last executing test programs: 34.028753545s ago: executing program 4 (id=312): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x18, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, {0xa, 0x4e23, 0x6, @mcast1, 0xf0bc}, 0xffffffffffffffff, 0x7}}, 0x48) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000001500)="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", 0xae) 34.007088598s ago: executing program 4 (id=313): r0 = socket(0x10, 0x803, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400"], 0x20}}, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="2e7d876b", 0x4}, {&(0x7f0000000080)="d9916047d0e9092db87039bf119f357805e7c5b0f1d0a2150ec8122fa3c58d151d07f8025d715d2adcb232c84576075d6d64977c847f8d334512cf59008503927017c5fcd4761ee8f77de95d5c079489f89c1a5076645e8e99eeb84839ef24053ab565d1fba7cbb16e03cedb8973aa6e044e85930cb26b1932e6e5403ba5503e7b9fbca97efdfe31c2e2b581759c9e8a4973b840a5bd7d11b0d1c8b0723c5ffa8f6a8c2d4d71ab8132546ebb5e9bcfd6d38c49c8785b0fdf13a3db5f144abe1b1e8eebd447d9ab0b9316e8c9c07da7f36bd7355bf5c4c24f35d23f09e566d2ad1bedb4390f0a27e18b6ebde3eda0ebca766f3e81a30ae5", 0xf7}, {&(0x7f0000000180)="32c07a0a1d31600778e92c74a06af21266bd52adb848e94903179d6c1bf27e3ec9c4a8738ae4bdeb1bd83773fccdf564757040f34aef7f820b72df2a16ba9527b74fbca61c07f8a87ae75e13cc936ae018bfa720ff21b347da7f1e2a153663f74a526f3f2c000524cf2162589a9e14d112dfc99bb5ca40d95d44a90a49", 0x7d}], 0x3}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)="b34d3aae631b", 0x6}], 0x1, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x48004}}], 0x2, 0x4004) 33.834103998s ago: executing program 4 (id=317): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0xfffffffffffffffe) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x19, &(0x7f0000000780)=ANY=[@ANYBLOB="180000001f000000000000007e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f80000008500000082000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850034218461156fda68d318c90000b300000095000bd9bcd8371cd8969b5d"], &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) setns(r3, 0x20000000) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x1, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xd09, 0x3, 0xe054}, {0x3, 0xc66, 0x101, 0x80000000}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20001091}, 0x40) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x6, 0xa8, 0x0, r9, 0x0, '\x00', 0x0, r0, 0x0, 0x5}, 0x50) 33.770912126s ago: executing program 4 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000200)='file read @etc/passwd /as/\\}/d=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin=\n', 0x4c) 33.770010173s ago: executing program 4 (id=322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e657200000018000300000000000000000000000000ffff000025"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) r3 = dup(r2) write$FUSE_STATX(r3, &(0x7f00000002c0)={0x14f, 0x0, 0x0, {0x2, 0x100, 0x0, '\x00', {0x1000, 0x6, 0x8, 0xffff, 0x0, 0x0, 0xa000, '\x00', 0xffffffff00000000, 0x2, 0x80000000, 0x1, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x4}, {0xdc, 0xffffffff}, 0x3, 0x7fff, 0xc68}}}, 0x130) write(r1, &(0x7f0000000100)='select \n', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r4, &(0x7f0000000a00)="a7a96c5a4d5f4d7cbd4fe2c7925d93e1920dfe465315c81f0d51131cf90d056c26dbfbb61532bc6dbee9e4688070d97f50f7d9a557f6682a0000000000fd9f53389766473c5700007f46eb3ef687243eb6d40cdfdbe53e4c5245f8b980a9a6abe2a2372a360060ac10cbd80f18f7992a2b19da94b50e05007f7e0000faeb182e3a51eb1a3a57cc39191c0d74d1551626185e1546e2681086b7d880396e5607499c2191d4e52345cf159b3016c58835f2f8d8249c1e0c2f228a0a30e649810eaef4c14010c32302750616f99b31305d11", 0xd0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00400000000000001c001280090001007866726d000000000c00028008000200ea000000140003007866726d300000000000000000000000050021"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0x9}, 0x28) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r5, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/129, 0x81}], 0x1, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/137, 0x89}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000840)='veth0_virt_wifi\x00', 0x10) write(r1, &(0x7f0000000200)='file read @etc/passwd /as/\\}id=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin=\n', 0x4c) 33.411055701s ago: executing program 4 (id=327): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000640), 0x2) r2 = memfd_create(&(0x7f0000000680)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000780)={r2, 0x0, 0xfffffffffffff000, 0x4000}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x665b00, 0x1ad) r5 = syz_io_uring_setup(0x34bc, &(0x7f0000000080)={0x0, 0xd24, 0x200, 0x5, 0x37b, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000003c0)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) r10 = mq_open(&(0x7f00000007c0)='#sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00\xa5R\xf7\xd39P\xb0\x8cK/7S\xb8V/\xff\xa9P\x18\xa77\x04\xc4\x04\bL\x179\x8d\xd8Y\x8b\x18\xe3j\x82\x04\x8ae\xf33\x1f\xb1-\xee\x13\xac\xe3&o\x05+\x8a/\x85NJ \xe4_\x06yge\xe8\xa6\xb9U\xb9/\xb2\xb9,o\x0eE@\xa9Qu\xe5\x06\xe9\x1dH\f\xfa&\xe13\xcap\x99\xc4\xb2b|\xa7\x8b\xc0\xfe\x82%q\x83\x8f\xd0\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\xb7\xd2\xda\xce8>&\x12]\xba\x82d*\xd8;\x19\xa44-\xbd\x8d\xc5\xbc\"D\x8f6Y\xc8\x1cPkC\xa3\xb00\xfd\xe9\xc1t\xbb\x7f\xd4P\x13S\xeb\xa2\xbb\xa0\x950\x1b\x96\a\xe5\"U$=\xb4\x84?[\xed\x9c\x0276\xc3\xc8\xe9\xdc\x06\xddz\xd5\xc7\xc4\x06\xf4z3N\x8e\\\x8f$\xb5-\xc1\x87\xfaS\t\xd3\f\xee\xf6\xc0\xda\x0f\xc0%\x82\x9e\x85\xce\x83\x02\x00\\\xb3.\xec\x00\xce\xcf\xd0KK\x97\xd5c\xf5\xa6\xd9\x81\x17\x88D\x9d\xab\x8a\x83\xe3x\x7f\x10\xf9oV\x18V=\xd0\xf3Q\x9f\xec\xb2\x9c\v\x8a\x1b\xc3\x14t\xc7\xca(\x11\xc8\xb9[\x13Z\xcaT\xb3|\xbb\xe4\xfd\xb0\ah;]\xc7\xff\xa2y0\"\xce\xd5\xad\xa0\x1e\xb0\xac:\xff\x99\x87\"\xd1\xe8P\x8f\x11x4\xc8\x01\x02\x1a.\x84\xdeQ\xa8\xdfn\x82c\x86\xf8\x178\x95\xaf\x01', 0x6e93ebbbcc0884f2, 0x11f, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x6}) mq_timedsend(r10, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r10, 0x0, 0x0, 0x9, &(0x7f0000000480)={0x77359400}) mq_timedreceive(r10, &(0x7f0000000540)=""/202, 0xca, 0x200000200009, 0x0) 19.42351379s ago: executing program 1 (id=540): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1d, 0x20000000000000bb, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000759a636c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0xa8, 0xa8, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xff, 'veth0_virt_wifi\x00', 'vlan0\x00', {0xff}, {}, 0x1, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x3, 0x2, 0x0, 0x4], 0x1, 0x3}, {0x0, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x350) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r5 = socket$netlink(0x10, 0x3, 0xe) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="6a0afaff270f0000bfa200000000000007020000f0ffffffb70300000a000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000005600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f00000005c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r7, 0x0, 0x0, 0x4}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="540000001000010025bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a21040003000000340012f80cf3a080090001006e66726d00000200eaff07000100000800028004000000b30d89aebec47fd30c00a8c7c8a14955393a11a8ab6d4f9c1db497b26250fa0e83c10000000000000000000000000000000000000000800000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 18.495701839s ago: executing program 1 (id=548): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000780)=@framed={{}, [@alu={0x7, 0x1, 0x3, 0x0, 0x6, 0x1}]}, &(0x7f00000007c0)='GPL\x00', 0x9}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000080), 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x80000004}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000004c0)={0x20000014}) epoll_pwait(r5, &(0x7f0000000540)=[{}], 0x1, 0x1ff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x20, r7, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) fstat(0xffffffffffffffff, 0xfffffffffffffffe) sendto$inet6(r1, &(0x7f0000000500)='trigger_nfqueue', 0xf, 0x0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18.360518086s ago: executing program 32 (id=327): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000640), 0x2) r2 = memfd_create(&(0x7f0000000680)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000780)={r2, 0x0, 0xfffffffffffff000, 0x4000}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x665b00, 0x1ad) r5 = syz_io_uring_setup(0x34bc, &(0x7f0000000080)={0x0, 0xd24, 0x200, 0x5, 0x37b, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000003c0)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) r10 = mq_open(&(0x7f00000007c0)='#sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00\xa5R\xf7\xd39P\xb0\x8cK/7S\xb8V/\xff\xa9P\x18\xa77\x04\xc4\x04\bL\x179\x8d\xd8Y\x8b\x18\xe3j\x82\x04\x8ae\xf33\x1f\xb1-\xee\x13\xac\xe3&o\x05+\x8a/\x85NJ \xe4_\x06yge\xe8\xa6\xb9U\xb9/\xb2\xb9,o\x0eE@\xa9Qu\xe5\x06\xe9\x1dH\f\xfa&\xe13\xcap\x99\xc4\xb2b|\xa7\x8b\xc0\xfe\x82%q\x83\x8f\xd0\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\xb7\xd2\xda\xce8>&\x12]\xba\x82d*\xd8;\x19\xa44-\xbd\x8d\xc5\xbc\"D\x8f6Y\xc8\x1cPkC\xa3\xb00\xfd\xe9\xc1t\xbb\x7f\xd4P\x13S\xeb\xa2\xbb\xa0\x950\x1b\x96\a\xe5\"U$=\xb4\x84?