last executing test programs: 31.895889527s ago: executing program 2 (id=178): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000c00), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105500, &(0x7f0000000c40)=@usbdevfs_connect={0x6a1}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz0\x00', {0x0, 0x4, 0x0, 0x1000}, 0x1c, [0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xac, 0xff, 0xeb93], [0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8]}, 0x45c) openat$fb0(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000ac0), 0x2, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000b00)=""/196) r3 = syz_create_resource$futex(&(0x7f0000000000)) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0000, 0x0) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x8003, 0x0) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_STATUS(r4, 0xc138fd0c, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x81800, 0x0, 0x0, @by_dev={r6}}) futex(r3, 0xd, 0x1, 0x0, r3, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r4, 0x80306e85, &(0x7f00000005c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r8, &(0x7f0000000600), 0x220, 0x100, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x3c) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400040003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611c5d4427849310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de000000289032744f07b302e7dc6a00000000807174b66df0000003d9dc67f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a010000", @ANYRESHEX], 0x100}, 0x0) futex$unlock_pi_list32(r3, 0x687, 0x0, 0x0, 0x0, 0x63) 31.853999354s ago: executing program 2 (id=179): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000002, 0x110810, r0, 0x79e5b000) (async) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x10142, 0x0) write$snapshot(r1, &(0x7f00000000c0)="4e5fb475eed0f28f5a1cf3fbd5091879a3fe596468b282303f9b258de70000cc607e953434dfe53ea18b05f121fa9e014a4711a9cd8bcd139088f86f2003779ead0a2d63d8246f2637b9e591e713ee4ed20dfe860bf577eeb3c03962244071f53e1853da3b24bb6ce40bb73a923077c54c5d8ee5b158404c68e1e70fee0e1e01e8b82dee2ed7c067aed3ab8022bd0e0c998631d10c5312f4f3ce43550fa41a82f7b0f9a10d4a131141dafe36", 0xac) (async, rerun: 64) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x0) (rerun: 64) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000001c0)) (async, rerun: 32) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x4400, 0x0) (async, rerun: 32) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000280)={{{0xb}}, 0x11, 0x8000, &(0x7f0000000240)="6f535ef92a8da62e4434b318077287f05f"}) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f00000002c0)=0x1) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, 0x1, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xef2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}]}, 0x74}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) (async) r4 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000440)='./md0\x00', 0x800, 0x0) ioctl$SET_BITMAP_FILE(r4, 0x4004092b, r2) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000580)={0x20, 0x2, &(0x7f0000000480)="9990f7d38076b1340d48cbd96c698964ff43aa502aba5f78f907e960b3c33e1227bb2cd1ae085290d7c7291921ecf2f6a27ec9a1d9a423f63bb5e6cb12fa51585f50f29d3c597eeb1f450044a502f7568df860c6d63dc0411f388afab909f16e2b3342d30000f9057faba6e8c885221274f97586303e10ea2fdfe08139da02201a9800ccd8f4f4636e4a3af0b372fe99bd4ee8b7a859752337b6fa94ce4200a044a494f80172ad76cc2e1af26faaab656d64ed7753f012d6d67b6d871ed855d9d76ae10e9892fbb4d634", 0x9, 0xdfb}) (async) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000005c0)={0x0, 0x0, {0x38, 0x3a, 0x14, 0x6, 0x2, 0x3f, 0x5, 0xa1, 0xffffffffffffffff}}) (async, rerun: 32) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x4) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000640)={0x9, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000006c0)={&(0x7f0000000680)=[r5, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) (async) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) (async) r8 = syz_io_uring_complete(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000740)=[r7, r1, r8, r2, r0, r4]}, 0x6) socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r8, 0x84, 0x7a, &(0x7f00000007c0)={0x1, 0xffffffffffffffff, 0x80800}, &(0x7f0000000800)=0xc) (rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000840)={0x2, @in6={{0xa, 0x4e20, 0xe, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, [0x7, 0x2f, 0x8, 0x5, 0x8, 0xffffffffffffffff, 0x3, 0x523e, 0x3f, 0x1, 0x3, 0x782, 0xfffffffffffffff8, 0x7, 0x2]}, &(0x7f0000000940)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, &(0x7f0000000980)={r10, 0x1}, 0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000000a40)={r10, 0xf9, "009210b76ff33990172306f0fa960270a3a214ab04b87b89b51f4fe1c58441c535bb1f7c4c8d2cad533c37df8c43afcf109188a077bcae2552c9a61d04dd7d2e22bb1582709e9d995c7e9e7b37df5e47df3d39001e15104fbb1f9828b289f10a4c5073e8cc8ad772bca84b341dc9d5d481e8bfb99e44b742114aeb62d9c6371df9ff993a8df4cfae6ef7a182cce403a2a71a5254645d0e423e1106afdde5e4ec4e291388bdf048f87beb31469b3c9417c3ddb0b31ae261cdefccd0a2358cd7e6d80bee9095f9640cc005da28bdee45348873243f554b024440efe7f77791500c0cdc454b5a8850028c86c5371faf0db7882556ba0528a07470"}, &(0x7f0000000b80)=0x101) preadv(r7, &(0x7f0000000d80)=[{&(0x7f0000000bc0)=""/20, 0x14}, {&(0x7f0000000c00)=""/63, 0x3f}, {&(0x7f0000000c40)=""/165, 0xa5}, {&(0x7f0000000d00)=""/86, 0x56}], 0x4, 0xd, 0xed) (async) r11 = gettid() prlimit64(r11, 0x7, &(0x7f0000000dc0)={0x2, 0x9}, &(0x7f0000000e00)) 31.827838404s ago: executing program 2 (id=180): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a1d0400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003000739f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 31.759925719s ago: executing program 2 (id=181): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x2, 0x400, 0x8532b4d7, 0x6, 0x4, 0xfffbfff7, 0xffffff07}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200500000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000002400038020000080080003400000000214000b"], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req={0x5, 0x0, 0x3, 0xfffffff9}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e00)={'wlan1\x00'}) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000f80)='./proc\x00', &(0x7f0000000fc0)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) write(r5, &(0x7f0000001040)='27', 0x2) read$FUSE(r5, &(0x7f0000001080)={0x2020}, 0x2020) write$FUSE_INIT(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000003100)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, 0x0, 0x310) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x20048a, &(0x7f0000000780)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x1, 0x51a, &(0x7f00000007c0)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") syz_mount_image$fuse(0x0, &(0x7f0000000d00)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000d40)='./bus\x00', &(0x7f0000000d80), 0x8, &(0x7f0000000dc0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800000000fedbdf250b00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x38}}, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080), 0x1000000000000159}, 0x40000023) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="e7000000", @ANYRES16=r3, @ANYBLOB="08002dbd7000fedbdf250f00000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000590000000400e200080035000300000028001b8004000200050001003a00000004000200050001001a00000004000200040002000400020010001780050006004000000000000000050018013c0000000800a1000100000008009f000500000008009f0005000000080022019a020000080027000100000008002201430300001c00a6800a000600ffffffffffff00000a00060008021100000100000800a50000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4805}, 0x8000) 30.901849249s ago: executing program 2 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f00000004c0)) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x704}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x62, 0x9, 0x700}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 30.568018891s ago: executing program 2 (id=201): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/tty/ttyS1/console\x00', 0x2, 0x0) syz_read_part_table(0x607, &(0x7f0000000740)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xc8}], {0x95, 0x0, 0x700}}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0x7a01) 30.528117051s ago: executing program 32 (id=201): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/tty/ttyS1/console\x00', 0x2, 0x0) syz_read_part_table(0x607, &(0x7f0000000740)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xc8}], {0x95, 0x0, 0x700}}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0x7a01) 27.220113747s ago: executing program 5 (id=246): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="030083204be0000000d200000a004e2300020009ff010000000000000000000000000001080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001", @ANYRES8=0x0, @ANYRES32=r3, @ANYRESOCT], 0x90) 27.219474525s ago: executing program 5 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffff8000, '\x00', 0x0, 0x0}, 0x50) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f00000004c0)) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x704}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x62, 0x9, 0x700}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 26.382640984s ago: executing program 5 (id=255): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)='key_or_keyring\x00Z\t\xd10xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000024c0)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000002900)="34000000070000000000000006", 0xd) (async) write(r6, &(0x7f0000002900)="34000000070000000000000006", 0xd) connect$unix(r4, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000002c0), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000300), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f0000000300), 0x10106, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000002540)={0x8, 0x0, 0x1000000}, &(0x7f0000002580), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) r7 = accept$alg(r0, 0x0, 0x0) getrlimit(0x6, &(0x7f00000023c0)) (async) getrlimit(0x6, &(0x7f00000023c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002600), 0xffffffffffffffff) gettid() (async) gettid() sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000028c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYRES16=r6], 0xffffffffffffff9b}, 0x1, 0x0, 0x0, 0x20048895}, 0x890) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000002400)=[{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002480)='{', 0x1}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) accept(r7, 0x0, 0x0) 23.487429577s ago: executing program 33 (id=294): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002680)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e00000014000280083000000008001f000500000008000400c200000000000000000000007566b31caa74046d87b18b2034395bfdb7a9100d66afca1150e97cd9211d2d111bfe0854f1cdbd1729df2dc5d8a1a54964e56bf7677537d90b2e783ca1020f31f12ab88467b8139fcf325c67511da7efd13657ea4058f400677bf6ccbf5a14d8fff299c038375301d39aeeeb0e015ed1cccf239f4d8725643517f94acbdc55284118edb824a6", @ANYRES64=r3, @ANYRESDEC=r2, @ANYBLOB="ada57ef7589c1dd64339f9ae6a304b1f4383ed226ed0f6b4ed278722524593cfb5b1ba7b02fcd3a3b22e55660da09a804e77c03aeb2324b126768fd4fced4567a4549c4fdd52a19612b6ad981d85b1bd89eb21968aa03883c241b3b5f533179c981b1894b32a8b49af26c58b637f86ff315db20601bf6e135afa31e2e98fc34135223bdbcbffc3c4ee368b43c43018b6994056538d56932df4f87271a25c2d28f9b090db8d691fc39c7ca39f867a802ce28a337788d5", @ANYRES8=r3, @ANYRES16=r1, @ANYRESHEX=r0], 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000024c0)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000002900)="34000000070000000000000006", 0xd) (async) write(r6, &(0x7f0000002900)="34000000070000000000000006", 0xd) connect$unix(r4, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000002c0), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000300), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f0000000300), 0x10106, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000002540)={0x8, 0x0, 0x1000000}, &(0x7f0000002580), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) r7 = accept$alg(r0, 0x0, 0x0) getrlimit(0x6, &(0x7f00000023c0)) (async) getrlimit(0x6, &(0x7f00000023c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002600), 0xffffffffffffffff) gettid() (async) gettid() sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000028c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYRES16=r6], 0xffffffffffffff9b}, 0x1, 0x0, 0x0, 0x20048895}, 0x890) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000002400)=[{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002480)='{', 0x1}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) accept(r7, 0x0, 0x0) 3.298514663s ago: executing program 6 (id=532): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='shortname=win95,uni_xlate=1,dos1xflo\a\x00\x00\x00\x00\x00\x00\x00r,discard,hortname=winnt,\x00'], 0xfc, 0x259, &(0x7f0000000280)="$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") timer_create(0x0, &(0x7f0000000780)={0x0, 0x21, 0x2}, &(0x7f00000007c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000800)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000840), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RRENAME(r1, &(0x7f00000008c0)={0x7, 0x15, 0x2}, 0x7) write$P9_RRENAMEAT(r1, &(0x7f0000000900)={0x7, 0x4b, 0x2}, 0xff7a) write$P9_RREADDIR(r1, &(0x7f0000000940)={0xb, 0x29, 0x2, {0x2328}}, 0xb) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000040000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740)={r4}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000ac0)=@framed, &(0x7f0000000b00)='syzkaller\x00'}, 0x94) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 2.882011884s ago: executing program 3 (id=538): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "828bf7", 0x38, 0x3a, 0x0, @private2, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2b, 0x0, @private1, @rand_addr=' \x01\x00', [], "1e520b4c951ee12e"}}}}}}}, 0x0) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r1, 0x701, 0x2070bd24, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40850}, 0x4000) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x2c}}, 0x4048000) 2.847757628s ago: executing program 3 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffff8000, '\x00', 0x0, 0x0}, 0x50) r4 = fsopen(&(0x7f0000000280)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f00000004c0)) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x704}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x62, 0x9, 0x700}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.408180633s ago: executing program 6 (id=541): syz_clone3(&(0x7f0000000bc0)={0x23800000, &(0x7f0000000c40)=0xffffffffffffffff, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(r0, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x4, 0x3}, 0x10) 2.353116912s ago: executing program 6 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4c, 0x0, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f0000001800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@var={0x3, 0x0, 0x0, 0xe, 0x4, 0x1}, @int={0xa, 0x0, 0x0, 0x1, 0x8, 0x6, 0x0, 0x2, 0x2}, @fwd={0x1}]}, {0x0, [0x0, 0x0, 0x2e, 0x5f]}}, &(0x7f0000001880)=""/103, 0x4a, 0x67, 0x0, 0x3, 0x10000}, 0x28) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000001940), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000001700)='fdinfo/3\x00') preadv(r5, &(0x7f0000001740)=[{&(0x7f0000001780)=""/127, 0x7f}], 0x1, 0x0, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000580)="ce2bbcb696a6f0835fb3deb6fd0d020c076d6836186940a050a0a9fa02d8a697dd957ac71843b29d5615851ff3608bfc83e3c77906acc3cb33d805f15bf513d241bb1e03a97dd7cfbd38f89b5ffe4179729a937315", 0x55}, {&(0x7f0000000600)="c7910f", 0x3}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x0) 2.260024907s ago: executing program 6 (id=546): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) syz_io_uring_setup(0x7890, &(0x7f0000000500)={0x0, 0xd52b, 0x10000, 0x7, 0x240004f}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee01) setgid(0x0) 2.248490907s ago: executing program 1 (id=547): mmap$IORING_OFF_SQES(0x0, 0x0, 0x4, 0x4000010, 0xffffffffffffffff, 0x10000000) r0 = memfd_secret(0x80000) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) r2 = syz_socket_connect_nvme_tcp() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180)='%]\x00', 0x40980, &(0x7f00000001c0)={@align=0xef, {0x80, 0x9, 0x3, 0x7f}}, 0x80, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x7}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x1ff, 0xffffffffffffffff, 0x1}) sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)="2a10203398f9253121f1fdf47d7b06733851a932042e10befc5878cc9f3454103c", 0x21}, {&(0x7f00000000c0)="cb04d065ccd5c5c6b7d32a699c4a84fda3c7", 0x12}], 0x2, &(0x7f0000000300)=[@rights={{0x34, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3, r4, r5, r6, 0xffffffffffffffff]}}], 0x38, 0x4000049}, 0x4c004) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x1, 0x700, 0x9c6, 0xffff, {{0xe, 0x4, 0x2, 0x9, 0x38, 0x66, 0x0, 0x8, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0x24, 0xcc, 0x3, 0xc, [{@loopback, 0x1}, {@private=0xa010100, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0xffffff88}, {@broadcast, 0xfb17}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000380)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x46e6}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @ldst={0x0, 0x3, 0x3, 0x7, 0x2, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x3, 0x2d, &(0x7f0000000440)=""/45, 0x41100, 0x2d, '\x00', r7, 0x0, r0, 0x8, &(0x7f0000000540)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x1, 0x1, 0x8000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, r8, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000094}, 0x4000000) unlinkat$rnull(0xffffffffffffff9c, &(0x7f0000000800)={'/sys/kernel/config/rnull/syzrnull', 0x0}, 0x200) syz_open_dev$mtd(&(0x7f0000000840), 0x400000000000000, 0x10002) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000880)=0x2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r10, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008}, 0x8000) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000a00)={0x2, 0x9}, &(0x7f0000000a40)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000a80)={0x0, 0x1d, "f12286631a25e5a85c954a19ae291999355559bc2723e27e63da3ac506"}, &(0x7f0000000ac0)=0x25) getsockopt$inet_sctp_SCTP_STATUS(r11, 0x84, 0xe, &(0x7f0000000b00)={r12, 0x9, 0xfffeffff, 0x7, 0xf, 0x4, 0x4, 0x5, {r13, @in6={{0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, 0x1, 0x5, 0x39, 0x92, 0x6}}, &(0x7f0000000bc0)=0xb0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000c00), 0x106, 0xa}}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000c80)={0xc, 0x1, {0xffffffffffffffff}, {0xee00}, 0x2, 0x101}) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000400, r14, &(0x7f0000000cc0)) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x10, 0x3f6, 0x8, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}}, 0x20000080) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000e00)={'bridge_slave_0\x00', 0x2}) unlinkat$rnull(0xffffffffffffff9c, &(0x7f0000000e40)={'/sys/kernel/config/rnull/syzrnull', 0x0}, 0x200) socket$netlink(0x10, 0x3, 0x4) 2.179720789s ago: executing program 1 (id=548): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x4, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x32}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001940)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f00000019c0)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000001ac0), &(0x7f0000001b00)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f00000006c0)={@private1, @local, 0x20, 0x16}}) mount(0x0, &(0x7f0000000740)='./file2\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='5', 0x1) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x800, &(0x7f0000000540)={[{@debug}, {@nolazytime}, {@dax_inode}, {@jqfmt_vfsv0}, {@dioread_lock}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}, {@noquota}]}, 0x3, 0x236, &(0x7f0000000300)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$P9_RMKDIR(r3, &(0x7f0000000c80)={0x14, 0x49, 0x1, {0x43, 0x0, 0x4}}, 0x14) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x133042, 0x19) r5 = io_uring_setup(0x1, &(0x7f0000000280)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f00000005c0)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000680)={&(0x7f00000006c0), 0x1000}, &(0x7f0000000700)={&(0x7f0000000740), 0x1000, 0x1}}, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x101000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r5, 0x24, &(0x7f0000000880), 0x0) sendfile(r4, r4, 0x0, 0x400) 2.104031089s ago: executing program 1 (id=549): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) clock_adjtime(0x17, &(0x7f0000000180)={0xe59b, 0x23ec1415, 0x8000000000000000, 0x10000, 0xb, 0x9, 0x2000000003, 0x4, 0x8, 0x4, 0xa, 0x8, 0xb, 0x1ff, 0xfff, 0x3, 0x5a9, 0x2, 0x9, 0x5, 0x8, 0x3, 0x11cb, 0x101, 0x40}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000080)={0x400001, 0x80, 0x3, 0x1, 0x8}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000120a01040000000000000000020000000900010073797a30000000000900020073797a31000000000800034000000008130004800f000100756e636f6e66696e65640000140000001100010000000000000000000200000a"], 0x90}}, 0x4) 2.103389664s ago: executing program 1 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x5, 0x5, 0x1, @loopback, @empty, 0x7, 0x10, 0x5, 0x3000}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000480)={&(0x7f00000004c0)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000540)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x100007, 0x1, 0xf06, 0x3, 0xb4, 0x80, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000640)={0x0, 0x40, 0xff, 0xff, 0x1, 0x8, 0x3, 0x80, 0x1, 0x0, 0x81, 0x7f, 0xf5}, 0xe) pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f00000006c0)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000700)=0xf, 0x4) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x20, r8, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000007c0)={0x209d, 0x0, 0x4, 0x1f}, 0x10) write(r6, &(0x7f0000000800)="1800000016005f0214fffffffffffff80700000001000000", 0x18) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x1, 0x1, 0x4001}]}, 0x10) splice(r4, 0x0, r2, 0x0, 0x20000000000002, 0x2) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@delneigh={0x5c, 0x1d, 0x0, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x10, 0x80, 0xb}, [@NDA_FDB_EXT_ATTRS={0x38, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x8}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1b}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xfa}]}, @NDA_IFINDEX={0x8, 0x8, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000003c0)={r9, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[], 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 1.968461324s ago: executing program 3 (id=553): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x541000, 0x1) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000005140)='./file0\x00', &(0x7f0000005180)='ramfs\x00', 0x10, 0x0) (async) r1 = syz_mount_image$fuse(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x400a8, &(0x7f0000005240)=ANY=[], 0x5, 0x0, 0x0) (async, rerun: 64) mount(&(0x7f00000000c0)=@md={'/dev/md', @named={'_syz', 0x0, '1'}}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x24b002, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f00000014c0)='./dev\x00', &(0x7f0000001500)='devtmpfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000001540)='./dev/mapper/control\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001580)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000015c0)='./dev/mapper/control\x00', &(0x7f0000001600), 0x8000, &(0x7f0000001640)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) symlinkat(&(0x7f0000005280)='.