous mode [ 126.196408][ T9606] veth1_macvtap: left promiscuous mode [ 126.196733][ T9606] veth0_macvtap: left promiscuous mode [ 126.348985][ T9606] veth0_macvtap: entered promiscuous mode [ 126.349351][ T9606] veth1_macvtap: entered promiscuous mode [ 126.370769][ T9606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.375508][ T9606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.377774][ T9606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.390035][ T9606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.410730][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.410763][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.414489][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.414516][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.564110][ T9619] fuse: fd is not a fuse device [ 126.624795][ T9624] loop0: detected capacity change from 0 to 512 [ 126.653745][ T9624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.657101][ T9624] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.987: corrupted xattr block 33: invalid ea_ino [ 126.657297][ T9624] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.987: corrupted xattr block 33: invalid ea_ino [ 126.657555][ T9624] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.987: corrupted xattr block 33: invalid ea_ino [ 126.663571][ T9624] EXT4-fs error (device loop0): ext4_xattr_block_find:1885: inode #15: comm syz.0.987: corrupted xattr block 33: invalid ea_ino [ 126.738858][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.744538][ T9637] loop2: detected capacity change from 0 to 512 [ 126.744997][ T9637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.772091][ T9637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.833975][ T8373] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.942665][ T9647] syz_tun: entered promiscuous mode [ 126.944301][ T9647] vlan0: entered promiscuous mode [ 127.205182][ T9647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.995'. [ 127.256124][ T9660] loop0: detected capacity change from 0 to 128 [ 127.263229][ T9662] loop9: detected capacity change from 0 to 2048 [ 127.263923][ T9660] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.264869][ T9662] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.280359][ T9662] EXT4-fs error (device loop9): __ext4_iget:5592: inode #2: block 127754: comm syz.9.997: invalid block [ 127.280389][ T9662] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 127.280633][ T9662] EXT4-fs (loop9): get root inode failed [ 127.280641][ T9662] EXT4-fs (loop9): mount failed [ 127.288000][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 127.288020][ C0] EXT4-fs (loop9): initial error at time 127: __ext4_iget:5592: inode 2: block 127754 [ 127.288043][ C0] EXT4-fs (loop9): last error at time 127: __ext4_iget:5592: inode 2: block 127754 [ 127.345049][ T4707] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.510517][ T9676] loop9: detected capacity change from 0 to 4096 [ 127.513433][ T9676] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.516236][ T9676] EXT4-fs (loop9): Test dummy encryption mode enabled [ 127.540903][ T9676] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.630250][ T9686] loop0: detected capacity change from 0 to 128 [ 127.664541][ T9686] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.707795][ T6676] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.879034][ T9704] netlink: 'syz.9.1008': attribute type 2 has an invalid length. [ 127.945526][ T9704] autofs4:pid:9704:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.1536), cmd(0xc0189375) [ 127.945627][ T9704] autofs4:pid:9704:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 127.966029][ T4707] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.990218][ T9712] loop0: detected capacity change from 0 to 1024 [ 127.991161][ T9712] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.992985][ T9712] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #3: block 1: comm syz.0.1009: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.993005][ T9712] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 127.993200][ T9712] EXT4-fs (loop0): Remounting filesystem read-only [ 127.993286][ T9712] EXT4-fs (loop0): 1 orphan inode deleted [ 127.993682][ T9712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.005532][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.063187][ T9716] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.121974][ T9716] md: array md0 already initialised! [ 128.177017][ T9716] ------------[ cut here ]------------ [ 128.177029][ T9716] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0xe4/0x578, CPU#0: syz.0.1010/9716 [ 128.180389][ T9716] Modules linked in: [ 128.181233][ T9716] CPU: 0 UID: 0 PID: 9716 Comm: syz.0.1010 Tainted: G L syzkaller #0 PREEMPT [ 128.183501][ T9716] Tainted: [L]=SOFTLOCKUP [ 128.184490][ T9716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 128.186418][ T9716] pstate: 23400005 (nzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 128.188032][ T9716] pc : __alloc_frozen_pages_noprof+0xe4/0x578 [ 128.189386][ T9716] lr : __alloc_frozen_pages_noprof+0xa8/0x578 [ 128.190571][ T9716] sp : ffff8000976472e0 [ 128.191390][ T9716] x29: ffff8000976473a0 x28: ffff0000ccebc018 x27: ffff800097647300 [ 128.193182][ T9716] x26: 1ffff00011e9d6ec x25: dfff800000000000 x24: ffff700012ec8e60 [ 128.195034][ T9716] x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000040dc0 [ 128.196875][ T9716] x20: 0000000000000000 x19: 0000000000000034 x18: ffff80011b876000 [ 128.198733][ T9716] x17: ffff0001a4fd3e07 x16: ffff0000ce0dbb14 x15: 0000000000000014 [ 128.200455][ T9716] x14: 0000000000000000 x13: 0000000000000005 x12: 0000000000000000 [ 128.202197][ T9716] x11: 0000000000000000 x10: ffff700012ec8e69 x9 : 0000000000000001 [ 128.203942][ T9716] x8 : ffff80008ae12000 x7 : 0000000000000000 x6 : 0000000000000000 [ 128.205753][ T9716] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000020 [ 128.207589][ T9716] x2 : 0000000000000008 x1 : 0000000000000000 x0 : ffff800097647320 [ 128.209415][ T9716] Call trace: [ 128.210154][ T9716] __alloc_frozen_pages_noprof+0xe4/0x578 (P) [ 128.211534][ T9716] alloc_pages_mpol+0x1fc/0x3d0 [ 128.212543][ T9716] alloc_frozen_pages_noprof+0xc4/0x10c [ 128.213752][ T9716] ___kmalloc_large_node+0x74/0x158 [ 128.214862][ T9716] __kmalloc_large_node_noprof+0x2c/0x8c [ 128.216091][ T9716] __kmalloc_noprof+0x3f0/0x6c8 [ 128.217149][ T9716] setup_conf+0x9e4/0x1f38 [ 128.218107][ T9716] raid5_run+0x670/0x1b68 [ 128.219074][ T9716] md_run+0xb10/0x19e8 [ 128.219967][ T9716] do_md_run+0x4c/0x4e4 [ 128.220880][ T9716] md_ioctl+0x1bf8/0x23d4 [ 128.221828][ T9716] blkdev_ioctl+0x574/0x904 [ 128.222850][ T9716] __arm64_sys_ioctl+0x154/0x1cc [ 128.223993][ T9716] invoke_syscall+0x98/0x244 [ 128.225043][ T9716] el0_svc_common+0xec/0x23c [ 128.225916][ T9716] do_el0_svc+0x4c/0x5c [ 128.226712][ T9716] el0_svc+0x60/0x1d8 [ 128.227579][ T9716] el0t_64_sync_handler+0x44/0x104 [ 128.228697][ T9716] el0t_64_sync+0x198/0x19c [ 128.229700][ T9716] irq event stamp: 632 [ 128.230579][ T9716] hardirqs last enabled at (631): [] seqcount_lockdep_reader_access+0x68/0xcc [ 128.232823][ T9716] hardirqs last disabled at (632): [] el1_brk64+0x20/0x54 [ 