[\xed\x9c\x0276\xc3\xc8\xe9\xdc\x06\xddz\xd5\xc7\xc4\x06\xf4z3N\x8e\\\x8f$\xb5-\xc1\x87\xfaS\t\xd3\f\xee\xf6\xc0\xda\x0f\xc0%\x82\x9e\x85\xce\x83\x02\x00\\\xb3.\xec\x00\xce\xcf\xd0KK\x97\xd5c\xf5\xa6\xd9\x81\x17\x88D\x9d\xab\x8a\x83\xe3x\x7f\x10\xf9oV\x18V=\xd0\xf3Q\x9f\xec\xb2\x9c\v\x8a\x1b\xc3\x14t\xc7\xca(\x11\xc8\xb9[\x13Z\xcaT\xb3|\xbb\xe4\xfd\xb0\ah;]\xc7\xff\xa2y0\"\xce\xd5\xad\xa0\x1e\xb0\xac:\xff\x99\x87\"\xd1\xe8P\x8f\x11x4\xc8\x01\x02\x1a.\x84\xdeQ\xa8\xdfn\x82c\x86\xf8\x178\x95\xaf\x01', 0x6e93ebbbcc0884f2, 0x11f, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x6}) mq_timedsend(r10, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r10, 0x0, 0x0, 0x9, &(0x7f0000000480)={0x77359400}) mq_timedreceive(r10, &(0x7f0000000540)=""/202, 0xca, 0x200000200009, 0x0) 18.350835942s ago: executing program 1 (id=552): syz_mount_image$ext4(&(0x7f0000001800)='ext4\x00', &(0x7f0000001840)='./file1\x00', 0x2a0471a, &(0x7f0000001880)={[{@errors_remount}]}, 0x82, 0x4a7, &(0x7f00000018c0)="$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") (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000200)) (async) r2 = syz_open_pts(r1, 0x20e40) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) ioctl$TCSBRK(r2, 0x400455c8, 0x2) (async) readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/210, 0xd2}], 0x1) (async) connect$can_bcm(r0, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5, 0x7ab0715dca68fe77, 0x8000001, {}, {0x0, 0x2710}, {}, 0x4, @canfd={{0x3, 0x1, 0x1, 0x1}, 0x35, 0x2, 0x0, 0x0, "8609c5d4018f0c3ac91e976a580c2d0c95e65c0d36078968c96194e832d5ef4498e5c92d8a891ff8881f266cafbc5fbcd1a348b1fb50dcc4f29bd85f3eaaf0b4"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xd02, 0x15) pwrite64(r3, &(0x7f0000000700)='2', 0xfdef, 0xc00) pwritev2(r3, &(0x7f0000001780)=[{&(0x7f0000000140)="60cb6bbd5d33134167bc37ec97a926a1d3c5ad05d777a876480c11d65c57332c6d1dfaf6c86ec1c89754257d10627dd792ba5f6621e8a17ac5ff6879a633e2a2bce3e66ee48a5ee345043bd9c45d32d0d41eca0195e91ffff273501d6fe266c91313ef0afd04ff90af47a17bafb12e", 0x6f}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="b9b7a9e501c65697e09b05f90dceaae2f4484c06fb42ff695e6bd33e515dc138da10f578d93497db40a8313b22e41a9c73925235ea5cd5aeabc0a21cecbe", 0x3e}], 0x3, 0x5, 0x4, 0x4) 18.059611414s ago: executing program 1 (id=555): r0 = syz_io_uring_setup(0x200f00, &(0x7f0000000580)={0x0, 0x57b0, 0x80, 0xfffffffd, 0x40055}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000006c0)=@IORING_OP_POLL_ADD={0x6, 0xb, 0x0, @fd_index, 0x0, 0x0, 0x1, {0x3015}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_open_procfs$namespace(0x0, &(0x7f0000002680)='ns/pid_for_children\x00') r4 = syz_open_dev$usbfs(&(0x7f00000012c0), 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000001300)=0x8) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000001340)={0x1, 0x1}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x14a0, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x310decf7, 0x1) ioctl$USBDEVFS_CONNECTINFO(r5, 0x40085511, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000a00)='./file0\x00', 0x8400, &(0x7f0000000a40)={[{@nodiscard}, {@discard}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@nolazytime}, {@nobarrier}]}, 0x6, 0x62e, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000001100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001140)={0x0, 0x100000000, 0x2000000000000000, 0x3, 0x0, 0xffffffffffffffff, 0x7b, 0x0, 0x9b}) openat(0xffffffffffffff9c, &(0x7f00000011c0)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001200)={0x80000000, 0x7, 0xcb, 0x7, 0xffffff01}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r8 = syz_io_uring_setup(0x1501, &(0x7f0000000780)={0x0, 0x4, 0x0, 0x0, 0x246}, &(0x7f0000000840)=0x0, &(0x7f0000000800), &(0x7f0000000740)) io_uring_register$IORING_UNREGISTER_NAPI(r8, 0x1c, &(0x7f00000008c0), 0x1) fallocate(r5, 0x0, 0x5, 0x8355) syz_clone(0x40000100, &(0x7f00000003c0)="d0516d06d481a8d93a3e947d34654d76efb9767c549c075d30ae2f33b04fd889137aced606aa85148f49c67f9efe9ad70e41e1f788207a4579fb5485a4f2d18d5b3c10b9c25b32573bd626d71e97d632cf3c09bd37511c3f773d104c7fd48086d6c34093ff77ced557811f034f0be9e106e5624353c7f025f04abc262d0f2cea250cfa83ab02378d38953d1656a759aaf99e29d58651cae5698fa0bff1a39859a9d536dfc55954c02a5f595f22f7f0787ed9546d445ce2852955f30ecb34449d40ef6ee343fe", 0xc6, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="021f67aa30072b8c76c53864b5a57a8d410434bfb7ba334aa2f4ad41") ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001380)=ANY=[@ANYRESHEX=r3, @ANYRES16=r7, @ANYBLOB="01042dbd7000fedbdf25608148b9f241c778", @ANYRES32=r9, @ANYRESOCT=r8], 0x2c}, 0x1, 0x0, 0x0, 0x8811}, 0x400c000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x275a, 0x0) setuid(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001280)={0x5, &(0x7f0000001240)=[{0x8, 0x6, 0x2, 0x3}, {0xff, 0x8, 0x10, 0xfffffffe}, {0x35, 0xf, 0x3a, 0xe000}, {0x800, 0x4, 0x8, 0x1}, {0x7, 0x5, 0x1, 0xffffff80}]}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r10, 0x800448d3, &(0x7f0000000900)={@none, 0x9, 0xe, 0x3, 0x53, 0xdab, "1766ec62a7f9e38159624a3602e1f705fbb535483c066387affa85de61a52e21615542cc40cd803ef68fd8d6caff97e1d0ffec4c31a31c2e5b5e025659f3e284895679283d087004a3070d7ebbfe5c9d5a59ac025c45a75c3e3b170e47be3a9bb8a8c0d11e37561437a68e471cc999427911f81847cb7491af148b78eec5a17e"}) ioctl$FS_IOC_RESVSP(r10, 0xc0189436, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5f, 0x3}) 17.544547954s ago: executing program 1 (id=561): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0xff0}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) (async, rerun: 64) r1 = socket$inet(0x2, 0x1, 0x0) (rerun: 64) getsockopt(r1, 0x0, 0x18, 0xffffffffffffffff, &(0x7f0000000800)=0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48004}, 0x200408d1) (async) socket$netlink(0x10, 0x3, 0xb) (async, rerun: 32) r4 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket(0x28, 0x5, 0x0) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r12, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x28, r10, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x28}}, 0x0) (async, rerun: 64) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80008200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x50}}, 0x20000005) (async, rerun: 64) connect$vsock_stream(r6, &(0x7f0000000840), 0x10) sendmmsg(r6, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0xb}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) (async) r13 = syz_open_dev$usbfs(&(0x7f0000000280), 0x76, 0x80340) (async) r14 = epoll_create1(0x0) syz_emit_ethernet(0xbe, &(0x7f0000000b80)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async, rerun: 64) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r15, 0x5, 0xb68, 0x739, &(0x7f0000000e00)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f00000002c0)={0x20000008}) (async) setsockopt$packet_int(r4, 0x107, 0x7, 0x0, 0x0) (async, rerun: 64) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000001) (rerun: 64) 17.278652867s ago: executing program 1 (id=566): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001b80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000003bc0)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0xffffffff81424014, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f0000003c40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000005c80)={0x10, 0xffffffffffffffda, r4}, 0x10) open_by_handle_at(r1, &(0x7f0000007e00)=ANY=[@ANYBLOB="1c00000081"], 0xfeffffff) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000140)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x4, 0x440, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x10}}}, &(0x7f0000000340)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000740)={0x0, 0xf8e8, 0x400, 0x80001, 0x255, 0x0, r6}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x200, 