\x00', 0xffffffffffffff9c, &(0x7f00000052c0)='./file0\x00') (async) mount$fuse(0x0, &(0x7f0000005300)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000005340)='./file0/file0\x00', &(0x7f0000005380)='./file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000053c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000005400)='./file0\x00', &(0x7f0000005440)='./file0\x00', 0x0, 0x2125099, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000380)={0x0, 0x0, 0xfd8b, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) listen(r5, 0x9) (async, rerun: 32) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000440)=""/4082, 0xff2}], 0x1) (rerun: 32) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2040040, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES32=r4, @ANYBLOB=',group_id=', @ANYRESHEX=r1], 0x0, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, &(0x7f0000000180)) (async, rerun: 64) mount$bind(&(0x7f0000005480)='./file0/file0\x00', &(0x7f00000054c0)='./file0\x00', 0x0, 0x2125099, 0x0) (rerun: 64) 1.711970949s ago: executing program 4 (id=556): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0xc, &(0x7f0000000b40)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000bc0)={r5, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={0x1, @in6={{0xa, 0x4e23, 0xfff, @private2}}, 0x3, 0x4dd}, &(0x7f00000000c0)=0x90) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0xc, &(0x7f0000000300)=0xf, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={r6, 0xd8, &(0x7f0000000100)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x421, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, @in6={0xa, 0x4e20, 0xfff, @mcast2, 0x72}, @in6={0xa, 0x4e20, 0xadc00000, @remote, 0xaf6f}, @in6={0xa, 0x4e23, 0xe0ee, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}, @in6={0xa, 0x4e24, 0xe, @remote, 0x5}, @in6={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, @in={0x2, 0x4e23, @empty}]}, &(0x7f0000000240)=0x10) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x480}], 0x1, 0x0, 0x0) epoll_pwait2(r1, &(0x7f0000000480)=[{}, {}, {}], 0x3, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000580)={[0x3]}, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000640)={"45075e6644d94488bde6acde74f6f127", 0x0, 0x0, {0x4, 0x3}, {0x2}, 0x9ce, [0xaf25, 0x7, 0x2, 0x8001, 0x4, 0x207, 0x5, 0x7f, 0x9, 0xf, 0x4, 0x0, 0xc68, 0x5, 0x1, 0x800]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000740)=r8) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000001020300780900000000f3ff0a0000aff3c10f1b581d3e6a07040001800600074000040000f25ae118e70e2174a1edd495199892f22ea106c09bb0a63ccb3cba751d46708341adf59c00b94f487cb10e027a903d86c25485b76a6037580a48a0e0c64eb4cc0b172869b306f6708adceefaefa103903ba9748afd63f64ba49ffd64d9c3e58a70a6dc4cf4ec99a1390e12305ee824918445e2aa33d26dedc31db8e648b7eb01cfd0f7aab13d889704b4b452d312a9ae3441629d188472ae3e9d8da1246f3ab393c1ac3ded93268b23c14ec037185755819d7566d21395333f"], 0x20}, 0x1, 0x0, 0x0, 0x8094}, 0xc000) 1.654701914s ago: executing program 0 (id=557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESHEX=r1, @ANYBLOB="0a00e80008021100000100000a00e800ffffffffffff00000a00e80008021100000000001c00e70034de59c5acf8a952746c45d4389fb19ecece93d94a3a62e8040017801c00e700c8a18df7c7af411a18f8c9c2127b6b06e09e8cef4fc33ab01400040064766d727031000000000000000000000a00e80008021100000100000a00e800ffffffffffff0000"], 0xa8}, 0x1, 0x0, 0x0, 0x4044800}, 0x4024004) 1.638468971s ago: executing program 0 (id=558): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0x0, 0x9, 0x7}, 0x10, 0x1ea46, 0xffffffffffffffff, 0x2, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f00000005c0)=[{0x5, 0x2, 0x9, 0x9}, {0x3, 0x3, 0xc, 0x6}], 0x10, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0xe, &(0x7f0000000400)=ANY=[@ANYRES32], &(0x7f0000001480)='syzkaller\x00', 0xfffffffd, 0xffffff2a, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r2 = syz_io_uring_setup(0x110, &(0x7f0000000040)={0x0, 0x6d8b, 0x80, 0x2, 0x29}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001680)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000016c0), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000001700)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000001740)={0x2020}, 0x2020) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) fchmod(r6, 0xa) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0xffff, {"6938a03395f5ddccb9c20b8d6d1b4377"}, 0xb, 0xc76, 0xf}, @ib={0x1b, 0x80, 0x7, {"a5c217c7f55e233d74ec62f7f7a2b878"}, 0x101, 0x0, 0x3}}}, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000300)={0x0, r3, 0x20, {0x8b37, 0x8000000000000001}, 0x54}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000700)={'macvtap0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000005e000100000000000000000008000000010000007696"], 0x1c}], 0x1}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001640)={r3, 0x58, &(0x7f00000015c0)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r1, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000001540)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e17128c8620d5aec12323c6baf78937146e60cd5274a44340e5a252cba66b66fc41649f", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x402, 0x2, 0x4, 0x7, 0x16, "25d1769e53bc0bfd"}) 1.5759147s ago: executing program 4 (id=559): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xfffffffb) setxattr$incfs_metadata(&(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, 0x0, 0x1) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@ipv6_newroute={0x60, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x0, 0x2, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x60}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="060015040000000005000000b1e000e26424d7fced99f71d7eeef4a10e1d4372d5f8ac2eec8d88ed61fc2645348474f23695d05d4fa936fa95e988814470d94fa9138bd8e1d346006e167d5bf90704a4706518c13788107a6dd84729c93e4aa240aae4d96bd04803c7fffaaf67f753bf6640352a5496473c1d42eb37d6b06cd69d9746031c3f1567250fb00187a79424588895d50fed4e8a2fd3a7761c43ef823a01b5e241424e4e0fccfd8ec99a69c8da304e571fbbe281dde670e0c5138489f972fa7b08eb76b361b3b8a67e3e1adb6291e9184a92ae18b3afe80d41d5e996b30bc466477a3bd8b8cfbb461deb66cd6aa72b48490f14"], 0x60}}, 0x0) 1.574403771s ago: executing program 0 (id=560): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) (async) r2 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000005c0)={0x0, @aes128, 0x0, @desc4}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/interface_authorized_default\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) write(r3, &(0x7f0000000240)='0', 0x1) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000280)) (async) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000040)={'bridge0\x00', @remote}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000080)={0x8, 'bond0\x00', {'macvlan1\x00'}, 0xc63e}) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b0001004a787468647200002c000280080001400000001308000340000000fa08000640000000020500020094000000080004400000007c0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) dup(0xffffffffffffffff) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) (async) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) (async) syz_clone(0x1004600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x64) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c004}, 0x4c840) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xa}, {0x0, 0xfff3}, {0xb, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x10, 0xb}}, @TCA_U32_SEL={0x14, 0x5, {0x10, 0x4, 0x0, 0x9, 0x3, 0xfffa, 0x6, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.573850523s ago: executing program 4 (id=561): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000002c0)='./file2\x00', 0x0, &(0x7f0000000100)={[{@noload}, {}, {}, {@nomblk_io_submit}, {@nouid32}, {@usrjquota}, {@data_journal}, {@dax}]}, 0xfe, 0x471, &(0x7f00000004c0)="$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") openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x7a2, @empty, 0x6}}, 0x3ff, 0xffff, 0x80000000, 0xc960, 0x90, 0x101, 0x8}, &(0x7f0000000040)=0x9c) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000002c0)='./file2\x00', 0x0, &(0x7f0000000100)={[{@noload}, {}, {}, {@nomblk_io_submit}, {@nouid32}, {@usrjquota}, {@data_journal}, {@dax}]}, 0xfe, 0x471, &(0x7f00000004c0)="$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") (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x7a2, @empty, 0x6}}, 0x3ff, 0xffff, 0x80000000, 0xc960, 0x90, 0x101, 0x8}, &(0x7f0000000040)=0x9c) (async) 1.525340073s ago: executing program 4 (id=562): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x4, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xb4}]}, &(0x7f0000000880)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) socket$vsock_stream(0x28, 0x1, 0x0) 1.497012131s ago: executing program 4 (id=563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8800) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c0042004000048018000180080001006f7366000c0002800800014000000004240001800a0001007265646972000000140002802e4fd8ceac74110593c38908000140000000170800024000000015090001007379718a09c4902e7e9d020073797a3200000000140000000000010000000000000000000100000a00"/159], 0x94}}, 0x0) 1.423911564s ago: executing program 4 (id=564): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000180)={[], [{@fsname}], 0x2c}, 0x0, 0x51c, &(0x7f00000005c0)="$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") (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x2c, &(0x7f0000000380)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f00000003c0)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) (async) getpid() (async) mmap(&(0x7f00008f3000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000b00), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f0000000b40), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40800d5) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000bc0)={0x1, 0x0, {0x280, 0x1e0, 0x4001, 0x1, 0x0, 0x0, 0x1}}) keyctl$set_reqkey_keyring(0xe, 0x7) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async, rerun: 32) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2d, 0x4000, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0xffe0, 0xfffe}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0xb68, 0x10000000}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa26e5a4102541001}]}}]}, 0x64}}, 0x44080) r7 = syz_open_dev$video4linux(&(0x7f0000000280), 0x7, 0x100) ioctl$VIDIOC_DV_TIMINGS_CAP(r7, 0xc0905664, &(0x7f0000000e00)={0x0, 0x0, '\x00', @raw_data=[0x3, 0x59394cf, 0x0, 0x1f, 0x3c9c531, 0x7, 0x6, 0x6, 0x4, 0x6ac, 0xb3, 0x2, 0x4, 0x3, 0x7, 0x2, 0x5, 0xc6fa, 0x5, 0x7ff, 0x9, 0x9, 0x6, 0x85, 0x2, 0x2000000, 0x8000, 0x4, 0x7, 0x2, 0x8000, 0x7fff]}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x48281, 0x0) (async) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="bc020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2bc}, 0x1, 0x0, 0x0, 0x404c005}, 0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r1, 0x1, 0x1}, 0xc) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)) 1.401392332s ago: executing program 6 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffff8000, '\x00', 0x0, 0x0}, 0x50) r4 = fsopen(&(0x7f0000000280)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x704}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x62, 0x9, 0x700}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.395369653s ago: executing program 0 (id=566): setreuid(0x0, 0xee00) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$unix(0x1, 0x1, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x9, 0x3, "91abc12404"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x68}}, 0x4000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100}) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x2, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs]}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x29f66}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x100, 0x0, &(0x7f00000001c0)}) (async, rerun: 32) keyctl$clear(0x5, 0xfffffffffffffffd) (rerun: 32) 1.020071706s ago: executing program 1 (id=567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0xca, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.018990044s ago: executing program 3 (id=568): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000780)) syz_emit_ethernet(0x46, &(0x7f0000000b00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x3, 0xffffffff}}}}}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xd0fb8000) set_mempolicy(0x3, &(0x7f0000000980)=0x3, 0x40) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000006c0)={0x8132, 0x800005, 0xfffffffe, 0x2e69a, 0x7, "001221d608f5000004b5450080c90a808000"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000740)=0xd) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000010c0)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000010c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000017c0)=@newchain={0x520, 0x64, 0x20, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6, 0xa}, {0xf, 0x9}, {0x6, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0xe6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_fw={{0x7}, {0x78, 0x2, [@TCA_FW_POLICE={0x4}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_FW_POLICE={0x14, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xa7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xfff2}}, @TCA_FW_INDEV={0x14, 0x3, 'virt_wifi0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'vlan1\x00'}]}}, @filter_kind_options=@f_u32={{0x8}, {0x3f0, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0xb3a}, @TCA_U32_SEL={0x3e4, 0x5, {0x9, 0x8, 0x7, 0x1, 0xb0c, 0xa52, 0x0, 0x103, [{0x5, 0x6, 0x6, 0x3}, {0x5, 0x2, 0x10001, 0x3}, {0x0, 0x2, 0x2, 0x5}, {0x9, 0x7c, 0x4d4, 0xb}, {0x101, 0x7, 0x8, 0xaf05}, {0x400, 0x5, 0x2, 0x3}, {0x40, 0x0, 0x9, 0xfffffffc}, {0x2, 0x40, 0x0, 0x3}, {0x9, 0x8, 0x7, 0x34}, {0xffffffff, 0x5, 0x9, 0x9}, {0xfffff800, 0x6, 0x9, 0x3}, {0x7, 0x4, 0xd3185717, 0x514e1a04}, {0x0, 0x101, 0x2, 0x9}, {0x2, 0x1, 0x7, 0x80000001}, {0x2, 0x8, 0xff, 0x2}, {0x8, 0x200, 0x8, 0x8}, {0xd36, 0x17dc000, 0xaa, 0x5}, {0x7, 0x101, 0x2}, {0xffff, 0x9, 0x0, 0x10001}, {0x6, 0x4, 0x4, 0x5}, {0x3444, 0x1, 0xa, 0x7b74}, {0x917c, 0x0, 0xfffffffe, 0xf7d0}, {0x101, 0xa, 0x7, 0x1}, {0x8000, 0x7fff, 0x7, 0x7}, {0x7, 0x9, 0x5, 0xff}, {0x9, 0xe, 0x4, 0x7fffffff}, {0xf2bd, 0x1, 0xd, 0x980d}, {0x8, 0x4, 0x8000, 0x9}, {0x7f, 0x0, 0x4cd0, 0x9}, {0x3, 0x79, 0x30, 0x2}, {0x1, 0x9, 0x9, 0x3}, {0x3, 0x1, 0x9, 0x2}, {0x1, 0x2, 0x8, 0xa95b}, {0x0, 0x7c3b, 0x1, 0x5}, {0xfffffff9, 0x6c8d4291, 0x30, 0x2}, {0x2, 0x200, 0xfffffffc}, {0x9, 0x8, 0xff17, 0x5}, {0x4, 0x9f8, 0x5, 0x3}, {0xeb1, 0x0, 0x0, 0x3}, {0xfff, 0x80000001, 0x6c, 0x2}, {0x7, 0xfffffff7, 0x87, 0x7ff}, {0x5, 0x4, 0xfffffff9, 0x4}, {0xdc, 0x9, 0x1}, {0x1, 0x2, 0x4, 0x7ff}, {0x0, 0xfffffffa, 0x0, 0x2}, {0x4, 0xffff, 0x7}, {0x6ad5, 0x400, 0x200, 0x1ff}, {0x1, 0x8, 0x2, 0xa72d}, {0xe492, 0xfd, 0x8, 0x2}, {0x3, 0x5, 0x7, 0xb}, {0x5, 0x1, 0x7, 0x9}, {0x9, 0x101, 0x4, 0x1}, {0x5, 0x0, 0xf8f, 0x78ecd617}, {0x3, 0x3, 0x5, 0xfffffff9}, {0x3, 0x9d5, 0x0, 0x7}, {0x1, 0x400, 0x5, 0x101}, {0x8, 0xe, 0x2, 0xfffffff9}, {0x1, 0x1000, 0x8, 0xe}, {0x7, 0x0, 0x5, 0x3}, {0x526, 0x2, 0x4, 0x2}, {0x6, 0x488b2b32, 0x5df, 0x7}]}}]}}, @filter_kind_options=@f_u32={{0x8}, {0x6c, 0x2, [@TCA_U32_DIVISOR={0x8}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x20000000}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_MARK={0x10, 0xa, {0x7fffffff, 0x2}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x78}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_vlan\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_macvtap\x00'}]}}]}, 0x520}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000017c0)=@newchain={0x520, 0x64, 0x20, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6, 0xa}, {0xf, 0x9}, {0x6, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0xe6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_fw={{0x7}, {0x78, 0x2, [@TCA_FW_POLICE={0x4}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_FW_POLICE={0x14, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xa7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xfff2}}, @TCA_FW_INDEV={0x14, 0x3, 'virt_wifi0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'vlan1\x00'}]}}, @filter_kind_options=@f_u32={{0x8}, {0x3f0, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0xb3a}, @TCA_U32_SEL={0x3e4, 0x5, {0x9, 0x8, 0x7, 0x1, 0xb0c, 0xa52, 0x0, 0x103, [{0x5, 0x6, 0x6, 0x3}, {0x5, 0x2, 0x10001, 0x3}, {0x0, 0x2, 0x2, 0x5}, {0x9, 0x7c, 0x4d4, 0xb}, {0x101, 0x7, 0x8, 0xaf05}, {0x400, 0x5, 0x2, 0x3}, {0x40, 0x0, 0x9, 0xfffffffc}, {0x2, 0x40, 0x0, 0x3}, {0x9, 0x8, 0x7, 0x34}, {0xffffffff, 0x5, 0x9, 0x9}, {0xfffff800, 0x6, 0x9, 0x3}, {0x7, 0x4, 0xd3185717, 0x514e1a04}, {0x0, 0x101, 0x2, 0x9}, {0x2, 0x1, 0x7, 0x80000001}, {0x2, 0x8, 0xff, 0x2}, {0x8, 0x200, 0x8, 0x8}, {0xd36, 0x17dc000, 0xaa, 0x5}, {0x7, 0x101, 0x2}, {0xffff, 0x9, 0x0, 0x10001}, {0x6, 0x4, 0x4, 0x5}, {0x3444, 0x1, 0xa, 0x7b74}, {0x917c, 0x0, 0xfffffffe, 0xf7d0}, {0x101, 0xa, 0x7, 0x1}, {0x8000, 0x7fff, 0x7, 0x7}, {0x7, 0x9, 0x5, 0xff}, {0x9, 0xe, 0x4, 0x7fffffff}, {0xf2bd, 0x1, 0xd, 0x980d}, {0x8, 0x4, 0x8000, 0x9}, {0x7f, 0x0, 0x4cd0, 0x9}, {0x3, 0x79, 0x30, 0x2}, {0x1, 0x9, 0x9, 0x3}, {0x3, 0x1, 0x9, 0x2}, {0x1, 0x2, 0x8, 0xa95b}, {0x0, 0x7c3b, 0x1, 0x5}, {0xfffffff9, 0x6c8d4291, 0x30, 0x2}, {0x2, 0x200, 0xfffffffc}, {0x9, 0x8, 0xff17, 0x5}, {0x4, 0x9f8, 0x5, 0x3}, {0xeb1, 0x0, 0x0, 0x3}, {0xfff, 0x80000001, 0x6c, 0x2}, {0x7, 0xfffffff7, 0x87, 0x7ff}, {0x5, 0x4, 0xfffffff9, 0x4}, {0xdc, 0x9, 0x1}, {0x1, 0x2, 0x4, 0x7ff}, {0x0, 0xfffffffa, 0x0, 0x2}, {0x4, 0xffff, 0x7}, {0x6ad5, 0x400, 0x200, 0x1ff}, {0x1, 0x8, 0x2, 0xa72d}, {0xe492, 0xfd, 0x8, 0x2}, {0x3, 0x5, 0x7, 0xb}, {0x5, 0x1, 0x7, 0x9}, {0x9, 0x101, 0x4, 0x1}, {0x5, 0x0, 0xf8f, 0x78ecd617}, {0x3, 0x3, 0x5, 0xfffffff9}, {0x3, 0x9d5, 0x0, 0x7}, {0x1, 0x400, 0x5, 0x101}, {0x8, 0xe, 0x2, 0xfffffff9}, {0x1, 0x1000, 0x8, 0xe}, {0x7, 0x0, 0x5, 0x3}, {0x526, 0x2, 0x4, 0x2}, {0x6, 0x488b2b32, 0x5df, 0x7}]}}]}}, @filter_kind_options=@f_u32={{0x8}, {0x6c, 0x2, [@TCA_U32_DIVISOR={0x8}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x20000000}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_MARK={0x10, 0xa, {0x7fffffff, 0x2}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x78}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_vlan\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_macvtap\x00'}]}}]}, 0x520}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r5, 0xfffe}, 0x8) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)={0x14, 0xae, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)={0x14, 0xae, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000009c0), 0x0, 0x2) (async) r8 = syz_open_dev$dvb_frontend(&(0x7f00000009c0), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000bc0)='./proc\x00', &(0x7f0000000c00)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000bc0)='./proc\x00', &(0x7f0000000c00)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc/net/ip_vs_app\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000c80)=""/1024, 0x400, 0x1) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f0000000a00)={0x2, &(0x7f0000000a40)=[{0x6, '\x00', @buffer={"4d1785d62e4e776c12fff21c224c23b8b1552a0310c3085bd78300003f3a3c29", 0x20}, 