last executing test programs: 7m15.844339632s ago: executing program 2 (id=170): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x2, 0x4, 0x5, 0x5, 0xc, 0x1000, 0x8000, 0x684}, 0x20) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x80) 7m14.749703879s ago: executing program 2 (id=174): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="f40000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000090000d"], 0xf4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f20000000000a01010000000000000000050000000900010073797a31000000002c0000000c0a0103000000000000100005000000040003800900010073797a3100000000080004"], 0xd0}}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000020000680080001"], 0x84}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r4 = socket$inet6(0xa, 0x0, 0x8) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000080)={'dvmrp0\x00', 0x1}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079107a00000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7m12.368315999s ago: executing program 2 (id=181): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x301100, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000025c0)={0x14, 0x32, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42004}, 0x0) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140), 0xff}) (async) r3 = socket(0x29, 0x80805, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x200440) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x90f223c6a909995a, 0x1, {0x9, 0xb1a, 0x8, 0x2}}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071183b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="4b0033008000e100ffffffffffff080211"], 0x68}, 0x1, 0x0, 0x0, 0x8014}, 0x0) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc038563b, &(0x7f0000000080)={0x0, 0x2, @start={0x2}}) 7m9.241384178s ago: executing program 0 (id=184): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x8, @loopback, 0x3}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x7c, 0x0, 0xa, 0x402, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0xd, 0x6, "51a925ce87882aeb6c"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x36, 0x6, "76024e16e2e45236f9c086575d580319596aea90f7f62e035d0df62d15ebb6ce808bee7052ae02536cd41ba944ffbf03fe24"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x50, 0x5, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x1a8, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0xb1, 0xc, "d8a83a7452b874c3b27983038abf905c86b3fc5b8468f97a3e049597151dac25b11cab50f4bfc60eaa5600b705b31e1a019cf0a2b83e6e9a17a3c1dcf71ccbfbfa646a5caddd353fbe90b5a4858018b3dcd02b2d7992d3f0c7fb186459f4ce13da49274afcd46df0c7fa474d71386cca9a10540b66b2e7a6ea790cca498325c5a5642ff9ddc1fe5787d72d1181e0d84cd87bb31babaf7139369bb88d716959da67e46bd18f404727042867efca"}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x620fe870}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_USERDATA={0x76, 0xc, "561a3251152522cdef43ae4fa7d1ab654b55f1972022bc973a89adcfdf7ac24bf086c7d5eee0500e5f9b896fe5825efb5f52ebfe70c8c2f006182a9f05582a0a4b2461502a15b99a14885f14c94d2bd32dee33d27b0bfc93b53d2a7eb53296ebd2abc0ae606e963ecb9c263581fc15a8ba9c"}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x32c}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2caee1e21be400dc72ef74f747798210", 0x10}], 0x1, 0x0, 0x0, 0x2c}, 0x200480c4) 7m8.277629708s ago: executing program 2 (id=186): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xe000, 0x3}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x200, 0xa6, &(0x7f0000000140)=""/166, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xc, 0x3, 0x10000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x5, 0x5, 0x7}, {0x5, 0x1, 0x10, 0x7}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r3, 0x0, 0x8b, 0x1000, &(0x7f0000000500)="eb134411b440191d2b3badd9f5ef7ec3359ee7ec66719c6b3c8e199fb4025c4c383703f6335af921c0181cc7fbce42e0bf701a30929dff66c2badfa6e97aaa142e9f8ca028d5638e581fef614e80495f50a8f3499c25961b25ef11126e73811dfb8cb9cb78c0295256fdfc973f093787630711d2a3d755de6f2530607776043d9aa55e80c7131ffe6eb872", &(0x7f00000005c0)=""/4096, 0x9, 0x0, 0x8, 0xfb, &(0x7f00000015c0)="c28434d7457c5341", &(0x7f0000001600)="274c10e06ae5e4b2a5d4aba3ed9c743e2218e3b996957e895a21931c0370c9f6ac9bf354178c8b765ab00943e15f00c23f7ceb7c604c5761969fce6e1a9b2f1f5a9830df1da2e5ba3b5227357f15e29d7019c28d860fc288255f052da3c6c8b3ee3f962c52f74ddb4492c038578c5f564c1cd3b4695c6de5a52d8c26e8f4f9606f269a7813b25de2fa5f2b164be5164d57499fae435d95f1f1d7190a30ada71021ae70baded6906262524e0f0c6483d28296683aea58f9a069c86e224f1c2a427e887a35206bf7737abf16a2384480eb858685faf2a33de72da419caee708c7047634849baf0fa690ae881beddcd850b3c7bdbc60b0582951ee847", 0x0, 0x0, 0x101}, 0x50) 7m6.880552313s ago: executing program 32 (id=185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007e05fdff0503000003000000fcffffff05010905a10105091901290a150005017501950a8102950175068103c0"], 0x135) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000302000010"], 0x0) write$UHID_INPUT2(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\f\x00\x00\x00g\x00!'], 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="757466383d302c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c757466383d312c73686f72746e616d653d77696e39352c726f6469722c6e66733d6e6f7374616c655f726f2c726f6469722c757466383d312c73686f72746e616d653d77696e6e742c636865636b3d72656c617865642c00c63b831754d4eeec4cf38c28cf1e3409b9950bbab09abe8d407d1c7c935e034461a37ac3113829124efad15a202673b20ad011cb0f0cedb0cef9f6ec5e2634db26ef8581fd506844d0133ac021c0172b4b36a109949512e8dc6a8c7d603e3ef3cd57451eaee1b0e4804b9ea88fcad7afb59594dcfeaf8d34935fa0e54a36c57d964429e7ec869287810e5d97759017ace0c3f5"], 0x6, 0x2c3, &(0x7f0000000900)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000016c0)={&(0x7f0000000480)={0x1230, 0x12, 0x400, 0x70bd2a, 0x25dfdbfc, {0xb, 0x3c, 0x7, 0x5, {0x4e23, 0x4e20, [0x3, 0x0, 0x8, 0x4], [0x3, 0x2b7, 0x400, 0xfff], 0x0, [0x2, 0x10]}, 0xe4b1, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x43, 0x1, "4a5b4e260128b399ea29c5a006341076485463bf4b8e2e65ffac3ddce16fe2c3df68badd6cc1cb2f7a2aaef70d75326a3a7e76213d534c42effe51917a09f7"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xe, 0x1, "e0b5a90a071e3c7e230e"}, @INET_DIAG_REQ_BYTECODE={0x82, 0x1, "f6d7dacfe5c8731bceaa90ae91c94c5401e31858b451df3b4724e064039e085fb2caed6bb0742e55d517bb36e381bfcc2dfa93c4bc8d759c53a69e992a8f9588c4994851c841f3c8d5ed40dcc2a8e69f4d3903af77ab2bf8b0d4b7aa98b1d4befa397a33b4fafb1676aa9395032097b0104ba3835d1ce5ef2c6c251f8e58"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "2f25ecd443cd4763db8cf69378e49ffaebe8d7f2576f9d7258c3bef9d722b5eba2a29a8caf1a2080ceafa21edf7847f7dd5c60ee3c2bc51fd637d86aeed9229dc1c8e8a6af595b0230f844fefa03ada35d207ee7a0079ba66998680ac6c159edf0976186dafe3204f24c0a3c2234d41f9d7a85a2963dc613adce6cc8674ee9411b506eb9f08269f92e3848b8af1ea0709c4c66770d4a39a9342c2b158984bf72e036e5b23f7a4dc380ff9dad892ffae3b804696df3abf1766ffaafe3906d9a67ae74"}, @INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "5f354a8e0fc21baa9f8b1a3d4f31e6e3c157074cd887f2645d0ffb20a376b95b0f0ddf7448ea3f03fc0b9f68234684a259f07fc876df5dace6af"}]}, 0x1230}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) mknodat$loop(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xc000, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3, 0x80000002, 0x2, 0x8000000000000000, 0xc}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r5, 0xb) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r4}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) 7m6.7472145s ago: executing program 0 (id=189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xf36, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000001300000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 7m6.69013364s ago: executing program 2 (id=191): clock_nanosleep(0xe3e5dcf198c9fd6f, 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_clone(0xa80000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() kcmp(r2, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x309, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004885}, 0x8854) 7m4.837014335s ago: executing program 0 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'BTRR'}]}, 0x10) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './sys/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r5) process_madvise(r5, &(0x7f0000000640)=[{&(0x7f0000000340)="e62e984c530a9ae542f7199a36222caa014ce6476a5c254178e06c449ed534e56a656140e09a5475c0095287b57f59494d223121b431dc7a4f853b6a3ab1c3524b5c870c34d299641e0dc80fcb2213b6d8b3c18e9a9e02c54b1f037475a695fa1fa1a70ee981d5734065b9ceb683131d607f91a09566b1ae22692d62e0a9cbc0d1b8a90f7793a3df687be012301c707376581598abb30d5ad2945b6905592c9f9342a2f7927a23fb8882d3bd6ff8945b6a02d48842a97b44aacf1a9b", 0xbc}, {&(0x7f0000000540)="ee74dbc579a04748f74f715eb4351f652441318c4f93b6c66d7deffa26618eead356bd53d6416058195c6d34905d9b3403ce53fb25b3c8fa1b9da849826e048b35c9def78fca095be9487da6ad9ad67d86921796967b30d58ed29cd8e8e7d0ae38179f8bd9eb0e8aa349b8b7f61792cd28872f5c65d6f9b96f849f393a0c59ffccd05d08c81e0cb075e972dc570d90542789948b95855ada5ead7e45a8a772f25942e564a6c72e4212fb59b6580be6f8b6cfdb367f49d0a9eda4f8a1d639888886c10c8e8a8c6f5ddbd4ae7a4e4683dcaa175f3e10bdb028fc92fa86321a960cca467db0a35f74f5158c83536b56540baba596320dc3160fd6b2d49543a3", 0xfe}], 0x2, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r6, 0x5608) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x48441, 0x2) write$P9_RLINK(r8, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 7m3.520113274s ago: executing program 2 (id=194): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="f40000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000090000d"], 0xf4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f20000000000a01010000000000000000050000000900010073797a31000000002c0000000c0a0103000000000000100005000000040003800900010073797a3100000000080004"], 0xd0}}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000020000680080001"], 0x84}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000080)={'dvmrp0\x00', 0x1}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079107a00000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f00000093c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m59.818865297s ago: executing program 0 (id=197): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x34, 0x12, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0xce, 0x0, 0x0, @u64}]}, @nested={0x14, 0x2e, 0x0, 0x1, [@typed={0xd, 0x106, 0x0, 0x0, @str='/dev/kvm\x00'}]}]}, 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8007, 0x0, 0x0, 0x0, 0x1000000b}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000100000000300000a6e000000", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000100000000300000a6e000000", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040)=0x312, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080)=0x8001, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 6m56.025440008s ago: executing program 0 (id=200): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000001705000008004ef02d3501000000000095000000000000006916980000000000bf67000000000000350604000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c0acd5db6538824c600d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cf6e3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000000000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a511007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 6m52.105971143s ago: executing program 0 (id=203): io_uring_setup(0x40e1, &(0x7f0000000040)={0x0, 0x9e81, 0x8, 0x3, 0x239}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r2, 0x25, 0x2}, 0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r2, 0x25, 0x2}, 0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) openat$comedi(0xffffffffffffff9c, 0x0, 0x2080, 0x0) (async) openat$comedi(0xffffffffffffff9c, 0x0, 0x2080, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000043390000000000000000000000000000fdfeb6a84308a28af19db9af37d783be9b41e5dfd54d8410759a203a7c408ebe65b22a2d008ea6b804b66ee7d8266fe98343e7b2e74a9a92eb6b93f621f818e51517a797fdb0f1aea94875609578b3162a792d63d6"], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000043390000000000000000000000000000fdfeb6a84308a28af19db9af37d783be9b41e5dfd54d8410759a203a7c408ebe65b22a2d008ea6b804b66ee7d8266fe98343e7b2e74a9a92eb6b93f621f818e51517a797fdb0f1aea94875609578b3162a792d63d6"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x9, 0xff, 0xfffff024}, {0x20, 0x0, 0x4b, 0xfffff038}, {0x6, 0xfe, 0xd, 0x2000100}]}, 0x10) sendmmsg(r7, &(0x7f0000001c00), 0x400000000000159, 0x40840) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_emit_vhci(0x0, 0x17) (async) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x90}, {0x3}}}}, 0xd) 6m50.963018077s ago: executing program 33 (id=203): io_uring_setup(0x40e1, &(0x7f0000000040)={0x0, 0x9e81, 0x8, 0x3, 0x239}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r2, 0x25, 0x2}, 0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r2, 0x25, 0x2}, 0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) openat$comedi(0xffffffffffffff9c, 0x0, 0x2080, 0x0) (async) openat$comedi(0xffffffffffffff9c, 0x0, 0x2080, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000043390000000000000000000000000000fdfeb6a84308a28af19db9af37d783be9b41e5dfd54d8410759a203a7c408ebe65b22a2d008ea6b804b66ee7d8266fe98343e7b2e74a9a92eb6b93f621f818e51517a797fdb0f1aea94875609578b3162a792d63d6"], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000043390000000000000000000000000000fdfeb6a84308a28af19db9af37d783be9b41e5dfd54d8410759a203a7c408ebe65b22a2d008ea6b804b66ee7d8266fe98343e7b2e74a9a92eb6b93f621f818e51517a797fdb0f1aea94875609578b3162a792d63d6"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x9, 0xff, 0xfffff024}, {0x20, 0x0, 0x4b, 0xfffff038}, {0x6, 0xfe, 0xd, 0x2000100}]}, 0x10) sendmmsg(r7, &(0x7f0000001c00), 0x400000000000159, 0x40840) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_emit_vhci(0x0, 0x17) (async) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x90}, {0x3}}}}, 0xd) 6m48.025327956s ago: executing program 34 (id=194): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="f40000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000090000d"], 0xf4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f20000000000a01010000000000000000050000000900010073797a31000000002c0000000c0a0103000000000000100005000000040003800900010073797a3100000000080004"], 0xd0}}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000020000680080001"], 0x84}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000080)={'dvmrp0\x00', 0x1}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079107a00000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f00000093c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m11.631977492s ago: executing program 6 (id=205): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00', 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x14) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz0\x00', {0x1, 0x200, 0x1, 0x1}, 0x1, [0xfa, 0x21, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x401], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) pwrite64(r4, &(0x7f0000000040)='{', 0x1, 0x8001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (rerun: 64) chdir(&(0x7f0000000200)='./file0\x00') (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) (rerun: 32) lseek(r5, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r4, 0x0) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r6, 0x0) ioctl$SIOCX25SDTEFACILITIES(r6, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xbf, 0x84, 0x7, 0x22, 0x80, "e758cae9ffed10000000b24000", "39e8000000001e00"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="040100001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000d400128009000100766c616e00000000c400028006000100020000000600050088a800000c0002000b0000000700000006000500810000000600010003000000580003802efe01000a000000080000000c000100ff000000070000000c00010080000000000100000c0001000200000010ce00000c000100ff010000090000000c00010083020000130000000c000100f44b0000000200000600010003000000340004800c00010007000000000000000c00010006000000090000000c000100ffff0000ff7fffff0c000100000001000900040008000500", @ANYRES32=r1], 0x104}}, 0x0) (async, rerun: 32) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) 6m11.608790341s ago: executing program 5 (id=251): r0 = socket$netlink(0x10, 0x3, 0xe) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={{0x14, 0x3eb, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x3f5}}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@nolazytime}, {@usrquota}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$sock(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80), 0x19c}, 0xf225ff1a574978fc) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000300), 0x4) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[], 0xfdef) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6m7.039855748s ago: executing program 5 (id=257): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="f40000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000090000d"], 0xf4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f20000000000a01010000000000000000050000000900010073797a31000000002c0000000c0a0103000000000000100005000000040003800900010073797a3100000000080004"], 0xd0}}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000020000680080001"], 0x84}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000093c0)={0x0, 0x0, 0x0}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m6.060391443s ago: executing program 6 (id=259): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB="d8000000", @ANYBLOB="e84bc269d49b54f7da0c55b402a3d2dd31d72a1e47d55fd47c3a3f01527c6bb3aa90ba28c2e49c78dde1331d9c1fbcaad3723d1cfe76a3ef145dfffdd96885c253639b0e5265b13b9fc7083cce32d5d73278dc2984bbfc1fc916e9d109e2369a2f9719810ce9b32832da92555b7df7144dc90894cd5bad9b3dbb7f8a8f4c6a5e8fd917e15e7a44bacbc42c39c79b905e3b171044fde2a92eef2013d0a6d6db859c40667b2a42e7ade7e9df3d2fcafbf1b36cfb91e14f0d652b37cf98e43b1ad91346b008189794cbe317a863a69a72b7589f3c596bdce44c0218858479687423541772d9be010c2407", @ANYBLOB="0100000000000000000001000000080001000000c4000400048008000c8004000b800800020001000000a80008801c0007800800050000000000080006000000000008000500000000002400078008000500000000000800050000000000080005000000000008000500000000000400078014000780080006001b00000008000500000000004c000780080005000000000008000500000000000800050000ffffff"], 0xd8}}, 0x0) 6m4.359967348s ago: executing program 5 (id=262): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r1}) socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x140031, &(0x7f0000000440)={[{@uni_xlate}, {@rodir}, {@shortname_win95}, {}, {@utf8}, {@rodir}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@rodir}, {@fat=@check_strict}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@shortname_winnt}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x7, 0x2a6, &(0x7f0000000740)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89fe, &(0x7f0000000300)={'batadv_slave_1\x00', @broadcast}) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000180)='./bus\x00', 0x3004000, &(0x7f0000000340)={[], [{@uid_gt={'uid>', r3}}]}, 0x2, 0x7ba, &(0x7f0000000b40)="$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") clock_adjtime(0x0, &(0x7f0000000000)={0x3, 0x1, 0x394a, 0x5b, 0x80, 0x80, 0x1, 0x9, 0x7, 0x7c, 0x2, 0x3, 0x0, 0xa, 0x1, 0x1, 0x8, 0x2, 0x5, 0x1, 0x6, 0x10, 0xffff, 0x6, 0x400, 0x7}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) 6m4.020265165s ago: executing program 6 (id=263): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) migrate_pages(0x0, 0x2, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x9) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x20}, 0x50) syz_emit_ethernet(0x10ca, &(0x7f0000000840)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @val={@void}, {@mpls_uc={0x8847, {[{0x3ff}, {0xb}, {0x7f}, {}, {0x400, 0x0, 0x1}, {0x9}, {0x1}, {0x1, 0x0, 0x1}, {0x2}], @ipv4=@generic={{0x25, 0x4, 0x1, 0x6, 0x1094, 0x64, 0x0, 0xc, 0xf6, 0x0, @local, @empty, {[@ssrr={0x89, 0x1b, 0x9c, [@empty, @local, @rand_addr=0x64010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x640100ff]}, @timestamp_prespec={0x44, 0x3c, 0x2b, 0x3, 0x1, [{@multicast1, 0xffffffff}, {@remote, 0x9}, {@empty, 0xd}, {@rand_addr=0x64010101, 0x80000001}, {@loopback, 0xaf0}, {@loopback, 0x1000}, {@rand_addr=0x64010101, 0x3}]}, @ssrr={0x89, 0x13, 0x56, [@remote, @local, @empty, @empty]}, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0xf, "01dd50eb0dc503b7f820ce1582"}]}}, "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"}}}}}, 0x0) 6m3.48410178s ago: executing program 5 (id=266): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) socket(0x29, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@nodiscard}, {@usrquota}]}, 0xfe, 0x55d, &(0x7f00000003c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x42, 0x1b6) pwrite64(r1, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x100000000, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000000100)='match_busid\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='del 1-1\x00', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/loop0/loop/backing_file\x00', 0x0, 0x0) read(r5, &(0x7f0000000300)=""/4096, 0x1000) mount$nfs4(&(0x7f0000000f00)='127.0.0.1:/\x00', &(0x7f0000000e00)='./mnt\x00', &(0x7f0000001000), 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,noresvport']) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x3}) r6 = syz_open_dev$video(&(0x7f0000000240), 0x8, 0x8000) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f0000000280)=0xffff) 6m2.571936399s ago: executing program 5 (id=269): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m2.571330072s ago: executing program 6 (id=270): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c0000000100000002"], 0x3414c0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x19, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x34, r5, 0x1, 0x0, 0x25dfdbfc, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14001}, 0x20048084) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x8000) 6m1.569561304s ago: executing program 35 (id=270): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c0000000100000002"], 0x3414c0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x19, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x34, r5, 0x1, 0x0, 0x25dfdbfc, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14001}, 0x20048084) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x8000) 6m1.077927063s ago: executing program 5 (id=276): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) 6m0.11597065s ago: executing program 36 (id=276): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) 5m15.083860364s ago: executing program 1 (id=362): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1a10c10, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0xfa, 0x2cf, &(0x7f00000001c0)="$eJzs3b9rJHUUAPA3+ysbLXYRG0VwQAurcLG1ySoniKmUFdTGxcuB7IaDHCxcBHNX3V9gKf4btnbW/geCrWB3V0RGZmdmf2XnTEhcJXw+TV7mfd93vtk3bKp9+9Ubx+N7D5J48uy36HaTaBzEQTxPoh+NqDyOVgAAt8fzLIs/s4hoF78na/lGbWWrPgUA/K8V//8L//VZAIDt+PTzLz4eHB7e/SRNu/Fa7+l0mETE8dPpsMgP7sc3MYmjuBO9OI/I5or4w48O70YrzfXj7eOz6XC6sv/gj9id1e9HL/qb6/fTQlk/jMh/tuOlSGNwv11t1YtXN9e/u6E+hp14562l8+9FL379Oh7EJO5FXruo/24/TT/Ivn/27Zf5bfL6pBHDndm60m5E1txaUwAAAAAAAAAAAAAAAAAAAAAAuPX20jQpxvfM5vfkl8r5O83zWX4vrfRX5/MU9fN5wcV8oCzKET1nWfxQzde5k6ZpVi5c1Lfi9ZYvFgAAAAAAAAAAAAAAAAAAAIDcw0en49FkcnRy7aA5Hk2qaQDVx/rna5K40oYHS1fejNPxqLm+4SLYqU+tB8vTBvKzvnBxtFqxOdUut3h0Gv2oWXOFIH7ezc9Ts+bH8mZX33ln0dzPyvKqMTfQ7kXwyvvzE6ZlqnqRx6Pkn+7VrRr303KqE5c+RpKsXJn1dnJ0ks0eifNstafdmhezcwOvRv6Mdl7emPory7LL7fPe70WPyivJbMTG5Y7RLoPap6V7sRe/1G9Y+5bRvM77DQAAAAAAAAAAAAAAAAAAUG/1g9NrnrywtPGvHQoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtmzx/f9V0I2IPEjiQqoKzsriDan1oBMnDy/e9fG2/0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuub8DAAD//9B8QGU=") setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x4006, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}, 0x0, 0x0, 0x16, 0x0, "024c08f6beaae211e04128017b8f9720fc434ce01e58499892b786263c721a4dd042fac0c78d10b9206d1cf9577ea4d8b709afd0a6d76f775344852e83a4fab66ac4883fbf7d17e0d8245a4aa8714ae3"}, 0xd8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x8042, 0x90) 5m14.791914479s ago: executing program 1 (id=365): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) r2 = syz_io_uring_setup(0x970, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, 0x0, 0x40, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'veth1_macvtap\x00', {0x2, 0x0, @remote}}) syz_open_dev$ptys(0xc, 0x3, 0x1) r6 = socket$kcm(0x2b, 0x1, 0x0) close(0x3) socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0xd, 0xfffffffffffffffe, 0x60) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000240)=[0x31, 0x1], 0x2) 5m14.299872542s ago: executing program 1 (id=369): ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000000)) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x56, "acc4ef2de91e3bf28bd9bcdefa77a480bd0fa90b820bf221922d06cd3223119fc6d4474088b4cb1d9f3ed566148b5f1a908cc8a8a8404d4e9abcf0d14b998d4dcd79e9a7b5d64e469472e29106c524834c0b6801c057"}, &(0x7f00000000c0)=0x5e) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}}, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r1, 0x5, 0x2, [0xfffc, 0x8000]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240)={r1, 0x1}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={r2}, 0x8) r3 = dup(r0) sendmsg$nl_route(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_getnetconf={0x1c, 0x52, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x40) r4 = socket(0x1e, 0xa, 0x8df7db14) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, 0xe, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000540)={0x10, 0x0, "1a710673b197d2b13a224a9702364264"}) recvmsg$inet_nvme(r3, &(0x7f0000000740)={&(0x7f0000000580)=@qipcrtr, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)=""/59, 0x3b}, {&(0x7f0000000640)=""/17, 0x11}], 0x2, &(0x7f00000006c0)=""/103, 0x67}, 0x42) mmap$IORING_OFF_SQ_RING(0x0, 0xe12, 0x4, 0x4000010, r3, 0x0) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000780), &(0x7f00000007c0)=0x4) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000800)={r1, 0x9, 0x1b, 0xf30, 0x8dc, 0x3, 0x49f5, 0x7, {r1, @in6={{0xa, 0x4e24, 0x3, @empty, 0x8ba5}}, 0x5, 0x7fff, 0x1, 0x10000, 0x400}}, &(0x7f00000008c0)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000900)={0x9, 0x0, 0x1, 0x80000000, r6}, &(0x7f0000000940)=0x10) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000980), 0x4) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f00000009c0)) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = gettid() ptrace$getregset(0x4204, r7, 0x201, &(0x7f0000000a80)={&(0x7f0000000a00)=""/106, 0x6a}) openat$panthor(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) mkdirat(r3, &(0x7f0000000b00)='./file0\x00', 0x26) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000b40)={r2, 0x8, 0x3, 0xd52b}, &(0x7f0000000b80)=0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c00)={0x254, 0x0, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xab11}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_NAT={0x1f8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x653}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40000) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000f00)=0xf, 0x4) socket$inet(0x2, 0x800, 0x9) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000f40)={r5, @in6={{0xa, 0x4e20, 0x6, @loopback, 0x8}}}, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000)=""/157, &(0x7f00000010c0)=0x9d) 5m12.488251132s ago: executing program 1 (id=372): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x2, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x797}, {}, {}, [@alu={0x7, 0x1, 0xd, 0x5, 0x2, 0x30, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x4d, &(0x7f0000000100)=""/77, 0x0, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000001c0)=[{0x1, 0x3, 0x10, 0x7}, {0x2, 0x5, 0x4, 0x7}, {0x4, 0x1, 0x5, 0x4}, {0x0, 0x2, 0x4, 0x3}], 0x10, 0x3b}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) writev(r3, &(0x7f0000005400)=[{&(0x7f0000005440)="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", 0x1fdc}], 0x1) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r1, r2, 0x4, r3}, 0x10) 5m12.088130248s ago: executing program 1 (id=375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_ext={0x1c, 0x1, &(0x7f0000000040)=@raw=[@generic={0xe2, 0x8, 0x0, 0x9, 0x8001}], &(0x7f0000000080)='GPL\x00', 0x7ff, 0x1000, &(0x7f0000000480)=""/4096, 0x1f00, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x429a, 0xffffffffffffffff, 0x2, &(0x7f00000014c0)=[r0, r0, r0], &(0x7f0000001500)=[{0x2, 0x5, 0x2, 0x8}, {0x4, 0x1, 0xb, 0x4}], 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002800)={r1, 0x0, 0xe6, 0x9f, &(0x7f0000001600)="25d763d73b1eeaf876d3398da180f3badb8b2a179e2a5aae9fbeb1533059d87eb9decb217edbba37630138f05f571bb2de685e2eee47702ca6cfe88057b15591a348626cc511500debd65f60193a4acd56b6dcd8e26293ae08490751578cf5a96bee7de15288cc15746b7507906bb3b20e527685c62a5049e16eca1b0b0c669ee1c564a70bdd0115184dba138c94782d0bb75498b2c39c07dfcc1134595ea3cec8e3ccd52ae47da6f1e52b98969054aad459a0a411aa80a0529dcd9fbe207ad3c1174e2a1f5c56dc3165bde587555ff2ed12612df4d6bc6e121668e864f29287a46b00424df4", &(0x7f0000001700)=""/159, 0xc7c4, 0x0, 0x2, 0x1000, &(0x7f00000017c0)="d707", &(0x7f0000001800)="8e6cadef0bc72481617e383c73763daeac2bd1e44649da40831a599297bdae671a0ac7bed4760222e8503d005def27ba940768eeef1efcf422fcdac18ee07411ffd439ba5ed2febebdf5d99e3e01f16a17885c7fd494de7bc13e773c4ad879640d1c0181ae5b399c014605eba7789ec265a898f094d4a031dca99b8011940c530689a44dfcb82351d1b8f77072d88f929e495c49cbb669e6a6bd889bf51e89c2cea586642102f948a5326a105320fe60b7c7923bdc3de78213b749de6092d04c09907de2822b87fe2769a1e6ca8555edad70784673f326d06a3fa08f610a20f977446b325c59c541a7aca43f63772da87b7d4bf6f596a9f1670505a7b46533a518b11c00d4bfb965849b79e55c9070223c7cbe1d5843c8c93e2797fc1bfcdc825e95f0a6498bf2f95e717aec627e80d4eb81deb8cab19c72e5d5c4ba7afac97e46798f819e4ce0f09a688e78ce77cf5749f25d20642275767730ab793b4fe6b4299efdd6febbbab6de98799526434e4d9e9bbd81756837c5c619e42f4555175c74b9d9f2c9138e7efdfe28763a48f80e8bf6e9fb68af968cb0ffa63ee19f7e5f7a1ea10d9f5d5ab249128399ec020a60222ebec0aeef59b0247e14cca401284868091e1f3086a9d600f40ad1ab75073bc11020e995343ada75ac30cc371367c3b7c97c85ad11d5eb34114a7d9077236eb38ad100aa8a657c95405f67db6a57f9bab0d7aa9ac35e8dbd3d30ea245b5619d0b048ac557f94120528ac2465fce20eefdc3ade982c05e0176847f352f82e423f441d45063c79055b8c6550a9d191973dd3e6d14b525508732723b88d759ab4b775c502e875a808809d3f95190d425ec4f7e168e888a3d7f4af6c1ff078fe92e0fb834420d8fb3dd0372a1052d4aa6957665992f7778a20150319421f6d10ab63dca8c810c508b07bd7c0b656ae5af7e2c4b047cd676d5381899de540d20a96e7d69e75a27ed81bf0c04ecd726567177c23af6d1ce88c5af6296abb4442c48df001fab3f4d0b785809b751b66b8c90dc5665e1da1b9850c926c1ca2a4c6a6060d1412473b16f87ba9bcad409b1a39f1133aeff303a4d20baeff50b387d9cb0fc04cebb4e782457145061c907cf5a760aa4e92cad8dd7dbb7ca70f76aabbe9907e6823add2befc6f1fb8f7a8fe73f1a586ab76799fcb7d20b2ffcbc9c8d7790c1489cadb67f543bd0e78ced71dc01ab266d3769ac2a1da2ca3f9829c26892f7fda82143aacb152e1ff8cac881cccfb5d28d0a1cccf12d25aae4b248d8ed2a995eb361e244394ea70f6dabe943de8eb5625f35d4714f1b5a218094f8e2d2606a3ea40e5156a43dde5832d02d83427863335e5ad9d315c34b7b469557511c1b306b23aa524d554ad5374db59b0115c9e3847c9f3c3c6824fb584a812af645ec65404ae61c7cd3845350b39abfe4223262025ae22b2a595c8418e2c569943a67a5c20d1fa9ee25c54f68ac3ccf4b4b0213418de6b1b3a9058466650d8c70683306971cb3728fe12b8f368ac73468a117fa159faedd0bfa8aa30816a36881f21e2a53058ac2104044712601266a6341fd134bcec34649fc68201fb3e62f33274daeb63af80cc1957b4df55501ee89809971f5b1461ac67b191694a467fff804a0e3ba14515a80948172de7149bce5f206ae769d1076a76999c5d9719924b0ad79ca2cceaf545bcbcf9363f589f689b7084ca9acca9ce9e0d1ad195f04cf35133b9662fb829cd752d9905eedf7aa84abb2a0b6d0bcc9d9c6074c3568d1d781d21070114ef920388ce32ca8c445f695ebe55a919b5f52f2e3b8bc6bfa91eecd04cb90ef7c324c4317db1b802dcfac8ffabbdf780cf3f17876eb74b20f47f1036783d123512925fecf216d8e1dc6c3e7fcf91f5cfcfe9d9e1841f4a60854f170d30178cb66c4229e6b72453ed2eaad2a25913f5df204bafc5d60ff612b1c5ee80002e9180a8a01be6e538c80817cfdfe9dad48439f67959a99713308764c6c8a3829915877ec2336b6320b12241ef7e7371f095e618bfb4748669ca2db3de63a5d92c7f7133ad6e5fba56aad666f1b00c258a03764384b7e796e99d30c2f4c5f1cbf05e4cae06567ff0ef195e417869bf4d90e137d184f8e048874850136c087bf45116418c30103186d06a9e15215a6009782cf57237a7f43e714bd4dbd28d8f64613fe9ffca5f720b200ff4c28253135780eef3a46155216534652258520b8ab3b16f3225f4146b35c12b2779a5906dd5b185dc28d558e13ca79b81f48bd09c462495a43196b61126ba2b840b83913b34513c3bd81fe7bfaff9b28044c8ed781cb633c7dabf2d0c1acd99b9dea57a9ea2344770ebc4daac3f2b9f18e0dfd6631944454f701f786c618a7bddfbab51da2223f210754e81dc1594a21b58c90f9f551621ed923ac3b9bb99c9dc945a1283760de96ba5984d35e2bc52e9385a2424e610edb2f70f9d0e9b763eed4eaa8dcf89ea4b73ad5b6d0810593960dd41f9b4ce8832264c798d41f8766f5dece1cb28e5dbbae848f6a6aacee4688430602b32fdac4517eab8f364ee74b1a373446efd142ffb0c93cd686d8dddb50041b5d487ccbeafa61c72d683ba6b23449c009cc6b5bf1f7bffc29175dff818b944f1c2b175d6c5756e2b5e27140633dfe05dea8ef2ef3d4a9960c5f19ded7ad4a2f854def4424800609d50657168fb8f7a0dc8993514360206f1469cc365ed8e38efdcf2dcb46959034ab0cdc3170d7b841f5fa5f40f1315384a01fd8bacea002c13b982f1afd95f529f3538006982d0c62a6c69b24af6423842ff99c8b2ab7aa182da12b2088d910bc17e326daac469b91743fff86b49e42b50b83421ccfea3b4174d0f689f71c936e1c6d128c27b7b4f5cb56aa4636f4ae601ed14aac2a3223b5087a455644dee96b755610179bacf75e16d50bc0022889ba29f8a4d8ca47498393639ed727baa12e94c585da73bf779aa742117aef5802b15521f0b03bb37b1a57c9018cb00abab0ff417454a962ddb9f51cb2aa2cc38ac16209c995fda0fb26ded4fef32d93d14f9d3d011ade13c57f60bab5ee335ed61b6beb69ad68a54e185977c4ba4465bf71b5d7b5eef8c6633c95cb1a36290912f5b2cec745e99010754bca5ca8ab345abef5b27b7b630f683be4eedd32eeab27e3a5ee431b2e9c699b4a2881fe612d001664e1a66626c89201b217c47f9797955e66dbe5e0dc3a5498f7b5d433ebbba03a4bd1abf9da9f94e06f16f335bafe718b7bddc65caddd4455ffb0a81c6510185a9baa9ad739e377c4dd3feb23fd0f286e3ed381d5362f22999055461aab21a9739b13b008c79f21e2508bf2439e6290580f15db296071938725e43aa4ad542f9b9564a957a60a7187dce626bd3b449a152bac2fbaecec78e06d24f776fb9b6f0a07b0f104b034e54216b017eeb3e6c0a7d6661aec6ad22f12c7dd86a0d89525f38397821bd1b27557d4b4d3b6a20451e88903d7477a8d158f67bd18869d7ffbd8d8340f3a83e7a5ff2e3ae9508d44da570e0f815318bd3eed89c432f1c2e4b4fcf9fcf4d2d4163d3624dd89c55e918c14703128054f0a579fd0efe31b0537cc306b331d66c8847c4a8356f6d5653f40404a148c6aa9dd60c0888e21e0dbb02864df0bd45e89ba3feb1c8ae55770889448443825b59ee3fba576085073fd0dbb305165be2e1bd1c0a6d98febfaa8ede6b506ed308ff2f2d0a6c35715e96031c0bcb511a1f2e125775eddd03a61995bb43e7cd010d399d9bf7a02124c6b9c14a01f7b4bb3bb67d43a8fb578e4f9af75559902ac99bb5bf9b878a5a5974fa95515657d5c408eabd27cd664e9586608db567b157447cddf5cccdd10d64183c15cc5512a0d5870ba58371a9c1a57354a18416de2a1c9fcdb8f0e74d41d3e16e45e9477941f2a6f76de3c9fa83fb26650990010d853aa6d78122e86bde987ce3b1e0341fc361010cba246ed5afb260c24182d8f0f3288f6f6e909c814efff9219cffe4602c58fff7a121945bf55c1109bf393ce43222702eae3557a13ae795674709f0929faae5c8e30f5bdcd4a77e81b826c221c37568a58706ac85cadb3d7b659282286a2e70b1f87e34fbdb68cc0e7d1bd4c9a8b7e5fd0257b671f85ec9f71b1a64fd907b75ac7119e9cb9ed46396ab482eee2fd10e9ea9a7ddae4fb83802b58f8e0acc2b5515a8ddc190497f925a249bd148b5875b0f03f69a2ba9f8df5ba2876ebefcedbfdc840d4a9b337937cd85b71e0fd49c8456d3338a43f939152d0b922491ed3b67a31c0c11534fc0be1fdb5066aedaefb9531a5f0f46d2ee08b0b768c83b86a6f8c2ffd69f34b819029d28cf69c45c37d8aade121aeaa7371b38c2ff105c30e6d1cde9cd828030e308ce6e416fc459428a8aca90f9319e25783f540e08dcb47f50b2918297a479d73d7e800951f3a41ffed66d5c0c69da0558d1fd7c2d765399e1f0ed4cafe1f5383290706a97247130d80d870586bcdefa7587100369c487ed9f81a101097f204ed6d1815f9fa880ecd463eb2b714a51a51334725f4e444912b3cbbab41476ad0f63c6e120dffdddd42a8543b249f701a81595772f672363d5b56d6779e4772e50117517e56e3cbf0a265c787cae6bbffa32f81787afd3cb1052019a7b2fe2d148d40c8264234f5b89f0273ea3966cacc3ba547132a83c72e2d9777be7c55ddb584e96651f1a207f0284ed8fcca8ad98d15617697ee20a9ae4427d2e50bcdc901a8cbdbcd8dd3a79d0b489bed11bc35311524db7b6bbb1b7ff39f86d938a7d2cc48b82cf561c8e165b57d1d47aee763df6baee5fb4281455a62cb8fadc31bb1b3bc89a54d66c209ee2094f818acdfde1ef59ce8f54cac47d70287a2f1c607c19ef0435c14ce89ce7f71b4eb7f9a24367b5b51eda72f13e5265b4b773470845f2d027cc5a348112bab1b83bd2663adf51ea8bc8596448492b4d85230377ad2560ceb692b14bf90fdb49d3b8c51eebddd6f7482c8f7ce3ffb734b6977661484d402291dd414575dfa5d9aefca8772a7f9b0a4b899c106fef7bb09f98040034e0eb3f1edfef427a5dc3cdf2dd6e15126f56bab4f01ed3dd170e3fdf08fbd967db26cf9edbcf888eb7a71e3a15b1b993b515a5489850e16acb75e173d096d0246a8412312d9e1e6496a1705353577dd95c6b357442ea9891a2340e1d56a874aea6903f93e3bec878854b2e500acb14c6d9f337738a9964329d0770b0f21d030afde1e9bdc810ff19230607faf20a284efea1922e5943ca299d1c37a9add04e9e1c1aa43436282b66965d503b22147fb1e34b4aa2244887aad4ab9ba2a68781482f17847afb33f088b97a045b0d288a348b20d656c7961b1080fc7acb74b9ce9d0b2bacc9ca8c2e2463ec8b98a2c3e7ab99f35356033d8f8abff158a569b0bcedd78efed02ca97b0e4cc3a635e24a4ef8358900d5950f5666de33793a5a57528c41bf672fcbd68c0f9c21349b5785a94527d559c8b6627e5b59c8fa1fd491e19b65feeab2cafd7331c5556508b2742d3cd12e3e66a25f465ad6787be8ce3a1ddbb5b5b9ccd96105b911a5b8fbac2350224778e657fd61a1d313698eac7f5b88f056f380f52f62779fac6dbbf96fc438c75e0f3337757eccb0d0233fff688594a57bc32c14feaf5f583ff873097e27bec5db12d59393eb5140bc3c890936fe463bcc1e13e4f6fbb5a849b6b5eb2330557f291e71530a4ffdb4052aa27e8a2a89064e7a240b18147fb7f87717c8826d5b1204c1e1cba43c7d6d76c9a1430be9cb2d9e691a1fb138", 0x1, 0x0, 0x7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180a000000000000000000000000000085000000b4b6000025000000ffffff809500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xa3, &(0x7f0000000080)=""/163}, 0x80) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x80000001}, [@map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') read$FUSE(r2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x20, 0x0, 0xabecdc38, 0x2, {{0x24, 0x4, 0x0, 0xa, 0x90, 0x64, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp={0x44, 0xc, 0x2, 0x0, 0x8, [0x1, 0x4]}, @end, @end, @end, @lsrr={0x83, 0x7, 0xb5, [@empty]}, @end, @noop, @timestamp_addr={0x44, 0x1c, 0x6c, 0x1, 0x2, [{@loopback, 0xfffffffd}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x9}]}, @timestamp_prespec={0x44, 0x3c, 0x1b, 0x3, 0xa, [{@private=0xa010101, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010102, 0x4}, {@empty, 0x9}, {@broadcast, 0x3}, {@remote, 0x6}]}, @timestamp_addr={0x44, 0xc, 0x8d, 0x1, 0x9, [{@multicast1, 0x25}]}]}}}}}) fsopen(&(0x7f0000000000)='zonefs\x00', 0xd1bf75c4349bc6d7) 5m11.65410042s ago: executing program 1 (id=377): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m55.940026523s ago: executing program 37 (id=377): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m32.127396313s ago: executing program 7 (id=708): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="1b78", 0x2, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x800}, 0x1c) shutdown(r0, 0x0) 1m31.145229289s ago: executing program 7 (id=712): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f000044f000/0x2000)=nil, 0x2000, 0xa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) recvmsg(0xffffffffffffffff, 0x0, 0x14121) dup(0xffffffffffffffff) timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x36, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) 1m20.745172313s ago: executing program 7 (id=738): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x420000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x1, 0xffffffffffffffff, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x2, 0x800000000f, 0xfffffffffffffffd}) fcntl$lock(r3, 0x7, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x9}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pimreg1\x00', 0x8000}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x30, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgrp2/p0/cpuset.cpus.partition\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='ro', 0x2) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r6, r6, 0x0, 0x2000009) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xd, 0x2, 0xb, 0x2, 0xffffffffffffffff}, @map_fd={0x18, 0x7, 0x1, 0x0, r6}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0xb5, &(0x7f0000000680)=""/181, 0x40f00, 0x14, '\x00', 0x0, 0x17, r1, 0x8, &(0x7f0000000780)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x9, 0x1050, 0xfffffffd}, 0x10, 0x18f30, r2, 0x6, &(0x7f0000000840)=[r3, r5], &(0x7f0000000880)=[{0x4, 0x6, 0x2, 0x4}, {0x2, 0x1, 0x5, 0x1}, {0x0, 0x1, 0xf, 0xb}, {0x4, 0x1, 0x10, 0x7}, {0x0, 0x1, 0x1, 0xb}, {0x1, 0x5, 0xe, 0x6}], 0x10, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfe33) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000240)) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c00000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000fa5e139a83b2ba5e203d1b4389902d49cbadd38238d07f295f8b43d39b11f08effd5ffddb1a8cff047230f135c633dcdcb1b95e988f716bbcb18e2ff4bea42e9b6f5e083f4471ca705fed7a093e45bbd23693c49baf65c035414e4a4461311aaa05a7ac21d9bd259ec9efc1d1eef7059a6fac29b3e2006", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffffffffff7f0000000000000000000000000000000002000000000000000000000000000000ff07000000000000000000000000000000000000000000000000002000000000000100000000000008001f0002000000"], 0xc0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m15.021442092s ago: executing program 7 (id=744): socket(0x10, 0x803, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmmsg$inet(r1, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000500)="6961d1a4ec08e6c05d599b6f11ef49d200f55de08bb97d6b7b97c9d74b21604507d7ad", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000002cc0)="71d2312ea7c5d1a1a6c605778c2317304e5dd26025be58c1961148c2cd96bb6e81e63d", 0x23}], 0x1}}], 0x2, 0x48845) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64], 0x3, 0x232, &(0x7f0000000500)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) close_range(r0, 0xffffffffffffffff, 0x0) 1m11.693889504s ago: executing program 7 (id=747): socket(0x10, 0x803, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmmsg$inet(r1, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000500)="6961d1a4ec08e6c05d599b6f11ef49d200f55de08bb97d6b7b97c9d74b21604507d7ad", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000002cc0)="71d2312ea7c5d1a1a6c605778c2317304e5dd26025be58c1961148c2cd96bb6e81e63d", 0x23}], 0x1}}], 0x2, 0x48845) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64], 0x3, 0x232, &(0x7f0000000500)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) close_range(r0, 0xffffffffffffffff, 0x0) 1m10.00669246s ago: executing program 7 (id=753): socket$alg(0x26, 0x5, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) 1m3.849194001s ago: executing program 3 (id=763): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r4, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f000009f580), 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000002580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)={0x70100, 0x25, 0x5}, 0x18) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001b640)={0x18, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0xd601, 0x9}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000019300), r0) 1m1.380538434s ago: executing program 3 (id=765): mlock(&(0x7f00003b6000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0xc469, 0x0, 0x2, 0x296}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x3, 