128.234782][ T9716] softirqs last enabled at (558): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 128.237108][ T9716] softirqs last disabled at (556): [] fpsimd_restore_current_state+0x44/0x9c8 [ 128.239388][ T9716] ---[ end trace 0000000000000000 ]--- [ 128.247076][ T9716] Unable to handle kernel paging request at virtual address dfff800000000005 [ 128.247089][ T9716] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 128.247097][ T9716] Mem abort info: [ 128.247101][ T9716] ESR = 0x0000000096000005 [ 128.247105][ T9716] EC = 0x25: DABT (current EL), IL = 32 bits [ 128.247111][ T9716] SET = 0, FnV = 0 [ 128.247116][ T9716] EA = 0, S1PTW = 0 [ 128.247221][ T9716] FSC = 0x05: level 1 translation fault [ 128.247228][ T9716] Data abort info: [ 128.247232][ T9716] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 128.247238][ T9716] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 128.247243][ T9716] GCS = 0, Overlay = 0, DirtyBit = 0 [ 128.247249][ T9716] [dfff800000000005] address between user and kernel address ranges [ 128.247348][ T9716] Internal error: Oops: 0000000096000005 [#1] SMP [ 128.263522][ T9716] Modules linked in: [ 128.264351][ T9716] CPU: 0 UID: 0 PID: 9716 Comm: syz.0.1010 Tainted: G W L syzkaller #0 PREEMPT [ 128.266450][ T9716] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 128.267530][ T9716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 128.269601][ T9716] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 128.271252][ T9716] pc : free_conf+0x88/0x540 [ 128.272202][ T9716] lr : free_conf+0x34/0x540 [ 128.273187][ T9716] sp : ffff800097647550 [ 128.274037][ T9716] x29: ffff800097647560 x28: ffff0000ccebc018 x27: ffff700012ec8ecc [ 128.275595][ T9716] x26: ffff00010469a000 x25: 1fffe000208d3444 x24: ffff00010469a000 [ 128.277233][ T9716] x23: dfff800000000000 x22: 00000000fffffff4 x21: ffff00010469a660 [ 128.278946][ T9716] x20: 0000000000000028 x19: ffff00010469a000 x18: ffff80011b876000 [ 128.280647][ T9716] x17: ffff0001a4fd3e07 x16: ffff0000ce0dbb14 x15: 0000000000000014 [ 128.282425][ T9716] x14: 0000000000000000 x13: 0000000000000005 x12: 0000000000000000 [ 128.284074][ T9716] x11: 0000000000000000 x10: 0000000000080000 x9 : 000000000001ae39 [ 128.285654][ T9716] x8 : 0000000000000005 x7 : 0000000000000000 x6 : 0000000000000000 [ 128.287403][ T9716] x5 : 00000000ffffffff x4 : 0000000000000dc0 x3 : 0000000000000000 [ 128.288964][ T9716] x2 : ffffffffffffffff x1 : ffff0000ce0dbb00 x0 : 0000000000000001 [ 128.290566][ T9716] Call trace: [ 128.291210][ T9716] free_conf+0x88/0x540 (P) [ 128.292080][ T9716] setup_conf+0xb0c/0x1f38 [ 128.292930][ T9716] raid5_run+0x670/0x1b68 [ 128.293841][ T9716] md_run+0xb10/0x19e8 [ 128.294772][ T9716] do_md_run+0x4c/0x4e4 [ 128.295702][ T9716] md_ioctl+0x1bf8/0x23d4 [ 128.296562][ T9716] blkdev_ioctl+0x574/0x904 [ 128.297471][ T9716] __arm64_sys_ioctl+0x154/0x1cc [ 128.298554][ T9716] invoke_syscall+0x98/0x244 [ 128.299565][ T9716] el0_svc_common+0xec/0x23c [ 128.300594][ T9716] do_el0_svc+0x4c/0x5c [ 128.301519][ T9716] el0_svc+0x60/0x1d8 [ 128.302423][ T9716] el0t_64_sync_handler+0x44/0x104 [ 128.303569][ T9716] el0t_64_sync+0x198/0x19c [ 128.304530][ T9716] Code: 97315314 f9400288 9100a114 d343fe88 (38776908) [ 128.306083][ T9716] ---[ end trace 0000000000000000 ]--- [ 128.583367][ T9716] Kernel panic - not syncing: Oops: Fatal exception [ 128.584690][ T9716] SMP: stopping secondary CPUs [ 128.585646][ T9716] Kernel Offset: disabled [ 128.586506][ T9716] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 128.587899][ T9716] Memory Limit: none [ 128.862664][ T9716] Rebooting in 86400 seconds..