0x2}, {0xb, '\x00', @buffer={"21e109bbd40fa147212cff67a0000000000004903e9583d9fa9372c5b07700", 0x20}, 0x7}]}) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000001080)) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) socket(0xa, 0x5, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtfilter={0x4a0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x5}, {0x3}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x46c, 0x2, [@TCA_U32_POLICE={0x444, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x0, 0xff, 0xd, {0x6, 0x0, 0x5, 0xa6, 0x7, 0x160a1c90}, {0x8e, 0x2, 0x0, 0x3, 0x5f9}, 0x0, 0x6, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x522, 0x5, 0x6b67, 0x7, 0x4, 0x1, 0x7ff, 0x0, 0x1, 0x7, 0x8, 0x22, 0x7, 0x9, 0x7, 0x6, 0xd547, 0xff000000, 0x8, 0x0, 0x4, 0x5, 0x401, 0x10000, 0x9, 0x9, 0x2ddd, 0x6, 0x9, 0x2, 0x8, 0x1, 0x4, 0xff, 0x3, 0xd, 0xb50, 0x3ff, 0x6, 0x0, 0xff, 0x10, 0x4, 0xffff, 0x3, 0xfc9d, 0xb, 0x4, 0x2, 0x0, 0x6, 0xed74e67, 0x585, 0x1, 0x3, 0x2, 0x8000, 0x6, 0x4c2b, 0xdea, 0x8, 0x4, 0xa9f, 0x5, 0x45575945, 0x5, 0x9, 0xffff, 0x3, 0xc, 0x3, 0x8, 0x2, 0xce4, 0x7, 0x9, 0x10, 0x0, 0x1, 0x4, 0x2, 0x1, 0x8317, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x4, 0xf, 0x7, 0x4, 0x4, 0x8aab, 0x7fff, 0x101, 0x3, 0xff, 0x5, 0x3, 0x4, 0x6, 0x6, 0x58, 0x45, 0xffffffff, 0x6a, 0x7ff, 0x6454, 0x3, 0xfffff000, 0x6, 0xe, 0x8, 0xfff, 0x0, 0x200, 0x78, 0x7, 0x3, 0x3, 0x5, 0x7, 0x7f, 0xb, 0x0, 0x10000, 0x2, 0x2, 0xffffffff, 0x7, 0x5, 0x3ff, 0x8, 0x6, 0x7ff, 0x3ff, 0x4, 0x85, 0x1, 0x795, 0xebd9, 0x5a, 0xfd, 0x9, 0xfffffff7, 0x554, 0x10000, 0x0, 0x9, 0x7, 0xf, 0x9, 0x7f, 0x9, 0xfaf, 0x7fff, 0xa, 0xffffffb3, 0x9, 0xfffffffe, 0x5, 0x8, 0xffff57fb, 0x8, 0x8, 0x4, 0x518, 0x40, 0x0, 0x4, 0x1a, 0x5, 0xca9c, 0x5, 0x5, 0x6, 0x2, 0x3, 0x26c3ac4, 0x4, 0x37e3, 0x3, 0x3, 0x7, 0x6, 0xe, 0x400008, 0x0, 0xffff, 0x3, 0x101, 0x4, 0x7, 0x7, 0x7, 0x80005, 0x5, 0xffffffff, 0x0, 0x3, 0x9, 0x7ff, 0x4, 0x8, 0x7fff, 0x0, 0x10000, 0xfffffff2, 0x9, 0x4, 0x4, 0x4, 0x4, 0xcef, 0x6, 0x10001, 0x8, 0xe97, 0x3, 0x6, 0x5, 0x9de, 0x7, 0x4, 0x6, 0x5, 0x5, 0x4, 0x81, 0x7, 0x4, 0x9, 0xb, 0x720, 0xd7, 0x4, 0x2, 0x0, 0x7, 0x10001, 0x9, 0x4000001, 0x8, 0xd, 0x6, 0x4, 0x200, 0x600000, 0x3, 0x0, 0x0, 0x4, 0x5]}]}, @TCA_U32_SEL={0x24, 0x5, {0x10, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x54}, 0x24040084) 959.079283ms ago: executing program 1 (id=569): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x8042, 0x0) setxattr$smack_xattr_label(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000480)='security.SMACK64\x00', &(0x7f0000000580)=ANY=[@ANYBLOB='l'], 0x9, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) (async) getpgid(0xffffffffffffffff) (async) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8c}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) mount(0x0, 0x0, &(0x7f00000006c0)='tmpfs\x00', 0x100018, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1a00000004000000000100000100000000000000", @ANYRES32, @ANYBLOB="03000900000000001d1100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00u4\x00'/28], 0x50) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000780)='oom_adj\x00') (async) r4 = fanotify_init(0x4, 0x101000) fanotify_mark(r4, 0x1, 0x40001019, r3, 0x0) (async) write$binfmt_format(r3, &(0x7f00000007c0)='1\x00', 0x2) (async) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f00000008c0)={[{@numtail}, {@shortname_win95}, {@utf8no}, {}, {@numtail}, {@rodir}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@fat=@uid}, {@utf8no}, {@shortname_win95}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp864'}}], [{@smackfshat={'smackfshat', 0x3d, '-#($$:'}}]}, 0x7, 0x2b1, &(0x7f0000000a00)="$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") (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./trace\x00', 0x1ff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x17, 0x17, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018070000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b6090100000a0000650005000000000018010000786c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ff"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000e80)) 927.573242ms ago: executing program 3 (id=570): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='loginuid\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r1, &(0x7f0000000100), 0x100000000000022d) setns(0xc9, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000006000000aa0b000090"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000050000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000001000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="01000000020000000000000000000000000000000000000000000000dee4e175ded327a7c05d79d852d547e5ae0019a72a944eda2ad90d0b8d486d91ee39a00560dacbd535c849899c91800e6c9fcc39b4aa9b11eaa1ebe84bf2059a5120d52812ec024eb37a161755fdeff2bb69a5fb48bcf6d031a028d0286623"], 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.current\x00', 0x26e1, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8b32, &(0x7f0000000540)={'virt_wifi0\x00', @random="01000000c95d"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xa7c, r2}, 0x38) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)='2', 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)='2', 0x1}], 0x1}}], 0x1, 0x804) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r0], 0x158}, 0x1, 0xba01, 0x0, 0x10}, 0x2000a080) 539.461626ms ago: executing program 6 (id=571): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000002580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)={0x70100, 0x25, 0x5}, 0x18) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 467.762802ms ago: executing program 0 (id=572): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x80) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$FE_DISEQC_SEND_BURST(r1, 0x6f41, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000000140)={0xfffffffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100)=[0x6, 0x4, 0x5]}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FE_GET_FRONTEND(r1, 0x80246f4d, &(0x7f0000000180)) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000001c0)=0x1, 0x4) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000200)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x140d, 0x400, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) write$khugepaged_scan(r1, &(0x7f0000000380), 0x8) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f00000003c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), r1) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r4, 0x408, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '%*'}]}, 0x34}, 0x1, 0x0, 0x0, 0x190}, 0x800) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x1000c010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000007c0)={0x5, &(0x7f0000000780)=[{0xfc63, 0xfc, 0x9f, 0x5}, {0xff19, 0x7f, 0x5, 0x10000}, {0x8, 0xe, 0x7, 0x3}, {0xe3c, 0x9, 0x2, 0x3}, {0x8, 0x10, 0x1, 0x9}]}, 0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x4) r8 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000a00)='bpf_lsm_inode_copy_up\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xf, 0x6, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb}, [@map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xff}, @alu={0x4, 0x0, 0xa, 0x7, 0x5, 0xfffffffffffffff0, 0x1}]}, &(0x7f0000000840)='syzkaller\x00', 0x3, 0x65, &(0x7f0000000880)=""/101, 0x41000, 0x43, '\x00', r7, @cgroup_device, r1, 0x8, &(0x7f0000000980)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0xd, 0x9, 0x3ed}, 0x10, r8, r1, 0x1, 0x0, &(0x7f0000000a40)=[{0x1, 0x2, 0xc, 0xb}], 0x10, 0x80000001}, 0x94) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0xf146ac8beba40cbe}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5c, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x146686fde469295c}, 0x14) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x30}}, 0x40800) bind$inet6(0xffffffffffffffff, &(0x7f0000000d80)={0xa, 0x4e21, 0x1, @private2, 0x5}, 0x1c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000001080)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001040)={&(0x7f0000000e40)={0x1d0, r9, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x38, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2c, 0x3, "9a2ae9e6572797afc61103e69107503f598bcd48a5b703c5e2551764d16c694b6a64d1ae58d18620"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1b2}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x8010}, 0x24000) write$P9_RXATTRCREATE(r1, &(0x7f00000010c0)={0x7, 0x21, 0x1}, 0x7) 16.688072ms ago: executing program 0 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c8, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67966ddb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33e3}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x13d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x100}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000440)={'/dev/md', @num=0x0}, 0x0, 0x0) ioctl$RUN_ARRAY(r4, 0x400c0930, &(0x7f0000000480)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r6, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000010}, 0x0) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000680)=')/)\x8f\x00', &(0x7f00000006c0)="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", 0xfe) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x2010, 0xffffffffffffffff, 0xfc000) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r9, 0xc0445624, &(0x7f0000000840)={0x1, 0x110, "6f93f56865e58e7d89e9fa987fecbf46661648942b575d5b4f5f662f7dc1252a", 0x9, 0x5, 0x10001, 0xe5}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000008c0)) ioctl$VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000900)={0xc, @vbi={0xffff0000, 0x9, 0x3ff, 0x50313134, [0xff, 0x7ff], [0x8, 0x6]}}) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000a00)=0x1000, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000010c0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40044400}, 0xc, &(0x7f0000001080)={&(0x7f0000000a80)={0x5cc, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0xac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'ib'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']*}@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}]}, @ETHTOOL_A_FEATURES_WANTED={0x35c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x36, 0x4, "c2f9de67aedf402f12219b3703a308ebd4915817f9bbd3f34b4ff5d0600581aa7c117827fb32cee7378808ac69040211dce0"}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '\',\'^}&^).${\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfe}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '{{!.)[!\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}]}, @ETHTOOL_A_BITSET_VALUE={0x15, 0x4, "fea786db11b26bef0e341cca16d316cae3"}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'ib'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xfc, 0x4, "575d65c1306c5be0290e7bf3219c6042aeac226606892892aa2ba9f4486837e6f95988d19d338dc9e6b8627cdc8720f3a9aadaa9e17200c4323d70b1cf5f90db8aef1b635ee1e44a82ed62c52855c94cc4f2158e970b14dc9801a0bd3b2bf13206d833da8581374070e45ae4007e0eabc1b2b8b7d22401ed336819ca64b15e3de0aecd9a6c66b676cd9c5dac021d051f4465d9952d31ebb4dea96e91b52c63a3a16ecd01d4e53f4550d2e4f34e53715fa431ce534fe0b2d228127a588648563acded4dfa017112cb30f5868468c026397fa734bf0f0e772e39ec1516196198aab1cd0f865c023cdb500d85f2c0b286cda83a025b0381869b"}, @ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'ib'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'ib'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ']*)\\$(\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ib\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8f88}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '%!/^^-,$-&[+\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x2004}, 0x4004000) ioctl$VIDIOC_QUERYCAP(r9, 0x80685600, &(0x7f0000001100)) ioctl$FICLONE(r4, 0x40049409, r7) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r10 = syz_open_pts(0xffffffffffffffff, 0x200000) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCSPGRP(r10, 0x5410, &(0x7f00000031c0)=r11) ioctl$VIDIOC_ENUM_FREQ_BANDS(r9, 0xc0405665, &(0x7f0000003200)={0xfffffffe, 0x5, 0x7, 0x40, 0x9, 0x3}) openat$tun(0xffffffffffffff9c, &(0x7f0000003240), 0x101, 0x0) 0s ago: executing program 3 (id=574): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '\xd3$]\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x14ec8ea96fd38195) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x20, 0x80, 0x7, 0xcbf, {{0x28, 0x4, 0x3, 0x10, 0xa0, 0x64, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x44, 0xda, 0x3, 0x7, [{@loopback, 0xff}, {@multicast1, 0x9}, {@rand_addr=0x64010100, 0xfffffff0}, {@empty, 0x2}, {@private=0xa010100, 0x2}, {@private=0xa010102, 0x3}, {@multicast2}, {@private=0xa010101, 0x4}]}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0xf4, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, @remote, @multicast2, @multicast2]}, @end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x23, 0xa0, [@remote, @multicast1, @rand_addr=0x64010102, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast]}, @noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x80, 0x20, 0x5, 0x7, {{0x3a, 0x4, 0x1, 0x14, 0xe8, 0x68, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x2c, 0x9a, 0x3, 0xf, [{@remote, 0x3}, {@multicast2, 0xfffffffb}, {@loopback, 0x7}, {@broadcast, 0x1fa00}, {@loopback, 0x5}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0xd2, [@broadcast, @remote, @empty, @private=0xa010102, @rand_addr=0x64010101, @remote]}, @cipso={0x86, 0x1d, 0x1, [{0x5, 0xc, "9084bc429648512d25a8"}, {0x1, 0xb, "59517c965d49d8d4c8"}]}, @timestamp={0x44, 0xc, 0xfb, 0x0, 0x8, [0x4, 0xfff]}, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x5, 0x6, "87db8ada"}, {0x7, 0xf, "bf87899d77d8ea9232d5907389"}]}, @cipso={0x86, 0x32, 0x0, [{0x7, 0x7, "b09220fa33"}, {0x5, 0x4, "8d39"}, {0xf, 0x7, "c486a8d9a6"}, {0x0, 0x10, "466e29f944f0c08ef659ddf188fb"}, {0x5, 0xa, "4870c77970089f93"}]}, @timestamp_prespec={0x44, 0xc, 0x67, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x22}, 0x400}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x6, 0xfffffffa, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x544ff7f0018bb2d4, 0x8000, 0x5, 0xfffffffd}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x274, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000840)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x63, r5}) (rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r6) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000008c0)) (async, rerun: 64) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xa4, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000bc0)={'ah\x00'}, &(0x7f0000000c00)=0x1e) (async) r9 = syz_create_resource$futex(&(0x7f0000000c40)) clock_gettime(0x0, &(0x7f0000000c80)={0x0, 0x0}) futex(r9, 0x3, 0x1, &(0x7f0000000cc0)={r10, r11+10000000}, 0x0, 0x1) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={0x1, 0xffffffffffffffff}, 0x4) (rerun: 32) r13 = syz_open_dev$mouse(&(0x7f0000000f00), 0x3, 0x10000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_ext={0x1c, 0x2e, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x22d, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}, @jmp={0x5, 0x1, 0xc, 0x7, 0x1, 0x100, 0x10}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x3e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1fde, 0x0, 0x0, 0x0, 0x3}, @generic={0x2, 0x8, 0x1, 0x796, 0xcc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ec0)='GPL\x00', 0x4, 0x0, 0x0, 0xb5d7d5451b586ec6, 0x50, '\x00', r4, 0x0, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f40)={0x3, 0xe, 0x3, 0x3}, 0x10, 0x7939, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) (async) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_bt_hidp_HIDPCONNADD(r13, 0x400448c8, &(0x7f00000010c0)={r8, r14, 0x7, 0x65, &(0x7f0000001040)="93d990cc615b9cde942d914dd7bef1420dde60cdd9998c456775819f45583917d365219cbd62076089f06c92a7dd2d5f8554ac7b84f1c0d442625ae49b1e4dc89f1f9e7cfaac8b9e4dca00450b41d623815fa56884ecaf09c8d0065936a729a1615a12f9ab", 0x5, 0x0, 0x6, 0x7, 0xb, 0x1, 0x4, 'syz1\x00'}) clock_getres(0x6, &(0x7f0000001180)) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=@getstats={0x1c, 0x5e, 0x4, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x4}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) (async) ioctl$sock_inet_tcp_SIOCINQ(r13, 0x541b, &(0x7f00000012c0)) kernel console output (not intermixed with test programs): 0:50:50:50 [ 31.376978][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.385458][ T4739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.395257][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.395268][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.414948][ T4739] veth0_vlan: entered promiscuous mode [ 31.416614][ T4739] veth1_vlan: entered promiscuous mode [ 31.441342][ T4750] veth0_vlan: entered promiscuous mode [ 31.444982][ T4739] veth0_macvtap: entered promiscuous mode [ 31.446257][ T4739] veth1_macvtap: entered promiscuous mode [ 31.451210][ T4739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.453402][ T4750] veth1_vlan: entered promiscuous mode [ 31.458834][ T4750] veth0_macvtap: entered promiscuous mode [ 31.464263][ T4738] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.465661][ T4739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.493613][ T4743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.495336][ T4746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.495644][ T4750] veth1_macvtap: entered promiscuous mode [ 31.506869][ T4750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.507874][ T4750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.510822][ T1389] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.511717][ T1433] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.511910][ T1433] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.511983][ T1433] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.512042][ T1433] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.512099][ T1433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.512160][ T1433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.512239][ T1433] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.542674][ T4746] veth0_vlan: entered promiscuous mode [ 31.544813][ T4746] veth1_vlan: entered promiscuous mode [ 31.552133][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.552148][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.561717][ T4746] veth0_macvtap: entered promiscuous mode [ 31.562785][ T4746] veth1_macvtap: entered promiscuous mode [ 31.565995][ T4746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.567053][ T4746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.737849][ T4924] loop1: detected capacity change from 0 to 256 [ 31.850184][ T4745] Bluetooth: hci4: command tx timeout [ 31.850402][ T4745] Bluetooth: hci0: command tx timeout [ 31.850564][ T4745] Bluetooth: hci2: command tx timeout [ 31.850692][ T4745] Bluetooth: hci1: command tx timeout [ 31.877305][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.877317][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.912547][ T1433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.912560][ T1433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.920816][ T1389] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.920847][ T1389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.920865][ T1389] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.937329][ T4743] veth0_vlan: entered promiscuous mode [ 31.939898][ T4741] Bluetooth: hci3: command tx timeout [ 31.953390][ T1254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.953404][ T1254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.958250][ T4743] veth1_vlan: entered promiscuous mode [ 31.966784][ T1254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.966798][ T1254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.980116][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.980128][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.981948][ T4928] loop3: detected capacity change from 0 to 256 [ 31.982335][ T4928] vfat: Unknown parameter 'short' [ 32.000621][ T1389] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.003551][ T4743] veth0_macvtap: entered promiscuous mode [ 32.013283][ T4743] veth1_macvtap: entered promiscuous mode [ 32.031297][ T4743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.033489][ T4743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.075423][ T1389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.075439][ T1389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.084898][ T1389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.084909][ T1389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.091477][ T1433] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.091619][ T1433] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.091720][ T1433] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.091915][ T1433] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.821918][ T4945] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 32.827036][ T1389] nvmet: connect request for invalid subsystem testsubsys! [ 32.827585][ T4933] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 32.852424][ T4944] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 32.883623][ T4949] FAULT_INJECTION: forcing a failure. [ 32.883623][ T4949] name failslab, interval 1, probability 0, space 0, times 1 [ 32.883643][ T4949] CPU: 1 UID: 0 PID: 4949 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT [ 32.883653][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 32.883659][ T4949] Call trace: [ 32.883661][ T4949] show_stack+0x2c/0x3c (C) [ 32.883677][ T4949] __dump_stack+0x30/0x40 [ 32.883687][ T4949] dump_stack_lvl+0xd8/0x12c [ 32.883695][ T4949] dump_stack+0x1c/0x28 [ 32.883703][ T4949] should_fail_ex+0x418/0x58c [ 32.883716][ T4949] should_failslab+0xc4/0x120 [ 32.883727][ T4949] __kmalloc_noprof+0x108/0x6c8 [ 32.883739][ T4949] __memcg_list_lru_alloc+0x1c4/0x4e8 [ 32.883751][ T4949] memcg_list_lru_alloc+0xc4/0xf8 [ 32.883761][ T4949] __memcg_slab_post_alloc_hook+0x22c/0x824 [ 32.883771][ T4949] kmem_cache_alloc_lru_noprof+0x32c/0x5d8 [ 32.883781][ T4949] __d_alloc+0x50/0x600 [ 32.883793][ T4949] d_make_root+0x48/0x90 [ 32.883803][ T4949] fuse_fill_super_common+0x5ec/0xb0c [ 32.883813][ T4949] fuse_fill_super+0x98/0x124 [ 32.883821][ T4949] vfs_get_super+0xb8/0x148 [ 32.883833][ T4949] get_tree_nodev+0x2c/0x3c [ 32.883844][ T4949] fuse_get_tree+0x250/0x31c [ 32.883852][ T4949] vfs_get_tree+0x90/0x28c [ 32.883863][ T4949] fc_mount+0x24/0xac [ 32.883875][ T4949] do_new_mount+0x2a4/0x538 [ 32.883883][ T4949] path_mount+0x5f0/0xa88 [ 32.883890][ T4949] do_mount+0xe8/0x148 [ 32.883897][ T4949] __arm64_sys_mount+0x33c/0x388 [ 32.883905][ T4949] invoke_syscall+0x98/0x244 [ 32.883915][ T4949] el0_svc_common+0xec/0x23c [ 32.883923][ T4949] do_el0_svc+0x4c/0x5c [ 32.883931][ T4949] el0_svc+0x60/0x1d8 [ 32.883940][ T4949] el0t_64_sync_handler+0x44/0x104 [ 32.883948][ T4949] el0t_64_sync+0x198/0x19c [ 33.018017][ T4953] loop2: detected capacity change from 0 to 512 [ 33.034545][ T4953] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 33.185058][ T4963] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 33.190619][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 33.486752][ T4966] syz.1.11 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 33.572642][ T4741] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 33.656172][ T4974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 33.656878][ T4974] ip6gretap0: entered promiscuous mode [ 33.656890][ T4974] ip6gretap0: entered allmulticast mode [ 33.661862][ T4975] ip_tables: iptables: counters copy to user failed while replacing table [ 33.744821][ T4985] loop4: detected capacity change from 0 to 8 [ 33.755436][ T4985] loop4: detected capacity change from 0 to 8 [ 33.761155][ T4985] loop4: detected capacity change from 0 to 8 [ 33.768584][ T4985] loop4: detected capacity change from 0 to 8 [ 33.775688][ T4985] loop4: detected capacity change from 0 to 8 [ 33.784720][ T4985] loop4: detected capacity change from 0 to 8 [ 33.798539][ T4985] loop4: detected capacity change from 0 to 8 [ 33.877845][ T4987] kernel profiling enabled (shift: 0) [ 33.930725][ T4741] Bluetooth: hci1: command tx timeout [ 33.930752][ T4741] Bluetooth: hci2: command tx timeout [ 33.930767][ T4741] Bluetooth: hci0: command tx timeout [ 33.930783][ T4741] Bluetooth: hci4: command tx timeout [ 33.967275][ T4990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'. [ 33.993005][ T4990] ======================================================= [ 33.993005][ T4990] WARNING: The mand mount option has been deprecated and [ 33.993005][ T4990] and is ignored by this kernel. Remove the mand [ 33.993005][ T4990] option from the mount to silence this warning. [ 33.993005][ T4990] ======================================================= [ 33.993052][ T4990] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.995234][ T4990] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.997170][ T4990] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.021266][ T4990] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.19: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 34.021306][ T4990] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 34.022367][ T4990] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.19: couldn't read orphan inode 11 (err -117) [ 34.022420][ T4990] loop1: lost filesystem error report for type 5 error -117 [ 34.023630][ T4990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.056516][ T4989] Dev loop5: unable to read RDB block 7 [ 34.056536][ T4989] loop5: unable to read partition table [ 34.056602][ T4989] loop5: partition table beyond EOD, truncated [ 34.056625][ T4989] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 34.145741][ T4991] FAULT_INJECTION: forcing a failure. [ 34.145741][ T4991] name failslab, interval 1, probability 0, space 0, times 0 [ 34.145767][ T4991] CPU: 0 UID: 0 PID: 4991 Comm: syz.3.20 Tainted: G L syzkaller #0 PREEMPT [ 34.145781][ T4991] Tainted: [L]=SOFTLOCKUP [ 34.145784][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 34.145790][ T4991] Call trace: [ 34.145793][ T4991] show_stack+0x2c/0x3c (C) [ 34.145810][ T4991] __dump_stack+0x30/0x40 [ 34.145819][ T4991] dump_stack_lvl+0xd8/0x12c [ 34.145828][ T4991] dump_stack+0x1c/0x28 [ 34.145836][ T4991] should_fail_ex+0x418/0x58c [ 34.145847][ T4991] should_failslab+0xc4/0x120 [ 34.145858][ T4991] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 34.145868][ T4991] sock_alloc_inode+0x30/0x180 [ 34.145878][ T4991] alloc_inode+0x68/0x198 [ 34.145890][ T4991] sock_alloc+0x4c/0x204 [ 34.145900][ T4991] __sock_create+0x108/0x670 [ 34.145911][ T4991] __sys_socket_create+0xc0/0x11c [ 34.145922][ T4991] __sys_socket+0x44/0xec [ 34.145932][ T4991] __arm64_sys_socket+0x84/0x9c [ 34.145943][ T4991] invoke_syscall+0x98/0x244 [ 34.145952][ T4991] el0_svc_common+0xec/0x23c [ 34.145960][ T4991] do_el0_svc+0x4c/0x5c [ 34.145968][ T4991] el0_svc+0x60/0x1d8 [ 34.145977][ T4991] el0t_64_sync_handler+0x44/0x104 [ 34.145985][ T4991] el0t_64_sync+0x198/0x19c [ 34.145996][ T4991] socket: no more sockets [ 34.151968][ T4738] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.317142][ T4998] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 34.326297][ T4998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 34.326595][ T4998] System zones: 1-12 [ 34.331407][ T4998] EXT4-fs (loop1): orphan cleanup on readonly fs [ 34.334426][ T4998] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.22: attempt to clear invalid blocks 1024 len 1 [ 34.334443][ T4998] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 34.341275][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 34.341288][ C0] EXT4-fs (loop1): initial error at time 34: ext4_clear_blocks:876: inode 11 [ 34.341304][ C0] EXT4-fs (loop1): last error at time 34: ext4_clear_blocks:876: inode 11 [ 34.402433][ T4998] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.22: bg 0: block 361: padding at end of block bitmap is not set [ 34.404426][ T4998] loop1: lost filesystem error report for type 5 error -117 [ 34.435449][ T4998] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 34.435469][ T4998] loop1: lost filesystem error report for type 5 error -117 [ 34.436091][ T4998] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.22: invalid indirect mapped block 1811939328 (level 0) [ 34.436107][ T4998] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 34.436321][ T4998] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.22: invalid indirect mapped block 2 (level 2) [ 34.436339][ T4998] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 34.437694][ T4998] EXT4-fs (loop1): 1 truncate cleaned up [ 34.440627][ T4998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 34.475268][ T4738] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 34.478993][ T5002] x_tables: duplicate underflow at hook 1 [ 34.479047][ T5003] x_tables: duplicate underflow at hook 1 [ 34.521893][ T5008] netlink: 208 bytes leftover after parsing attributes in process `syz.1.25'. [ 34.596082][ T5013] capability: warning: `syz.4.26' uses deprecated v2 capabilities in a way that may be insecure [ 34.794462][ T5017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 34.813853][ T30] audit: type=1326 audit(34.790:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5018 comm="syz.3.29" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 34.813945][ T30] audit: type=1326 audit(34.790:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5018 comm="syz.3.29" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 34.814304][ T30] audit: type=1326 audit(34.790:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5018 comm="syz.3.29" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 34.814386][ T30] audit: type=1326 audit(34.790:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5018 comm="syz.3.29" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 34.814457][ T30] audit: type=1326 audit(34.790:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5018 comm="syz.3.29" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 34.814726][ T30] audit: type=1326 audit(34.790:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5018 comm="syz.3.29" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 34.814774][ T30] audit: type=1326 audit(34.790:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5018 comm="syz.3.29" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 34.814868][ T30] audit: type=1326 audit(34.790:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5018 comm="syz.3.29" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 34.814916][ T30] audit: type=1326 audit(34.790:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5018 comm="syz.3.29" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 34.814971][ T30] audit: type=1326 audit(34.790:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5018 comm="syz.3.29" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 34.821531][ T5019] netlink: 'syz.3.29': attribute type 1 has an invalid length. [ 34.821543][ T5019] netlink: 232 bytes leftover after parsing attributes in process `syz.3.29'. [ 34.830942][ T5019] bond1: option downdelay: invalid value (18446744073709551614) [ 34.830954][ T5019] bond1: option downdelay: allowed values 0 - 2147483647 [ 34.832463][ T5019] bond1 (unregistering): Released all slaves [ 35.098900][ T5029] Zero length message leads to an empty skb [ 35.139069][ T5036] No such timeout policy "syz1" [ 35.146928][ T5035] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 35.146939][ T5035] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 35.147130][ T5035] EXT4-fs (loop4): orphan cleanup on readonly fs [ 35.148136][ T5035] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.33: bg 0: block 15: invalid block bitmap [ 35.148152][ T5035] loop4: lost filesystem error report for type 5 error -117 [ 35.148465][ T5035] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 35.148478][ T5035] loop4: lost filesystem error report for type 5 error -117 [ 35.148680][ T5035] EXT4-fs (loop4): 1 truncate cleaned up [ 35.149287][ T5035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 35.462132][ T5055] netlink: 44 bytes leftover after parsing attributes in process `syz.0.38'. [ 35.462304][ T5056] netlink: 44 bytes leftover after parsing attributes in process `syz.0.38'. [ 35.476587][ T5059] FAULT_INJECTION: forcing a failure. [ 35.476587][ T5059] name failslab, interval 1, probability 0, space 0, times 0 [ 35.476606][ T5059] CPU: 0 UID: 0 PID: 5059 Comm: syz.2.39 Tainted: G L syzkaller #0 PREEMPT [ 35.476618][ T5059] Tainted: [L]=SOFTLOCKUP [ 35.476621][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 35.476626][ T5059] Call trace: [ 35.476629][ T5059] show_stack+0x2c/0x3c (C) [ 35.476645][ T5059] __dump_stack+0x30/0x40 [ 35.476654][ T5059] dump_stack_lvl+0xd8/0x12c [ 35.476662][ T5059] dump_stack+0x1c/0x28 [ 35.476670][ T5059] should_fail_ex+0x418/0x58c [ 35.476681][ T5059] should_failslab+0xc4/0x120 [ 35.476692][ T5059] __kmalloc_noprof+0x108/0x6c8 [ 35.476703][ T5059] tomoyo_realpath_from_path+0xbc/0x4dc [ 35.476713][ T5059] tomoyo_path_number_perm+0x1f0/0x500 [ 35.476726][ T5059] tomoyo_file_ioctl+0x2c/0x3c [ 35.476736][ T5059] security_file_ioctl+0xdc/0x2b0 [ 35.476749][ T5059] __arm64_sys_ioctl+0xb0/0x1cc [ 35.476759][ T5059] invoke_syscall+0x98/0x244 [ 35.476768][ T5059] el0_svc_common+0xec/0x23c [ 35.476776][ T5059] do_el0_svc+0x4c/0x5c [ 35.476784][ T5059] el0_svc+0x60/0x1d8 [ 35.476793][ T5059] el0t_64_sync_handler+0x44/0x104 [ 35.476801][ T5059] el0t_64_sync+0x198/0x19c [ 35.476812][ T5059] ERROR: Out of memory at tomoyo_realpath_from_path. [ 35.761209][ T5066] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 35.761209][ T5066] The task syz.2.41 (5066) triggered the difference, watch for misbehavior. [ 35.933029][ T5070] binder: 5069:5070 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 35.933205][ T5070] binder: 5069:5070 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 35.984451][ T5071] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 36.009731][ T4745] Bluetooth: hci4: command tx timeout [ 36.009753][ T4745] Bluetooth: hci0: command tx timeout [ 36.009769][ T4745] Bluetooth: hci2: command tx timeout [ 36.009783][ T4745] Bluetooth: hci1: command tx timeout [ 36.037637][ T4743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.061089][ T5074] EXT4-fs (loop4): 1 truncate cleaned up [ 36.061498][ T5074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.074955][ T4743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.205120][ T5086] EXT4-fs: Ignoring removed oldalloc option [ 36.211265][ T5086] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.297789][ T4738] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.344928][ T5092] ext4: Unknown parameter 'fsuuid' [ 36.445168][ T5098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 36.449530][ T5098] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm syz.2.51: lblock 0 mapped to illegal pblock 0 (length 6) [ 36.459532][ T5098] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 36.459554][ T5098] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.459554][ T5098] [ 36.467298][ T5098] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.51: bg 0: block 112: padding at end of block bitmap is not set [ 36.468403][ T5098] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 4 with error 28 [ 36.468427][ T5098] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.468427][ T5098] [ 36.468437][ T5098] EXT4-fs (loop2): Total free blocks count 0 [ 36.468447][ T5098] EXT4-fs (loop2): Free/Dirty block details [ 36.468458][ T5098] EXT4-fs (loop2): free_blocks=0 [ 36.468469][ T5098] EXT4-fs (loop2): dirty_blocks=32 [ 36.468475][ T5098] EXT4-fs (loop2): Block reservation details [ 36.472695][ T5116] EXT4-fs error (device loop2): ext4_ext_remove_space:2977: inode #15: comm syz.2.51: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 36.473759][ T5113] EXT4-fs error (device loop2): ext4_ext_remove_space:2977: inode #15: comm syz.2.51: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 36.510544][ T5119] netlink: 808 bytes leftover after parsing attributes in process `syz.4.53'. [ 36.510562][ T5119] openvswitch: netlink: Flow key attr not present in new flow. [ 36.538202][ T5122] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 36.564626][ T5129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 36.564732][ T5129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 36.564815][ T5129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 36.564887][ T5129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 36.564954][ T5129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 36.565022][ T5129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 36.619562][ T5138] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.627019][ T5138] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 36.627441][ T5138] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.58: bg 0: block 248: padding at end of block bitmap is not set [ 36.627463][ T5138] loop2: lost filesystem error report for type 5 error -117 [ 36.628246][ T5138] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.58: Failed to acquire dquot type 1 [ 36.628263][ T5138] loop2: lost filesystem error report for type 5 error -28 [ 36.629677][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 36.629690][ C0] EXT4-fs (loop2): last error at time 36: ext4_acquire_dquot:7070 [ 36.630046][ T5138] EXT4-fs (loop2): 1 truncate cleaned up [ 36.632202][ T5138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 36.635484][ T5138] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.58: Failed to acquire dquot type 1 [ 36.681516][ T5141] serio: Serial port ptm0 [ 36.691302][ T4750] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 36.694203][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7106: comm kworker/u8:0: Failed to release dquot type 1 [ 36.694219][ T12] loop2: lost filesystem error report for type 5 error -117 [ 36.815118][ T5156] set_capacity_and_notify: 15 callbacks suppressed [ 36.815132][ T5156] loop3: detected capacity change from 0 to 256 [ 36.816721][ T5156] vfat: Unknown parameter '0177777777777777777777718446744073709551615' [ 36.894026][ T5160] loop1: detected capacity change from 0 to 256 [ 36.902903][ T5160] vfat: Bad value for 'uni_xlate' [ 36.908881][ T5163] loop3: detected capacity change from 0 to 128 [ 36.972531][ T5173] loop0: detected capacity change from 0 to 1024 [ 36.973461][ T5163] smc: net device lo applied user defined pnetid SYZ0 [ 36.976026][ T5173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.998803][ T5173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.056374][ T5181] netlink: 14 bytes leftover after parsing attributes in process `syz.2.70'. [ 37.059923][ T5181] gtp0: entered allmulticast mode [ 37.171017][ T5195] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.69: bg 0: block 112: padding at end of block bitmap is not set [ 37.171714][ T5195] EXT4-fs (loop0): Remounting filesystem read-only [ 37.520189][ T5203] binder: 5202:5203 got transaction to invalid handle, 3 [ 37.520238][ T5203] binder: 5202:5203 cannot find target node [ 37.520253][ T5203] binder: 5202:5203 transaction call to 0:0 failed 2/29201/-22, code 0 size 0-0 line 3253 [ 37.521328][ T5204] loop4: detected capacity change from 0 to 256 [ 37.525325][ T5204] vfat: Unknown parameter '' [ 37.569598][ T4836] binder: undelivered TRANSACTION_ERROR: 29201 [ 37.606567][ T5206] loop4: detected capacity change from 0 to 2048 [ 37.606942][ T5206] EXT4-fs: Ignoring removed orlov option [ 37.606953][ T5206] EXT4-fs: Ignoring removed i_version option [ 37.610674][ T4741] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 37.611804][ T4741] Bluetooth: hci3: Injecting HCI hardware error event [ 37.612244][ T4741] Bluetooth: hci3: hardware error 0x00 [ 37.647629][ T5206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.713145][ T4743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.721075][ T5214] loop2: detected capacity change from 0 to 2048 [ 37.732054][ T5214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.854692][ T4746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.949036][ T5228] mmap: syz.3.83 (5228) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.997965][ T5232] device-mapper: raid: Choosing default region size of 4MiB [ 37.998379][ T5232] device-mapper: raid: Device 0 specified for rebuild; clearing superblock [ 38.080539][ T5245] FAULT_INJECTION: forcing a failure. [ 38.080539][ T5245] name failslab, interval 1, probability 0, space 0, times 0 [ 38.080560][ T5245] CPU: 1 UID: 0 PID: 5245 Comm: syz.3.85 Tainted: G L syzkaller #0 PREEMPT [ 38.080573][ T5245] Tainted: [L]=SOFTLOCKUP [ 38.080576][ T5245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.080581][ T5245] Call trace: [ 38.080584][ T5245] show_stack+0x2c/0x3c (C) [ 38.080598][ T5245] __dump_stack+0x30/0x40 [ 38.080607][ T5245] dump_stack_lvl+0xd8/0x12c [ 38.080615][ T5245] dump_stack+0x1c/0x28 [ 38.080623][ T5245] should_fail_ex+0x418/0x58c [ 38.080634][ T5245] should_failslab+0xc4/0x120 [ 38.080644][ T5245] __kvmalloc_node_noprof+0x160/0x7fc [ 38.080655][ T5245] vmemdup_user+0x38/0xe0 [ 38.080666][ T5245] setxattr_copy+0x168/0x1c0 [ 38.080676][ T5245] path_setxattrat+0x130/0x2a8 [ 38.080687][ T5245] __arm64_sys_setxattr+0xd0/0xec [ 38.080698][ T5245] invoke_syscall+0x98/0x244 [ 38.080707][ T5245] el0_svc_common+0xec/0x23c [ 38.080715][ T5245] do_el0_svc+0x4c/0x5c [ 38.080723][ T5245] el0_svc+0x60/0x1d8 [ 38.080731][ T5245] el0t_64_sync_handler+0x44/0x104 [ 38.080739][ T5245] el0t_64_sync+0x198/0x19c [ 38.089903][ T4747] Bluetooth: hci2: command tx timeout [ 38.089927][ T4747] Bluetooth: hci1: command tx timeout [ 38.089944][ T4747] Bluetooth: hci0: command tx timeout [ 38.089958][ T4747] Bluetooth: hci4: command tx timeout [ 38.191797][ T5232] device-mapper: table: 248:0: raid: Insufficient redundancy to activate array (-EINVAL) [ 38.191821][ T5232] device-mapper: ioctl: error adding target to table [ 38.234995][ T5262] loop0: detected capacity change from 0 to 512 [ 38.370181][ T5285] loop0: detected capacity change from 0 to 512 [ 38.389093][ T5285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.402899][ T4746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. 