0xffffffc, 0x10002cb, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8275, 0x800, 0x1, 0x371}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x3, 0x8367}}], 0x1, &(0x7f0000000680)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x0, 0x4, 0x0, 0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r12, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {r5, r3}}, './file0\x00'}) 17.205598708s ago: executing program 33 (id=566): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001b80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000003bc0)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0xffffffff81424014, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f0000003c40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000005c80)={0x10, 0xffffffffffffffda, r4}, 0x10) open_by_handle_at(r1, &(0x7f0000007e00)=ANY=[@ANYBLOB="1c00000081"], 0xfeffffff) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000140)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x4, 0x440, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x10}}}, &(0x7f0000000340)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000740)={0x0, 0xf8e8, 0x400, 0x80001, 0x255, 0x0, r6}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x200, 0xffffffc, 0x10002cb, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8275, 0x800, 0x1, 0x371}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x3, 0x8367}}], 0x1, &(0x7f0000000680)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x0, 0x4, 0x0, 0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r12, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {r5, r3}}, './file0\x00'}) 5.073773451s ago: executing program 0 (id=728): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x200f, 0x3, 0x1, 0x0, 0xfc}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f9000e", 0x24, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x2, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc, 0x6, 0x1, 0xce, 0x5}, @mptcp=@remove_addr={0x1e, 0x3, 0x6}]}}}}}}}}, 0x0) 5.073212286s ago: executing program 0 (id=729): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r1) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2404c890) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3) (async) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000580", @ANYRES16=r2, @ANYBLOB="180028bd7000fcdbdf250800000014000380080003000400000008000500ac1414aa0800050005000000"], 0x30}, 0x1, 0x0, 0x0, 0x15}, 0x800) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000480)) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3cd, 0x0, {0x0, 0x2, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x12, 0x2, {0x0, 0x0, 0x5, 0x6}}]}, {0x4}, {0xc, 0x3}, {0xff18}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0xe32fa770305bfcda}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000200)={@random="51a47820f112", @local, @void, {@can={0xc, {{0x2}, 0x8, 0x0, 0x0, 0x0, "a1a276c2df6a8609"}}}}, &(0x7f00000003c0)={0x1, 0x2, [0x6d1, 0x133, 0x884, 0x138]}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x200080, &(0x7f0000000380), 0x3, 0x573, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000001180)='.\x00', 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001200)='.\x00', 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001240)={0x0, 0xcc}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001280)=[@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}], 0x1c) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008050) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000600)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r6, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r5, r7, 0x6, 0x0, @void}, 0x10) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000001380)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c0369031d6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000023c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x528, 0x2e0, 0x438, 0x2e0, 0xd0, 0xd0, 0x568, 0x568, 0x1b8, 0x568, 0x568, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xffffff00], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x10, 0x1, "1339f8cb7f48b348680b940c9d60e69ac3662400cd01efc7553bccc27a28"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000012c0)={0x2, 0x9}, 0x8) 4.990337222s ago: executing program 0 (id=731): capset(&(0x7f00000007c0)={0x20080522}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000008c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x7) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000980)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f0000000a00)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002500)=[{{&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/25, 0x19}, {&(0x7f0000001d80)=""/57, 0x39}, {&(0x7f0000001dc0)=""/83, 0x53}], 0x4, &(0x7f0000001e80)=""/82, 0x52}, 0x80000001}, {{&(0x7f0000001f00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000480)=""/239, 0xef}], 0x1, &(0x7f00000020c0)=""/22, 0x16}, 0x3}, {{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002180)=""/96, 0x60}, {&(0x7f0000002200)=""/134, 0x86}, {&(0x7f00000022c0)=""/223, 0xdf}], 0x3, &(0x7f0000002400)=""/197, 0xc5}, 0x9}], 0x3, 0x553e363e0e32522f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x8, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(r4, &(0x7f0000000cc0)=[{&(0x7f0000000d00)='2', 0x1}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1, 0x1}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) cachestat(r8, &(0x7f0000000780)={0x2}, &(0x7f0000000840), 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) socket$kcm(0x11, 0x3, 0x0) 2.714465889s ago: executing program 6 (id=752): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0xf1, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @remote, @void, {@generic={0x816, "a75b4b4c66a7794a456ef702d95454ae6a633725776fa2cfea54dcc37ff8397c34775050f5924ffc8fb0b19d28b80146a5c999cd225b607dcc67da9caea5a8a8148340f90192c272ef53a685c8db42c4e72bd0744db5d367822465c3cde8271bb975e94e81e6f71205327f2ddc98b4b2caea0efaaad325d890e07f7c7203697b991e4c4f80263ee216d163a99837897231ebdfee36770dd542a1a2a0827a46f1154ad7a804c469b2ac18fc6247a85a5bf1515f2c86adcf8f8bfd20869c0dad1c7944c0b4a1dfb36a6f35a612570de79ff94aae045319596217d3feaf0f1a7de8d9c672"}}}, &(0x7f0000000280)={0x1, 0x1, [0x15, 0xfcf, 0x4e0, 0x81]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x40000, 0x0) fcntl$notify(r4, 0x402, 0x1a) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket(0x2, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000140)=0x2a, 0x4) syz_open_dev$dri(&(0x7f0000000000), 0xd, 0x0) 2.643974179s ago: executing program 6 (id=753): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000740)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xb665c751510bd7f1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000006000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/fail_io_timeout/times\x00', 0x1, 0x0) writev(r3, &(0x7f0000000580)=[{&(0x7f00000005c0)='9', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x20e, 0xe45, 0xfd00003f, &(0x7f0000000400)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4, &(0x7f0000000540), &(0x7f0000000580)}, 0x28) r4 = syz_io_uring_setup(0x2717, &(0x7f0000000000)={0x0, 0x2460, 0x0, 0x2, 0x29d}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r5 = eventfd2(0x1, 0x801) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000001c0)=r5, 0x1) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000600)={0x24, @short={0x2, 0x3}}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) sendmsg$key(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x10}}, 0x4001) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="784a023808890000"], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2.409847349s ago: executing program 5 (id=756): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000700)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x5) r1 = accept(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x7, 0x8, 0x5, 0x200, {{0x11, 0x4, 0x0, 0x4, 0x44, 0x68, 0x0, 0x4, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1f, 0x9e, [@broadcast, @multicast1, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @lsrr={0x83, 0xf, 0x27, [@remote, @empty, @local]}, @noop]}}}}}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x1, 0x6, @multicast}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x80) read(r3, &(0x7f0000000780)=""/4096, 0x1000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000740)={0x2, 0x4e22, @local}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000040)='10', 