0x0, 0x8, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20, 0x7800, 0xfffc0000, 0x2}}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x400261f3, 0x0) connect(r3, &(0x7f0000001180)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0xc8, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x852}, {0x8, 0x13, 0x57}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfffc}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40050}, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000008000300245a9dc161fc988b9e27e26b6a19abeeff12d10097547c1edda7ab70bdad3d7d72a95554c52e5d5b2d07ea7ac863747c4f34f20d97e860750e38c420b459c630cf359b6af373b723e7925cb6eb62391d00d55d6f9a5e810ec0ffcb5601e180bebc939c523f30dda3c7db2d19dfb89ea753251174a846497abba27f8dd50fc18b17941fd63b43d68406bae4a36ff3ecfe661e0808bba671476fd95146dff8c64365643332356029b4234fd300000050c642b055100ffd8ad6a46e7e9096cb143156cff7384464b897263496a16ab0fb666ddcbfbd5617144fb987b3e7b032", @ANYRES32=r7, @ANYBLOB="0500330002000000"], 0x24}}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 56.655161487s ago: executing program 3 (id=769): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000027c0)=""/69, 0x45}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) (async) readv(r0, &(0x7f0000000280)=[{&(0x7f00000027c0)=""/69, 0x45}], 0x1) (async) 55.724392403s ago: executing program 3 (id=771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xf36, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000002000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 54.410127544s ago: executing program 38 (id=753): socket$alg(0x26, 0x5, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) 53.800134268s ago: executing program 3 (id=775): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000100)={&(0x7f0000000040)=[{0x7, 0x6, 0x0, 0x10000}, {0xfffffffffffffffe, 0x3a, 0x10, 0x5}, {0x4, 0x4acbe2ef, 0x57d6e905, 0xc0000000}, {0x81, 0x0, 0x7, 0x80000001}, {0xfab, 0x82, 0x2, 0x3}], 0x5, 0x20, 0x1f, 0x3}) r1 = syz_io_uring_complete(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x3ff, 0x1cad, {{0x15, 0x4, 0x0, 0x7, 0x54, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast2, {[@end, @timestamp={0x44, 0x28, 0xad, 0x0, 0x4, [0x9, 0x95, 0x4, 0x8, 0x72, 0x0, 0x3f3, 0x0, 0x400]}, @rr={0x7, 0x17, 0xaf, [@empty, @multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}}}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x480400, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r2, 0x25, 0x2, @val=@iter={&(0x7f0000000280)=@task={r3, 0x0, r4}, 0x10}}, 0x20) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000000300)) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000700)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000740)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000001740)={r6, 0xffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$NILFS_IOCTL_GET_CPSTAT(0xffffffffffffffff, 0x80186e83, &(0x7f0000002740)) sendmsg$nl_route(r1, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x1, 0x0, 0x1}, [@NHA_GROUP_TYPE={0x6}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20d4dc2968c2625a}, 0x8040) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002900)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000028c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000002940)={0x4, 0x8, 0xfa00, {r8, 0x6771}}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002980)={'macvlan0\x00'}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x10, 0x3f5, 0x400, 0x70bd26, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}}, 0x4008001) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x11802280}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)={0x80, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000041) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r7, 0x40089413, &(0x7f0000002c00)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002c40)) r9 = openat(r1, &(0x7f0000002c80)='./file0\x00', 0x121201, 0x22) bind$inet6(r9, &(0x7f0000002cc0)={0xa, 0x4e24, 0x10, @loopback, 0xa49}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002dc0)={&(0x7f0000002d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@enum={0x7, 0x4, 0x0, 0x6, 0x4, [{0x9, 0xa}, {0xc, 0x4}, {0x10, 0x200}, {0x8, 0x7fe210f9}]}]}, {0x0, [0x71, 0x61, 0x2e, 0x61]}}, &(0x7f0000002d80), 0x4a, 0x0, 0x1, 0x6}, 0x28) ioctl$VHOST_SET_VRING_NUM(r9, 0x4008af10, &(0x7f0000002e00)={0x1, 0x6}) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r9, &(0x7f0000002e40)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x7fff, @loopback, 0x2}, r8}}, 0x30) syz_genetlink_get_family_id$nl80211(&(0x7f0000002e80), r7) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000002f40), &(0x7f0000002f80)=0x4) 52.320274992s ago: executing program 3 (id=778): socket$alg(0x26, 0x5, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 47.091855522s ago: executing program 9 (id=784): prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r2, 0xfffffffffffffffe, 0x29) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x1e019f5d, 0x2, 0x1015, 0x4, 0x6, 0x8, 0x2, 0x6}}) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) r4 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r4) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r4) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r4) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r4) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 45.842403268s ago: executing program 9 (id=786): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000000c0)=ANY=[], 0x0, 0x1d3, &(0x7f0000000240)="$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") (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x15) ioctl(r0, 0x40204706, &(0x7f0000000040)="65f06939259b6587f4") (async) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x459, &(0x7f0000000240)="$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") (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103aff00000000000000000000000000000000ff020000000000000000000000000001e6009078010004000000000000000000"], 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x480d0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000140)=""/57, 0x39}], 0x1, 0xdb6, 0x6d) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a340000001f0a070300000000000000000200000908000340000000080900010073797a30000000000c0006"], 0x70}}, 0x0) (async, rerun: 32) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000011146ff90000050000000000080001000000000008004b0028"], 0x28}}, 0x0) 43.732281804s ago: executing program 9 (id=789): r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f0000000080)={0xa, 0x4e1d, 0x80000, @local, 0x4}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x110, r0, 0xd13c6000) 42.701768659s ago: executing program 9 (id=791): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbd9, &(0x7f0000000bc0)="$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") (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) syz_emit_ethernet(0x96, &(0x7f0000000640)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x60, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x60, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x100, @void}, "3da963ef205d600f554e975116dbc1a19f0a1e2e52e5e5675ab0dba6b5cf588e827271e05fcb5b77b820303d48bcc065560fe4bcb5393980c9ac2156ca87724daa6a70f29f1b95ff9efd9b6c50a36073ada6c701"}}}}}}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000007d00000095000000000000003d2d983327ecd378f502000000000000000d7a58519f0e98239580a46b526d6dc3dac4ebeb4477e3c58f3d9d31d354568715feea67d0f95de97268c4daa9047f30e9286c942d8ad5000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_PORT_SELF={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003"], 0x44}}, 0x20008004) (async) r7 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) accept4$unix(r7, 0x0, &(0x7f0000000040), 0x80800) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000740)={[{}, {@nodiscard}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}, {@bh}, {@minixdf}]}, 0xfe, 0x24f, &(0x7f0000000300)="$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") (async) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x40000, 0x0) fcntl$setstatus(r8, 0x4, 0x2800) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000005c0)) (async) pwrite64(0xffffffffffffffff, &(0x7f0000001440)='2', 0x1, 0x8080c61) (async) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) (async) name_to_handle_at(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)=@xfs_parent={0x1c, 0x82, {0xfffffffffffffff7, 0x6, 0x0, 0x7}}, &(0x7f0000000140), 0x200) (async) syz_clone3(&(0x7f00000003c0)={0x100001000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x66) pidfd_send_signal(r9, 0x18, &(0x7f0000000180)={0x18, 0x3, 0x6}, 0x0) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x2, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xb, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x840) 39.24034388s ago: executing program 9 (id=796): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x9) 36.39528092s ago: executing program 39 (id=778): socket$alg(0x26, 0x5, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 35.918759713s ago: executing program 9 (id=799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary='1'}]}]}, 0x2c}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) (async) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x3d) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, r5, 0x2) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000000)) (async) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000000)) 28.107254858s ago: executing program 4 (id=806): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0x2bb5}, {{0x0, 0x0, 0x0}, 0x4f56}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/156, 0x9c}], 0x3}}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x40002000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x1ff, 0x3, 0x1, 0x1}, {0xe096, 0x1, 0x8, 0x7}, {0x3, 0x45, 0xb3, 0x6}, {0x3, 0x10, 0x84, 0xf3}, {0xfffd, 0x5, 0x74, 0x2}, {0x3, 0x6, 0x9, 0x5}]}, 0x10) io_setup(0x7, &(0x7f0000000300)=0x0) pipe2(&(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r2, 0x2, &(0x7f0000000500)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xfffd, r3, 0x0}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) (async) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0x2bb5}, {{0x0, 0x0, 0x0}, 0x4f56}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/156, 0x9c}], 0x3}}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x40002000, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x1ff, 0x3, 0x1, 0x1}, {0xe096, 0x1, 0x8, 0x7}, {0x3, 0x45, 0xb3, 0x6}, {0x3, 0x10, 0x84, 0xf3}, {0xfffd, 0x5, 0x74, 0x2}, {0x3, 0x6, 0x9, 0x5}]}, 0x10) (async) io_setup(0x7, &(0x7f0000000300)) (async) pipe2(&(0x7f0000001b00), 0x0) (async) io_submit(r2, 0x2, &(0x7f0000000500)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xfffd, r3, 0x0}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]) (async) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) (async) 25.942040537s ago: executing program 4 (id=809): socket$alg(0x26, 0x5, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 23.768570038s ago: executing program 4 (id=810): syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ff00f500180600fe800000000000000000000000000034fe8000000000004000000000000000aa00024e22", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="60086cffff90781b00045d9b4ff46d"], 0x0) 22.904129567s ago: executing program 4 (id=811): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f00000004c0)="7fc9c5", 0x0}, 0x20) recvmmsg$unix(r0, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/91, 0x5b}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/85, 0x55}], 0x8}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000000740)=""/233, 0xe9}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/96, 0x60}, {&(0x7f00000018c0)=""/193, 0xc1}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/213, 0xd5}], 0x6}}, {{&(0x7f0000002b40), 0x6e, &(0x7f0000002bc0), 0x0, &(0x7f0000002c00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000002cc0)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002d40)=""/120, 0x78}, {&(0x7f0000002dc0)=""/44, 0x2c}, {&(0x7f0000002e00)=""/252, 0xfc}, {&(0x7f0000002f00)=""/231, 0xe7}, {&(0x7f0000003000)=""/13, 0xd}, {&(0x7f0000003040)=""/123, 0x7b}], 0x6, &(0x7f0000003140)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003180)=""/77, 0x4d}, {&(0x7f0000003200)}, {&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000004240)=""/37, 0x25}, {&(0x7f0000004280)=""/1, 0x1}, {&(0x7f00000042c0)=""/112, 0x70}, {&(0x7f0000004340)=""/66, 0x42}], 0x7, &(0x7f0000004440)}}, {{0x0, 0x0, &(0x7f0000004680)=[{&(0x7f00000044c0)=""/27, 0x1b}, {&(0x7f0000004500)=""/191, 0xbf}, {&(0x7f00000045c0)=""/25, 0x19}, {&(0x7f0000004600)}, {&(0x7f0000004640)=""/25, 0x19}], 0x5, &(0x7f0000004700)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f00000047c0)=@abs, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000004840)=""/149, 0x95}, {&(0x7f0000004900)=""/140, 0x8c}], 0x2, &(0x7f0000004a00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x7, 0x2000, &(0x7f0000004cc0)={0x0, 0x3938700}) write(r0, &(0x7f0000000138)='\t', 0x1) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r6, r8, 0x1, 0x0, @val=@netfilter={0x7, 0x1, 0x7ff}}, 0x20) lsetxattr$security_capability(&(0x7f00000003c0)='./dev/mapper/control\x00', &(0x7f0000002bc0), &(0x7f0000003200)=@v3={0x3000000, [{0x1, 0xfffffffc}, {0x5, 0x4}], r9}, 0x18, 0x2) ioctl$UI_DEV_CREATE(r3, 0x5501) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[r10, r5, r4, r7, r2], 0x5) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000000000000000000006e0100003801") 21.860399362s ago: executing program 4 (id=812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xf36, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000120000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 20.170803147s ago: executing program 40 (id=799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary='1'}]}]}, 0x2c}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) (async) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x3d) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, r5, 0x2) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000000)) (async) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000000)) 19.31676786s ago: executing program 4 (id=815): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7.444220118s ago: executing program 8 (id=818): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="480000001000390400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01990000419a04002800128008000100736974001c00028008000300ac1414bb050004000000000006000f0002000000667e14b38ff429acc341b91183cb12d8003944039f85b52b9a837109612fd4408fdaada610ee890990f54e03113e6414b8d6feaed6d8b84bb06b100255fa1327d73d9703383b70265e16a37131a462899863840340c6a699d2cc5b777c984c39cbbf1d855496aaeb00b3e7f08b3679c349394e907fea263e0949f7336d036470fdbd50da12f6d2250a5b1993d318752cbc8245ed23543ae3e8fe162add3c7513bf7f01dd817864611a9f10a4dc8d13a2f9cf41514ef20e553d2cb9c8bb91d2"], 0x48}, 0x1, 0x0, 0x0, 0x20060094}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x184, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x1, 0x2}, {0x10, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x158, 0x2, [@TCA_BPF_ACT={0x154, 0x1, [@m_xt={0x150, 0xc, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x800, 'security\x00', 0x1, 0x7}}]}, {0xfa, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd06a67777e4d51dfa578f9f5021013f0c9a057b8f82000000000000000000000000007f81188b2cda51230f1a7c6035500fcba2a0c1e8df61c1a24ebdf1b89f29be8825795496195eb50cd86bf94eb7c2f2f3cd2a74145b5e23908868d084fa1aeb5cf35b1d008b539cc91d0cb1e1304dc65d40df4446cb4725e42a047c2fc7ba3b1e387f5628b3c86a55e4972d016f00000378526b1797e51bbca47fa852a731a6d7b7678b453e7c5c4642b54dcee1032681e6853f7c2f7f8aa5667dceac0f2e9f55d94a322ff7f926c35a7b8745989c4b1c88fbc02fb1d34f0dc8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="192c2cf9ffffffdbdf250f000000080081"], 0x1c}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.407385739s ago: executing program 8 (id=819): syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600002c0000000000069078ac1414bbac1414aa44040cc14e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002fffe90780000aada"], 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x1ff, 0xca081) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x2, 0x0, 0x2f, 0x6fd0}) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = socket$inet6(0xa, 0x80001, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000f80)={0x1, {{0xa, 0x1, 0x0, @mcast1, 0xfffffffe}}, {{0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}, 0x200000}}}, 0x108) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r7 = dup3(r5, r6, 0x0) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbd82519000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008800) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x8004551a, 0xffffffffffffffff) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r10, 0xc018620c, &(0x7f0000000340)={0x1}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0xfe, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6, 0x6}]}, 0x10) 4.297375909s ago: executing program 8 (id=820): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x33}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)={0x3, r3}) 3.844650301s ago: executing program 41 (id=815): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.503394135s ago: executing program 8 (id=822): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x81000, 0x0, 0xffffffffffffffff}) (async) futex(&(0x7f000000cffc)=0x1, 0xd, 0x101, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)={{0x107, 0x4, 0xf, 0x138, 0x36b, 0x0, 0x3e, 0x7}, "8f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x721) (async) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x2fffffc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xfffffffffffffe2d, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x1, 0x0, 0x1007, 0x8, 0x10000, 0x6, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b405000000000000611034000000000063012000000000009500000000000000f4c32bf3df05a034da1b7fdcf645f3580fe49be316bdb665f1b42ff7ef474df46c0f44ef6fb5e031f7cfef720e05af49fad256a74dbc05ae220102a88002814a88e2fac93f6bba2d4d44db49d45e449d31fa52c326486bc1c908dd9b372f7a455c9566ed5ee0a65f3909cfe1219a0a38b416dc55927f32ab452e0ccaf193c27af10a12c42ef8a3199d0fad0a9521094cc7acdcdff80231586f968fab531515e8aaaa1d4a225592ebf062bba60775d0b7daa8ba68c0cd0642ce3efca015362a7b63f629629efb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 1.161896701s ago: executing program 8 (id=823): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x0, &(0x7f0000000640), 0x1, 0x5c1, &(0x7f0000000c80)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/57, 0x39}, {&(0x7f0000000280)=""/44, 0x2c}, {0x0, 0x3a}, {&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000600)=""/190, 0xbe}, {&(0x7f0000001800)=""/146, 0x92}, {&(0x7f0000000780)=""/4082, 0xff2}], 0x7) tkill(r0, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) 0s ago: executing program 8 (id=824): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './sys/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r6) process_madvise(r6, &(0x7f0000000640)=[{&(0x7f0000000340)="e62e984c530a9ae542f7199a36222caa014ce6476a5c254178e06c449ed534e56a656140e09a5475c0095287b57f59494d223121b431dc7a4f853b6a3ab1c3524b5c870c34d299641e0dc80fcb2213b6d8b3c18e9a9e02c54b1f037475a695fa1fa1a70ee981d5734065b9ceb683131d607f91a09566b1ae22692d62e0a9cbc0d1b8a90f7793a3df687be012301c707376581598abb30d5ad2945b6905592c9f", 0xa0}, {&(0x7f0000000540)="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", 0xfe}], 0x2, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r7, 0x5608) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r8, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x48441, 0x2) write$P9_RLINK(r9, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) kernel console output (not intermixed with test programs): 6] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.901587][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.901624][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.901659][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.901696][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.901732][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.901769][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.901804][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.901841][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.901885][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.901922][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.901957][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.901994][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902029][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902066][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902105][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902143][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902178][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902215][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902250][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902291][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902329][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902428][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902463][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902501][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902536][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902573][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902617][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902654][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902689][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902727][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902762][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902800][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902838][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902876][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902910][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902949][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.902983][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903021][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903056][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903093][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903129][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903166][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903201][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903238][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903282][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903320][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903358][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903397][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903448][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903485][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903524][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903562][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903597][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903638][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903673][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903710][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903745][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903783][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903817][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903855][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903890][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903927][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.903971][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904008][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904043][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904081][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904116][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904153][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904192][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904229][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904264][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904301][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904340][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904377][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904412][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904450][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904485][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904522][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904557][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904596][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904640][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904677][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904712][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904762][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904797][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904838][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904877][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904914][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904949][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.904987][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905021][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905059][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905094][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905131][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905166][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905204][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905239][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905276][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905319][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905361][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905396][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905434][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905469][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905506][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905544][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905582][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905617][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905654][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905701][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905738][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905773][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905811][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905847][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905884][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905927][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.905966][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906001][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906042][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906076][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906114][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906149][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906187][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906225][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906262][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906297][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906338][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906375][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906412][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906447][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906484][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906519][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906557][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906600][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906638][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906673][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906711][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906746][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906783][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906818][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906855][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906894][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906931][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.906966][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907005][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907040][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907090][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907125][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907165][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907200][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907241][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907284][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907322][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907360][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907398][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907433][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907471][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907506][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907543][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907582][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907619][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907654][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907691][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907727][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907764][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907799][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907836][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907872][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907909][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.907969][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.908007][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.908042][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.908079][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.908115][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.908152][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.908187][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.908226][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.908264][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 237.908301][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.077694][ T6950] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 238.078010][ T6950] EXT4-fs (loop3): orphan cleanup on readonly fs [ 238.093638][ T6950] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 238.184550][ T6950] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 238.400589][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.400675][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.400716][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.400761][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.400798][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.400837][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.400873][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.400912][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.400960][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.400998][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401034][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401072][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401108][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401146][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401182][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401219][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401258][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401296][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401335][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401376][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401412][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401450][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401486][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401523][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401559][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401596][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401641][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401678][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401714][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401767][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401803][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401840][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401875][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401917][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401955][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.401996][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402031][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402069][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402104][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402142][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402176][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402214][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402258][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402296][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402333][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402370][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402421][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402458][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402494][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402531][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402566][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402604][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402643][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402680][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402716][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402753][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402789][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402826][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402861][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402899][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402943][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.402981][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403016][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403054][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403089][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403128][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403163][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403205][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403240][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403277][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403316][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403356][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403391][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403429][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403464][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403501][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403537][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403574][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403618][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403655][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403691][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403728][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403763][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403801][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403837][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403874][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403910][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403947][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.403986][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404024][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404059][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404109][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404144][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404184][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404219][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404256][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404300][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404343][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404377][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404419][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404454][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404491][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404526][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404563][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404599][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404636][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404690][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404727][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404763][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404800][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404835][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404873][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404908][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404945][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.404990][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405027][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405062][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405100][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405135][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405172][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405207][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405245][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405280][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405318][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405361][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405401][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405436][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405473][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405508][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405547][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405591][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405632][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405667][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405704][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405739][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405776][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405812][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405849][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405885][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405922][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405957][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.405995][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406033][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406071][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406106][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406144][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406179][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406216][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406260][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406298][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406335][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406373][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406408][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406457][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406492][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406530][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406565][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406604][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406639][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406676][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406715][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406755][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406790][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406831][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406866][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406903][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406961][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.406998][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407033][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407071][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407107][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407144][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407180][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407217][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407252][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407290][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407327][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407368][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407406][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407444][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407479][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407517][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407552][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407589][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407633][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407671][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407706][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407743][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407778][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407817][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407852][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407890][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407925][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407964][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.407999][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408040][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408079][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408117][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408152][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408189][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408225][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408262][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408306][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408345][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408381][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408418][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408452][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408490][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408525][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408562][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408597][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408635][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408670][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408708][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408746][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408791][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408826][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408863][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408899][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408936][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.408980][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.409019][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.409055][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.409092][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.409128][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.409168][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.409213][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.409254][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.409289][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.409329][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.792158][ T6950] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #16: comm syz.3.448: corrupted xattr block 31: invalid header [ 238.792193][ T6950] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 238.800212][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 238.800228][ C0] EXT4-fs (loop3): initial error at time 238: ext4_xattr_delete_inode:2933: inode 16 [ 238.800256][ C0] EXT4-fs (loop3): last error at time 238: ext4_xattr_delete_inode:2933: inode 16 [ 238.920451][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.920531][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.920571][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.920611][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.920648][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.920687][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.920923][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.920963][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.920998][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.921037][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.921073][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.921111][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.921146][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.921184][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.921219][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.921257][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.921292][ T6926] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 238.966781][ T6950] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 238.966896][ T6950] EXT4-fs (loop3): 1 orphan inode deleted [ 238.969165][ T6950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 239.535137][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.807947][ T6960] loop8: detected capacity change from 0 to 256 [ 240.808869][ T6960] sysfs: Unknown parameter 'rodir' [ 241.487105][ T6793] hsr_slave_0: entered promiscuous mode [ 241.488127][ T6793] hsr_slave_1: entered promiscuous mode [ 241.552911][ T6966] netlink: 88 bytes leftover after parsing attributes in process `syz.3.452'. [ 241.970518][ T6971] loop9: detected capacity change from 0 to 128 [ 242.260989][ T6978] overlay: filesystem on ./bus not supported [ 243.166102][ T6984] netlink: 'syz.7.455': attribute type 12 has an invalid length. [ 243.166129][ T6984] netlink: 132 bytes leftover after parsing attributes in process `syz.7.455'. [ 243.349192][ T6975] loop8: detected capacity change from 0 to 8192 [ 243.475764][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.7.455'. [ 243.486683][ T6975] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 243.539556][ T6983] loop3: detected capacity change from 0 to 4096 [ 243.584224][ T6983] EXT4-fs (loop3): Test dummy encryption mode enabled [ 243.702599][ T6983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.870194][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 243.870221][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 243.870252][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 244.062594][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 244.062618][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 244.800573][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 245.180495][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.939995][ T7018] loop8: detected capacity change from 0 to 8 [ 248.355495][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.7.463'. [ 248.401673][ T7021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.899241][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.899304][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.741820][ T7005] loop3: detected capacity change from 0 to 512 [ 249.819603][ T7005] EXT4-fs (loop3): bad s_min_extra_isize: 65535 [ 249.888033][ T6793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.995764][ T6793] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 249.996552][ T6793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.102913][ T6793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 250.116968][ T6793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.190598][ T6793] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 250.205110][ T6793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.309249][ T6793] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 251.451875][ T6793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.549261][ T6793] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.721958][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.722013][ T5095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.794755][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.794808][ T5095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.910700][ T5079] tipc: Subscription rejected, illegal request [ 253.511505][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 253.760894][ T7052] netlink: 100 bytes leftover after parsing attributes in process `syz.3.470'. [ 253.771056][ T7053] netlink: 100 bytes leftover after parsing attributes in process `syz.3.470'. [ 253.960041][ T4718] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 256.071189][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.474'. [ 256.217171][ T7072] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.036402][ T7081] netlink: 'syz.8.476': attribute type 1 has an invalid length. [ 257.036429][ T7081] netlink: 224 bytes leftover after parsing attributes in process `syz.8.476'. [ 257.304804][ T7077] loop7: detected capacity change from 0 to 8 [ 257.374283][ T6793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.471154][ T7082] syzkaller0: entered promiscuous mode [ 257.471180][ T7082] syzkaller0: entered allmulticast mode [ 260.201343][ T7099] loop8: detected capacity change from 0 to 512 [ 260.600802][ T7105] loop3: detected capacity change from 0 to 1024 [ 260.792287][ T7105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 261.108409][ T7105] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.482: lblock 0 mapped to illegal pblock 0 (length 6) [ 261.140206][ T7105] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 261.140239][ T7105] EXT4-fs (loop3): This should not happen!! Data will be lost [ 261.140239][ T7105] [ 261.195942][ T7105] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #15: comm syz.3.482: lblock 0 mapped to illegal pblock 0 (length 1) [ 261.280097][ T7105] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #15: comm syz.3.482: lblock 0 mapped to illegal pblock 0 (length 1) [ 261.308235][ T7109] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 261.322371][ T6793] veth0_vlan: entered promiscuous mode [ 261.360210][ T7105] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #15: comm syz.3.482: lblock 0 mapped to illegal pblock 0 (length 1) [ 261.371671][ T7105] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #15: comm syz.3.482: lblock 0 mapped to illegal pblock 0 (length 1) [ 261.372829][ T7105] EXT4-fs error (device loop3): ext4_ext_remove_space:2977: inode #15: comm syz.3.482: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 262.042593][ T5089] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 262.042621][ T5089] EXT4-fs (loop3): This should not happen!! Data will be lost [ 262.042621][ T5089] [ 262.042638][ T5089] EXT4-fs (loop3): Total free blocks count 0 [ 262.042650][ T5089] EXT4-fs (loop3): Free/Dirty block details [ 262.042672][ T5089] EXT4-fs (loop3): free_blocks=0 [ 262.042692][ T5089] EXT4-fs (loop3): dirty_blocks=32 [ 262.042704][ T5089] EXT4-fs (loop3): Block reservation details [ 262.253662][ T6793] veth1_vlan: entered promiscuous mode [ 262.577348][ T6793] veth0_macvtap: entered promiscuous mode [ 262.623823][ T6793] veth1_macvtap: entered promiscuous mode [ 262.795200][ T5078] IPVS: starting estimator thread 0... [ 262.805844][ T6793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.845838][ T6793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.880403][ T7128] IPVS: using max 11 ests per chain, 26400 per kthread [ 262.888239][ T1202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.001616][ T7126] loop3: detected capacity change from 0 to 1024 [ 263.073142][ T7130] netlink: 64 bytes leftover after parsing attributes in process `syz.7.488'. [ 263.222250][ T7126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 263.290834][ T5079] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.291176][ T5079] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.381298][ T1202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.534375][ T7134] loop7: detected capacity change from 0 to 1024 [ 263.717757][ T7136] FAULT_INJECTION: forcing a failure. [ 263.717757][ T7136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.717779][ T7136] CPU: 0 UID: 0 PID: 7136 Comm: syz.9.489 Tainted: G L syzkaller #0 PREEMPT [ 263.717793][ T7136] Tainted: [L]=SOFTLOCKUP [ 263.717799][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 263.717805][ T7136] Call trace: [ 263.717810][ T7136] show_stack+0x2c/0x3c (C) [ 263.717831][ T7136] __dump_stack+0x30/0x40 [ 263.717846][ T7136] dump_stack_lvl+0xd8/0x12c [ 263.717860][ T7136] dump_stack+0x1c/0x28 [ 263.717873][ T7136] should_fail_ex+0x41c/0x590 [ 263.717889][ T7136] should_fail+0x14/0x24 [ 263.717903][ T7136] should_fail_usercopy+0x20/0x30 [ 263.717918][ T7136] _inline_copy_from_user+0x3c/0x174 [ 263.717934][ T7136] io_register_zcrx+0x180/0xa64 [ 263.717948][ T7136] __arm64_sys_io_uring_register+0x7f0/0x13fc [ 263.717962][ T7136] invoke_syscall+0x98/0x244 [ 263.717977][ T7136] el0_svc_common+0x19c/0x23c [ 263.717991][ T7136] do_el0_svc+0x4c/0x5c [ 263.718005][ T7136] el0_svc+0x64/0x260 [ 263.718020][ T7136] el0t_64_sync_handler+0x44/0x104 [ 263.718033][ T7136] el0t_64_sync+0x198/0x19c [ 263.747309][ T5087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.747332][ T5087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.773166][ T7134] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.986577][ T5089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.986595][ T5089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.400506][ T7139] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 265.669693][ T7133] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 265.798552][ T7133] EXT4-fs (loop3): Remounting filesystem read-only [ 265.803400][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 266.325879][ T4707] Bluetooth: hci2: command 0x0406 tx timeout [ 266.325934][ T4707] Bluetooth: hci0: command 0x0406 tx timeout [ 267.626315][ T4714] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9 [ 267.626358][ T4714] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 267.666844][ T5813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.895493][ T7153] loop3: detected capacity change from 0 to 1024 [ 267.896356][ T7153] ext4: Unknown parameter ' @_itable' [ 268.663381][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.7.495'. [ 268.700284][ T7165] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.789203][ T4714] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 269.370168][ T7168] loop9: detected capacity change from 0 to 512 [ 269.574066][ T7168] EXT4-fs warning (device loop9): dx_probe:837: inode #2: comm syz.9.496: Unimplemented hash flags: 0x0001 [ 269.574096][ T7168] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.496: Corrupt directory, running e2fsck is recommended [ 269.574847][ T7168] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 269.575180][ T7168] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.496: corrupted in-inode xattr: invalid ea_ino [ 269.575200][ T7168] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 269.575757][ T7168] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.496: couldn't read orphan inode 15 (err -117) [ 269.575776][ T7168] loop9: lost filesystem error report for type 5 error -117 [ 269.579427][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 269.579442][ C0] EXT4-fs (loop9): initial error at time 269: ext4_iget_extra_inode:5210: inode 15 [ 269.579468][ C0] EXT4-fs (loop9): last error at time 269: ext4_orphan_get:1408 [ 269.689691][ T7168] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.269227][ T7177] loop7: detected capacity change from 0 to 1024 [ 270.504820][ T7177] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.625511][ T6215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.827945][ T4718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.869840][ T4718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.888086][ T4718] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.889533][ T4718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.898375][ T4718] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.254851][ T7188] FAULT_INJECTION: forcing a failure. [ 271.254851][ T7188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.254880][ T7188] CPU: 0 UID: 0 PID: 7188 Comm: syz.8.501 Tainted: G L syzkaller #0 PREEMPT [ 271.254894][ T7188] Tainted: [L]=SOFTLOCKUP [ 271.254899][ T7188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 271.254906][ T7188] Call trace: [ 271.254911][ T7188] show_stack+0x2c/0x3c (C) [ 271.254932][ T7188] __dump_stack+0x30/0x40 [ 271.254946][ T7188] dump_stack_lvl+0xd8/0x12c [ 271.254960][ T7188] dump_stack+0x1c/0x28 [ 271.254974][ T7188] should_fail_ex+0x41c/0x590 [ 271.254989][ T7188] should_fail+0x14/0x24 [ 271.255003][ T7188] should_fail_usercopy+0x20/0x30 [ 271.255018][ T7188] _inline_copy_from_user+0x3c/0x174 [ 271.255033][ T7188] io_register_zcrx+0x2a8/0xa64 [ 271.255047][ T7188] __arm64_sys_io_uring_register+0x7f0/0x13fc [ 271.255062][ T7188] invoke_syscall+0x98/0x244 [ 271.255077][ T7188] el0_svc_common+0x19c/0x23c [ 271.255091][ T7188] do_el0_svc+0x4c/0x5c [ 271.255104][ T7188] el0_svc+0x64/0x260 [ 271.255118][ T7188] el0t_64_sync_handler+0x44/0x104 [ 271.255132][ T7188] el0t_64_sync+0x198/0x19c [ 273.059551][ T4718] Bluetooth: hci1: command tx timeout [ 274.035277][ T5075] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.184989][ T5813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.876952][ T4718] Bluetooth: hci1: command tx timeout [ 278.176812][ T4714] Bluetooth: hci1: command tx timeout [ 278.697433][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 278.708989][ T5075] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.043490][ T7220] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 279.885654][ T7182] wg1 speed is unknown, defaulting to 1000 [ 280.141662][ T5075] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.239621][ T4714] Bluetooth: hci1: command tx timeout [ 280.323124][ T7224] loop9: detected capacity change from 0 to 512 [ 280.552508][ T7224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.682839][ T5075] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.877026][ T7225] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.510: bg 0: block 400: padding at end of block bitmap is not set [ 280.900451][ T7225] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 280.930549][ T7225] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #12: comm syz.9.510: missing EA_INODE flag [ 280.958412][ T7225] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.510: error while reading EA inode 12 err=-117 [ 280.968535][ T7225] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #12: comm syz.9.510: missing EA_INODE flag [ 280.988407][ T7225] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.510: error while reading EA inode 12 err=-117 [ 281.278017][ T7241] fuse_uring_cmd: 576 callbacks suppressed [ 281.278037][ T7241] No fuse device found [ 281.278085][ T7241] No fuse device found [ 281.278126][ T7241] No fuse device found [ 281.278167][ T7241] No fuse device found [ 281.278207][ T7241] No fuse device found [ 281.278247][ T7241] No fuse device found [ 281.278287][ T7241] No fuse device found [ 281.278330][ T7241] No fuse device found [ 281.278370][ T7241] No fuse device found [ 281.278409][ T7241] No fuse device found [ 281.954729][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.8.515'. [ 282.505236][ T6215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.524445][ T5075] bridge_slave_1: left allmulticast mode [ 283.524473][ T5075] bridge_slave_1: left promiscuous mode [ 283.524641][ T5075] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.709834][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.9.516'. [ 283.709861][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.9.516'. [ 283.765029][ T5075] bridge_slave_0: left allmulticast mode [ 283.765059][ T5075] bridge_slave_0: left promiscuous mode [ 283.765252][ T5075] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.466420][ T7263] loop8: detected capacity change from 0 to 128 [ 284.553779][ T7237] loop7: detected capacity change from 0 to 512 [ 284.587253][ T7237] EXT4-fs (loop7): bad s_min_extra_isize: 65535 [ 284.657558][ T7263] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 285.078064][ T6197] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 285.102773][ T7271] loop3: detected capacity change from 0 to 256 [ 285.131479][ T7271] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.258752][ T7271] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 285.258775][ T7271] FAT-fs (loop3): Filesystem has been set read-only [ 285.258950][ T7271] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 285.258993][ T7271] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 286.553336][ T5075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.625292][ T5075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.697500][ T7278] loop3: detected capacity change from 0 to 4096 [ 286.721122][ T5075] bond0 (unregistering): Released all slaves [ 286.738813][ T7278] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 286.738833][ T7278] EXT4-fs (loop3): Test dummy encryption mode enabled [ 286.831165][ T7278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.890362][ T7254] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 286.910857][ T7256] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 288.791136][ T7286] loop7: detected capacity change from 0 to 1024 [ 288.792175][ T7286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.792210][ T7286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.792239][ T7286] EXT4-fs: Ignoring removed nobh option [ 290.762386][ T7286] EXT4-fs warning (device loop7): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop7. [ 293.274595][ T7294] loop8: detected capacity change from 0 to 128 [ 293.370541][ T7294] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 293.602945][ T7294] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 293.719724][ T7294] EXT4-fs (loop8): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 294.009926][ T7300] IPv6: addrconf: prefix option has invalid lifetime [ 294.037221][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.074187][ T7298] loop9: detected capacity change from 0 to 512 [ 294.090438][ T7298] ext4: Unknown parameter 'dont_hash' [ 294.344862][ T7306] loop9: detected capacity change from 0 to 128 [ 294.495149][ T7304] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 294.495176][ T7304] FAT-fs (loop9): Filesystem has been set read-only [ 294.932539][ T7311] loop3: detected capacity change from 0 to 8 [ 294.957225][ T7304] batman_adv: batadv0: Adding interface: dummy0 [ 294.957243][ T7304] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.957269][ T7304] batman_adv: batadv0: Interface activated: dummy0 [ 294.958954][ T7182] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.959011][ T7182] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.959216][ T7182] bridge_slave_0: entered allmulticast mode [ 294.973539][ T7182] bridge_slave_0: entered promiscuous mode [ 295.031783][ T7182] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.031836][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.032040][ T7182] bridge_slave_1: entered allmulticast mode [ 295.034113][ T7182] bridge_slave_1: entered promiscuous mode [ 295.636568][ T7182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.765547][ T5075] hsr_slave_0: left promiscuous mode [ 295.851118][ T5075] hsr_slave_1: left promiscuous mode [ 295.852055][ T5075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.852116][ T5075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.950743][ T5075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.950771][ T5075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.992677][ T7316] loop9: detected capacity change from 0 to 8 [ 296.179055][ T5075] veth1_macvtap: left promiscuous mode [ 296.179118][ T5075] veth0_macvtap: left promiscuous mode [ 296.179253][ T5075] veth1_vlan: left promiscuous mode [ 296.180706][ T5075] veth0_vlan: left promiscuous mode [ 296.252179][ T7320] loop3: detected capacity change from 0 to 128 [ 296.299915][ T7320] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 296.449896][ T7320] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 296.994853][ T5087] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 297.271465][ T7326] 9p: Bad value for 'rfdno' [ 297.383379][ T6197] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.798015][ T7333] netlink: 'syz.8.535': attribute type 1 has an invalid length. [ 298.144958][ T7339] loop3: detected capacity change from 0 to 512 [ 298.177976][ T7339] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 298.195679][ T7339] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.538: Allocating blocks 41-42 which overlap fs metadata [ 298.195706][ T7339] loop3: lost filesystem error report for type 5 error -117 [ 298.202290][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 298.202312][ C0] EXT4-fs (loop3): initial error at time 298: ext4_mb_mark_diskspace_used:4223 [ 298.202376][ C0] EXT4-fs (loop3): last error at time 298: ext4_mb_mark_diskspace_used:4223 [ 298.220577][ T7339] EXT4-fs (loop3): Remounting filesystem read-only [ 298.221170][ T7339] Quota error (device loop3): write_blk: dquota write failed [ 298.221186][ T7339] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 298.221371][ T7339] Quota error (device loop3): write_blk: dquota write failed [ 298.221488][ T7339] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 298.221639][ T7339] EXT4-fs (loop3): 1 truncate cleaned up [ 298.260949][ T7339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.051941][ T7348] FAULT_INJECTION: forcing a failure. [ 303.051941][ T7348] name failslab, interval 1, probability 0, space 0, times 0 [ 303.051970][ T7348] CPU: 0 UID: 0 PID: 7348 Comm: syz.9.539 Tainted: G L syzkaller #0 PREEMPT [ 303.051986][ T7348] Tainted: [L]=SOFTLOCKUP [ 303.051992][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 303.052000][ T7348] Call trace: [ 303.052005][ T7348] show_stack+0x2c/0x3c (C) [ 303.052031][ T7348] __dump_stack+0x30/0x40 [ 303.052048][ T7348] dump_stack_lvl+0xd8/0x12c [ 303.052065][ T7348] dump_stack+0x1c/0x28 [ 303.052081][ T7348] should_fail_ex+0x41c/0x590 [ 303.052100][ T7348] should_failslab+0xc4/0x120 [ 303.052118][ T7348] __kmalloc_noprof+0x108/0x6c8 [ 303.052136][ T7348] tomoyo_encode2+0x10c/0x330 [ 303.052153][ T7348] tomoyo_encode+0x34/0x50 [ 303.052169][ T7348] tomoyo_realpath_from_path+0x488/0x4dc [ 303.052186][ T7348] tomoyo_check_open_permission+0x1c4/0x394 [ 303.052202][ T7348] tomoyo_file_open+0x78/0xcc [ 303.052217][ T7348] security_file_open+0xbc/0x258 [ 303.052233][ T7348] do_dentry_open+0x2a8/0xfc0 [ 303.052250][ T7348] vfs_open+0x44/0x2dc [ 303.052266][ T7348] path_openat+0x1084/0x18f4 [ 303.052281][ T7348] do_file_open+0x1c8/0x2e8 [ 303.052296][ T7348] do_sys_openat2+0x114/0x1e8 [ 303.052313][ T7348] do_sys_open+0xb0/0xe0 [ 303.052338][ T7348] __arm64_sys_openat+0xa8/0xc4 [ 303.052358][ T7348] invoke_syscall+0x98/0x244 [ 303.052376][ T7348] el0_svc_common+0x19c/0x23c [ 303.052392][ T7348] do_el0_svc+0x4c/0x5c [ 303.052409][ T7348] el0_svc+0x64/0x260 [ 303.052425][ T7348] el0t_64_sync_handler+0x44/0x104 [ 303.052441][ T7348] el0t_64_sync+0x198/0x19c [ 303.052521][ T7348] ERROR: Out of memory at tomoyo_realpath_from_path. [ 304.011127][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.232658][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.9.540'. [ 304.700404][ T5075] team0 (unregistering): Port device team_slave_1 removed [ 304.838299][ T5075] team0 (unregistering): Port device team_slave_0 removed [ 305.051857][ T7357] loop3: detected capacity change from 0 to 8 [ 309.493940][ T7182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.509223][ T7333] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 310.158134][ T7182] team0: Port device team_slave_0 added [ 310.184371][ T7182] team0: Port device team_slave_1 added [ 310.258573][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.258636][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.410967][ T7368] fuse: Unknown parameter 'group_i00000000000000000000' [ 310.560411][ T7182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.560429][ T7182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.560444][ T7182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.592247][ T7182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.592264][ T7182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.592284][ T7182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.853221][ T7378] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 311.337090][ T7377] loop3: detected capacity change from 0 to 4096 [ 311.465453][ T7182] hsr_slave_0: entered promiscuous mode [ 311.475633][ T7371] netlink: 65047 bytes leftover after parsing attributes in process `syz.9.546'. [ 311.478930][ T7377] EXT4-fs: Ignoring removed nobh option [ 311.483842][ T7182] hsr_slave_1: entered promiscuous mode [ 311.493570][ T7377] EXT4-fs (loop3): Test dummy encryption mode enabled [ 311.565844][ T7377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.127637][ T7391] loop7: detected capacity change from 0 to 512 [ 312.259164][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.548'. [ 312.274246][ T7391] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.460552][ T7391] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 312.556976][ T7398] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 312.964254][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.281640][ T5813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.170159][ T7427] fuse: Unknown parameter 'group_i00000000000000000000' [ 317.343277][ T7430] loop7: detected capacity change from 0 to 128 [ 317.423358][ T7430] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.436760][ T7431] netlink: 64 bytes leftover after parsing attributes in process `syz.9.560'. [ 317.557006][ T7433] loop8: detected capacity change from 0 to 512 [ 317.682320][ T7433] EXT4-fs warning (device loop8): dx_probe:837: inode #2: comm syz.8.562: Unimplemented hash flags: 0x0001 [ 317.682354][ T7433] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.562: Corrupt directory, running e2fsck is recommended [ 317.694983][ T7433] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 317.709452][ T7433] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.562: corrupted in-inode xattr: invalid ea_ino [ 317.709479][ T7433] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 317.710198][ T7433] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.562: couldn't read orphan inode 15 (err -117) [ 317.710221][ T7433] loop8: lost filesystem error report for type 5 error -117 [ 317.715626][ T7433] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.876745][ T7433] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.893551][ T7437] loop9: detected capacity change from 0 to 1024 [ 317.950697][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.7.561'. [ 318.019982][ T7437] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.067530][ T7444] FAULT_INJECTION: forcing a failure. [ 318.067530][ T7444] name failslab, interval 1, probability 0, space 0, times 0 [ 318.067560][ T7444] CPU: 0 UID: 0 PID: 7444 Comm: syz.7.561 Tainted: G L syzkaller #0 PREEMPT [ 318.067575][ T7444] Tainted: [L]=SOFTLOCKUP [ 318.067581][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 318.067589][ T7444] Call trace: [ 318.067594][ T7444] show_stack+0x2c/0x3c (C) [ 318.067618][ T7444] __dump_stack+0x30/0x40 [ 318.067634][ T7444] dump_stack_lvl+0xd8/0x12c [ 318.067651][ T7444] dump_stack+0x1c/0x28 [ 318.067667][ T7444] should_fail_ex+0x41c/0x590 [ 318.067685][ T7444] should_failslab+0xc4/0x120 [ 318.067703][ T7444] __kmalloc_cache_noprof+0x94/0x5fc [ 318.067717][ T7444] sctp_endpoint_new+0xe4/0x860 [ 318.067736][ T7444] sctp_init_sock+0x684/0x11ec [ 318.067753][ T7444] sctp_v6_init_sock+0x20/0x80 [ 318.067770][ T7444] inet6_create+0xb4c/0xfc8 [ 318.067784][ T7444] __sock_create+0x31c/0x670 [ 318.067800][ T7444] __sys_socket_create+0xc0/0x11c [ 318.067814][ T7444] __sys_socket+0x44/0xec [ 318.067828][ T7444] __arm64_sys_socket+0x84/0x9c [ 318.067842][ T7444] invoke_syscall+0x98/0x244 [ 318.067860][ T7444] el0_svc_common+0x19c/0x23c [ 318.067876][ T7444] do_el0_svc+0x4c/0x5c [ 318.067892][ T7444] el0_svc+0x64/0x260 [ 318.067908][ T7444] el0t_64_sync_handler+0x44/0x104 [ 318.067924][ T7444] el0t_64_sync+0x198/0x19c [ 318.164000][ T7433] loop8: detected capacity change from 0 to 256 [ 319.112970][ T5813] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.744565][ T7182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 319.847673][ T7182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 319.848890][ T7182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 319.917031][ T7182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 319.917833][ T7182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 319.961991][ T7182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 319.990188][ T7182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 320.100468][ T7182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 320.809694][ T7456] netlink: 'syz.8.566': attribute type 1 has an invalid length. [ 320.809718][ T7456] netlink: 228 bytes leftover after parsing attributes in process `syz.8.566'. [ 320.850499][ T7182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.260796][ T7182] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.288695][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.288751][ T5088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.313605][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.313658][ T5088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.644485][ T7182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.854885][ T7472] loop7: detected capacity change from 0 to 1024 [ 324.855788][ T7472] EXT4-fs: Ignoring removed nomblk_io_submit option [ 324.938612][ T7472] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 324.955498][ T6215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.070157][ T7483] Soft offlining pfn 0x170a6b at process virtual address 0x20000000 [ 328.083527][ T7483] Memory failure: 0x170a6b: unhandlable page. [ 328.127417][ T7483] Injecting memory failure for pfn 0x166deb at process virtual address 0x20001000 [ 328.128182][ T7483] Memory failure: 0x166deb: unhandlable page. [ 328.128201][ T7483] Memory failure: 0x166deb: recovery action for get hwpoison page: Ignored [ 328.448087][ T7494] fuse: Unknown parameter 'group_i00000000000000000000' [ 328.822297][ T7488] loop9: detected capacity change from 0 to 512 [ 329.195712][ T7488] EXT4-fs (loop9): 1 orphan inode deleted [ 329.197991][ T7488] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.216738][ T5095] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 329.216817][ T5095] EXT4-fs error (device loop9): ext4_release_dquot:7105: comm kworker/u8:34: Failed to release dquot type 1 [ 329.216834][ T5095] loop9: lost filesystem error report for type 5 error -117 [ 330.055674][ T7509] loop8: detected capacity change from 0 to 512 [ 330.186814][ T7509] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 330.190256][ T7509] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.575: invalid indirect mapped block 2683928664 (level 1) [ 330.190282][ T7509] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 330.198370][ T7509] EXT4-fs (loop8): 1 truncate cleaned up [ 330.225993][ T7509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.822608][ T7516] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 1803188595: comm syz.8.575: invalid block [ 332.237583][ T6197] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.856130][ T4714] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 332.997760][ T6215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.249181][ T7525] FAULT_INJECTION: forcing a failure. [ 333.249181][ T7525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.249214][ T7525] CPU: 0 UID: 0 PID: 7525 Comm: syz.3.578 Tainted: G L syzkaller #0 PREEMPT [ 333.249230][ T7525] Tainted: [L]=SOFTLOCKUP [ 333.249236][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 333.249244][ T7525] Call trace: [ 333.249250][ T7525] show_stack+0x2c/0x3c (C) [ 333.249276][ T7525] __dump_stack+0x30/0x40 [ 333.249293][ T7525] dump_stack_lvl+0xd8/0x12c [ 333.249309][ T7525] dump_stack+0x1c/0x28 [ 333.249333][ T7525] should_fail_ex+0x41c/0x590 [ 333.249352][ T7525] should_fail+0x14/0x24 [ 333.249369][ T7525] should_fail_usercopy+0x20/0x30 [ 333.249387][ T7525] _inline_copy_from_user+0x3c/0x3a4 [ 333.249404][ T7525] sk_setsockopt+0x200/0x2658 [ 333.249421][ T7525] sock_setsockopt+0x68/0x80 [ 333.249438][ T7525] do_sock_setsockopt+0x1a0/0x330 [ 333.249453][ T7525] __sys_setsockopt+0x104/0x170 [ 333.249468][ T7525] __arm64_sys_setsockopt+0xc8/0xe4 [ 333.249483][ T7525] invoke_syscall+0x98/0x244 [ 333.249501][ T7525] el0_svc_common+0x19c/0x23c [ 333.249517][ T7525] do_el0_svc+0x4c/0x5c [ 333.249533][ T7525] el0_svc+0x64/0x260 [ 333.249549][ T7525] el0t_64_sync_handler+0x44/0x104 [ 333.249565][ T7525] el0t_64_sync+0x198/0x19c [ 333.440345][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.470062][ T4718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.481447][ T4718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.483985][ T4718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.484826][ T4718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.590213][ T7533] overlayfs: failed to resolve './file1/file0': -2 [ 334.725026][ T7538] netlink: 64 bytes leftover after parsing attributes in process `syz.3.581'. [ 335.056421][ T7538] loop3: detected capacity change from 0 to 1024 [ 335.246372][ T7538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.406637][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.9.582'. [ 335.420282][ T7545] netlink: 'syz.9.582': attribute type 12 has an invalid length. [ 335.420305][ T7545] netlink: 132 bytes leftover after parsing attributes in process `syz.9.582'. [ 335.723563][ T4718] Bluetooth: hci3: command tx timeout [ 335.827335][ T7553] netlink: 12 bytes leftover after parsing attributes in process `syz.8.583'. [ 336.132573][ T7556] loop7: detected capacity change from 0 to 512 [ 336.133658][ T7556] EXT4-fs: Ignoring removed i_version option [ 336.170501][ T7556] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 336.278105][ T7556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.480464][ T7556] overlay: ./file2 is not a directory [ 337.760343][ T4718] Bluetooth: hci3: command tx timeout [ 337.978827][ T7527] wg1 speed is unknown, defaulting to 1000 [ 338.727911][ T5813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.907273][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.469860][ T7575] loop7: detected capacity change from 0 to 8 [ 339.538072][ T7575] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 339.538088][ T7575] unable to read xattr id index table [ 339.552272][ T7575] SQUASHFS error: zlib decompression failed, data probably corrupt [ 339.552308][ T7575] SQUASHFS error: Failed to read block 0x9b: -5 [ 339.552320][ T7575] SQUASHFS error: Unable to read metadata cache entry [99] [ 339.552342][ T7575] SQUASHFS error: Unable to read inode 0x127 [ 339.839935][ T4714] Bluetooth: hci3: command tx timeout [ 340.105541][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.9.589'. [ 341.919943][ T4714] Bluetooth: hci3: command tx timeout [ 342.474709][ T5075] bridge_slave_1: left allmulticast mode [ 342.474739][ T5075] bridge_slave_1: left promiscuous mode [ 342.474902][ T5075] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.573479][ T5075] bridge_slave_0: left allmulticast mode [ 342.573508][ T5075] bridge_slave_0: left promiscuous mode [ 342.573679][ T5075] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.742176][ T7617] netlink: 64 bytes leftover after parsing attributes in process `syz.7.597'. [ 345.103654][ T7622] overlayfs: failed to resolve './file1/file0': -2 [ 345.368366][ T7628] loop7: detected capacity change from 0 to 1024 [ 345.898092][ T7628] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.223375][ T5075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.300364][ T5075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.348553][ T5075] bond0 (unregistering): Released all slaves [ 348.279622][ T5075] hsr_slave_0: left promiscuous mode [ 348.309672][ T5075] hsr_slave_1: left promiscuous mode [ 348.310636][ T5075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.627433][ T5075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.140178][ T5813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.126140][ T7661] fuse: Unknown parameter 'f' [ 352.259985][ T5075] team0 (unregistering): Port device team_slave_1 removed [ 352.283793][ T7661] netlink: 32 bytes leftover after parsing attributes in process `syz.9.604'. [ 352.417618][ T5075] team0 (unregistering): Port device team_slave_0 removed [ 352.995793][ T7669] loop9: detected capacity change from 0 to 512 [ 353.049263][ T7669] EXT4-fs (loop9): required journal recovery suppressed and not mounted read-only [ 354.478985][ T7527] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.479038][ T7527] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.479252][ T7527] bridge_slave_0: entered allmulticast mode [ 354.485881][ T7527] bridge_slave_0: entered promiscuous mode [ 354.529943][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.7.602'. [ 354.861097][ T7527] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.900276][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.900542][ T7527] bridge_slave_1: entered allmulticast mode [ 354.936408][ T7527] bridge_slave_1: entered promiscuous mode [ 355.303515][ T7679] fuse: Unknown parameter '0x0000000000000003' [ 355.336293][ T7527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.377342][ T7680] netlink: 64 bytes leftover after parsing attributes in process `syz.3.608'. [ 355.852608][ T7527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.709246][ T7689] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 358.199907][ T7527] team0: Port device team_slave_0 added [ 358.245726][ T7527] team0: Port device team_slave_1 added [ 358.780467][ T7527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.780486][ T7527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.780502][ T7527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.783346][ T7527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.783358][ T7527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.783377][ T7527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.947307][ T7698] netlink: 64 bytes leftover after parsing attributes in process `syz.3.611'. [ 359.522322][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.8.612'. [ 359.643919][ T7707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.661851][ T7703] loop3: detected capacity change from 0 to 1024 [ 359.736761][ T7705] loop9: detected capacity change from 0 to 8 [ 359.832455][ T7703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.155379][ T7527] hsr_slave_0: entered promiscuous mode [ 360.156405][ T7527] hsr_slave_1: entered promiscuous mode [ 362.381543][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.8.617'. [ 362.862383][ T7721] loop9: detected capacity change from 0 to 256 [ 363.637912][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.772901][ T7743] netlink: 'syz.7.622': attribute type 12 has an invalid length. [ 369.772928][ T7743] netlink: 132 bytes leftover after parsing attributes in process `syz.7.622'. [ 369.896377][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.622'. [ 371.297748][ T7527] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 371.382888][ T7527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 371.383662][ T7527] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 371.480650][ T7527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 371.520113][ T7527] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 371.625641][ T7527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 371.626440][ T7527] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 371.687518][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.687581][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.695660][ T7527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 372.840598][ T7527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.982640][ T7527] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.054413][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.054470][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.240703][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.240757][ T5084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.530755][ T7770] overlayfs: failed to resolve './file1/file0': -2 [ 374.953271][ T7777] netlink: 'syz.3.632': attribute type 12 has an invalid length. [ 374.953297][ T7777] netlink: 132 bytes leftover after parsing attributes in process `syz.3.632'. [ 375.270203][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 375.885908][ T7779] overlayfs: failed to resolve './file1/file0': -2 [ 376.928433][ T7792] netlink: 64 bytes leftover after parsing attributes in process `syz.8.635'. [ 377.425088][ T7527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.537160][ T7792] loop8: detected capacity change from 0 to 1024 [ 377.710316][ T7792] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.859009][ T7822] netlink: 'syz.3.638': attribute type 12 has an invalid length. [ 379.859035][ T7822] netlink: 132 bytes leftover after parsing attributes in process `syz.3.638'. [ 379.870289][ T7527] veth0_vlan: entered promiscuous mode [ 379.946240][ T7527] veth1_vlan: entered promiscuous mode [ 380.020782][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.638'. [ 380.246022][ T7527] veth0_macvtap: entered promiscuous mode [ 380.312951][ T7527] veth1_macvtap: entered promiscuous mode [ 380.472869][ T7527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.476203][ T7527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.559054][ T5084] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.559299][ T5084] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.559899][ T5084] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.560183][ T5084] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.178210][ T6197] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.779593][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'. [ 383.405270][ T7829] loop9: detected capacity change from 0 to 8 [ 383.841019][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.841041][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.057472][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.8.641'. [ 384.971731][ T5086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.971749][ T5086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.107895][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'. [ 390.685883][ T7863] loop9: detected capacity change from 0 to 512 [ 390.687867][ T7863] EXT4-fs (loop9): unable to read superblock [ 394.043384][ T7860] loop3: detected capacity change from 0 to 512 [ 394.260088][ T7875] netlink: 'syz.4.649': attribute type 12 has an invalid length. [ 394.260114][ T7875] netlink: 132 bytes leftover after parsing attributes in process `syz.4.649'. [ 394.348375][ T7860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.370784][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 394.544247][ T7860] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.647: corrupted xattr block 32: invalid size in ea xattr [ 394.547513][ T7860] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.647: corrupted xattr block 32: invalid size in ea xattr [ 394.568559][ T7860] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.647: corrupted xattr block 32: invalid size in ea xattr [ 394.572964][ T7860] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.647: corrupted xattr block 32: invalid size in ea xattr [ 394.595457][ T7866] netlink: 44 bytes leftover after parsing attributes in process `syz.3.647'. [ 394.595486][ T7866] IPVS: Unknown mcast interface: vetN1_macvtap [ 394.784976][ T7885] netlink: 88 bytes leftover after parsing attributes in process `syz.8.653'. [ 394.810242][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.7.652'. [ 394.810318][ T7882] netlink: 1 bytes leftover after parsing attributes in process `syz.7.652'. [ 395.034888][ T7882] binder: 7881:7882 tried to acquire reference to desc 0, got 1 instead [ 395.048604][ T7887] loop8: detected capacity change from 0 to 1024 [ 395.086257][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.121533][ T7886] binder: 7881:7886 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 395.121566][ T7886] binder: 7886 RLIMIT_NICE not set [ 395.121594][ T7886] binder: 7886 RLIMIT_NICE not set [ 395.129923][ T7886] binder: 7886 RLIMIT_NICE not set [ 395.130015][ T7886] binder_alloc: 7881: binder_alloc_buf, no vma [ 395.130030][ T7886] binder: cannot allocate buffer: vma cleared, target dead or dying [ 395.130081][ T7886] binder: 7881:7886 transaction reply to 7881:7882 failed 9/29189/-3, code 0 size 0-0 line 3408 [ 395.130119][ T7886] binder: send failed reply for transaction 8 to 7881:7882 [ 395.131426][ T7882] binder: 7881:7882 ioctl c0306201 200003c0 returned -14 [ 395.203985][ T5992] binder: undelivered TRANSACTION_ERROR: 29189 [ 395.268640][ T7887] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.646757][ T5992] binder: undelivered TRANSACTION_ERROR: 29190 [ 396.221456][ T5445] kernel read not supported for file /eth0 (pid: 5445 comm: kworker/0:4) [ 397.267496][ T7909] FAULT_INJECTION: forcing a failure. [ 397.267496][ T7909] name failslab, interval 1, probability 0, space 0, times 0 [ 397.267528][ T7909] CPU: 0 UID: 0 PID: 7909 Comm: syz.4.661 Tainted: G L syzkaller #0 PREEMPT [ 397.267544][ T7909] Tainted: [L]=SOFTLOCKUP [ 397.267550][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 397.267558][ T7909] Call trace: [ 397.267564][ T7909] show_stack+0x2c/0x3c (C) [ 397.267590][ T7909] __dump_stack+0x30/0x40 [ 397.267608][ T7909] dump_stack_lvl+0xd8/0x12c [ 397.267624][ T7909] dump_stack+0x1c/0x28 [ 397.267640][ T7909] should_fail_ex+0x41c/0x590 [ 397.267660][ T7909] should_failslab+0xc4/0x120 [ 397.267679][ T7909] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 397.267694][ T7909] kmemdup_noprof+0x44/0x8c [ 397.267708][ T7909] tcf_pedit_init+0x5c4/0xbcc [ 397.267728][ T7909] tcf_action_init_1+0x398/0x594 [ 397.267742][ T7909] tcf_action_init+0x2c4/0x798 [ 397.267757][ T7909] tc_ctl_action+0x364/0x700 [ 397.267772][ T7909] rtnetlink_rcv_msg+0x630/0x9bc [ 397.267786][ T7909] netlink_rcv_skb+0x238/0x414 [ 397.267802][ T7909] rtnetlink_rcv+0x28/0x38 [ 397.267815][ T7909] netlink_unicast+0x600/0x7f8 [ 397.267830][ T7909] netlink_sendmsg+0x648/0x948 [ 397.267845][ T7909] __sock_sendmsg+0xc8/0x17c [ 397.267860][ T7909] ____sys_sendmsg+0x3d0/0x6c8 [ 397.267876][ T7909] ___sys_sendmsg+0x198/0x224 [ 397.267891][ T7909] __sys_sendmsg+0x158/0x204 [ 397.267906][ T7909] __arm64_sys_sendmsg+0x88/0x9c [ 397.267922][ T7909] invoke_syscall+0x98/0x244 [ 397.267939][ T7909] el0_svc_common+0x19c/0x23c [ 397.267955][ T7909] do_el0_svc+0x4c/0x5c [ 397.267972][ T7909] el0_svc+0x64/0x260 [ 397.267988][ T7909] el0t_64_sync_handler+0x44/0x104 [ 397.268004][ T7909] el0t_64_sync+0x198/0x19c [ 397.493217][ T7906] wg1 speed is unknown, defaulting to 1000 [ 398.972310][ T6197] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.403566][ T30] audit: type=1326 audit(400.380:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.8.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f79368 code=0x7ffc0000 [ 400.427188][ T30] audit: type=1326 audit(400.400:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.8.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f79368 code=0x7ffc0000 [ 400.428175][ T30] audit: type=1326 audit(400.400:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.8.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff82f79368 code=0x7ffc0000 [ 400.428221][ T30] audit: type=1326 audit(400.400:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.8.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f79368 code=0x7ffc0000 [ 400.428260][ T30] audit: type=1326 audit(400.400:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.8.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f79368 code=0x7ffc0000 [ 400.486196][ T30] audit: type=1326 audit(400.460:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.8.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=20 compat=0 ip=0xffff82f79368 code=0x7ffc0000 [ 400.486249][ T30] audit: type=1326 audit(400.460:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.8.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f79368 code=0x7ffc0000 [ 400.486290][ T30] audit: type=1326 audit(400.460:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.8.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f79368 code=0x7ffc0000 [ 400.523533][ T30] audit: type=1326 audit(400.500:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.8.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff82f79368 code=0x7ffc0000 [ 400.523586][ T30] audit: type=1326 audit(400.500:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.8.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f79368 code=0x7ffc0000 [ 400.879961][ T7939] FAULT_INJECTION: forcing a failure. [ 400.879961][ T7939] name failslab, interval 1, probability 0, space 0, times 0 [ 400.879995][ T7939] CPU: 0 UID: 0 PID: 7939 Comm: syz.4.673 Tainted: G L syzkaller #0 PREEMPT [ 400.880012][ T7939] Tainted: [L]=SOFTLOCKUP [ 400.880018][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 400.880027][ T7939] Call trace: [ 400.880033][ T7939] show_stack+0x2c/0x3c (C) [ 400.880057][ T7939] __dump_stack+0x30/0x40 [ 400.880075][ T7939] dump_stack_lvl+0xd8/0x12c [ 400.880092][ T7939] dump_stack+0x1c/0x28 [ 400.880108][ T7939] should_fail_ex+0x41c/0x590 [ 400.880126][ T7939] should_failslab+0xc4/0x120 [ 400.880145][ T7939] __kmalloc_cache_noprof+0x94/0x5fc [ 400.880159][ T7939] tunnel_key_init+0x984/0x1060 [ 400.880175][ T7939] tcf_action_init_1+0x398/0x594 [ 400.880190][ T7939] tcf_action_init+0x2c4/0x798 [ 400.880204][ T7939] tc_ctl_action+0x364/0x700 [ 400.880219][ T7939] rtnetlink_rcv_msg+0x630/0x9bc [ 400.880233][ T7939] netlink_rcv_skb+0x238/0x414 [ 400.880250][ T7939] rtnetlink_rcv+0x28/0x38 [ 400.880263][ T7939] netlink_unicast+0x600/0x7f8 [ 400.880277][ T7939] netlink_sendmsg+0x648/0x948 [ 400.880292][ T7939] __sock_sendmsg+0xc8/0x17c [ 400.880307][ T7939] ____sys_sendmsg+0x3d0/0x6c8 [ 400.880328][ T7939] ___sys_sendmsg+0x198/0x224 [ 400.880344][ T7939] __sys_sendmsg+0x158/0x204 [ 400.880360][ T7939] __arm64_sys_sendmsg+0x88/0x9c [ 400.880375][ T7939] invoke_syscall+0x98/0x244 [ 400.880393][ T7939] el0_svc_common+0x19c/0x23c [ 400.880409][ T7939] do_el0_svc+0x4c/0x5c [ 400.880425][ T7939] el0_svc+0x64/0x260 [ 400.880442][ T7939] el0t_64_sync_handler+0x44/0x104 [ 400.880458][ T7939] el0t_64_sync+0x198/0x19c [ 402.076670][ T7954] netlink: 'syz.3.680': attribute type 6 has an invalid length. [ 402.076693][ T7954] IPv6: NLM_F_CREATE should be specified when creating new route [ 402.114430][ T7955] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 403.115075][ T7960] overlayfs: failed to resolve './file1/file0': -2 [ 404.467284][ T7981] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 405.792009][ T7995] netlink: 52 bytes leftover after parsing attributes in process `syz.4.699'. [ 405.793914][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.794207][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.959977][ T7997] netlink: 76 bytes leftover after parsing attributes in process `syz.4.699'. [ 405.965553][ T7997] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.965627][ T7997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.965932][ T7997] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.965989][ T7997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.967321][ T7997] netlink: 52 bytes leftover after parsing attributes in process `syz.4.699'. [ 405.968044][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.968190][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.498334][ T8015] netlink: 148 bytes leftover after parsing attributes in process `syz.8.706'. [ 408.498364][ T8015] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 408.767614][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 408.767632][ T30] audit: type=1326 audit(408.740:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8017 comm="syz.7.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b79368 code=0x7ffc0000 [ 408.767675][ T30] audit: type=1326 audit(408.740:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8017 comm="syz.7.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b79368 code=0x7ffc0000 [ 408.810988][ T30] audit: type=1326 audit(408.790:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8017 comm="syz.7.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b79368 code=0x7ffc0000 [ 408.811043][ T30] audit: type=1326 audit(408.790:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8017 comm="syz.7.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b79368 code=0x7ffc0000 [ 408.838989][ T30] audit: type=1326 audit(408.820:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8017 comm="syz.7.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb0b79368 code=0x7ffc0000 [ 408.839042][ T30] audit: type=1326 audit(408.820:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8017 comm="syz.7.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b79368 code=0x7ffc0000 [ 408.839084][ T30] audit: type=1326 audit(408.820:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8017 comm="syz.7.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b79368 code=0x7ffc0000 [ 408.874303][ T30] audit: type=1326 audit(408.850:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8017 comm="syz.7.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b79368 code=0x7ffc0000 [ 408.874360][ T30] audit: type=1326 audit(408.850:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8017 comm="syz.7.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b79368 code=0x7ffc0000 [ 408.920141][ T30] audit: type=1326 audit(408.900:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8017 comm="syz.7.708" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb0b79368 code=0x7ffc0000 [ 409.159703][ T8020] FAULT_INJECTION: forcing a failure. [ 409.159703][ T8020] name failslab, interval 1, probability 0, space 0, times 0 [ 409.159732][ T8020] CPU: 0 UID: 0 PID: 8020 Comm: syz.3.709 Tainted: G L syzkaller #0 PREEMPT [ 409.159748][ T8020] Tainted: [L]=SOFTLOCKUP [ 409.159753][ T8020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 409.159761][ T8020] Call trace: [ 409.159767][ T8020] show_stack+0x2c/0x3c (C) [ 409.159790][ T8020] __dump_stack+0x30/0x40 [ 409.159808][ T8020] dump_stack_lvl+0xd8/0x12c [ 409.159824][ T8020] dump_stack+0x1c/0x28 [ 409.159840][ T8020] should_fail_ex+0x41c/0x590 [ 409.159859][ T8020] should_failslab+0xc4/0x120 [ 409.159877][ T8020] __kvmalloc_node_noprof+0x160/0x7fc [ 409.159892][ T8020] ip_vs_rht_alloc+0x114/0x5fc [ 409.159909][ T8020] ip_vs_conn_tab_alloc+0x60/0x110 [ 409.159923][ T8020] ip_vs_add_service+0x71c/0x1c60 [ 409.159941][ T8020] do_ip_vs_set_ctl+0x708/0x93c [ 409.159958][ T8020] nf_setsockopt+0xa0/0xe4 [ 409.159975][ T8020] ip_setsockopt+0x118/0x128 [ 409.159995][ T8020] sctp_setsockopt+0x148/0xe70 [ 409.160015][ T8020] sock_common_setsockopt+0xb0/0xcc [ 409.160031][ T8020] do_sock_setsockopt+0x1f0/0x330 [ 409.160047][ T8020] __sys_setsockopt+0x104/0x170 [ 409.160062][ T8020] __arm64_sys_setsockopt+0xc8/0xe4 [ 409.160077][ T8020] invoke_syscall+0x98/0x244 [ 409.160094][ T8020] el0_svc_common+0x19c/0x23c [ 409.160111][ T8020] do_el0_svc+0x4c/0x5c [ 409.160128][ T8020] el0_svc+0x64/0x260 [ 409.160144][ T8020] el0t_64_sync_handler+0x44/0x104 [ 409.160159][ T8020] el0t_64_sync+0x198/0x19c [ 411.032562][ T8041] all: renamed from bridge_slave_1 (while UP) [ 411.949609][ T8045] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 412.855798][ T8050] xt_hashlimit: size too large, truncated to 1048576 [ 414.258580][ T8056] loop3: detected capacity change from 0 to 8192 [ 414.349455][ T8056] syz.3.724: attempt to access beyond end of device [ 414.349455][ T8056] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 414.349490][ T8056] Buffer I/O error on dev loop3, logical block 57847, async page read [ 414.350335][ T8056] syz.3.724: attempt to access beyond end of device [ 414.350335][ T8056] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 414.350360][ T8056] Buffer I/O error on dev loop3, logical block 57847, async page read [ 414.350432][ T8056] syz.3.724: attempt to access beyond end of device [ 414.350432][ T8056] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 414.350452][ T8056] Buffer I/O error on dev loop3, logical block 57847, async page read [ 414.350519][ T8056] syz.3.724: attempt to access beyond end of device [ 414.350519][ T8056] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 414.350537][ T8056] Buffer I/O error on dev loop3, logical block 57847, async page read [ 414.350604][ T8056] syz.3.724: attempt to access beyond end of device [ 414.350604][ T8056] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 414.350621][ T8056] Buffer I/O error on dev loop3, logical block 57847, async page read [ 414.350687][ T8056] syz.3.724: attempt to access beyond end of device [ 414.350687][ T8056] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 414.350705][ T8056] Buffer I/O error on dev loop3, logical block 57847, async page read [ 414.350771][ T8056] syz.3.724: attempt to access beyond end of device [ 414.350771][ T8056] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 414.350788][ T8056] Buffer I/O error on dev loop3, logical block 57847, async page read [ 414.350854][ T8056] syz.3.724: attempt to access beyond end of device [ 414.350854][ T8056] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 414.350871][ T8056] Buffer I/O error on dev loop3, logical block 57847, async page read [ 414.350936][ T8056] syz.3.724: attempt to access beyond end of device [ 414.350936][ T8056] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 414.350953][ T8056] Buffer I/O error on dev loop3, logical block 57847, async page read [ 414.428791][ T8056] syz.3.724: attempt to access beyond end of device [ 414.428791][ T8056] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 414.428827][ T8056] Buffer I/O error on dev loop3, logical block 57847, async page read [ 416.651701][ T8083] loop3: detected capacity change from 0 to 8 [ 420.307260][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.7.738'. [ 425.028076][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.736'. [ 425.224082][ T8098] netlink: 'syz.7.738': attribute type 12 has an invalid length. [ 425.224112][ T8098] netlink: 132 bytes leftover after parsing attributes in process `syz.7.738'. [ 426.033707][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.741'. [ 428.065409][ T8120] loop7: detected capacity change from 0 to 8 [ 429.560878][ T8141] netlink: 76 bytes leftover after parsing attributes in process `syz.9.748'. [ 429.897707][ T8144] loop9: detected capacity change from 0 to 1024 [ 429.905308][ T8143] loop7: detected capacity change from 0 to 8 [ 430.092829][ T8144] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.249655][ T8159] siw: device registration error -23 [ 433.084617][ T8170] siw: device registration error -23 [ 433.123729][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.123790][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.742088][ T6215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.789680][ T8194] siw: device registration error -23 [ 439.140413][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.9.762'. [ 443.939779][ T8224] loop4: detected capacity change from 0 to 8 [ 447.082766][ T8242] netlink: 76 bytes leftover after parsing attributes in process `syz.4.770'. [ 447.082804][ T8242] netlink: 76 bytes leftover after parsing attributes in process `syz.4.770'. [ 449.129633][ T8261] siw: device registration error -23 [ 450.076822][ T4718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 450.097484][ T4718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 450.113528][ T4718] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 450.114879][ T4718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 450.115694][ T4718] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 450.576780][ T8269] siw: device registration error -23 [ 451.130571][ T8274] loop8: detected capacity change from 0 to 512 [ 451.182514][ T8274] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 451.251640][ T8274] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 451.251970][ T8274] EXT4-fs (loop8): orphan cleanup on readonly fs [ 451.283147][ T8274] __quota_error: 14 callbacks suppressed [ 451.283168][ T8274] Quota error (device loop8): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 451.283724][ T8274] EXT4-fs warning (device loop8): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 451.283744][ T8274] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 451.301716][ T8274] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #16: comm syz.8.779: iget: immutable or append flags not allowed on symlinks [ 451.301744][ T8274] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 451.309401][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 451.309423][ C0] EXT4-fs (loop8): initial error at time 451: ext4_orphan_get:1403: inode 16 [ 451.309450][ C0] EXT4-fs (loop8): last error at time 451: ext4_orphan_get:1403: inode 16 [ 451.333232][ T8274] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.779: couldn't read orphan inode 16 (err -117) [ 451.333261][ T8274] loop8: lost filesystem error report for type 5 error -117 [ 451.373137][ T8274] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 451.571910][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.780'. [ 452.577017][ T4718] Bluetooth: hci1: command tx timeout [ 452.929740][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.782'. [ 453.301077][ T8293] overlayfs: failed to resolve 'work': -2 [ 454.156869][ T8254] wg1 speed is unknown, defaulting to 1000 [ 454.639653][ T4714] Bluetooth: hci1: command tx timeout [ 455.232885][ T6197] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.252958][ T8305] loop9: detected capacity change from 0 to 8 [ 455.493297][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.9.786'. [ 455.681385][ T4714] Bluetooth: hci3: command 0x0406 tx timeout [ 456.148618][ T8312] loop4: detected capacity change from 0 to 512 [ 456.399019][ T8312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.723468][ T4718] Bluetooth: hci1: command tx timeout [ 