2úXœ devtmpfs[ 38.443459][ T5295] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 38.496724][ T5303] loop0: detected capacity change from 0 to 1024 [ 38.498277][ T5303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.528731][ T5303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.666987][ T4750] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.743163][ T5342] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.92: bg 0: block 112: padding at end of block bitmap is not set [ 38.743408][ T5342] EXT4-fs (loop0): Remounting filesystem read-only [ 38.798260][ T5349] __nla_validate_parse: 3 callbacks suppressed [ 38.798275][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 38.798303][ T5349] netlink: 27 bytes leftover after parsing attributes in process `syz.1.98'. [ 38.833570][ T5357] vfat: Bad value for 'tz' [ 38.889174][ T5360] gretap1: entered promiscuous mode [ 38.889601][ T5360] batman_adv: batadv0: Adding interface: gretap1 [ 38.889608][ T5360] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.889620][ T5360] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 39.461728][ T4746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.462378][ T5382] netlink: 'syz.1.106': attribute type 8 has an invalid length. [ 39.462390][ T5382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'. [ 39.479967][ T5382] veth1_to_team: entered promiscuous mode [ 39.480485][ T5382] gretap0: entered promiscuous mode [ 39.481874][ T5382] veth1_to_team: left promiscuous mode [ 39.484599][ T5382] gretap0: left promiscuous mode [ 39.538617][ T5389] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.810454][ T4741] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 39.841757][ T5396] EXT4-fs: Invalid want_extra_isize 32768 [ 39.844002][ T5396] capability: warning: `syz.1.111' uses 32-bit capabilities (legacy support in use) [ 39.886702][ T5400] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 39.886731][ T5400] vhci_hcd vhci_hcd.0: default hub control req: 2314 v0008 i0002 l0 [ 39.888604][ T5394] netlink: 'syz.2.110': attribute type 21 has an invalid length. [ 39.888668][ T5394] netlink: 132 bytes leftover after parsing attributes in process `syz.2.110'. [ 40.313014][ T5413] loop4: p1 p4 [ 40.313014][ T5413] p1: [ 40.313031][ T5413] loop4: partition table partially beyond EOD, truncated [ 40.315616][ T5413] loop4: p4 start 184549376 is beyond EOD, truncated [ 40.316534][ T5413] loop4: p6 start 184549376 is beyond EOD, truncated [ 40.328142][ T5421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.120'. [ 40.353129][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 40.413493][ T5419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.119'. [ 40.516230][ T5442] EXT4-fs: Ignoring removed bh option [ 40.516257][ T5442] EXT4-fs: Ignoring removed bh option [ 40.519097][ T5442] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 40.542523][ T5442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.604649][ T4739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.678487][ T5474] ext4: Unknown parameter 'M' [ 40.973439][ T5474] ext4: Unknown parameter 'M' [ 40.987766][ T5485] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.988388][ T5474] ext4: Unknown parameter 'M' [ 41.257055][ T5474] ext4: Unknown parameter 'M' [ 41.267590][ T5485] EXT4-fs (loop2): shut down requested (1) [ 41.268758][ T5485] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 41.269312][ T5485] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 41.282446][ T5474] ext4: Unknown parameter 'M' [ 41.301189][ T5474] ext4: Unknown parameter 'M' [ 41.305673][ T4750] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.341941][ T5474] ext4: Unknown parameter 'M' [ 41.358623][ T5474] ext4: Unknown parameter 'M' [ 41.379379][ T5474] ext4: Unknown parameter 'M' [ 41.394938][ T5474] ext4: Unknown parameter 'M' [ 41.408702][ T5474] ext4: Unknown parameter 'M' [ 41.483535][ T5474] ext4: Unknown parameter 'M' [ 41.775683][ T5523] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.793441][ T5523] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 41.793556][ T5523] EXT4-fs (loop0): orphan cleanup on readonly fs [ 41.796195][ T5523] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.139: Invalid inode table block 0 in block_group 0 [ 41.796279][ T5523] loop0: lost filesystem error report for type 5 error -117 [ 41.797716][ T5523] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 41.797737][ T5523] loop0: lost filesystem error report for type 5 error -117 [ 41.798410][ T5523] EXT4-fs error (device loop0): ext4_quota_write:7459: inode #3: comm syz.0.139: mark_inode_dirty error [ 41.798437][ T5523] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 41.799666][ C1] EXT4-fs (loop0): error count since last fsck: 3 [ 41.799683][ C1] EXT4-fs (loop0): initial error at time 41: __ext4_get_inode_loc:4916 [ 41.799696][ C1] EXT4-fs (loop0): last error at time 41: ext4_quota_write:7459: inode 3 [ 41.801548][ T5523] __quota_error: 92 callbacks suppressed [ 41.801563][ T5523] Quota error (device loop0): write_blk: dquota write failed [ 41.801596][ T5523] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 41.801609][ T5523] EXT4-fs error (device loop0): ext4_acquire_dquot:7070: comm syz.0.139: Failed to acquire dquot type 0 [ 41.801620][ T5523] loop0: lost filesystem error report for type 5 error -117 [ 41.804091][ T5523] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.139: Invalid inode table block 0 in block_group 0 [ 41.804112][ T5523] loop0: lost filesystem error report for type 5 error -117 [ 41.804691][ T5523] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 41.804709][ T5523] loop0: lost filesystem error report for type 5 error -117 [ 41.804828][ T5523] EXT4-fs error (device loop0): ext4_ext_truncate:4565: inode #15: comm syz.0.139: mark_inode_dirty error [ 41.804841][ T5523] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.804956][ T5523] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.139: Invalid inode table block 0 in block_group 0 [ 41.804970][ T5523] loop0: lost filesystem error report for type 5 error -117 [ 41.806828][ T5523] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 41.806845][ T5523] loop0: lost filesystem error report for type 5 error -117 [ 41.807395][ T5523] EXT4-fs error (device loop0) in ext4_orphan_del:304: Corrupt filesystem [ 41.807415][ T5523] loop0: lost filesystem error report for type 5 error -117 [ 41.830899][ T5523] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.139: Invalid inode table block 0 in block_group 0 [ 41.830922][ T5523] loop0: lost filesystem error report for type 5 error -117 [ 41.831059][ T5523] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 41.831069][ T5523] loop0: lost filesystem error report for type 5 error -117 [ 41.831161][ T5523] EXT4-fs error (device loop0): ext4_truncate:4721: inode #15: comm syz.0.139: mark_inode_dirty error [ 41.831172][ T5523] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.831250][ T5523] EXT4-fs error (device loop0) in ext4_process_orphan:346: Corrupt filesystem [ 41.831347][ T5523] EXT4-fs (loop0): 1 truncate cleaned up [ 41.880339][ T5523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.904550][ T4746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.926606][ T5536] set_capacity_and_notify: 22 callbacks suppressed [ 41.926618][ T5536] loop4: detected capacity change from 0 to 256 [ 42.063684][ T5545] netlink: 64 bytes leftover after parsing attributes in process `syz.1.146'. [ 42.063702][ T5545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 42.083331][ T5544] process 'syz.4.147' launched './file0' with NULL argv: empty string added [ 42.135718][ T5548] loop0: detected capacity change from 0 to 1024 [ 42.136067][ T5548] EXT4-fs: Ignoring removed bh option [ 42.164475][ T5548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 42.196991][ T4746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 42.530187][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 42.534515][ T5563] rnbd_client L610: Mapping device / on session s+, (access_mode: rw, nr_poll_queues: 0) [ 42.534640][ T5563] rnbd_client L1256: Session s+ not found, and path parameter not given [ 42.543771][ T5563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.151'. [ 42.948394][ T5598] loop1: detected capacity change from 0 to 256 [ 42.957279][ T5598] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 42.957290][ T5598] PKCS7: Only support pkcs7_signedData type [ 43.050971][ T5611] bond1: entered allmulticast mode [ 43.230702][ C1] vxcan0: j1939_tp_rxtimer: 0x0000000058853d7b: rx timeout, send abort [ 43.463012][ T5628] loop2: detected capacity change from 0 to 2048 [ 43.463850][ T5628] ext4: Unknown parameter 'appraise' [ 43.730986][ C1] vxcan0: j1939_tp_rxtimer: 0x00000000e165e35c: rx timeout, send abort [ 43.731274][ C1] vxcan0: j1939_tp_rxtimer: 0x0000000058853d7b: abort rx timeout. Force session deactivation [ 43.881002][ T5632] loop1: detected capacity change from 0 to 256 [ 43.881392][ T5632] vfat: Unknown parameter 'utfcp949' [ 44.231021][ C1] vxcan0: j1939_tp_rxtimer: 0x00000000e165e35c: abort rx timeout. Force session deactivation [ 44.771324][ T5658] FAULT_INJECTION: forcing a failure. [ 44.771324][ T5658] name failslab, interval 1, probability 0, space 0, times 0 [ 44.771347][ T5658] CPU: 0 UID: 0 PID: 5658 Comm: syz.2.177 Tainted: G L syzkaller #0 PREEMPT [ 44.771360][ T5658] Tainted: [L]=SOFTLOCKUP [ 44.771363][ T5658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 44.771368][ T5658] Call trace: [ 44.771371][ T5658] show_stack+0x2c/0x3c (C) [ 44.771387][ T5658] __dump_stack+0x30/0x40 [ 44.771396][ T5658] dump_stack_lvl+0xd8/0x12c [ 44.771404][ T5658] dump_stack+0x1c/0x28 [ 44.771412][ T5658] should_fail_ex+0x418/0x58c [ 44.771431][ T5658] should_failslab+0xc4/0x120 [ 44.771441][ T5658] __kmalloc_noprof+0x108/0x6c8 [ 44.771452][ T5658] tomoyo_encode2+0x10c/0x330 [ 44.771461][ T5658] tomoyo_encode+0x34/0x50 [ 44.771469][ T5658] tomoyo_realpath_from_path+0x488/0x4dc [ 44.771478][ T5658] tomoyo_path_number_perm+0x1f0/0x500 [ 44.771491][ T5658] tomoyo_file_ioctl+0x2c/0x3c [ 44.771500][ T5658] security_file_ioctl+0xdc/0x2b0 [ 44.771513][ T5658] __arm64_sys_ioctl+0xb0/0x1cc [ 44.771523][ T5658] invoke_syscall+0x98/0x244 [ 44.771532][ T5658] el0_svc_common+0xec/0x23c [ 44.771540][ T5658] do_el0_svc+0x4c/0x5c [ 44.771551][ T5658] el0_svc+0x60/0x1d8 [ 44.771560][ T5658] el0t_64_sync_handler+0x44/0x104 [ 44.771568][ T5658] el0t_64_sync+0x198/0x19c [ 44.771662][ T5658] ERROR: Out of memory at tomoyo_realpath_from_path. [ 44.775171][ T5658] input: syz0 as /devices/virtual/input/input3 [ 44.859364][ T5661] usb usb1: usbfs: process 5661 (syz.2.178) did not claim interface 23 before use [ 44.864575][ T5661] input: syz0 as /devices/virtual/input/input4 [ 45.085962][ T5672] FAULT_INJECTION: forcing a failure. [ 45.085962][ T5672] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.085991][ T5672] CPU: 1 UID: 0 PID: 5672 Comm: syz.2.181 Tainted: G L syzkaller #0 PREEMPT [ 45.086006][ T5672] Tainted: [L]=SOFTLOCKUP [ 45.086010][ T5672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.086017][ T5672] Call trace: [ 45.086020][ T5672] show_stack+0x2c/0x3c (C) [ 45.086037][ T5672] __dump_stack+0x30/0x40 [ 45.086046][ T5672] dump_stack_lvl+0xd8/0x12c [ 45.086055][ T5672] dump_stack+0x1c/0x28 [ 45.086063][ T5672] should_fail_ex+0x418/0x58c [ 45.086074][ T5672] should_fail+0x14/0x24 [ 45.086084][ T5672] should_fail_usercopy+0x20/0x30 [ 45.086094][ T5672] copy_from_sockptr+0x7c/0x1e0 [ 45.086108][ T5672] ip_set_mcast_msfilter+0xf4/0x310 [ 45.086116][ T5672] do_ip_setsockopt+0xf28/0x2628 [ 45.086129][ T5672] ip_setsockopt+0x80/0x128 [ 45.086136][ T5672] udp_setsockopt+0xa8/0xc0 [ 45.086148][ T5672] sock_common_setsockopt+0xb0/0xcc [ 45.086160][ T5672] do_sock_setsockopt+0x1f0/0x330 [ 45.086172][ T5672] __sys_setsockopt+0x104/0x170 [ 45.086183][ T5672] __arm64_sys_setsockopt+0xc8/0xe4 [ 45.086195][ T5672] invoke_syscall+0x98/0x244 [ 45.086203][ T5672] el0_svc_common+0xec/0x23c [ 45.086212][ T5672] do_el0_svc+0x4c/0x5c [ 45.086220][ T5672] el0_svc+0x60/0x1d8 [ 45.086228][ T5672] el0t_64_sync_handler+0x44/0x104 [ 45.086236][ T5672] el0t_64_sync+0x198/0x19c [ 45.088460][ T5672] loop2: detected capacity change from 0 to 512 [ 45.103372][ T5672] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.129432][ T5672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 45.147223][ T5672] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 45.147277][ T5672] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 45.147300][ T5672] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.181: Failed to acquire dquot type 0 [ 45.148956][ T5672] overlayfs: failed to set uuid (/file0, err=-117); falling back to uuid=null. [ 45.162224][ T5672] __nla_validate_parse: 3 callbacks suppressed [ 45.162235][ T5672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.181'. [ 45.270503][ T5677] net_ratelimit: 61 callbacks suppressed [ 45.270518][ T5677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 45.272362][ T5677] loop3: detected capacity change from 0 to 128 [ 45.272873][ T5677] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.276792][ T5677] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.287054][ T5677] netlink: 36 bytes leftover after parsing attributes in process `syz.3.182'. [ 45.287067][ T5677] netlink: 36 bytes leftover after parsing attributes in process `syz.3.182'. [ 45.312362][ T5677] device-mapper: table: 248:3: raid: Insufficient number of devices (-EINVAL) [ 45.312374][ T5677] device-mapper: ioctl: error adding target to table [ 45.312887][ T5677] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 45.312896][ T5677] FAT-fs (loop3): Filesystem has been set read-only [ 45.383711][ T5684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.185'. [ 45.461430][ T5687] loop1: detected capacity change from 0 to 512 [ 45.472111][ T5687] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.186: inode has both inline data and extents flags [ 45.472136][ T5687] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.472701][ T5687] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.186: couldn't read orphan inode 15 (err -117) [ 45.474791][ T5687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.514533][ T5687] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 45.538901][ T30] audit: type=1326 audit(45.510:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5690 comm="syz.0.187" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d37a228 code=0x0 [ 45.554604][ T4738] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.635261][ T5700] fuse: Bad value for 'rootmode' [ 45.802413][ T5705] loop1: detected capacity change from 0 to 4096 [ 45.810210][ T5705] »»»»»»: renamed from vlan0 (while UP) [ 45.838129][ T4750] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 45.838179][ T4750] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 45.838198][ T4750] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz-executor: Failed to acquire dquot type 0 [ 45.932674][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 45.933220][ T5717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 45.936133][ T5716] loop1: detected capacity change from 0 to 256 [ 46.021821][ T5719] dummy0: entered promiscuous mode [ 46.023059][ T5719] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 46.024198][ T5719] hsr1: entered allmulticast mode [ 46.024209][ T5719] dummy0: entered allmulticast mode [ 46.024235][ T5719] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 46.092326][ T5722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 46.098758][ T5722] netlink: 156 bytes leftover after parsing attributes in process `syz.1.198'. [ 46.147605][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 46.225359][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.238939][ T5724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 46.316050][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.318379][ T4745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 46.319159][ T4745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 46.319530][ T4745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 46.320631][ T4745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 46.320831][ T4745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 46.397566][ T5749] FAULT_INJECTION: forcing a failure. [ 46.397566][ T5749] name failslab, interval 1, probability 0, space 0, times 0 [ 46.397588][ T5749] CPU: 1 UID: 0 PID: 5749 Comm: syz.4.208 Tainted: G L syzkaller #0 PREEMPT [ 46.397601][ T5749] Tainted: [L]=SOFTLOCKUP [ 46.397604][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.397610][ T5749] Call trace: [ 46.397613][ T5749] show_stack+0x2c/0x3c (C) [ 46.397628][ T5749] __dump_stack+0x30/0x40 [ 46.397638][ T5749] dump_stack_lvl+0xd8/0x12c [ 46.397646][ T5749] dump_stack+0x1c/0x28 [ 46.397654][ T5749] should_fail_ex+0x418/0x58c [ 46.397664][ T5749] should_failslab+0xc4/0x120 [ 46.397674][ T5749] kmem_cache_alloc_noprof+0x94/0x5d4 [ 46.397684][ T5749] __kernfs_new_node+0xf0/0x7d8 [ 46.397693][ T5749] kernfs_new_node+0xe8/0x130 [ 46.397700][ T5749] __kernfs_create_file+0x60/0x2e0 [ 46.397709][ T5749] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 46.397718][ T5749] internal_create_group+0x550/0xb30 [ 46.397729][ T5749] internal_create_groups+0x64/0x138 [ 46.397738][ T5749] sysfs_create_groups+0x2c/0x3c [ 46.397748][ T5749] device_add_attrs+0x17c/0x4e4 [ 46.397758][ T5749] device_add+0x420/0x9e0 [ 46.397766][ T5749] netdev_register_kobject+0x184/0x328 [ 46.397780][ T5749] register_netdevice+0xd74/0x14c0 [ 46.397789][ T5749] ipvlan_link_new+0x378/0x804 [ 46.397800][ T5749] rtnl_newlink_create+0x294/0x6b8 [ 46.397811][ T5749] rtnl_newlink+0xfe4/0x138c [ 46.397821][ T5749] rtnetlink_rcv_msg+0x66c/0x9bc [ 46.397831][ T5749] netlink_rcv_skb+0x238/0x414 [ 46.397843][ T5749] rtnetlink_rcv+0x28/0x38 [ 46.397852][ T5749] netlink_unicast+0x600/0x7f8 [ 46.397863][ T5749] netlink_sendmsg+0x648/0x948 [ 46.397874][ T5749] __sock_sendmsg+0xc8/0x17c [ 46.397885][ T5749] ____sys_sendmsg+0x3d0/0x6c8 [ 46.397896][ T5749] ___sys_sendmsg+0x198/0x224 [ 46.397908][ T5749] __sys_sendmsg+0x158/0x204 [ 46.397919][ T5749] __arm64_sys_sendmsg+0x88/0x9c [ 46.397931][ T5749] invoke_syscall+0x98/0x244 [ 46.397939][ T5749] el0_svc_common+0xec/0x23c [ 46.397948][ T5749] do_el0_svc+0x4c/0x5c [ 46.397955][ T5749] el0_svc+0x60/0x1d8 [ 46.397964][ T5749] el0t_64_sync_handler+0x44/0x104 [ 46.397972][ T5749] el0t_64_sync+0x198/0x19c [ 46.443161][ T5744] netlink: 'syz.3.205': attribute type 4 has an invalid length. [ 46.443177][ T5744] netlink: 17 bytes leftover after parsing attributes in process `syz.3.205'. [ 46.640133][ T30] audit: type=1326 audit(46.590:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5741 comm="syz.1.206" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa877a228 code=0x0 [ 46.698376][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.734589][ T5759] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 46.755387][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.060031][ T5737] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.167448][ T12] bridge_slave_1: left allmulticast mode [ 47.167479][ T12] bridge_slave_1: left promiscuous mode [ 47.167873][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.186025][ T12] bridge_slave_0: left allmulticast mode [ 47.186044][ T12] bridge_slave_0: left promiscuous mode [ 47.186122][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.286896][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.302082][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.330638][ T12] bond0 (unregistering): Released all slaves [ 47.574704][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.574894][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.574955][ T5737] bridge_slave_0: entered allmulticast mode [ 47.576592][ T5737] bridge_slave_0: entered promiscuous mode [ 47.581111][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.581135][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.581194][ T5737] bridge_slave_1: entered allmulticast mode [ 47.581814][ T5737] bridge_slave_1: entered promiscuous mode [ 47.606549][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.607381][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.658997][ T5737] team0: Port device team_slave_0 added [ 47.666678][ T5737] team0: Port device team_slave_1 added [ 47.670660][ T4430] 8021q: adding VLAN 0 to HW filter on device eth0 [ 47.723403][ T5827] xt_hashlimit: size too large, truncated to 1048576 [ 47.738465][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.738478][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.738492][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.739054][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.739060][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.739073][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.793799][ T12] hsr_slave_0: left promiscuous mode [ 47.794165][ T12] hsr_slave_1: left promiscuous mode [ 47.794456][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.794471][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.794865][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.794875][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.810923][ T12] veth1_macvtap: left promiscuous mode [ 47.810961][ T12] veth0_macvtap: left promiscuous mode [ 47.811037][ T12] veth1_vlan: left promiscuous mode [ 47.811080][ T12] veth0_vlan: left promiscuous mode [ 47.854736][ T5843] fuse: Bad value for 'fd' [ 47.923835][ T12] team0 (unregistering): Port device team_slave_1 removed [ 47.928471][ T12] team0 (unregistering): Port device team_slave_0 removed [ 47.943059][ T5847] set_capacity_and_notify: 1 callbacks suppressed [ 47.943070][ T5847] loop9: detected capacity change from 0 to 7 [ 47.945047][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 47.945098][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.948927][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 47.948959][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.949088][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 47.949109][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.949179][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 47.949197][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.949261][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 47.949278][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.949338][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 47.949355][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.949413][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 