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtclass={0x44, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x1}}]}}]}, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x6a, 0x5, 0x9, 0x20008, r5, 0xd53f, '\x00', r8, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x6}, 0x50) 2.405570913s ago: executing program 0 (id=757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x965b, 0xe147a, 0x6, 0x4, 0x7, 0x8, 0x775, 0xffffffffffffffff, 0x4, 0x6, 0x400000000, 0x8000000000000000, 0x3, 0x1020000000000, 0x80000000, 0x54, 0x10000000000009, 0x5, 0xffff, 0x40, 0xe6, 0x1000029a1, 0xe, 0x80, 0x9, 0xa}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x5, 0xfe}, {0x25}, {0x6}]}) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x8b}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x8) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0x5, &(0x7f00000011c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r3, 0x0, 0x2100, 0x0, &(0x7f00000012c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sched_setscheduler(r2, 0x2, &(0x7f00000006c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000740)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000007c0), 0x651, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000800)) recvmmsg(r4, &(0x7f0000000840), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x16, &(0x7f0000000940)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4d}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x200000, &(0x7f0000000a00)={[{@resuid}, {@dioread_lock}, {@grpjquota}, {@dax_always}]}, 0x3, 0x577, &(0x7f0000000a40)="$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") r6 = syz_open_dev$vim2m(&(0x7f0000000fc0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000001000)={0x1, @pix_mp={0x3fe, 0xfff, 0x35315852, 0x3, 0x8, [{0x8, 0xf}, {0x8, 0xa}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x7, 0x9}, {0x6, 0xc}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000079125a000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$security_smack_transmute(r1, &(0x7f0000000480), &(0x7f00000004c0), 0x4, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000340)={'veth1_to_bond\x00', 0x400}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000280)=0x189d, 0x1a) recvmmsg(r7, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/49, 0x31}, 0x10005}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000040)) 2.345952087s ago: executing program 6 (id=759): ioctl$MEMREADOOB64(0xffffffffffffffff, 0xc0184d16, &(0x7f0000000100)={0x8, 0x0, 0xce, &(0x7f0000000000)="3c4308a4c08dc43270a36d04a84b8c702237091c8d78ef732562555d56e8d2cb5a99878db6e34842f9c4a320b85bee9832851da5501ca6e853317d732ee87fc7f20abf06f5b6cacf69807fadb33fb93d698644573739da7890d3c216580df47b0e25378f0372c7c18d5e022a86207e63b9d73d078a5242ff0393909807bf838b0b3fea4eba1b02d22cbfd1e792a21aa6f783d93eeb99d9cf749ee0add407575d2f1f83b1a8b7aa863096b2b9d05cabd47b2d3fe1f9a044969ca286e1fb6c177364bf928a42b5b3ff2f0a96806bae"}) ioctl$MEMWRITEOOB64(0xffffffffffffffff, 0xc0184d15, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="bd0d24e46c68ae261e937d715b528ddb539b6417012c7b8999c4d1f4a4a00f90fc5bcf00141f545aba80fa2f49f50a901d9bd3b011a865e96df4e44fec27f4f2de2c29971f3202516ba7eed11cc930c85cf6cc5ed2b2d3bc86606b2ef7b3a96a03014469507374ce77a8c8a9c13219f1d9a6c5fb5289405828156491c397b26211569dfcb80a91030e42e15b3664f38e24d9c8f0cb18bb394ca93b6be7070b76dd7423405cbd88d6b87b9992e5ed728777a901799d52bbd615a1fa6c6eb6e7f0f7d41bf77173fa8af3a6689dbe903f1861d7f14f7c98c8", 0xd7}], 0x1) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x4, 0x400, 0x4, 0x0, 0x4, 0x40043, r2}) r3 = syz_open_dev$mtd(&(0x7f0000000380), 0x3, 0xc400) read$mtd(r3, &(0x7f00000003c0)=""/186, 0xba) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000480), 0x101240, 0x0) sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f00000004c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x2}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)="494933fffbd4ccc84b4d6ead500fa1d637b8f25a0ff363ce68db69e8ec483cd11d9e6b10", 0x24}], 0x1}, 0x20004000) syz_io_uring_setup(0x55ed, &(0x7f0000000600)={0x0, 0x2086, 0x400, 0x2, 0x10f, 0x0, r4}, &(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) r6 = mmap$IORING_OFF_CQ_RING(0x0, 0xc5d, 0x3, 0x100010, r4, 0x8000000) r7 = syz_io_uring_complete(r5, r6) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = getpid() sched_setscheduler(r8, 0x0, &(0x7f0000000740)=0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) getresuid(&(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) sendmsg$nl_netfilter(r9, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x2fc, 0x10, 0x9, 0x401, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x7}, [@nested={0xf5, 0x9e, 0x0, 0x1, [@typed={0x14, 0x168, 0x0, 0x0, @str=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x6e}, @typed={0x4, 0xac}, @generic="39f73319b5a4329d7c711ee440fa0a3dad260db9a227b2a499f614275a1db06654478bb1cc7de21ddc7c0967a9ba8a7810ebd676090218058461e89fcc8e30e75c0203215127e0a1df000c353c05f0c12c185655de9fb3237281f7a007517640349c9e00d20fe408d8a0616e12d5dede7da43717a1f5a257c7def1b316b558e8dba05571ed152a8065bd54ccf1b4cf240206e1d8f3bec1ff350f0c1570f387fea301f64cabbce28211b47dffce26a999c54fb5560178b858d22df984a2", @nested={0x4, 0xe3}, @nested={0x4, 0xbc}, @typed={0x8, 0x35, 0x0, 0x0, @uid=r10}, @nested={0x4, 0xd3}, @nested={0x4, 0x135}]}, @generic="164d4077e5866b70197c4d538d38fa97e3c679c1bd53cb46abca5f671b7912d209b78a4dccae35b1f8d19c36a3c94c8ff0c72c50dc78de347105d7e6bd3be518df39d1f8df70db039bf60c5145ef4c5e23457f0cef8480e00e841f1a3c4f7a063dcf59c5260c9da8", @nested={0x9b, 0x1e, 0x0, 0x1, [@typed={0xe, 0xb2, 0x0, 0x0, @str='/dev/mtd#\x00'}, @typed={0x4, 0xf4}, @generic="c7045f75dfbf0d13767600734d6da316f3f1e6394d40a41017953eaf314c8e87b21be692c4f03d3cb237df19f501b3243e4826d78bb9bc3623f2a05d6571a2f4a85669984412da2117d78a4c0d7c1d03f7eb43f9ebe79659b9ce6886d86e575507400b9f7145570214441f49fe908ea6dc4a0647466302", @nested={0x4, 0xeb}, @nested={0x4, 0x7d}, @nested={0x4, 0xef}]}, @generic="3f47761653c10fbc90b4d1fcfcdb2a07e7c1882d415e20f51e9f107c607fd3e6df08aa1d3cd1390e583004845ea4f091c0c1f02bd4c47beb4c314628f6f1a2b9e16950da4d66ba", @nested={0xa2, 0x106, 0x0, 0x1, [@generic="ad6d9e65f1f3b85329f20f01ac1d757400d20414268c2ab57f5768e3608215fb120337a218c9a24c43ca17646731ed47f68657cada4d321e9d6bbbf386f33202131a90b584500da2a8c7951004c93ed0728e0ccd41b2d65fb81e29bc26ec11048ef13cda912ee570dcc5f621520501588ae0b8716a7d241a14388952bf1d70137dacae096fff5592075f351c3440ca06b8f41486e567fb565afa", @nested={0x4, 0x54}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x8040}, 0x20044010) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x10, 0x3f6, 0x2, 0x70bd2d, 0x25dfdbfe, "", ["", ""]}, 0x10}}, 0x4011) ioctl$XFS_IOC_READLINK_BY_HANDLE(r7, 0xc038586c, &(0x7f0000000e00)={r1, &(0x7f0000000d00)='/sys/kernel/debug/sync/info\x00', 0x400000, &(0x7f0000000d40)={@align=0x9, {0x2, 0x40, 0xe6d}}, 0x7f9, &(0x7f0000000d80)={@_ha_fsid}, &(0x7f0000000dc0)=0xffffffff}) open_by_handle_at(r4, &(0x7f0000000e40)=@raw={0x50, 0x30, {"26bc7e9e9be6f9247b05f2af27fed2fc64cdab306f93aa116f201e67a2b70babcc2f1e1c16af5aadc5b48cc7ff70b279d050850ca8edfd0029aa9572eb5609f0ffb063b293e72624c549bd3e8d12"}}, 0x100) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r13, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x95) read$FUSE(r4, &(0x7f0000001000)={0x2020, 0x0, 0x0}, 0x2020) statx(r4, &(0x7f0000003040)='./file0\x00', 0x2000, 0x40, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000003180), &(0x7f00000031c0)=0x0, &(0x7f0000003200)) fstat(r4, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r7, &(0x7f0000003300)={0x290, 0xffffffffffffffda, r14, [{{0x6, 0x0, 0xb, 0xffffffffffffffff, 0x4, 0x8, {0x4, 0x6, 0xc7, 0x0, 0x1e93, 0x8, 0x3, 0x6, 0x7f, 0x1000, 0x1f1515d8, r11, r15, 0x4, 0x800}}, {0x0, 0x7, 0xa, 0x40, '/dev/mtd#\x00'}}, {{0xd4d9, 0x1, 0x5, 0x27fa, 0x7fff, 0x2, {0x2, 0x8001, 0x1, 0x3, 0x7, 0x0, 0x80000001, 0xd, 0x10001, 0x1000, 0x3, r12, r16, 0x8, 0x1}}, {0x2, 0xb6, 0x2, 0x0, ',\''}}, {{0x2, 0x1, 0x6, 0x9df, 0xc, 0x8, {0x6, 0x3, 0x306, 0x0, 0xffffffffa8684474, 0x3, 0x40, 0xffffffff, 0x3, 0xa000, 0x4f81, r17, 0xee00, 0xfffffff9, 0xf}}, {0x2, 0x4, 0x1, 0x400, '-'}}, {{0x6, 0x0, 0xc1, 0x64af, 0x7, 0x7f, {0x4, 0xb02, 0x2, 0x3, 0x4, 0x4, 0x4, 0x5, 0x0, 0xa000, 0x9, 0x0, 0xee01, 0x9, 0x79}}, {0x3, 0xfffffffffffffffb, 0x0, 0x100}}]}, 0x290) 2.32607631s ago: executing program 2 (id=761): userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1], 0x156}, 0x8081) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x80}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x3d48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x50) fcntl$setlease(r5, 