456.797769][ T8321] loop8: detected capacity change from 0 to 512 [ 457.268625][ T7527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.423050][ T8321] EXT4-fs (loop8): 1 orphan inode deleted [ 457.456184][ T5087] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 457.456265][ T5087] EXT4-fs error (device loop8): ext4_release_dquot:7105: comm kworker/u8:26: Failed to release dquot type 1 [ 457.456284][ T5087] loop8: lost filesystem error report for type 5 error -117 [ 457.551174][ T8321] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.631980][ T8316] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz.8.787: deleted inode referenced: 16 [ 458.154120][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.154169][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.154400][ T8254] bridge_slave_0: entered allmulticast mode [ 458.199222][ T8254] bridge_slave_0: entered promiscuous mode [ 458.244360][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.282997][ T6197] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.283397][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.283654][ T8254] bridge_slave_1: entered allmulticast mode [ 458.285739][ T8254] bridge_slave_1: entered promiscuous mode [ 458.803339][ T4718] Bluetooth: hci1: command tx timeout [ 458.822829][ T8335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.823457][ T8335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.562784][ T8345] loop8: detected capacity change from 0 to 4096 [ 459.563750][ T8345] EXT4-fs: quotafile must be on filesystem root [ 459.832911][ T8333] loop9: detected capacity change from 0 to 4096 [ 460.202383][ T8334] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 460.222021][ T8334] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 460.264101][ T8254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.291802][ T8254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.073695][ T5080] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.532172][ T8254] team0: Port device team_slave_0 added [ 461.579277][ T8254] team0: Port device team_slave_1 added [ 463.275417][ T8352] loop8: detected capacity change from 0 to 8192 [ 464.342770][ T5080] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.921275][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.921293][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.921308][ T8254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.924119][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.924131][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.924148][ T8254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.846905][ T5080] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.514439][ T8379] nfs: Unknown parameter 'ntext' [ 467.036220][ T4718] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 467.143309][ T8254] hsr_slave_0: entered promiscuous mode [ 467.144337][ T8254] hsr_slave_1: entered promiscuous mode [ 467.303705][ T4714] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 467.330269][ T4714] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 467.352777][ T8254] debugfs: 'hsr0' already exists in 'hsr' [ 467.352807][ T8254] Cannot create hsr debugfs directory [ 467.362664][ T4714] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 467.372279][ T4714] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 467.373528][ T4714] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 467.687138][ T5080] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.446542][ T4718] Bluetooth: hci5: command tx timeout [ 471.784614][ T4718] Bluetooth: hci5: command tx timeout [ 473.839849][ T4718] Bluetooth: hci5: command tx timeout [ 474.157924][ T5080] bridge_slave_1: left allmulticast mode [ 474.157954][ T5080] bridge_slave_1: left promiscuous mode [ 474.158108][ T5080] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.181298][ T5080] bridge_slave_0: left allmulticast mode [ 474.181329][ T5080] bridge_slave_0: left promiscuous mode [ 474.181472][ T5080] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.418699][ T4718] Bluetooth: hci5: command tx timeout [ 478.313565][ T8434] device-mapper: ioctl: Unable to rename non-existent device, to [ 478.742525][ T5080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.834971][ T5080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.893623][ T5080] bond0 (unregistering): Released all slaves [ 478.980904][ T5080] bond1 (unregistering): Released all slaves [ 479.162527][ T5080] bond2 (unregistering): Released all slaves [ 479.372683][ T5080] bond3 (unregistering): Released all slaves [ 480.547982][ T8443] FAULT_INJECTION: forcing a failure. [ 480.547982][ T8443] name failslab, interval 1, probability 0, space 0, times 0 [ 480.548017][ T8443] CPU: 0 UID: 0 PID: 8443 Comm: syz.8.813 Tainted: G L syzkaller #0 PREEMPT [ 480.548036][ T8443] Tainted: [L]=SOFTLOCKUP [ 480.548043][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 480.548051][ T8443] Call trace: [ 480.548056][ T8443] show_stack+0x2c/0x3c (C) [ 480.548083][ T8443] __dump_stack+0x30/0x40 [ 480.548100][ T8443] dump_stack_lvl+0xd8/0x12c [ 480.548117][ T8443] dump_stack+0x1c/0x28 [ 480.548133][ T8443] should_fail_ex+0x41c/0x590 [ 480.548151][ T8443] should_failslab+0xc4/0x120 [ 480.548169][ T8443] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 480.548183][ T8443] sock_alloc_inode+0x30/0x180 [ 480.548200][ T8443] alloc_inode+0x68/0x198 [ 480.548216][ T8443] sock_alloc+0x4c/0x204 [ 480.548229][ T8443] __sock_create+0x108/0x670 [ 480.548243][ T8443] __sys_socket_create+0xc0/0x11c [ 480.548257][ T8443] __sys_socket+0x44/0xec [ 480.548272][ T8443] __arm64_sys_socket+0x84/0x9c [ 480.548286][ T8443] invoke_syscall+0x98/0x244 [ 480.548304][ T8443] el0_svc_common+0x19c/0x23c [ 480.548325][ T8443] do_el0_svc+0x4c/0x5c [ 480.548348][ T8443] el0_svc+0x64/0x260 [ 480.548364][ T8443] el0t_64_sync_handler+0x44/0x104 [ 480.548380][ T8443] el0t_64_sync+0x198/0x19c [ 480.548403][ T8443] socket: no more sockets [ 480.776985][ T8383] wg1 speed is unknown, defaulting to 1000 [ 485.712646][ T8445] warn_alloc: 755 callbacks suppressed [ 485.712668][ T8445] syz.4.815: page allocation failure: order:0, mode:0xc0de0(GFP_KERNEL|__GFP_HIGH|__GFP_ZERO|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null),cpuset=/,mems_allowed=0 [ 485.712724][ T8445] CPU: 0 UID: 0 PID: 8445 Comm: syz.4.815 Tainted: G L syzkaller #0 PREEMPT [ 485.712738][ T8445] Tainted: [L]=SOFTLOCKUP [ 485.712743][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 485.712750][ T8445] Call trace: [ 485.712755][ T8445] show_stack+0x2c/0x3c (C) [ 485.712777][ T8445] __dump_stack+0x30/0x40 [ 485.712791][ T8445] dump_stack_lvl+0xd8/0x12c [ 485.712805][ T8445] dump_stack+0x1c/0x28 [ 485.712819][ T8445] warn_alloc+0x1c4/0x1d8 [ 485.712832][ T8445] __alloc_pages_slowpath+0xaac/0xb38 [ 485.712844][ T8445] __alloc_frozen_pages_noprof+0x3d4/0x648 [ 485.712857][ T8445] alloc_pages_mpol+0x1fc/0x3d0 [ 485.712870][ T8445] alloc_frozen_pages_noprof+0xc4/0x10c [ 485.712882][ T8445] alloc_pages_noprof+0x30/0x148 [ 485.712895][ T8445] folio_alloc_noprof+0x2c/0x148 [ 485.712907][ T8445] swap_cluster_alloc_table+0xc8/0x234 [ 485.712921][ T8445] isolate_lock_cluster+0x5ac/0xa60 [ 485.712933][ T8445] alloc_swap_scan_list+0x3c/0xf4 [ 485.712946][ T8445] cluster_alloc_swap_entry+0x52c/0x830 [ 485.712958][ T8445] folio_alloc_swap+0x86c/0x1060 [ 485.712970][ T8445] shmem_writeout+0xb90/0x1360 [ 485.712984][ T8445] shrink_folio_list+0x24d0/0x41bc [ 485.712997][ T8445] shrink_lruvec+0x11a8/0x2118 [ 485.713010][ T8445] shrink_node+0xc40/0x1ea8 [ 485.713023][ T8445] do_try_to_free_pages+0x5c4/0x12dc [ 485.713036][ T8445] try_to_free_pages+0x794/0x10fc [ 485.713048][ T8445] __alloc_pages_direct_reclaim+0x14c/0x2b8 [ 485.713062][ T8445] __alloc_pages_slowpath+0x4f0/0xb38 [ 485.713074][ T8445] __alloc_frozen_pages_noprof+0x3d4/0x648 [ 485.713086][ T8445] __alloc_pages_noprof+0x18/0x100 [ 485.713097][ T8445] alloc_pages_bulk_noprof+0x610/0x7d8 [ 485.713109][ T8445] __kasan_populate_vmalloc+0xc0/0x1d0 [ 485.713124][ T8445] alloc_vmap_area+0xdf4/0x13e8 [ 485.713137][ T8445] __get_vm_area_node+0x210/0x32c [ 485.713149][ T8445] get_vm_area+0x9c/0xd0 [ 485.713162][ T8445] arena_map_alloc+0x200/0x668 [ 485.713176][ T8445] map_create+0xa6c/0x153c [ 485.713190][ T8445] __sys_bpf+0x308/0x82c [ 485.713202][ T8445] __arm64_sys_bpf+0xd0/0xec [ 485.713214][ T8445] invoke_syscall+0x98/0x244 [ 485.713229][ T8445] el0_svc_common+0x19c/0x23c [ 485.713243][ T8445] do_el0_svc+0x4c/0x5c [ 485.713257][ T8445] el0_svc+0x64/0x260 [ 485.713272][ T8445] el0t_64_sync_handler+0x44/0x104 [ 485.713285][ T8445] el0t_64_sync+0x198/0x19c [ 485.713300][ T8445] Mem-Info: [ 485.713307][ T8445] active_anon:228 inactive_anon:11297 isolated_anon:36 [ 485.713307][ T8445] active_file:2227 inactive_file:13726 isolated_file:0 [ 485.713307][ T8445] unevictable:768 dirty:62 writeback:0 [ 485.713307][ T8445] slab_reclaimable:5334 slab_unreclaimable:95589 [ 485.713307][ T8445] mapped:27846 shmem:9722 pagetables:37930 [ 485.713307][ T8445] sec_pagetables:0 bounce:0 [ 485.713307][ T8445] kernel_misc_reclaimable:0 [ 485.713307][ T8445] free:10912 free_pcp:390 free_cma:1749 [ 485.713334][ T8445] Node 0 active_anon:912kB inactive_anon:45188kB active_file:8908kB inactive_file:54904kB unevictable:3072kB isolated(anon):144kB isolated(file):0kB mapped:111384kB dirty:248kB writeback:0kB shmem:38888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8768kB pagetables:151720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 485.713357][ T8445] Node 0 DMA free:31344kB boost:8192kB min:28552kB low:33640kB high:38728kB reserved_highatomic:2048kB free_highatomic:1920kB active_anon:276kB inactive_anon:32052kB active_file:3772kB inactive_file:21020kB unevictable:0kB writepending:20kB zspages:3508kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:560kB local_pcp:560kB free_cma:6996kB [ 485.713388][ T8445] lowmem_reserve[]: 0 0 3650 3650 3650 [ 485.713428][ T8445] Node 0 Normal free:12304kB boost:55552kB min:80244kB low:86416kB high:92588kB reserved_highatomic:0kB free_highatomic:0kB active_anon:644kB inactive_anon:13132kB active_file:5136kB inactive_file:33884kB unevictable:3072kB writepending:228kB zspages:320kB present:5242880kB managed:3738576kB mlocked:0kB bounce:0kB free_pcp:1000kB local_pcp:1000kB free_cma:0kB [ 485.713458][ T8445] lowmem_reserve[]: 0 0 0 0 0 [ 485.713497][ T8445] Node 0 DMA: 552*4kB (MC) 275*8kB (UMC) 194*16kB (UMC) 174*32kB (MC) 109*64kB (MC) 30*128kB (MH) 9*256kB (UMH) 4*512kB (MH) 3*1024kB (MH) 0*2048kB 0*4096kB = 31320kB [ 485.713645][ T8445] Node 0 Normal: 82*4kB (M) 26*8kB (UM) 16*16kB (UM) 29*32kB (UM) 127*64kB (UM) 13*128kB (ME) 3*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12280kB [ 485.713779][ T8445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.713790][ T8445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 485.713799][ T8445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 485.713809][ T8445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 485.713819][ T8445] 25934 total pagecache pages [ 485.713825][ T8445] 268 pages in swap cache [ 485.713832][ T8445] Free swap = 98316kB [ 485.713839][ T8445] Total swap = 124996kB [ 485.713845][ T8445] 2097152 pages RAM [ 485.713852][ T8445] 0 pages HighMem/MovableOnly [ 485.713859][ T8445] 392460 pages reserved [ 485.713865][ T8445] 8192 pages cma reserved [ 485.713872][ T8445] 7 pages hwpoisoned [ 486.822334][ T4714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 486.883974][ T4714] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 486.891477][ T4721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 486.901792][ T4721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 486.902622][ T4721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 487.297189][ T5080] hsr_slave_0: left promiscuous mode [ 487.348943][ T5080] hsr_slave_1: left promiscuous mode [ 487.350903][ T5080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.350924][ T5080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.370499][ T5080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.370524][ T5080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.500781][ T5080] veth1_macvtap: left promiscuous mode [ 487.500846][ T5080] veth0_macvtap: left promiscuous mode [ 487.500985][ T5080] veth1_vlan: left promiscuous mode [ 487.501089][ T5080] veth0_vlan: left promiscuous mode [ 488.960527][ T4721] Bluetooth: hci4: command tx timeout [ 490.237158][ T5080] team0 (unregistering): Port device team_slave_1 removed [ 490.432726][ T5080] team0 (unregistering): Port device team_slave_0 removed [ 491.040010][ T4721] Bluetooth: hci4: command tx timeout [ 493.139619][ T4721] Bluetooth: hci4: command tx timeout [ 494.577350][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.577414][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 494.668370][ T8254] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 494.781333][ T8254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 494.895010][ T8254] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 494.960518][ T8254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 494.961319][ T8254] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 495.002192][ T8254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 495.209448][ T4721] Bluetooth: hci4: command tx timeout [ 495.498770][ T5080] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.611465][ T8254] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 495.650549][ T8254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 495.906702][ T8473] binder: 8472:8473 ioctl c018620c 20000340 returned -1 [ 496.086599][ T5080] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.233085][ T8449] wg1 speed is unknown, defaulting to 1000 [ 496.799698][ T5080] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.886990][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.887042][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.887295][ T8383] bridge_slave_0: entered allmulticast mode [ 497.970627][ T8383] bridge_slave_0: entered promiscuous mode [ 498.081725][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.081787][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.081986][ T8383] bridge_slave_1: entered allmulticast mode [ 498.085269][ T8383] bridge_slave_1: entered promiscuous mode [ 498.544760][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 498.547102][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 498.548419][ T4718] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 498.555933][ T4718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 498.556795][ T4718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 498.596244][ T5080] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.225041][ T8383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.394343][ T8383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.702701][ T8498] loop8: detected capacity change from 0 to 512 [ 499.841975][ T8498] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.054511][ T8383] team0: Port device team_slave_0 added [ 500.064984][ T8383] team0: Port device team_slave_1 added [ 500.088801][ T8498] EXT4-fs error (device loop8): ext4_validate_block_bitmap:427: comm syz.8.823: bg 0: bad block bitmap checksum [ 500.165522][ T8498] Quota error (device loop8): write_blk: dquota write failed [ 500.165646][ T8498] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 500.165685][ T8498] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.823: Failed to acquire dquot type 0 [ 500.513592][ T6197] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.650363][ T4718] Bluetooth: hci2: command tx timeout [ 500.923484][ T8383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.923501][ T8383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.923522][ T8383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.965698][ T31] INFO: task kworker/0:2:1000 blocked for more than 143 seconds. [ 500.965722][ T31] Tainted: G L syzkaller #0 [ 500.965733][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.965741][ T31] task:kworker/0:2 state:D stack:0 pid:1000 tgid:1000 ppid:2 task_flags:0x4208060 flags:0x00000410 [ 500.965764][ T31] Workqueue: events drain_vmap_area_work [ 500.965798][ T31] Call trace: [ 500.965805][ T31] __switch_to+0x2b4/0x6e4 (T) [ 500.965823][ T31] __schedule+0x1370/0x2d80 [ 500.965838][ T31] schedule+0x13c/0x20c [ 500.965852][ T31] schedule_timeout+0xc0/0x28c [ 500.965868][ T31] wait_for_common+0x220/0x394 [ 500.965882][ T31] wait_for_completion+0x18/0x24 [ 500.965896][ T31] __flush_work+0x820/0xa24 [ 500.965911][ T31] flush_work+0x34/0x48 [ 500.965924][ T31] __purge_vmap_area_lazy+0x838/0xd38 [ 500.965940][ T31] drain_vmap_area_work+0x38/0x50 [ 500.965955][ T31] process_scheduled_works+0x91c/0x1250 [ 500.965970][ T31] worker_thread+0x798/0xbd0 [ 500.965985][ T31] kthread+0x304/0x3d4 [ 500.966000][ T31] ret_from_fork+0x10/0x20 [ 500.966103][ T31] [ 500.966103][ T31] Showing all locks held in the system: [ 500.966112][ T31] locks held by kworker/0:1/10: 2, last CPU#0: [ 500.966123][ T31] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 500.966169][ T31] #1: ffff80008ece7c40 ((work_completion)(&vn->purge_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 500.966215][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 500.966224][ T31] #0: ffff800088d82260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 500.966271][ T31] locks held by kswapd0/73: 2, on CPU#0: [ 500.966281][ T31] #0: ffff800088e8abe0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x116c/0x2e60 [ 500.966337][ T31] #1: ffff800088e87500 (vmap_purge_lock){+.+.}-{4:4}, at: vmap_node_shrink_scan+0x28/0xa8 [ 500.966387][ T31] locks held by kworker/0:2/1000: 3, on CPU#0: [ 500.966395][ T31] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 500.966438][ T31] #1: ffff800094667c40 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 500.966482][ T31] #2: ffff800088e87500 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x28/0x50 [ 500.966533][ T31] locks held by getty/4486: 2, on CPU#1: [ 500.966542][ T31] #0: ffff0000c52510a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 500.966586][ T31] #1: ffff80009257e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 [ 500.966635][ T31] locks held by kworker/u8:17/5078: 2, last CPU#0: [ 500.966644][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 500.966687][ T31] #1: ffff80009aaf7c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 500.966730][ T31] locks held by kworker/u8:18/5079: 2, last CPU#0: [ 500.966739][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 500.966783][ T31] #1: ffff80009aab7c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 500.966826][ T31] locks held by kworker/u8:19/5080: 6, last CPU#0: [ 500.966835][ T31] #0: ffff0000c004e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 500.966878][ T31] #1: ffff80009a9f7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 500.966921][ T31] #2: ffff800089e7e228 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x104/0x6c4 [ 500.966967][ T31] #3: ffff0000f1985128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x108/0x30c [ 500.967011][ T31] #4: ffff0000f1984258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x30c [ 500.967061][ T31] #5: ffff0000f099a2f0 (&sb->s_type->i_mutex_key#17/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x150/0x430 [ 500.967118][ T31] locks held by kworker/u8:32/5093: 2, on CPU#0: [ 500.967127][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 500.967170][ T31] #1: ffff80009ac77c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 500.967214][ T31] locks held by kworker/0:5/5861: 3, on CPU#0: [ 500.967223][ T31] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 500.967267][ T31] #1: ffff800094247c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 500.967317][ T31] #2: ffff0000d7610250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x198/0x320 [ 500.967368][ T31] locks held by syz.4.815/8445: 2, on CPU#0: [ 500.967377][ T31] #0: ffff800088e8abe0 (fs_reclaim){+.+.}-{0:0}, at: __alloc_pages_direct_reclaim+0xe8/0x2b8 [ 500.967421][ T31] #1: ffff800088e87500 (vmap_purge_lock){+.+.}-{4:4}, at: vmap_node_shrink_scan+0x28/0xa8 [ 500.967465][ T31] locks held by syz-executor/8449: 1, last CPU#0: [ 500.967473][ T31] #0: ffff800088b9b720 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x17c/0x26c [ 500.967524][ T31] locks held by udevd/8505: 1, last CPU#0: [ 500.967533][ T31] #0: ffff800088d82260 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xdc/0x6f4 [ 500.967575][ T31] locks held by modprobe/8508: 2, last CPU#0: [ 500.967585][ T31] #0: ffff0000c5735078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x158/0xad4 [ 500.967628][ T31] #1: ffff800088d82260 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x4c/0x224 [ 500.967673][ T31] [ 500.967679][ T31] ============================================= [ 500.967679][ T31] [ 500.967687][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 501.067330][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 501.069169][ T31] Tainted: [L]=SOFTLOCKUP [ 501.069933][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 501.071783][ T31] Call trace: [ 501.072386][ T31] show_stack+0x2c/0x3c (C) [ 501.073265][ T31] __dump_stack+0x30/0x40 [ 501.074078][ T31] dump_stack_lvl+0x30/0x12c [ 501.074928][ T31] dump_stack+0x1c/0x28 [ 501.075700][ T31] vpanic+0x594/0xaf8 [ 501.076444][ T31] vpanic+0x0/0xaf8 [ 501.077163][ T31] hung_task_panic+0x0/0x2c [ 501.078000][ T31] kthread+0x304/0x3d4 [ 501.078762][ T31] ret_from_fork+0x10/0x20 [ 501.079615][ T31] Kernel Offset: disabled [ 501.080427][ T31] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 501.081702][ T31] Memory Limit: none [ 501.434822][ T31] Rebooting in 86400 seconds..