47.949435][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.949455][ T5847] ldm_validate_partition_table(): Disk read failed. [ 47.949501][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 47.949518][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.949572][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 47.949588][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.949698][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 47.949724][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.951520][ T5847] Dev loop9: unable to read RDB block 0 [ 47.953565][ T5847] loop9: unable to read partition table [ 47.953619][ T5847] loop9: partition table beyond EOD, truncated [ 47.953635][ T5847] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 48.115044][ T5737] hsr_slave_0: entered promiscuous mode [ 48.115441][ T5737] hsr_slave_1: entered promiscuous mode [ 48.115642][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 48.115652][ T5737] Cannot create hsr debugfs directory [ 48.165610][ T5854] overlayfs: workdir and upperdir must reside under the same mount [ 48.229595][ T5737] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.234197][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.234500][ T5737] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 48.236642][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.237079][ T5737] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 48.238046][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.238416][ T5737] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 48.239251][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.370392][ T4745] Bluetooth: hci4: command tx timeout [ 48.535252][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.535449][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.542124][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.547185][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.549060][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.549085][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.554778][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.554801][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.572435][ T5737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.649402][ T4430] 8021q: adding VLAN 0 to HW filter on device eth1 [ 48.719562][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.749437][ T5905] ip_tables: iptables: counters copy to user failed while replacing table [ 48.890721][ T5737] veth0_vlan: entered promiscuous mode [ 48.898209][ T5737] veth1_vlan: entered promiscuous mode [ 48.926545][ T5737] veth0_macvtap: entered promiscuous mode [ 48.929301][ T5737] veth1_macvtap: entered promiscuous mode [ 48.961920][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.976705][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.984889][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.984917][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.984933][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.984947][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.045242][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.045256][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.085993][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.086007][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.097180][ T5946] loop4: detected capacity change from 0 to 128 [ 49.098703][ T4430] 8021q: adding VLAN 0 to HW filter on device eth2 [ 49.112898][ T5946] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.118090][ T5945] EXT4-fs warning (device loop4): ext4_group_extend:1885: will only finish group (8193 blocks, 8129 new) [ 49.118417][ T5945] EXT4-fs warning (device loop4): ext4_group_extend:1890: can't read last block, resize aborted [ 49.178792][ T4743] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.187489][ T5951] FAULT_INJECTION: forcing a failure. [ 49.187489][ T5951] name failslab, interval 1, probability 0, space 0, times 0 [ 49.187514][ T5951] CPU: 0 UID: 0 PID: 5951 Comm: syz.0.237 Tainted: G L syzkaller #0 PREEMPT [ 49.187527][ T5951] Tainted: [L]=SOFTLOCKUP [ 49.187530][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 49.187535][ T5951] Call trace: [ 49.187537][ T5951] show_stack+0x2c/0x3c (C) [ 49.187551][ T5951] __dump_stack+0x30/0x40 [ 49.187559][ T5951] dump_stack_lvl+0xd8/0x12c [ 49.187567][ T5951] dump_stack+0x1c/0x28 [ 49.187574][ T5951] should_fail_ex+0x418/0x58c [ 49.187583][ T5951] should_failslab+0xc4/0x120 [ 49.187592][ T5951] kmem_cache_alloc_noprof+0x94/0x5d4 [ 49.187601][ T5951] alloc_empty_file+0x6c/0x1cc [ 49.187610][ T5951] alloc_file+0x58/0x98 [ 49.187618][ T5951] alloc_file_pseudo+0xe0/0x198 [ 49.187627][ T5951] __anon_inode_getfile+0x118/0x1c8 [ 49.187636][ T5951] anon_inode_getfile+0x44/0x58 [ 49.187644][ T5951] bpf_link_prime+0x100/0x1f8 [ 49.187653][ T5951] bpf_xdp_link_attach+0x1f0/0x87c [ 49.187662][ T5951] link_create+0x278/0x614 [ 49.187671][ T5951] __sys_bpf+0x770/0x82c [ 49.187680][ T5951] __arm64_sys_bpf+0xd0/0xec [ 49.187689][ T5951] invoke_syscall+0x98/0x244 [ 49.187696][ T5951] el0_svc_common+0xec/0x23c [ 49.187704][ T5951] do_el0_svc+0x4c/0x5c [ 49.187715][ T5951] el0_svc+0x60/0x1d8 [ 49.187723][ T5951] el0t_64_sync_handler+0x44/0x104 [ 49.187730][ T5951] el0t_64_sync+0x198/0x19c [ 49.305085][ T5966] loop0: detected capacity change from 0 to 512 [ 49.327389][ T5969] loop5: detected capacity change from 0 to 4096 [ 49.331413][ T5971] netlink: 'syz.4.238': attribute type 21 has an invalid length. [ 49.331437][ T5971] IPv6: NLM_F_CREATE should be specified when creating new route [ 49.331551][ T5971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 49.331558][ T5971] IPv6: NLM_F_CREATE should be set when creating new route [ 49.331666][ T5971] IPv6: NLM_F_CREATE should be set when creating new route [ 49.331676][ T5971] IPv6: NLM_F_CREATE should be set when creating new route [ 49.333800][ T5966] EXT4-fs: Mount option(s) incompatible with ext2 [ 49.335495][ T5969] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 49.358166][ T5969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.376929][ T5966] loop0: detected capacity change from 0 to 512 [ 49.382368][ T5975] IPv6: Can't replace route, no match found [ 49.386668][ T5966] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.240: corrupted in-inode xattr: bad e_name length [ 49.386691][ T5966] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.387263][ T5966] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.240: couldn't read orphan inode 15 (err -117) [ 49.387280][ T5966] fserror_report: 2 callbacks suppressed [ 49.387286][ T5966] loop0: lost filesystem error report for type 5 error -117 [ 49.388384][ T5966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.416168][ T5737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.433436][ T4746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.471673][ T5987] FAULT_INJECTION: forcing a failure. [ 49.471673][ T5987] name failslab, interval 1, probability 0, space 0, times 0 [ 49.471697][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.0.244 Tainted: G L syzkaller #0 PREEMPT [ 49.471713][ T5987] Tainted: [L]=SOFTLOCKUP [ 49.471717][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 49.471722][ T5987] Call trace: [ 49.471725][ T5987] show_stack+0x2c/0x3c (C) [ 49.471741][ T5987] __dump_stack+0x30/0x40 [ 49.471750][ T5987] dump_stack_lvl+0xd8/0x12c [ 49.471759][ T5987] dump_stack+0x1c/0x28 [ 49.471766][ T5987] should_fail_ex+0x418/0x58c [ 49.471777][ T5987] should_failslab+0xc4/0x120 [ 49.471787][ T5987] __kmalloc_noprof+0x108/0x6c8 [ 49.471797][ T5987] security_sk_alloc+0x60/0x35c [ 49.471808][ T5987] sk_prot_alloc+0xe0/0x1e8 [ 49.471818][ T5987] sk_alloc+0x44/0x320 [ 49.471826][ T5987] pppol2tp_create+0x40/0x208 [ 49.471837][ T5987] pppox_create+0x120/0x18c [ 49.471848][ T5987] __sock_create+0x31c/0x670 [ 49.471859][ T5987] __sys_socket_create+0xc0/0x11c [ 49.471869][ T5987] __sys_socket+0x44/0xec [ 49.471880][ T5987] __arm64_sys_socket+0x84/0x9c [ 49.471890][ T5987] invoke_syscall+0x98/0x244 [ 49.471900][ T5987] el0_svc_common+0xec/0x23c [ 49.471908][ T5987] do_el0_svc+0x4c/0x5c [ 49.471916][ T5987] el0_svc+0x60/0x1d8 [ 49.471925][ T5987] el0t_64_sync_handler+0x44/0x104 [ 49.471933][ T5987] el0t_64_sync+0x198/0x19c [ 49.570798][ T4430] 8021q: adding VLAN 0 to HW filter on device eth3 [ 49.978122][ T6018] loop3: detected capacity change from 0 to 2048 [ 50.101527][ T6018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.281880][ T6018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.290934][ T6018] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 5: comm syz.3.249: path /37/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=60 fake=0 [ 50.292737][ T6018] EXT4-fs (loop3): Remounting filesystem read-only [ 50.355855][ T6034] 9p: Unknown uid 00000000004294967295 [ 50.355900][ T6033] 9p: Unknown uid 00000000004294967295 [ 50.356500][ T30] audit: type=1326 audit(50.330:101): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=_ pid=6032 comm="syz.4.253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c37a228 code=0x0 [ 50.409741][ T4745] Bluetooth: hci4: command tx timeout [ 50.447176][ T6048] loop0: detected capacity change from 0 to 512 [ 50.448134][ T6050] loop4: detected capacity change from 0 to 1024 [ 50.456948][ T6050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.472387][ T6048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.486531][ T6048] tipc: Started in network mode [ 50.486547][ T6048] tipc: Node identity bae24704f14e, cluster identity 4711 [ 50.486647][ T6048] tipc: Enabled bearer , priority 0 [ 50.487738][ T4743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.494040][ T6048] syzkaller0: entered promiscuous mode [ 50.494053][ T6048] syzkaller0: entered allmulticast mode [ 50.497746][ T6048] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 50.509752][ T5326] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.509780][ T5326] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.509796][ T5326] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.509810][ T5326] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.510206][ T6048] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 50.565522][ T6048] tipc: Resetting bearer [ 50.611919][ T4746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.802506][ T6063] tipc: Enabled bearer , priority 10 [ 50.806905][ T6063] input: syz1 as /devices/virtual/input/input6 [ 50.853705][ T4739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.873423][ T6065] 9pnet_fd: Insufficient options for proto=fd [ 50.897692][ T6067] loop3: detected capacity change from 0 to 512 [ 50.945997][ T6072] loop0: detected capacity change from 0 to 1024 [ 50.947396][ T6072] ext4: Unknown parameter 'nodiorea./file1' [ 50.991641][ T6072] ext4: Unknown parameter 'nodiorea./file1' [ 51.022602][ T6072] ext4: Unknown parameter 'nodiorea./file1' [ 51.035543][ T6072] ext4: Unknown parameter 'nodiorea./file1' [ 51.044880][ T6072] ext4: Unknown parameter 'nodiorea./file1' [ 51.061409][ T6083] overlay: filesystem on ./bus not supported as upperdir [ 51.062849][ T6083] overlay: filesystem on ./bus not supported as upperdir [ 51.063253][ T6083] overlayfs: failed lookup in lower (newroot/7, name='bus', err=-40): overlapping layers [ 51.063323][ T6083] overlayfs: failed lookup in lower (newroot/7, name='bus', err=-40): overlapping layers [ 51.063378][ T6083] overlayfs: failed lookup in lower (newroot/7, name='bus', err=-40): overlapping layers [ 51.063443][ T6083] overlayfs: failed lookup in lower (newroot/7, name='bus', err=-40): overlapping layers [ 51.063497][ T6083] overlayfs: failed lookup in lower (newroot/7, name='bus', err=-40): overlapping layers [ 51.063550][ T6083] overlayfs: failed lookup in lower (newroot/7, name='bus', err=-40): overlapping layers [ 51.063601][ T6083] overlayfs: failed lookup in lower (newroot/7, name='bus', err=-40): overlapping layers [ 51.063661][ T6083] overlayfs: failed lookup in lower (newroot/7, name='bus', err=-40): overlapping layers [ 51.063712][ T6083] overlayfs: failed lookup in lower (newroot/7, name='bus', err=-40): overlapping layers [ 51.063762][ T6083] overlayfs: failed lookup in lower (newroot/7, name='bus', err=-40): overlapping layers [ 51.104723][ T6072] ext4: Unknown parameter 'nodiorea./file1' [ 51.108163][ T6072] ext4: Unknown parameter 'nodiorea./file1' [ 51.115965][ T6072] ext4: Unknown parameter 'nodiorea./file1' [ 51.413538][ T6097] vfat: Unknown parameter '' [ 51.433067][ T6072] ext4: Unknown parameter 'nodiorea./file1' [ 51.453260][ T6072] ext4: Unknown parameter 'nodiorea./file1' [ 51.454649][ T6102] __nla_validate_parse: 3 callbacks suppressed [ 51.454663][ T6102] netlink: 48 bytes leftover after parsing attributes in process `syz.1.269'. [ 51.474688][ T6102] overlayfs: failed to clone upperpath [ 51.508053][ T6072] ext4: Unknown parameter 'nodiorea./file1' [ 51.522423][ T6072] ext4: Unknown parameter 'nodiorea./file1' [ 51.538076][ T6072] ext4: Unknown parameter 'nodiorea./file1' [ 51.547618][ T6072] ext4: Unknown parameter 'nodiorea./file1' [ 51.810399][ T24] tipc: Node number set to 1269581572 [ 52.000219][ T6119] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.255448][ T4746] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.313998][ T6136] No control pipe specified [ 52.360837][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 52.437903][ T6149] netlink: 44 bytes leftover after parsing attributes in process `syz.1.283'. [ 52.438244][ T6149] IPVS: Unknown mcast interface: vetN1_macvtap [ 52.583009][ T6148] No control pipe specified [ 52.964663][ T6159] set_capacity_and_notify: 17 callbacks suppressed [ 52.964677][ T6159] loop3: detected capacity change from 0 to 8192 [ 53.010924][ T6159] loop3: p1 < > p3 p4 < > [ 53.012274][ T6159] loop3: p3 start 852736 is beyond EOD, truncated [ 53.077099][ T4753] udevd[4753]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 53.171131][ T6167] 9p: Bad value for 'rfdno' [ 53.215564][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 53.292669][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.342707][ T4741] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.343817][ T4741] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.344259][ T4741] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.344630][ T4741] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.344829][ T4741] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.402931][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.765187][ T6181] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.854836][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.939145][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.111806][ T6229] loop0: detected capacity change from 0 to 512 [ 54.114543][ T6229] EXT4-fs: Ignoring removed i_version option [ 54.114577][ T6229] EXT4-fs: Ignoring removed nobh option [ 54.228914][ T6229] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 54.228937][ T6229] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.228944][ T6229] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.270904][ T6229] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 54.270946][ T6229] System zones: 1-12 [ 54.271089][ T6229] EXT4-fs (loop0): orphan cleanup on readonly fs [ 54.271500][ T6229] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.300: corrupted in-inode xattr: overlapping e_value [ 54.271518][ T6229] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.271710][ T6229] EXT4-fs (loop0): Remounting filesystem read-only [ 54.272311][ T6229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 54.298706][ T6228] bond0: option all_slaves_active: invalid value (155) [ 54.312338][ T6234] loop3: detected capacity change from 0 to 1024 [ 54.334560][ T6181] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.334609][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.334691][ T6181] bridge_slave_0: entered allmulticast mode [ 54.335102][ T6181] bridge_slave_0: entered promiscuous mode [ 54.342510][ T6181] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.342565][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.342622][ T6181] bridge_slave_1: entered allmulticast mode [ 54.343036][ T6181] bridge_slave_1: entered promiscuous mode [ 54.355157][ T6234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.361715][ T6233] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 54.380070][ T6235] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 54.383902][ T6181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.384795][ T6181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.410295][ T6181] team0: Port device team_slave_0 added [ 54.419368][ T13] bridge_slave_1: left allmulticast mode [ 54.419384][ T13] bridge_slave_1: left promiscuous mode [ 54.419474][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.428894][ T13] bridge_slave_0: left allmulticast mode [ 54.428908][ T13] bridge_slave_0: left promiscuous mode [ 54.428968][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.528506][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.533375][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.534443][ T13] bond0 (unregistering): Released all slaves [ 54.537908][ T6181] team0: Port device team_slave_1 added [ 54.558325][ T6181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.558336][ T6181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.558347][ T6181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.558873][ T6181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.558880][ T6181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.558894][ T6181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.614391][ T6181] hsr_slave_0: entered promiscuous mode [ 54.614728][ T6181] hsr_slave_1: entered promiscuous mode [ 54.615006][ T6181] debugfs: 'hsr0' already exists in 'hsr' [ 54.615021][ T6181] Cannot create hsr debugfs directory [ 54.638270][ T6262] netlink: 404 bytes leftover after parsing attributes in process `syz.1.305'. [ 54.738630][ T6181] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 54.746293][ T4746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.748975][ T6181] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.781901][ T6181] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 54.783819][ T6181] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.784366][ T6181] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 54.786083][ T6181] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.788887][ T6181] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 54.791212][ T6181] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.816342][ T6290] loop0: detected capacity change from 0 to 256 [ 54.844958][ T4430] 8021q: adding VLAN 0 to HW filter on device eth4 [ 54.885805][ T6181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.895109][ T6181] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.911278][ T1254] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.911306][ T1254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.913241][ T5326] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.913261][ T5326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.968884][ T13] hsr_slave_0: left promiscuous mode [ 54.969223][ T13] hsr_slave_1: left promiscuous mode [ 54.969491][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.969501][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.977615][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.977628][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.988750][ T13] veth1_macvtap: left promiscuous mode [ 54.988776][ T13] veth0_macvtap: left promiscuous mode [ 54.988820][ T13] veth1_vlan: left promiscuous mode [ 54.988851][ T13] veth0_vlan: left promiscuous mode [ 55.276308][ T4739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.370557][ T4745] Bluetooth: hci4: command tx timeout [ 55.384678][ T13] team0 (unregistering): Port device team_slave_1 removed [ 55.412098][ T13] team0 (unregistering): Port device team_slave_0 removed [ 55.461358][ T6323] loop3: detected capacity change from 0 to 512 [ 55.466839][ T6323] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 55.485123][ T6323] EXT4-fs (loop3): 1 truncate cleaned up [ 55.485935][ T6323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.518048][ T4430] 8021q: adding VLAN 0 to HW filter on device eth5 [ 55.530871][ T6323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.721705][ T6342] Bluetooth: MGMT ver 1.23 [ 55.967292][ T6349] loop3: detected capacity change from 0 to 256 [ 55.976805][ T6349] vfat: Unknown parameter 'iocharsrUU•p857' [ 56.060966][ T6181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.075663][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.082870][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.087578][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.091486][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.113980][ T6361] loop0: detected capacity change from 0 to 4096 [ 56.124035][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.124755][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.127001][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.127150][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.129289][ T6361] EXT4-fs: Ignoring removed orlov option [ 56.150295][ T6361] EXT4-fs (loop0): Test dummy encryption mode enabled [ 56.152368][ T6361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.252521][ T4746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.288572][ T6392] loop0: detected capacity change from 0 to 128 [ 56.303254][ T4430] 8021q: adding VLAN 0 to HW filter on device eth6 [ 56.306423][ T6392] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.324521][ T6181] veth0_vlan: entered promiscuous mode [ 56.327688][ T6181] veth1_vlan: entered promiscuous mode [ 56.350777][ T6181] veth0_macvtap: entered promiscuous mode [ 56.351997][ T6181] veth1_macvtap: entered promiscuous mode [ 56.355294][ T6181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.357023][ T6181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.359283][ T5326] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.359358][ T5326] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.425803][ T1240] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.425830][ T1240] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.428940][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.428949][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.454152][ T5327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.454163][ T5327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.482493][ T6413] fuse: Bad value for 'fd' [ 56.768627][ T4746] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.794316][ T6420] netlink: 16 bytes leftover after parsing attributes in process `syz.6.295'. [ 56.803593][ T6420] batman_adv: batadv0: Adding interface: ipvlan2 [ 56.803603][ T6420] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.803617][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.803625][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.803632][ T6420] batman_adv: batadv0: Interface activated: ipvlan2 [ 56.869688][ T4430] 8021q: adding VLAN 0 to HW filter on device eth7 [ 56.947795][ T6449] block nbd6: NBD_DISCONNECT [ 56.948212][ T6449] IPVS: set_ctl: invalid protocol: 87 224.0.0.2:20000 [ 57.031193][ T6454] overlayfs: missing 'lowerdir' [ 57.450011][ T4741] Bluetooth: hci4: command tx timeout [ 57.878723][ T6481] binder: 6480:6481 ioctl c00c620f 200001c0 returned -22 [ 57.890534][ T6481] loop3: detected capacity change from 0 to 512 [ 57.908927][ T6479] fuse: Bad value for 'user_id' [ 57.908938][ T6479] fuse: Bad value for 'user_id' [ 57.924050][ T6481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.925073][ T6481] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.342: corrupted xattr block 33: invalid ea_ino [ 57.926756][ T6481] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.342: corrupted xattr block 33: invalid ea_ino [ 57.926940][ T6481] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.342: corrupted xattr block 33: invalid ea_ino [ 57.948410][ T6480] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 57.949406][ T6480] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #15: comm syz.3.342: corrupted xattr block 33: invalid ea_ino [ 57.949441][ T6480] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.955585][ T6480] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 57.970339][ T4739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.261586][ T6503] bridge_slave_0: left allmulticast mode [ 58.261607][ T6503] bridge_slave_0: left promiscuous mode [ 58.261683][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.263568][ T6503] bridge_slave_1: left allmulticast mode [ 58.263580][ T6503] bridge_slave_1: left promiscuous mode [ 58.263887][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.269284][ T6503] bond0: (slave bond_slave_0): Releasing backup interface [ 58.513161][ T4741] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 58.513284][ T4741] Bluetooth: hci1: Injecting HCI hardware error event [ 58.515847][ T4745] Bluetooth: hci1: hardware error 0x00 [ 58.552158][ T6503] bond0: (slave bond_slave_1): Releasing backup interface [ 58.595128][ T6503] team0: Port device team_slave_0 removed [ 58.596941][ T6503] team0: Port device team_slave_1 removed [ 58.597331][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.597344][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.598001][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.598010][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.598773][ T6503] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 59.041922][ T6526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.352'. [ 59.102635][ T6530] loop0: detected capacity change from 0 to 8192 [ 59.493306][ T6542] loop6: detected capacity change from 0 to 1024 [ 59.512816][ T6540] overlay: ./file0 is not a directory [ 59.515078][ T6542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.517225][ T6540] loop0: detected capacity change from 0 to 256 [ 59.517747][ T6540] vfat: Bad value for 'nonumtail' [ 59.533089][ T4741] Bluetooth: hci4: command tx timeout [ 59.802097][ T6566] sctp: [Deprecated]: syz.0.362 (pid 6566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 59.802097][ T6566] Use struct sctp_sack_info instead [ 59.808401][ T6569] FAULT_INJECTION: forcing a failure. [ 59.808401][ T6569] name failslab, interval 1, probability 0, space 0, times 0 [ 59.808418][ T6569] CPU: 1 UID: 0 PID: 6569 Comm: syz.4.363 Tainted: G L syzkaller #0 PREEMPT [ 59.808435][ T6569] Tainted: [L]=SOFTLOCKUP [ 59.808439][ T6569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 59.808444][ T6569] Call trace: [ 59.808447][ T6569] show_stack+0x2c/0x3c (C) [ 59.808463][ T6569] __dump_stack+0x30/0x40 [ 59.808474][ T6569] dump_stack_lvl+0xd8/0x12c [ 59.808483][ T6569] dump_stack+0x1c/0x28 [ 59.808490][ T6569] should_fail_ex+0x418/0x58c [ 59.808500][ T6569] should_failslab+0xc4/0x120 [ 59.808509][ T6569] __kmalloc_noprof+0x108/0x6c8 [ 59.808518][ T6569] bitmap_zalloc+0x34/0x44 [ 59.808527][ T6569] binder_open+0x124/0xa6c [ 59.808540][ T6569] do_dentry_open+0x5c4/0xfbc [ 59.808548][ T6569] vfs_open+0x44/0x2dc [ 59.808555][ T6569] path_openat+0x1084/0x18f0 [ 59.808565][ T6569] do_file_open+0x1c8/0x2e8 [ 59.808575][ T6569] do_sys_openat2+0x114/0x1e8 [ 59.808582][ T6569] do_sys_open+0xb0/0xe0 [ 59.808589][ T6569] __arm64_sys_openat+0xa8/0xc4 [ 59.808597][ T6569] invoke_syscall+0x98/0x244 [ 59.808605][ T6569] el0_svc_common+0xec/0x23c [ 59.808612][ T6569] do_el0_svc+0x4c/0x5c [ 59.808619][ T6569] el0_svc+0x60/0x1d8 [ 59.808627][ T6569] el0t_64_sync_handler+0x44/0x104 [ 59.808634][ T6569] el0t_64_sync+0x198/0x19c [ 59.809079][ T6568] binder: binder_mmap: 6567 20ffe000-21000000 bad vm_flags failed -1 [ 59.868068][ T6574] 9p: Bad value for 'wfdno' [ 59.868361][ T6575] 9p: Bad value for 'wfdno' [ 60.414770][ T6596] ip_tables: iptables: counters copy to user failed while replacing table [ 60.481011][ T6181] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.542047][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 60.547636][ T6602] FAULT_INJECTION: forcing a failure. [ 60.547636][ T6602] name failslab, interval 1, probability 0, space 0, times 0 [ 60.547655][ T6602] CPU: 1 UID: 0 PID: 6602 Comm: syz.6.375 Tainted: G L syzkaller #0 PREEMPT [ 60.547667][ T6602] Tainted: [L]=SOFTLOCKUP [ 60.547671][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 60.547676][ T6602] Call trace: [ 60.547679][ T6602] show_stack+0x2c/0x3c (C) [ 60.547694][ T6602] __dump_stack+0x30/0x40 [ 60.547704][ T6602] dump_stack_lvl+0xd8/0x12c [ 60.547712][ T6602] dump_stack+0x1c/0x28 [ 60.547720][ T6602] should_fail_ex+0x418/0x58c [ 60.547733][ T6602] should_failslab+0xc4/0x120 [ 60.547744][ T6602] __kmalloc_cache_noprof+0x94/0x5fc [ 60.547757][ T6602] tipc_nametbl_insert_publ+0x4f8/0xe44 [ 60.547772][ T6602] tipc_nametbl_publish+0x10c/0x250 [ 60.547780][ T6602] tipc_sk_publish+0x17c/0x380 [ 60.547791][ T6602] tipc_sk_join+0x2d8/0x508 [ 60.547802][ T6602] tipc_setsockopt+0x570/0x7c0 [ 60.547813][ T6602] do_sock_setsockopt+0x1f0/0x330 [ 60.547826][ T6602] __sys_setsockopt+0x104/0x170 [ 60.547837][ T6602] __arm64_sys_setsockopt+0xc8/0xe4 [ 60.547849][ T6602] invoke_syscall+0x98/0x244 [ 60.547858][ T6602] el0_svc_common+0xec/0x23c [ 60.547866][ T6602] do_el0_svc+0x4c/0x5c [ 60.547874][ T6602] el0_svc+0x60/0x1d8 [ 60.547883][ T6602] el0t_64_sync_handler+0x44/0x104 [ 60.547891][ T6602] el0t_64_sync+0x198/0x19c [ 60.547901][ T6602] tipc: Failed to bind to 66,4294966268,4294966268 [ 60.730290][ T4745] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 60.979167][ T6613] Bluetooth: Error in BCSP hdr checksum [ 60.982631][ T6613] loop0: detected capacity change from 0 to 512 [ 60.983288][ T6613] EXT4-fs: Ignoring removed bh option [ 60.984658][ T6613] EXT4-fs (loop0): failed to initialize system zone (-117) [ 60.984719][ T6613] EXT4-fs (loop0): mount failed [ 61.077426][ T6627] netlink: 28 bytes leftover after parsing attributes in process `syz.6.377'. [ 61.143049][ T30] audit: type=1326 audit(61.120:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6614 comm="syz.3.380" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x0 [ 61.169072][ T6633] loop6: detected capacity change from 0 to 4096 [ 61.199573][ T6633] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.381: corrupted inode contents [ 61.202411][ T6633] EXT4-fs error (device loop6): ext4_dirty_inode:6736: inode #15: comm syz.6.381: mark_inode_dirty error [ 61.204393][ T6633] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.381: corrupted inode contents [ 61.204626][ T6633] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.381: mark_inode_dirty error [ 61.204772][ T6633] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.381: corrupted inode contents [ 61.204980][ T6633] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.381: mark_inode_dirty error [ 61.205132][ T6633] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.381: corrupted inode contents [ 61.207873][ T6633] EXT4-fs error (device loop6): ext4_truncate:4721: inode #15: comm syz.6.381: mark_inode_dirty error [ 61.208071][ T6633] EXT4-fs error (device loop6) in ext4_setattr:6247: Corrupt filesystem [ 61.216247][ T6633] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.381: corrupted inode contents [ 61.278651][ T6648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.278821][ T6648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.312719][ T6649] netlink: 16 bytes leftover after parsing attributes in process `syz.6.383'. [ 61.342243][ T30] audit: type=1400 audit(61.320:103): lsm=SMACK fn=smack_inode_setattr action=denied subject="_" object="lo" requested=w pid=6659 comm="syz.6.385" name="file0" dev="tmpfs" ino=73 [ 61.366307][ T6665] loop6: detected capacity change from 0 to 512 [ 61.366974][ T6665] EXT4-fs (loop6): Test dummy encryption mode enabled [ 61.377618][ T6665] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.386: inode has both inline data and extents flags [ 61.377635][ T6665] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.377736][ T6665] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.386: couldn't read orphan inode 15 (err -117) [ 61.377748][ T6665] loop6: lost filesystem error report for type 5 error -117 [ 61.397419][ T6665] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 61.415896][ T6665] fscrypt: AES-256-XTS using blk-crypto-fallback [ 61.457028][ T6675] geneve2: entered promiscuous mode [ 61.468205][ T6665] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20ff6000 [ 61.472330][ T6665] Memory failure: 0x216a31: unhandlable page. [ 61.472345][ T6665] Memory failure: 0x216a31: recovery action for reserved kernel page: Ignored [ 61.610960][ T4741] Bluetooth: hci4: command tx timeout [ 61.900417][ T6701] loop4: detected capacity change from 0 to 512 [ 61.924974][ T6701] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 61.927879][ T6701] EXT4-fs (loop4): 1 truncate cleaned up [ 62.381751][ T6726] netlink: 40 bytes leftover after parsing attributes in process `syz.1.394'. [ 62.382129][ T6727] fuse: Bad value for 'fd' [ 62.395799][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 62.395885][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 62.395945][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 62.396000][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 62.396069][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 62.396140][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 62.396200][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 62.396252][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 62.396306][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 62.521447][ T6734] netlink: 'syz.1.396': attribute type 11 has an invalid length. [ 62.542408][ T6735] A link change request failed with some changes committed already. Interface s may have been left with an inconsistent configuration, please check. [ 62.655040][ T6741] 9p: Bad value for 'rfdno' [ 62.756169][ T6751] loop3: detected capacity change from 0 to 1024 [ 63.059795][ T4741] Bluetooth: hci5: command 0x1003 tx timeout [ 63.060264][ T4745] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 63.128403][ T6772] loop6: detected capacity change from 0 to 2048 [ 63.147092][ T6772] Alternate GPT is invalid, using primary GPT. [ 63.147132][ T6772] loop6: p1 p2 p3 [ 63.147141][ T6772] loop6: partition table partially beyond EOD, truncated [ 63.977189][ T6798] IPv6: NLM_F_REPLACE set, but no existing node found! [ 63.993174][ T6803] random: crng reseeded on system resumption [ 64.024388][ T6803] FAULT_INJECTION: forcing a failure. [ 64.024388][ T6803] name failslab, interval 1, probability 0, space 0, times 0 [ 64.024404][ T6803] CPU: 0 UID: 0 PID: 6803 Comm: syz.0.416 Tainted: G L syzkaller #0 PREEMPT [ 64.024429][ T6803] Tainted: [L]=SOFTLOCKUP [ 64.024433][ T6803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 64.024438][ T6803] Call trace: [ 64.024441][ T6803] show_stack+0x2c/0x3c (C) [ 64.024458][ T6803] __dump_stack+0x30/0x40 [ 64.024469][ T6803] dump_stack_lvl+0xd8/0x12c [ 64.024478][ T6803] dump_stack+0x1c/0x28 [ 64.024486][ T6803] should_fail_ex+0x418/0x58c [ 64.024498][ T6803] should_failslab+0xc4/0x120 [ 64.024508][ T6803] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 64.024520][ T6803] kvasprintf+0x110/0x1e4 [ 64.024530][ T6803] __kthread_create_on_node+0x1ac/0x3b0 [ 64.024541][ T6803] kthread_create_on_node+0xe4/0x134 [ 64.024551][ T6803] hwrng_start_hwrng_fillfn+0xc0/0x13c [ 64.024560][ T6803] hwrng_pm_notifier+0xb8/0x108 [ 64.024568][ T6803] notifier_call_chain+0x1a4/0x4cc [ 64.024581][ T6803] blocking_notifier_call_chain+0x70/0xa0 [ 64.024589][ T6803] pm_notifier_call_chain+0x2c/0x3c [ 64.024597][ T6803] snapshot_release+0x118/0x1e0 [ 64.024603][ T6806] loop6: detected capacity change from 0 to 1024 [ 64.024609][ T6803] __fput+0x338/0x74c [ 64.024620][ T6803] fput_close_sync+0x10c/0x278 [ 64.024631][ T6803] __arm64_sys_close+0x80/0x110 [ 64.024639][ T6803] invoke_syscall+0x98/0x244 [ 64.024648][ T6803] el0_svc_common+0xec/0x23c [ 64.024656][ T6803] do_el0_svc+0x4c/0x5c [ 64.024664][ T6803] el0_svc+0x60/0x1d8 [ 64.024673][ T6803] el0t_64_sync_handler+0x44/0x104 [ 64.024681][ T6803] el0t_64_sync+0x198/0x19c [ 64.025135][ T6803] hwrng_fill thread creation failed [ 64.035998][ T6806] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 64.036650][ T6806] JBD2: no valid journal superblock found [ 64.038134][ T6806] EXT4-fs (loop6): Could not load journal inode [ 64.260942][ T6815] nvme_fabrics: found same hostid ae407284-970e-4d6c-81cb-21de04f32156 but different hostnqn nq [ 64.492717][ T1033] cfg80211: failed to load regulatory.db [ 64.493874][ T1617] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.493898][ T1617] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.642489][ T6822] loop0: detected capacity change from 0 to 32768 [ 64.685948][ T6824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.692969][ T6822] Dev loop0 SGI disklabel: csum bad, label corrupted [ 64.693086][ T6822] loop0: AHDI p2 p3 [ 64.693160][ T6822] loop0: p2 size 4211081215 extends beyond EOD, truncated [ 65.175666][ T4753] udevd[4753]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 65.296093][ T6857] loop0: detected capacity change from 0 to 512 [ 65.298820][ T6857] ext4: Bad value for 'stripe' [ 65.420843][ T6870] loop0: detected capacity change from 0 to 128 [ 65.476313][ T6872] x_tables: duplicate underflow at hook 2 [ 65.666387][ T30] audit: type=1326 audit(65.640:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.438" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 65.666416][ T30] audit: type=1326 audit(65.640:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.438" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 65.680890][ T30] audit: type=1326 audit(65.660:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.438" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=236 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 65.680914][ T30] audit: type=1326 audit(65.660:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.438" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 65.680930][ T30] audit: type=1326 audit(65.660:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.438" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 65.681056][ T30] audit: type=1326 audit(65.660:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.438" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 65.681228][ T30] audit: type=1326 audit(65.660:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.438" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 65.681286][ T30] audit: type=1326 audit(65.660:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.438" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 66.543043][ T6909] FAULT_INJECTION: forcing a failure. [ 66.543043][ T6909] name failslab, interval 1, probability 0, space 0, times 0 [ 66.543066][ T6909] CPU: 1 UID: 0 PID: 6909 Comm: syz.3.447 Tainted: G L syzkaller #0 PREEMPT [ 66.543080][ T6909] Tainted: [L]=SOFTLOCKUP [ 66.543084][ T6909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 66.543089][ T6909] Call trace: [ 66.543092][ T6909] show_stack+0x2c/0x3c (C) [ 66.543108][ T6909] __dump_stack+0x30/0x40 [ 66.543117][ T6909] dump_stack_lvl+0xd8/0x12c [ 66.543125][ T6909] dump_stack+0x1c/0x28 [ 66.543129][ T6908] netlink: 'syz.0.446': attribute type 10 has an invalid length. [ 66.543133][ T6909] should_fail_ex+0x418/0x58c [ 66.543145][ T6909] should_failslab+0xc4/0x120 [ 66.543155][ T6909] kmem_cache_alloc_noprof+0x94/0x5d4 [ 66.543165][ T6909] prepare_creds+0x34/0x7d0 [ 66.543174][ T6909] __sys_setreuid+0x118/0x5f0 [ 66.543186][ T6909] __arm64_sys_setreuid+0x64/0x78 [ 66.543201][ T6909] invoke_syscall+0x98/0x244 [ 66.543210][ T6909] el0_svc_common+0xec/0x23c [ 66.543219][ T6909] do_el0_svc+0x4c/0x5c [ 66.543227][ T6909] el0_svc+0x60/0x1d8 [ 66.543236][ T6909] el0t_64_sync_handler+0x44/0x104 [ 66.543244][ T6909] el0t_64_sync+0x198/0x19c [ 66.543828][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 66.543838][ T30] audit: type=1326 audit(66.520:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.3.447" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 66.544086][ T30] audit: type=1326 audit(66.520:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.3.447" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 66.544105][ T30] audit: type=1326 audit(66.520:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.3.447" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 66.544121][ T30] audit: type=1326 audit(66.520:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.3.447" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 66.544137][ T30] audit: type=1326 audit(66.520:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.3.447" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 66.570766][ T30] audit: type=1326 audit(66.550:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.3.447" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 66.573353][ T30] audit: type=1326 audit(66.550:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.3.447" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 66.573378][ T30] audit: type=1326 audit(66.550:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.3.447" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 66.573398][ T30] audit: type=1326 audit(66.550:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.3.447" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a228 code=0x7ffc0000 [ 66.573665][ T30] audit: type=1326 audit(66.550:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6910 comm="syz.3.447" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb615d0ec code=0x7ffc0000 [ 67.204123][ T6935] loop4: detected capacity change from 0 to 2048 [ 67.558727][ T6961] loop0: detected capacity change from 0 to 1024 [ 67.602952][ T6961] EXT4-fs mount: 8 callbacks suppressed [ 67.602967][ T6961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 68.183219][ T4746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 68.227910][ T6996] ip_tables: iptables: counters copy to user failed while replacing table [ 68.254647][ T6999] fuse: Unknown parameter 'f$' [ 68.331475][ T7005] overlayfs: failed to clone upperpath [ 68.434023][ T7018] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.434095][ T7018] block device autoloading is deprecated and will be removed. [ 68.886657][ T7050] __nla_validate_parse: 40 callbacks suppressed [ 68.886672][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 69.086486][ T7077] loop6: detected capacity change from 0 to 512 [ 69.104784][ T7077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.118811][ T7077] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.473: corrupted xattr block 33: invalid header [ 69.119040][ T7077] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.473: corrupted xattr block 33: invalid header [ 69.119195][ T7077] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.473: corrupted xattr block 33: invalid header [ 69.127609][ T7077] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.473: corrupted xattr block 33: invalid header [ 69.147951][ T7084] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 69.159488][ T7077] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 69.165721][ T7077] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 69.165742][ T7077] EXT4-fs (loop6): This should not happen!! Data will be lost [ 69.165742][ T7077] [ 69.165753][ T7077] EXT4-fs (loop6): Total free blocks count 0 [ 69.165761][ T7077] EXT4-fs (loop6): Free/Dirty block details [ 69.165771][ T7077] EXT4-fs (loop6): free_blocks=65280 [ 69.165782][ T7077] EXT4-fs (loop6): dirty_blocks=31 [ 69.165788][ T7077] EXT4-fs (loop6): Block reservation details [ 69.165795][ T7077] EXT4-fs (loop6): i_reserved_data_blocks=31 [ 69.168055][ T7077] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 69.223936][ T7086] loop4: detected capacity change from 0 to 512 [ 69.224292][ T7086] EXT4-fs: Ignoring removed oldalloc option [ 69.225668][ T7086] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 69.225681][ T7086] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.235373][ T7086] EXT4-fs (loop4): 1 orphan inode deleted [ 69.235386][ T7086] EXT4-fs (loop4): 1 truncate cleaned up [ 69.235818][ T7086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.250374][ T7086] EXT4-fs error (device loop4): empty_inline_dir:1796: inode #12: block 7: comm syz.4.475: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 69.252680][ T7086] EXT4-fs (loop4): Remounting filesystem read-only [ 69.252699][ T7086] EXT4-fs warning (device loop4): empty_inline_dir:1803: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 69.255531][ T7089] ip_tables: iptables: counters copy to user failed while replacing table [ 69.327922][ T4743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.423271][ T7097] loop6: detected capacity change from 0 to 512 [ 69.428381][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 69.429187][ T7097] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 69.429208][ T7097] EXT4-fs (loop6): group descriptors corrupted! [ 69.440245][ T7099] bond2: entered allmulticast mode [ 69.440435][ T7099] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.442639][ T7099] loop4: detected capacity change from 0 to 512 [ 69.554746][ T7110] loop4: detected capacity change from 0 to 8192 [ 70.255402][ T7120] loop3: detected capacity change from 0 to 512 [ 70.261831][ T7120] EXT4-fs: Mount option(s) incompatible with ext2 [ 70.288591][ T7120] cgroup: Setting release_agent not allowed [ 70.448018][ T7126] loop0: detected capacity change from 0 to 2048 [ 70.884666][ T7149] team0: Mode changed to "activebackup" [ 70.950805][ T7153] syzkaller0: entered promiscuous mode [ 70.950822][ T7153] syzkaller0: entered allmulticast mode [ 70.960295][ T7153] tipc: Started in network mode [ 70.960312][ T7153] tipc: Node identity 6a7175cebf9e, cluster identity 4711 [ 70.960483][ T7153] tipc: Enabled bearer , priority 0 [ 71.067861][ T7152] tipc: Resetting bearer [ 71.074708][ T7152] tipc: Disabling bearer [ 71.190004][ T7179] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20000 [ 71.334929][ T7187] loop4: detected capacity change from 0 to 256 [ 71.410813][ T7192] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 71.644953][ T7210] fuse: Bad value for 'user_id' [ 71.644966][ T7210] fuse: Bad value for 'user_id' [ 71.669445][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 71.676812][ T7212] loop3: detected capacity change from 0 to 1024 [ 71.692771][ T7212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000f00 r/w without journal. Quota mode: none. [ 71.703460][ T7212] EXT4-fs error (device loop3): ext4_get_first_dir_block:3550: inode #11: comm syz.3.509: directory missing '.' [ 71.715388][ T4739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000f00. [ 71.789168][ T7224] fuse: Bad value for 'fd' [ 71.791699][ T7224] fuse: fd is not a fuse device [ 71.825957][ T7226] loop3: detected capacity change from 0 to 128 [ 72.361690][ T7244] fuse: Bad value for 'rootmode' [ 72.458221][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 72.458235][ T30] audit: type=1326 audit(72.430:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7259 comm="syz.6.525" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed7a228 code=0x0 [ 72.570448][ T7267] fuse: fd is not a fuse device [ 72.573880][ T7267] netlink: 'syz.1.526': attribute type 1 has an invalid length. [ 72.637709][ T7261] input: syz0 as /devices/virtual/input/input9 [ 72.974987][ T7273] loop3: detected capacity change from 0 to 1024 [ 72.979396][ T7273] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 72.981080][ T7273] JBD2: no valid journal superblock found [ 72.984413][ T7273] EXT4-fs (loop3): Could not load journal inode [ 73.301149][ T7281] loop3: detected capacity change from 0 to 128 [ 73.405323][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.529'. [ 73.466369][ T7294] overlayfs: missing 'lowerdir' [ 73.486802][ T7297] loop6: detected capacity change from 0 to 128 [ 73.487093][ T7297] vfat: Unknown parameter 'dos1xflo' [ 73.578879][ T7304] netlink: 68 bytes leftover after parsing attributes in process `syz.1.535'. [ 74.410844][ T7334] netlink: 72 bytes leftover after parsing attributes in process `syz.1.543'. [ 74.411285][ T7335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.543'. [ 74.447930][ T7340] netlink: 36 bytes leftover after parsing attributes in process `syz.6.545'. [ 74.509086][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 74.826078][ T30] audit: type=1326 audit(74.800:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7368 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c37a228 code=0x7ffc0000 [ 74.826104][ T30] audit: type=1326 audit(74.800:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7368 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c37a228 code=0x7ffc0000 [ 74.826120][ T30] audit: type=1326 audit(74.800:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7368 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffff9c37a228 code=0x7ffc0000 [ 74.826134][ T30] audit: type=1326 audit(74.800:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7368 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c37a228 code=0x7ffc0000 [ 74.826148][ T30] audit: type=1326 audit(74.800:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7368 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c37a228 code=0x7ffc0000 [ 74.826162][ T30] audit: type=1326 audit(74.800:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7368 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff9c37a228 code=0x7ffc0000 [ 74.826178][ T30] audit: type=1326 audit(74.800:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7368 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c37a228 code=0x7ffc0000 [ 74.827303][ T30] audit: type=1326 audit(74.800:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7368 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c37a228 code=0x7ffc0000 [ 74.827324][ T30] audit: type=1326 audit(74.800:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7368 comm="syz.4.554" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9c37a228 code=0x7ffc0000 [ 75.178534][ T7390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.559'. [ 75.187780][ T7394] Injecting memory failure for pfn 0x16d70f at process virtual address 0x20f0f000 [ 75.205414][ T7398] loop4: detected capacity change from 0 to 512 [ 75.205985][ T7398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.206456][ T7398] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 75.206464][ T7398] EXT4-fs (loop4): can't mount with both data=journal and dax [ 75.213819][ T7394] Memory failure: 0x16d70f: Sending SIGBUS to syz.0.560:7394 due to hardware memory corruption [ 75.213930][ T7394] Memory failure: 0x16d70f: recovery action for dirty LRU page: Recovered [ 75.238427][ T7402] loop4: detected capacity change from 0 to 512 [ 75.239210][ T7402] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.241596][ T7402] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 75.241615][ T7402] EXT4-fs (loop4): can't mount with both data=journal and dax [ 75.328933][ T7410] loop4: detected capacity change from 0 to 512 [ 75.332300][ T7410] ext4: Unknown parameter 'fsname' [ 75.348787][ T7410] loop4: detected capacity change from 0 to 512 [ 75.348975][ T7410] ext4: Unknown parameter 'fsname' [ 75.358831][ T7410] loop4: detected capacity change from 0 to 512 [ 75.359135][ T7410] ext4: Unknown parameter 'fsname' [ 75.388476][ T7410] loop4: detected capacity change from 0 to 512 [ 75.388677][ T7410] ext4: Unknown parameter 'fsname' [ 75.412635][ T7410] loop4: detected capacity change from 0 to 512 [ 75.412826][ T7410] ext4: Unknown parameter 'fsname' [ 75.417423][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.417431][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.417461][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.417466][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.417493][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.417498][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.417522][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.417526][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.417553][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.417557][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.417581][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.417585][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.418920][ T7410] loop4: detected capacity change from 0 to 512 [ 75.419116][ T7410] ext4: Unknown parameter 'fsname' [ 75.420129][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.420138][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.423595][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.423611][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.423667][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.423672][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.423697][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.423701][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.423725][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.423728][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.423751][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.423754][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.423785][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.423788][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.423810][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.423813][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.423836][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.423839][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.423861][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.423865][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.423894][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.423898][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.423920][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.423923][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.423946][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.423949][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.423978][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.423981][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.424011][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.424014][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.424036][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.424039][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.424062][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.424065][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.424087][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.424090][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.424120][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.424123][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.424145][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.424148][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.424171][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.424174][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.424197][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.424200][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.424229][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.424233][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.424255][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.424258][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.424280][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.424284][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.424306][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 75.424309][ T7419] binder: 7417:7419 ioctl 4018620d 20000040 returned -16 [ 75.439367][ T7419] binder: 7417:7419 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 75.439384][ T7419] binder: 7419 RLIMIT_NICE not set [ 75.439864][ T7419] binder: 7417:7419 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 75.439888][ T7419] binder: 7419 RLIMIT_NICE not set [ 75.686388][ T7410] loop4: detected capacity change from 0 to 512 [ 75.686655][ T7410] ext4: Unknown parameter 'fsname' [ 75.688892][ T7410] loop4: detected capacity change from 0 to 512 [ 75.689078][ T7410] ext4: Unknown parameter 'fsname' [ 75.707323][ T7410] loop4: detected capacity change from 0 to 512 [ 75.711446][ T7410] ext4: Unknown parameter 'fsname' [ 75.727260][ T7410] loop4: detected capacity change from 0 to 512 [ 75.727473][ T7410] ext4: Unknown parameter 'fsname' [ 75.742145][ T7410] ext4: Unknown parameter 'fsname' [ 75.757504][ T7410] ext4: Unknown parameter 'fsname' [ 75.774086][ T7410] ext4: Unknown parameter 'fsname' [ 75.778636][ T7410] ext4: Unknown parameter 'fsname' [ 75.786943][ T7410] ext4: Unknown parameter 'fsname' [ 75.793536][ T7410] ext4: Unknown parameter 'fsname' [ 75.798014][ T7410] ext4: Unknown parameter 'fsname' [ 75.845560][ T7410] ext4: Unknown parameter 'fsname' [ 75.847959][ T7410] ext4: Unknown parameter 'fsname' [ 75.883616][ T7410] ext4: Unknown parameter 'fsname' [ 75.910850][ T7410] ext4: Unknown parameter 'fsname' [ 75.939113][ T7410] ext4: Unknown parameter 'fsname' [ 75.944928][ T7410] ext4: Unknown parameter 'fsname' [ 75.951591][ T7410] ext4: Unknown parameter 'fsname' [ 76.008973][ T7410] ext4: Unknown parameter 'fsname' [ 76.037947][ T7410] ext4: Unknown parameter 'fsname' [ 76.091880][ T7410] ext4: Unknown parameter 'fsname' [ 76.106685][ T7439] netlink: 96 bytes leftover after parsing attributes in process `syz.3.570'. [ 76.125721][ T7439] vlan2: entered allmulticast mode [ 76.125739][ T7439] gretap0: entered allmulticast mode [ 76.494992][ T7451] Injecting memory failure for pfn 0x16c2c9 at process virtual address 0x20001000 [ 76.598111][ T7451] Memory failure: 0x16c2c9: Sending SIGBUS to syz.6.571:7451 due to hardware memory corruption [ 76.598235][ T7451] Memory failure: 0x16c2c9: recovery action for dirty LRU page: Recovered [ 76.598253][ T7451] Injecting memory failure for pfn 0x1227f5 at process virtual address 0x20002000 [ 76.636989][ T7451] Memory failure: 0x1227f5: Sending SIGBUS to syz.6.571:7451 due to hardware memory corruption [ 76.637029][ T7451] Memory failure: 0x1227f5: recovery action for dirty LRU page: Recovered [ 76.637042][ T7451] Injecting memory failure for pfn 0x1228ba at process virtual address 0x20003000 [ 76.638534][ T7451] Memory failure: 0x1228ba: Sending SIGBUS to syz.6.571:7451 due to hardware memory corruption [ 76.638556][ T7451] Memory failure: 0x1228ba: recovery action for dirty LRU page: Recovered [ 76.832853][ T7458] netlink: 'syz.3.574': attribute type 11 has an invalid length. [ 76.851224][ T7454] ------------[ cut here ]------------ [ 76.851234][ T7454] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0xe4/0x578, CPU#0: syz.0.573/7454 [ 76.854978][ T7454] Modules linked in: [ 76.855900][ T7454] CPU: 0 UID: 0 PID: 7454 Comm: syz.0.573 Tainted: G L syzkaller #0 PREEMPT [ 76.858354][ T7454] Tainted: [L]=SOFTLOCKUP [ 76.859389][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 76.861794][ T7454] pstate: 23400005 (nzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 76.863637][ T7454] pc : __alloc_frozen_pages_noprof+0xe4/0x578 [ 76.865068][ T7454] lr : __alloc_frozen_pages_noprof+0xa8/0x578 [ 76.866439][ T7454] sp : ffff800093b672e0 [ 76.867374][ T7454] x29: ffff800093b673a0 x28: ffff0000cf92e018 x27: ffff800093b67300 [ 76.869194][ T7454] x26: 1ffff00011eac4ec x25: dfff800000000000 x24: ffff70001276ce60 [ 76.871123][ T7454] x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000040dc0 [ 76.873048][ T7454] x20: 0000000000000000 x19: 0000000000000034 x18: ffff8001237ae000 [ 76.874922][ T7454] x17: ffff0001acf6ce07 x16: ffff0000d7ac1d94 x15: 0000000000000010 [ 76.876853][ T7454] x14: 0000000000000018 x13: 0000000000000005 x12: 0000000000000000 [ 76.878743][ T7454] x11: 0000000000000000 x10: ffff70001276ce69 x9 : 0000000000000001 [ 76.880580][ T7454] x8 : ffff80008ae88000 x7 : 0000000000000000 x6 : 0000000000000000 [ 76.882470][ T7454] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000020 [ 76.884353][ T7454] x2 : 0000000000000008 x1 : 0000000000000000 x0 : ffff800093b67320 [ 76.886285][ T7454] Call trace: [ 76.887020][ T7454] __alloc_frozen_pages_noprof+0xe4/0x578 (P) [ 76.888450][ T7454] alloc_pages_mpol+0x1fc/0x3d0 [ 76.889592][ T7454] alloc_frozen_pages_noprof+0xc4/0x10c [ 76.890928][ T7454] ___kmalloc_large_node+0x74/0x158 [ 76.892194][ T7454] __kmalloc_large_node_noprof+0x2c/0x8c [ 76.893548][ T7454] __kmalloc_noprof+0x3f0/0x6c8 [ 76.894653][ T7454] setup_conf+0x9e4/0x1f38 [ 76.895674][ T7454] raid5_run+0x670/0x1b68 [ 76.896672][ T7454] md_run+0xb10/0x19e8 [ 76.897627][ T7454] do_md_run+0x4c/0x4e4 [ 76.898570][ T7454] md_ioctl+0x1bf8/0x23d4 [ 76.899582][ T7454] blkdev_ioctl+0x574/0x904 [ 76.900626][ T7454] __arm64_sys_ioctl+0x154/0x1cc [ 76.901733][ T7454] invoke_syscall+0x98/0x244 [ 76.902768][ T7454] el0_svc_common+0xec/0x23c [ 76.903816][ T7454] do_el0_svc+0x4c/0x5c [ 76.904730][ T7454] el0_svc+0x60/0x1d8 [ 76.905605][ T7454] el0t_64_sync_handler+0x44/0x104 [ 76.906726][ T7454] el0t_64_sync+0x198/0x19c [ 76.907775][ T7454] irq event stamp: 1794 [ 76.908716][ T7454] hardirqs last enabled at (1793): [] seqcount_lockdep_reader_access+0x68/0xcc [ 76.911100][ T7454] hardirqs last disabled at (1794): [] el1_brk64+0x20/0x54 [ 76.913043][ T7454] softirqs last enabled at (1784): [] handle_softirqs+0xb2c/0xcbc [ 76.915189][ T7454] softirqs last disabled at (871): [] __do_softirq+0x14/0x20 [ 76.917274][ T7454] ---[ end trace 0000000000000000 ]--- [ 76.945846][ T7454] Unable to handle kernel paging request at virtual address dfff800000000005 [ 76.945862][ T7454] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 76.945871][ T7454] Mem abort info: [ 76.945874][ T7454] ESR = 0x0000000096000005 [ 76.945879][ T7454] EC = 0x25: DABT (current EL), IL = 32 bits [ 76.945885][ T7454] SET = 0, FnV = 0 [ 76.945889][ T7454] EA = 0, S1PTW = 0 [ 76.945893][ T7454] FSC = 0x05: level 1 translation fault [ 76.945897][ T7454] Data abort info: [ 76.945900][ T7454] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 76.945905][ T7454] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 76.945910][ T7454] GCS = 0, Overlay = 0, DirtyBit = 0 [ 76.945915][ T7454] [dfff800000000005] address between user and kernel address ranges [ 76.945997][ T7454] Internal error: Oops: 0000000096000005 [#1] SMP [ 76.963939][ T7454] Modules linked in: [ 76.964857][ T7454] CPU: 0 UID: 0 PID: 7454 Comm: syz.0.573 Tainted: G W L syzkaller #0 PREEMPT [ 76.967216][ T7454] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 76.968401][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 76.970678][ T7454] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 76.972436][ T7454] pc : free_conf+0x88/0x540 [ 76.973437][ T7454] lr : free_conf+0x34/0x540 [ 76.974486][ T7454] sp : ffff800093b67550 [ 76.975457][ T7454] x29: ffff800093b67560 x28: ffff0000cf92e018 x27: ffff70001276cecc [ 76.977351][ T7454] x26: ffff000114e86000 x25: 1fffe000229d0c44 x24: ffff000114e86000 [ 76.979200][ T7454] x23: dfff800000000000 x22: 00000000fffffff4 x21: ffff000114e86660 [ 76.981065][ T7454] x20: 0000000000000028 x19: ffff000114e86000 x18: ffff8001237ae000 [ 76.982959][ T7454] x17: ffff0001acf6ce07 x16: ffff0000d7ac1d94 x15: 0000000000000010 [ 76.984844][ T7454] x14: 0000000000000018 x13: 0000000000000005 x12: 0000000000000000 [ 76.986650][ T7454] x11: 0000000000000000 x10: 0000000000080000 x9 : 000000000001af5d [ 76.988516][ T7454] x8 : 0000000000000005 x7 : 0000000000000000 x6 : 0000000000000000 [ 76.990501][ T7454] x5 : 00000000ffffffff x4 : 0000000000000dc0 x3 : 0000000000000000 [ 76.992473][ T7454] x2 : ffffffffffffffff x1 : ffff0000d7ac1d80 x0 : 0000000000000001 [ 76.994469][ T7454] Call trace: [ 76.995281][ T7454] free_conf+0x88/0x540 (P) [ 76.996333][ T7454] setup_conf+0xb0c/0x1f38 [ 76.997357][ T7454] raid5_run+0x670/0x1b68 [ 76.998370][ T7454] md_run+0xb10/0x19e8 [ 76.999309][ T7454] do_md_run+0x4c/0x4e4 [ 77.000258][ T7454] md_ioctl+0x1bf8/0x23d4 [ 77.001258][ T7454] blkdev_ioctl+0x574/0x904 [ 77.002310][ T7454] __arm64_sys_ioctl+0x154/0x1cc [ 77.003452][ T7454] invoke_syscall+0x98/0x244 [ 77.004527][ T7454] el0_svc_common+0xec/0x23c [ 77.005502][ T7454] do_el0_svc+0x4c/0x5c [ 77.006419][ T7454] el0_svc+0x60/0x1d8 [ 77.007334][ T7454] el0t_64_sync_handler+0x44/0x104 [ 77.008476][ T7454] el0t_64_sync+0x198/0x19c [ 77.009519][ T7454] Code: 9730d23e f9400288 9100a114 d343fe88 (38776908) [ 77.011067][ T7454] ---[ end trace 0000000000000000 ]--- [ 77.380009][ T7454] Kernel panic - not syncing: Oops: Fatal exception [ 77.381368][ T7454] SMP: stopping secondary CPUs [ 77.382335][ T7454] Kernel Offset: disabled [ 77.383207][ T7454] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 77.384610][ T7454] Memory Limit: none [ 77.732602][ T7454] Rebooting in 86400 seconds..