0x400, 0x1) sendfile(r5, r5, 0x0, 0x1000000000007) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0)=0x3) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f00000002c0)=0x1) ioctl$PPPIOCSMRU1(r7, 0x80047455, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x2000000, 0x0, {0x4}}, 0x18) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 2.238297802s ago: executing program 6 (id=762): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180), 0xfdef) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000009c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000ac0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000b00), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000b40)=0x100000000e2) keyctl$clear(0x3, 0xfffffffffffffffd) pread64(r0, &(0x7f0000001c00)=""/4084, 0xff4, 0x40000000) (fail_nth: 2) 2.220676185s ago: executing program 3 (id=763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000340)=ANY=[], 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4410, &(0x7f0000000500), 0x2, 0xbdb, &(0x7f0000000540)="$eJzs3M1rHOcZAPBnRqu1ZKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8FC3llhNYfSCquZB1W7T9Q2p5begk4MQk5xGdfEpJrLol9TcghYIJiJWBCsmH2Q1K8Wkm2dzWO/PvBu/O+887u8zwer2des7sBvLDGsoc04lhEXEwiSq39aUQUG72hiFrzuPW1lenP11amk6jX//RJEklEPFxbmW6/VtLaHmkNhiLi3d8m8b1/dMZdWFqem6pWK/Ot8cnFK9dPLiwt/2L2ytTlyuXK1YnTv5o8NXl6/Mxkz2p99MG5O5/95Pcf1b54+cvbn/77pSTOxUhrbmsdvTIWYxt/JlsVImKq18FyMtCqZ2udSWGXJ6V9TgoAgK7SLfdwP4hSDMTmzVsp3nwv1+QAAACAnqgPRNQBAACAAy6x/gcAAIADrv05gIdrK9Ptlu8nEvbXg/MRMdqsf73VmjOFqDW2QzEYEYcfJrH1a61J82nPbCwiPrx/5rWsRcf3kP93qwchdlRbjYgfbnf+k0b9o41vcXfWn0bEeA/ijz023u+/f89S/7kexM+7fgBeTHfPNy9knde/dOP+J7a5/hW2uXY9jbyvf+37v/WO+7/N+ge63P/9cY8xbt76741uc1n9v77zu1fbLYufbZ+pqCfwYDXiR4Xt6k826k+61H9xjzFKX92odJvLu/76/yOOx/b1tyU7/z7RyZnZamW8+bhtjNV3Jl/pFj/v+rPzf7hL/e3ff+p2/q/vMcZfLlx4vWPn/c3uzvWnHxeTPzd6xdaev00tLs5PRBSTP3TuP7VDIrXNY9qvkdV/4qc7v/+3q3+g+XKNuWwtsNraZuO/Pxb2N7dvvtEtpfb674nP//CuR+xJVv+lLud/a/1vFzrP/z/3GONnb/3rRLe5revfrGXx22thAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IkkrS80U/TcjniSER8Pw6n1WsLiz+fufbXq5eyuYjRGExnZquV8YgoNcdJNp5o9DfHpx4b/zIijkbEf0rDjXF5+lr1Ut7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsOFIRIxEkpYjIo2I9VKalst5ZwUAAAD03GjeCQAAAAB9Z/0PAAAAB5/1PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH129Md37yURUTs73GiZYmtuMNfMgH5L804AyM1A3gkAuSnknQCQmydc47tdgAMo2WV+qOvMoZ7nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDz6/ixu/eSiKidHW60TLE1N5hrZkC/JZHknQKQk4GdJgv7lwew/7zF4cVljQ/s9r8AQ5vH1L45c6hvOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/BlptCQtR0Sxta9cjvhORIzGYDIzW62MR8R3I+L90uChbDyRc84AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD03sLS8txUtVqZzzpptDobe74FnUialfQ9VitOLf+SdXrSKcZTPv1RvV7PO/m+d3L9ZwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJwsLC3PTVWrlfmFvDMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8rawtDw3Va1W5vvYybtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy83UAAAD///TgCwo=") r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000440000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x20000880) close(0x3) r6 = syz_open_dev$usbfs(&(0x7f0000000340), 0xb, 0x2) close(r6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f9, &(0x7f0000000380)={'erspan0\x00', 0xffffffffffffffff}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYRES32=r2, @ANYRESDEC=r6, @ANYRESDEC=r1], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)="d8000000", 0x4}], 0x1}, 0x0) syz_emit_vhci(&(0x7f00000015c0)=ANY=[@ANYBLOB="040e0220020400"], 0xa) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f00000013c0), 0xffffffffffffffff) r11 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r11, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={0x0, 0x1c}}, 0x0) getsockname$packet(r11, &(0x7f0000001480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000014c0)=0x2ba) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)={0x2c, r10, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r12}, @FOU_ATTR_IFINDEX={0x8, 0xb, r12}]}, 0x2c}}, 0x80) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r13, &(0x7f0000000400)=ANY=[], 0x141) 1.808468629s ago: executing program 5 (id=764): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="040100001000010000000000000000000a0101010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000002b00000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d78f299a000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000a000200000000000000000014000e00fc"], 0x104}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002c00)={{{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x4e22, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xff}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0xa, @in6=@empty, 0x0, 0x2}}, 0xe8) sendto$inet6(r1, 0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000002d00)={0xa, 0x1234, 0x0, @remote}, 0x1c) 1.752058807s ago: executing program 5 (id=765): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x883, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, [@thin_pool={0x0, 0x50, 0x0, 0x70, 'thin-pool\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '256', 0x20, 0x1c, ' 1 read_only'}}]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000029e4c0)={0x0, 0x0, "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", "7992f28f6239771ab12a2baf5627d0097f845d8a4c13d0748533018b2c7aa51452346034f4b8305bc6f436a5e52de99af179ea2338b658e6bbfaf168fe6044191c018e5ddf1df4852301be92269c0bad62c74347b71bcf601f673ad1daaf55d0707d78c5f5131af663f2a97707b7e02f7fc126c41f2c494861c3489aaaabbc7a3819d5ec7c7be59363c181ce4e586e7834f01638dd84e1713b9d28576e6bfb676a47a302e9ce566f852e9047ba387323589394b256a7dd65dbecba60c03dda4abe376ba3655677b11bce7b68654b1e75fab490be948439d1c618dedec52fadf9c8787087a05260e526d2961c7cae79a31daa5429fd9b7c2906e3e8a96f13f3091369127f7e7fe3c47d2abbfa83787a141baa6a04db1e1baa4a395357925a68844c5d9035b35c37326904b469afe209df1c558e55ff274386dd89e8a7b2d82a0f77949186221015b707646a50be3aeb6015421c03fd8d16337271864031c69af7ff622be4c1ff9f95d469a4628e23ac2ca19e7bffe73d784bdb5bd5083f396281025a0c1aa45f3041cd121ff688bf512c706cd1fcbfefaf0f53737bad723ebd3b249c92ea353f8f4a65b37fbc0305a1ddf3f76802c28fe55d3d863c853b264890a6f848751dc640b9b46248fd8649cc912871e168e7129e3853221ea77debff173f57ecde8a1ea672ba36f71c451da9d9d8bfaa84ad20b4825df6414869bb9c890f00cfc73f8e2dc9f8089e76a07d5fb580bb7192e2e3508065a08a81db037bb36d77992f90c744810879670fbfefced05454fc13b299aaa32ae7f0c830949eab3303aefee284e1066f4fa59d1ff78d06de88751658d808ff7958760e4ec7fd64f207d17f3c75a7c85e9e20dd6801cf197b5cec78f7917424c9d6f4d0dd3337fe6102d26fb818983f401101bb3528d353faec7e45d1fd45eb3bbf7b1d57cdd96e2dffc9b019b374d2101206a2497eeb200367e44905049fafb29f84596c59d5115a6bbd5d15dc85494fe7fe433d1c55c851cdbd68a1660fa27dfcfcf3a842c405abfd5e5ee4cda502fad4f16cffec6434075590ca636c90e110e38d6587408414207cc1935303903ab0ed3dfb80dcdef41da4b2266f1df309b6b3685fb47ac71dedeb5ed7e859956c4ee009f0cdf9797668fd362eb3c9980a9ae7572d3e6ce89648c5dc9d66127ed176c0036d76a938bb56882dac9a5fade8ea58f815b11201a070f108f3963c9c85293553fa86c9dc190e5c0cad9d5820f201b1f6b338d1851b770b92a0d52ec3dd297e3fa3b3e6135453ef58d297fc9e76c928b9b39360384ae78b72a056e6b44d50a50f3958422deeb04a02c73d30e6e74397533768e475eb822f4ba549a49a73195602127c188676b0d66ba49b8e2861a525ef3e7d9f9d57235ee861c7d2a8dcb59cf385b3fa6e34717cfa1d4d93dcf976758264abbd2888d0993fc509f3b6f6948fa0916b281d780c897e84233961cec1ed737921c96d85ed6619cfedb0d7a86bfeb0eea8800cef8fce5446e98791e88f6c8887dccc10b8ce54dcc04d5a3c534091039c4ae846c156f34989bd1a95dbc8b7096c29133347bc26506d3ac728a5f088cf999211c8825ce283ead7e6bc0126b4b72ffd027c4990a88c9c74e1d9286b69c1b5a206a1da70731f44397fd2edc4194670385192475702ee3b5679030ec56ec6d8ab216717d35da2cb785fe62ea6c7b45d0155a720f682c93f3de5f844866474bb3837fdf0486fa84336bdc963490d27df46b417e779824524bc34cd6873a6e1256750f39844a1a4b95f0dbde39b30ba4b528c689b343b2c13d0c265ed0b7c18cbe297dd2cf0b5e345c9a8a2699519e90ceb403a78e3c9e79360a982b1b5c031b0957791bf53aacebb36fc5254a568f259316d86b7eded2d38138f8a8bbd80d988734000180e5e1e3f2cdd3b4c36cef78bddcffc663e18879d8d4e5545c805b28949070750eb6e4cbf8a2dd0de5859e78314592fb56dbab96c436c530be230a584287678e447c6d73f660dec740fc396ff228b9cea9f4c108557b75149aec887bc1a700de8cf84ae889a0461ed66be8378ebacc1d809db50380715e51063f9c13a27dd6eb57d032f66975dd7faf67c17ac8dbd5375fcda0f7d72f99af2e189b1dac659086bd7d155dd205baa96902c597585a09bdb24b742faa0135a0e89ab6a128e807b18e636036a43b7aaa8855eb380b057825f5b3c5a2dea641cbcc0972c652572b7ea4e4f6e8221890a27d7a5feae5033cfb51d3c0c958dded907f199eda6539fa1f833e70a7acbf08800013fe484459bc8d1b24d242832e3d3d0dcd76062b3fa4709f0bc9cabd6ee1d16323c7fd453b68df5b7053e396f61d63bdd094890042049be83c201a2f4d555e2776bb78151392f463824862499a3602c051360e1e8694cf2dee9d6cea0ec921900b735b0cf4db8c90e1ff2e850c2aa527636571689b32e1eba8cc6271fc4170bc41a28be3da327fe5e09a0a34871854364b832b9b22e98c3e81b1f48fd44e75f0c27f9ea2c58a0606dc60cac562369700457050596edb76e38c682bb5a864101d53d096b6735a0719baf7640503cfc300cf91aebb8ad47cbcf047f90eab4c766c9e777721a3d59306d94732bb6eef17dceb8cb65fe43cb1356c2f56ba34bc27538abe44032bc3bd63360fadb3d31de947d190bc71b22c8b8869693edd0d54c69eac5e34ba2ee732bd2d750fc54599fd2d664ec144be575e19f85c07436c2b67ba3cf6379fd8ad737acb0fb15317e61126250f32bc152523da55763b302d5f097fbfc9e3db1e4cf8a0a6686631cf6325b1fb3417eb8d79ea4385bdf7c1620a003ac5eb96b6fb8689cd973f90a9472cffa3b699e5135b5876fc4354807b034e59506fbb855444f19380ff9a177ff4e8d962794e4135a3a416fe51c4ea6b0b811d02e88cff0b158c5c14a89ff8ad03f96a5fb97783049d6eb1e74ca160d9d2736f3ac23a5a7a90b2244a5de81f18a85a6a8f07bc23dcb23a83101c3719486618582aa282d50059a1fefca98bd957ffe5a4c20a3bd73c1add4210c37cb3e92e7d963f3309abb1e9e8223f5e1c37d51ed910c01162b09be5ad8c17a405972865f807778d5123d471a9a931dab1b4e530fcaa7149175b7199f820b1eb62bc705ba7e625247d538c68a24048bc97f9696d5a5cc6e5c5f5238f8edbf47a7115d513a0c65979e87953446cc55a976954edeec5c7e0cf4efbd8cb976ec5eda16eddfe9554765f3ebef8b64fcc0934b5ae1aa1161eba966dca0be9142f721e6c7426392678e4e5c45b4611304508fd7059f695a0a8706859e58a3e0767f4d11b11e4ee84b5bbf2356b5d370d54927156e5e7f236b9babdfdd58d642ce0b60c5267f3672e5b3d0e965ef966c8316f70e6fc7b8f0d18ad9af2dc33dbd0957b64d53171cc1ff2f89290e25a8621f6fd183781b7a8f18e65c0d1c5269666951287472ae3219545bf478884546188a4656ee6b106177dc4f2f433b1181132df0551217be9915840353f9d2a8735575b66c199269f8e44efc7c5d0ef15b8e43ab9b1eb7506be33f909152a80240ab24c09797a365b6f10ce3c984b2d37aaa276cdb6aeacb119568004d706eec4864f0229d5aef476c40fcb897581eac42dda2a218f6fe5cb79aa85de847a38e848e1c4d5da849e43896ed864290dbfd8c00b73cab6e541bbf0a5eb6e5c0f10e100c7c4ff3471b45911ee287c55e758b6b5bdf997f6f1c1e9365b97196633422a7ef7ade05013c26cdc4080c48b5fdc029d7dc693246b5207fc9c1ff12a99fde1c037e53e0b5d72456b366fac6025957fb9380943ae7911643b182c40902b5c65d8cab0f30aa66fc34d9c244d7b6b65469ee498c09c783f271e6fa87775d9440aba003f88912a896bcf362a5a6106c9356487682ee38572550d147412c16192d8fddb2388c5e9c093efdf040a6bc5b665c196d9f01f0092ac5376985b9dbc1faed143d4418f6b83edbdb3c7d91c327878ccb6f0fd9c921f501eba34eff6d91e53666e22d6b978d95315d6616b9479adb87724e63f46f059b1e45fb8524ca250f43585660b240bd32081c886aabd47e7dc887f8db2a0935fa2ee665477ab04e01f0681b72e5d951c630f45062d87303f2b3e9e79cc4cc44a0b8355356698d6a5fd32d276b4037e51e7a8a50c785b10143bf9282cc6591d4260ca10e251e1cb82dc8d1dda7a9a8461039ae4c2da3e75a8c082b980bd556299c6e198c922d3ca54cc1ed04419a788f3be34370d336a421d1feb4f8b946dc29c557bb23ebceb43614f575b748056653d2b469b7a44f49688294f92fdbacfe0dce229259e5b92f02a27ee660c38d6d006aa1a28698c8f4ed430d1b0593572fb4525460df8f76636b9add0282dc286c3219d950e720ac0e5eec7479117e4c22e8f97871edf8686149da87ab33e5fb98d5bb8d2b29c509d79da0ba6bc431cb9d0ccec7711cd6db19c1c6e1b8aa96351a51a13b2b9efda0995d90de920a3369e3350861d85238aa7c018880d03645440db17d36a6bb95e6448af65f8b69d3da9453a528d841368877c0124f3be2761480d76644ee28d48493a82388a86a5d17c6c7d975f31fe291d809017b83099d0d117df7617626d4482bfdcf239d5637884f980e04a442827cd5833dd47d08d86f1e018078beb5eaee270c32a8750af22f967c9683362dc1a6040fc60f3f095f8513fa41a7e4d6309b6f836c90c872698b105f72519b29fdf55c3598e311148ea600c67045b60585a0e3f7c1e253857014809183ea21911337c53beeca27b29ddce82c26f669b193b5c4c7a5f4f44a34d505c29af2f6b0e2a0cbd18bb4f8afdc2883dbe8aa04eeae9902a14e9251c8845f560f538cde799e6a317e93f6c1c076cbf6786765c8ef0b80445888fbce342ab44aa8cfc2322be0600b54ce4fb6ec1c1497c75cc1b143ec0b06f4889a48170c80497b064da936a384d294998ca41b5036688cf7cec655f85694cabdea631fcd6951b1362cb4cd9061b28ad0fc4b09976e6e6d1399546cc8347e1943cf574a6e6a44440d2286e3d407a655d503861db39a76a7b644d064d1a9019018f1a74adeb6aeaf695b3477036d41bc445995090de21a4b43b5c16f5fa2162e334ddbca5a6bd0c51e2c69a2d33ad6f8ec379a9c8bd6685245eca2c6e15da048cfe7fa025f9beab74eb8504e6ac2b866458c54b8d8a1d670633c798f79d68e0edfa6ba8b060cdcd6304889946511059c7e50142ef0f09170e9a373ff25acc91ef20d073f0c99b3f0f1d852c0576cc91fdf332eb32fc2890636fbebf735b7feab0e3914e7b7b920668fcddd871e06cdcdd64144de4d26d1eab631eca6d63ce162732c97d884336c71eed021feff74571c4b8d21a864db1bcee8dce849b3d4eca9e95b661ee3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000029f4c0)={0x21, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x34, "7fb1cd5eee41aa"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00002a04c0)={0xecd, [{}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "43e3bb1eb3873b"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00002a14c0)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00002a16c0)={0x0, 0x0, "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", "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"}) connect$unix(0xffffffffffffffff, &(0x7f00002a2700)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00002a2780), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00002a27c0), 0x10106, 0x2, 0x0) r17 = openat(0xffffffffffffff9c, &(0x7f00002a2800)='./sys/class/rfkill/rfkill1/soft\x00', 0xa01, 0x0) write(r17, &(0x7f00002a2840)='1', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00002a2880)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r17, 0xd000943e, &(0x7f00002a2a80)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00002a3a80)={0x0, 0x0, "d3a3974cacdd8b0ea6bedb1534d994510b3a141ed81a28edd9d89962f5f2352a73c30c6898fe8ba77c8a2400f337fa25d755682bd909a65a357c7bea822eba6d8373cfdca66741cb2fff4e3366c14fa4f8ef2da342d020093970b71f883ec8f2013fc3f97a0440f0b7a1ab75f194fe1b1896780a95fff244c7712e5c338843a6891a33560057094f83a922486ea0a4b7886546db0e8852fe210f41219314078e7a08f8ac3e0ab329770f408f16c2e7128890e3fc9f385c48ec545bbc0ba78f083508ff8bb41b45ff47028ce1ab22b554f8170319529b7b8bb7f22c7a696eae782f576676e6050684941f8a8e0b848e35b2ff16e83a5af27321e33bec65ef3592", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00002a4a80)={0x9, [{}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}], 0x4, "f5ca338a5681c3"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00002a5a80)={0x0, 0x0, "9e9ffdeb52ff64a0794884c674493c28bc48fcd7d12dfd8722486530e5f7e35fc732aaa0d3db4bf4e04004f884b15caeee15a670f533b726d272332abf10b92ca4f065cdab68a1d4fc610b68f377e193ac9636e18c8c215ec0a61707ce000ef5f46c101d83a0b5e16b7099dc4f865b4325898fb7deb3a9fd44ac48c1a206502b1586b4f9c95d374ecb8a2239e86fde3d67577a2bdff732142580612178cf6eb14d3eee106be225731590914ccf01bb8ef60d4bc176a8077f6265d19ca02360c6e17f0338595befc48beb26655d2e2ebb675c7367d0089e827ce54d6cf87eec13c7e5bba254e759708c84bac3e8711bb57745b5dcce11e185d2b5f8eac25111a4", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00002a6a80)={0x21, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r18, r20}, {r21}, {}, {r22, r24}], 0x34, "7fb1cd5eee41aa"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00002a7a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000bc0)={{0x9, 0x7, 0x8, 0x4, 0x6}, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}]}) connect$unix(r25, &(0x7f00002a7ac0)=@abs, 0x6e) sendmmsg$unix(r26, &(0x7f00002a7b40), 0x651, 0x0) r27 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r28 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r27) sendmsg$NL802154_CMD_DEL_SEC_DEV(r27, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r28, @ANYBLOB="070529bd7000fcdbdf251b00000010002e800c0005000201aaaaaaaaaaaa0c00060001"], 0x30}}, 0x40) recvmmsg(r25, &(0x7f00002a7b80), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00002a7bc0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r26, 0x81f8943c, 0x0) 1.597813585s ago: executing program 3 (id=766): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xaf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x17) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x20, 0x52, 0x1, 0x70bd26, 0x200, {0x2}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) connect$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @local}, 0x10) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x4e21, 0xb11, @mcast2, 0xffffffff}}, {{0xa, 0x4e1e, 0x8, @private0}}}, 0x108) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0xfffffffc, @mcast1}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000103a00fc00000000000000000000000000198a6c61bb5831cdd4330d00ff020000000000000000000000000064ca0090780000"], 0x0) 1.538738355s ago: executing program 3 (id=767): syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') (async, rerun: 64) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105280, 0x0) (rerun: 64) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)={0x114, 0x21, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x103, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaabbaa4800003400020000090690780a210104ac1414aa070909904b30ad2bb70005c240ba397c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780009"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000202000000003280b748082295"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffdffffa}, 0x94) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000300)={0x8000, 0x30, 0x1e}, 0x18) statx(r3, &(0x7f0000000380)='./file1/file0\x00', 0x2000, 0x40, &(0x7f00000003c0)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x5, 0x1, 0x0, &(0x7f00000002c0)="e9", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x1c, r8, 0x601, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x20040844) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x30, r11, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000b00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, r8, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) ioctl(r0, 0xfffff000, &(0x7f0000000000)) 1.386474309s ago: executing program 2 (id=768): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x301, 0x70bd25, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x2, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0xffff}, {0x0, 0x8001, 0x2, 0x100000001}, 0xf, 0x1, 0x86cb60f1874be634, 0x0, 0x1}}, 0xb8}}, 0x4080010) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@deltaction={0x90, 0x31, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) read(r3, &(0x7f0000000240)=""/195, 0xc3) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) (rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xd, 0x6, 0x4, 0x2001, 0x81, r4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) (async) close(r4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r5, &(0x7f00000008c0)}, 0x20) (async, rerun: 64) sendmsg$key(r3, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080017"], 0xa0}}, 0x20000000) (rerun: 64) syz_clone3(&(0x7f00000008c0)={0x4000000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000940)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r6, 0x4000) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xcb, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000580)=0x4, 0x8) (async) sendmsg$nl_route(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010427bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="935f0100ef0000001c0012800b0001006d616373656300000c00028005000d000100000008000500", @ANYRES32=r2, @ANYBLOB="63492362cb822786e685e2574efdda0c2832bd67290a5f95e00dc6883db5096db3ac98fd58cef9019801f85b13b6d0fa988d8fb6d306"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r9, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x4}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x480c4) 1.308383078s ago: executing program 6 (id=769): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x800}, &(0x7f0000000040)=0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x3, {{0x2, 0x4e20, @remote}}}, 0x88) syz_emit_ethernet(0x56, &(0x7f0000000140)={@multicast, @random="7ff5bdb059b8", @void, {@canfd={0xd, {{0x4, 0x1, 0x0, 0x1}, 0x23, 0x2, 0x0, 0x0, "08e4c6ac384acb86c30a75e270f7d25dcfbe6e8233e78724e3909f75742420211f3ce25a309838be367d3f419eab8efc17a11e91ea6d6d7fbc1ecb31f8302bf7"}}}}, &(0x7f00000001c0)={0x0, 0x2, [0x5c9, 0x624, 0x8f1, 0x55b]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r3, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x91) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={@private0, @dev={0xfe, 0x80, '\x00', 0x37}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff7, 0x4, 0xdff3, 0x0, 0x3, 0x40000014, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000480)={0x1138, 0x3b, 0x20, 0x70bd26, 0x25dfdbfc, {0x16}, [@nested={0x1014, 0xd3, 0x0, 0x1, [@nested={0x4, 0x15f}, @typed={0x8, 0x104, 0x0, 0x0, @pid}, @generic="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", @nested={0x4, 0x152}]}, @generic="8c00db1b4d04df3fcbfb34", @nested={0xf9, 0x150, 0x0, 0x1, [@nested={0x4, 0xef}, @generic="5d9de8d011dfead04d1e2e96a9308d2830ada7801e216ccbc3c579d47c555cf30cd5c6f938f68ea7560b13cce633b26dea8d8343c32782268667db73afed0cc8f235c815fe6fe803ddfc23b17de0ec870170f9a3669ac97c01f6d3c68088448fbae32e5d211a869b9ab5cd57dc820338824818583f3493ef19fa29c82be86090d816ae36069e6e09efb3b8ce00f6b87ee0436d6a3fc6eb6b0ec58fbd713d6cd61cdf48113b51f145dcc7f6d579be8ed98ba9b69004b9e41844460a7a36a5839de28afe5b5be5b5379d05499d7ec11e80da1041da51c19497401e232c26a8bb6d93", @typed={0x8, 0xa7, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x147}, @nested={0x4, 0x10a}]}, @typed={0x8, 0x14b, 0x0, 0x0, @uid}]}, 0x1138}, 0x1, 0x0, 0x0, 0x4044000}, 0x14000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)=@ipv6_newroute={0x24, 0x18, 0x800, 0x70bd27, 0x25dfdbff, {0xa, 0x80, 0x14, 0xfe, 0xfc, 0x1, 0xfd, 0x4, 0x500}, [@RTA_OIF={0x8, 0x4, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24084}, 0x4) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001780), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x48, r8, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7807}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001900)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001940)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a40)={'syztnl2\x00', &(0x7f0000001980)={'syztnl1\x00', r5, 0x8, 0x7800, 0x2, 0x0, {{0x22, 0x4, 0x1, 0x5, 0x88, 0x66, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@rr={0x7, 0x2b, 0x44, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @multicast2, @loopback, @loopback, @private=0xa010100, @local, @broadcast, @local]}, @timestamp_prespec={0x44, 0xc, 0x7a, 0x3, 0x5, [{@multicast2, 0xbe}]}, @noop, @timestamp_addr={0x44, 0xc, 0x7e, 0x1, 0x4, [{@multicast2, 0x2}]}, @ssrr={0x89, 0xb, 0xc6, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @rr={0x7, 0x1b, 0x24, [@empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @remote, @loopback]}, @rr={0x7, 0x7, 0x48, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d40)={0xffffffffffffffff, 0xe0, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001a80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000001ac0)=[0x0], &(0x7f0000001b00)=[0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000001b40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001b80), &(0x7f0000001bc0), 0x8, 0x73, 0x8, 0x8, &(0x7f0000001c00)}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r9, &(0x7f0000002040)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001d80)={0x258, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r14 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002080), 0x109000, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6000008, 0x20010, r14, 0xcb000) r15 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000020c0), 0x80400, 0x0) write$snapshot(r15, &(0x7f0000002100)="762ef6f016a2f17ca5c2fe7f2d174e9b41f62bca6d72", 0x16) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r9) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x50, r16, 0x200, 0x70bd27, 0x7ec, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40041}, 0x44) r17 = syz_mount_image$fuse(&(0x7f00000022c0), &(0x7f0000002300)='./file0\x00', 0x80000, &(0x7f0000002340)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xe00}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xc42}}], [{@context={'context', 0x3d, 'root'}}, {@hash}, {@audit}]}}, 0x0, 0x0, &(0x7f0000002440)="a12c7c4b24a70fe7ffc5013a87ae239bb1f1df0525e8dc378d37f3371737dfe12b259857eadc051b2bc721a41a307728822f8ffd0a7659b58fd974e8829383ce2591fbb9279323951ccb59bc3609191778cebfb6b3a09c90ca35930b24c0345fbb1d78d16ea8376e775901a5d6d4d3737adadc21f0dc87f39c04b03a559ae09f5fdf7d7d16") readlinkat(r17, &(0x7f0000002500)='./file0\x00', &(0x7f0000002540)=""/232, 0xe8) 1.238295673s ago: executing program 2 (id=770): unshare(0x20000400) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000480)={0x18, r1, 0x80, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x48241, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000380)=@raw=[@exit], &(0x7f00000003c0)='GPL\x00', 0x8, 0x1017, &(0x7f0000000ac0)=""/4119, 0x0, 0xd}, 0xd3) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x800000000000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, 0x0, 0x101, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000050) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000a80)={'wg2\x00', 0x6bf1c2d5adba8c32}) r5 = fsopen(&(0x7f0000000240)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000400)=0xfffffffffffffff7, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'wlan0\x00', @local}) 1.028210192s ago: executing program 2 (id=771): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@nolazytime}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x46d, &(0x7f0000000880)="$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") (async) r1 = openat(0xffffffffffffffff, 0x0, 0x468342, 0x9a) prlimit64(0x0, 0xe, &(0x7f0000000d40)={0x7, 0x100}, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000d80)=0x7) syz_mount_image$ext4(&(0x7f0000000dc0)='ext4\x00', &(0x7f0000000e00)='./file1\x00', 0xc, &(0x7f0000000e40), 0x2, 0x55a, &(0x7f0000000e80)="$eJzs3c9vG1kdAPDvuHGTdt1NF/YACNiyLBRU1fnR3Wq1F7oXEFqthKg4ceiGxBtFtesqdkUTekiPiOtKW4kDAv4Dbggh7YkDnLiBxGEvywGpQAXaIDgYzXiSeB078W5cO3E+H2k8895M5/te3DfP8yzPC+DUuhQRWxFxNiLeiojZPD/Jl7jRXtLjPnzyYHn7yYPlJFqtm/9Isv1pXnT8m9Qz+TlnIuK734r4QbI/bmNj8/ZStVpZz9NzzdrducbG5tW1Qp6zeH3h+vyr114pDK2uL9R+9fiba29877e//sIHf9z6+o/SYpV+fCHb11mPPcUjx0zy85Q68qYi4o0jn/n4mMr//3DypK3rUxHxYtb+Z+NM9m4CAJOs1ZqN1mxnGgCYdOn9fymSQjkfCyhFoVAut8fwno/zhWq90bwyW793ZyWyMayLUSy8vVatzOdjhRejmKTphWx7L734kfQ7lWsR8VxEvDN9LttfXq5XV8b5wQcATrFnuvr/f0+3+/9OR/8WDAA4dmbGXQAAYOQ6+v+L4ywHADA67v8B4PT5GP2/XwcCwIRw/w8Ap4/+HwBOn0P7/4ejKQcAMBLfefPNdGltt59/vfOk7qsrlcbtcu3ecnm5vn63vFqvr1Yr5eVW67DzVev1uwsv7yYbG5u3avV7d5q31mpLq5VbFc8SAIDxe+6F9/6cdvpbr53LluiYy0FfDZNteLPrACfNmXEXABibwX7P41c/MIkGuMc3DAATrscUvW35AEHS74BHg07+WvpkBQOemsufNf4Pp9VRxv+NCsDJ9snG/78x9HIAo6cPh9Or1Uq65/z/w8+iOwsAmCTG+IG+3//n+j4i5NEAJ7/x8csDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ0EpW5JCOZsLfCt9LZTLERci4mIUk7fXqpX5iHg2Iv40XZxO0wvjLjQAcESFvyX5/F+XZ18qde89m/xnOltHxA9/evPd38xHrC+k+f/czW8+uvnu/aVzzfXFs+OoAADQaWfezff3su4vNZvri/m640b+wycPlneWURbx8esRMXMui7+dL+09UzGVrWeiGBHn/5Xk6bb088qZIcTfehgRn9mp/0zc74hQysZA2jOfdsdPY18YXvz/tlqtrr9/d/zCR+pbyPal62L2t/h0dBUOONR7r7evk3nbS5t43v4KcSlb927/M9kV6ujS61/aXLf3Xf8Ku9e/M/viJ1mbv7SbPrgkj1/+3bf3ZbZm2/seRnxuqlf8ZDd+0vv6W3xpwDq+//kvvthvX+vnEZd71n9nRuraT9LXuWbt7lxjY/PqWm1ptbJaubO4eH3h+vyr115ZnMvGqNuvv+8V4++vXXm2X/y0/uf7xJ85uP7xlQHr/4v/vfX9Lx0Q/2tf7v3+P39A/LRP/Gq/gF2T+i+dv9F3+u40/kqf+h/y/seVwyqe++CvmysDHgoAjEBjY/P2UrVaWT9kI/2sedgxNgbfSO/tj0Exso3YihjWCbNBiYjoeUz6ifp4VPlpbSRji/7LYZ9w3Fcm4Gnba/T9j/nLKAsEAAAAAAAAAAAAAADs09jYvD3d+9daQ9sYdx0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYXP8PAAD//yRoxN8=") (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xcc7, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(r2, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001480)=0x7) add_key(&(0x7f0000000100)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001580), 0x651, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, 0x0) (async) syz_emit_ethernet(0xc6, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a83f0081000d000800450000b00000000000119078000000000000000000004e22009c907801000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b00"/198], 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000015c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000001600)=0x6) (async) ptrace(0x11, r2) write(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) (async) pwrite64(r1, 0x0, 0x0, 0x8000c61) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="400100001a00330600000000fddbdf25fe880000000000000000000000000101fe8000000000000000000000000000bb000040004e2480010000800000000800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe80000000000000000000000000000b230300000000000001000080000000000000000000000000c0000000000000000040000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000029bd7000033500000a000500000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001000000"], 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x200080d4) 852.539854ms ago: executing program 5 (id=772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fstatfs(r0, &(0x7f00000007c0)=""/137) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x8, 0x10, 0x2, 0xfffffffc, {{0x15, 0x4, 0x3, 0x6, 0x54, 0x65, 0x0, 0x5, 0x7f, 0x0, @broadcast, @empty, {[@timestamp_prespec={0x44, 0x14, 0xc4, 0x3, 0x7, [{@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}]}, @rr={0x7, 0x13, 0x29, [@broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x17}, @loopback]}, @generic={0x94, 0x7, "c06d962e4d"}, @rr={0x7, 0xf, 0x33, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@getchain={0x54, 0x66, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff1, 0xb}, {0x0, 0xb}, {0xffe0, 0xf}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0xb}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008081}, 0x8810) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000002c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0x1, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) bind$x25(r4, &(0x7f0000000140), 0x12) listen(r4, 0x1) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="000008050000010b007e0b0a42b820a8e8c9881db642", @ANYRES8=r1, @ANYRES64=r3], 0x97) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000300)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\xaa\t\x00\xd8m\xa9\xa0\xe6') 623.99753ms ago: executing program 3 (id=773): syz_io_uring_setup(0x3db7, &(0x7f0000000000)={0x0, 0x36e1, 0x40, 0x2, 0x2bc}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'bond0\x00', 0x0}) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000001c00000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r4, r1, 0x25, 0x0, @void}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x20040000) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ffffffffffffff7f00000000000000000000000000000080790000"], 0x48) (rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r6) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), r6) (async) r7 = syz_open_dev$video(&(0x7f0000000400), 0xdcb0, 0x1042) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101142, 0xeaf9) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000000480)={{r8}, 0x8, 0x5, 0xffffffffffffffff}) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000500)={0x9e0000, 0x0, 0x8, r8, 0x0, &(0x7f00000004c0)={0xa30901, 0x0, '\x00', @value=0x6}}) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) (async, rerun: 32) close(0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1000, 0x0) (async) r10 = socket(0x28, 0x801, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x42, 0x85) (async) pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) tee(r11, r10, 0x80000003, 0xc) (async) readv(r10, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/163, 0xa3}], 0x1) (async) write$binfmt_script(r12, &(0x7f0000000ac0)={'#! ', './file0'}, 0xb) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r13 = fcntl$getown(r9, 0x9) prlimit64(r13, 0x9, &(0x7f0000000540)={0x172b5f98, 0x10001}, &(0x7f0000000580)) 471.598854ms ago: executing program 3 (id=774): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}]}}}]}, 0x58}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x1e, &(0x7f0000000080)={@random="51a47820f112", @local, @void, {@can={0xc, {{0x2}, 0x8, 0x0, 0x0, 0x0, "a1a276c2df6a8609"}}}}, &(0x7f00000000c0)={0x1, 0x2, [0x6d1, 0x133, 0x884, 0x138]}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000300)={r6, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000003c0)=0x84) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, &(0x7f0000000440)={0x7, 0x1b, 0x2}, 0xff17) splice(r7, 0x0, r4, 0x0, 0xffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfaffffff}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@x, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1009}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 360.68139ms ago: executing program 6 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000084c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000240), 0x80002c1, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_ublk_setup_io_uring(0xe68, 0x0, &(0x7f0000000080)=0x0, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, 0x0, r5, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x16, 0x0, r2, 0x0, 0x0, 0x47, 0x40004122}) syz_ublk_add_dev(r3, r4, 0x0, r5, &(0x7f0000000380)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) 354.07356ms ago: executing program 5 (id=776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 335.641994ms ago: executing program 5 (id=777): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='wg2\x00', 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x582, 0x12f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xad, 0xe0cd5659ebd36afe, 0x4, {0x8, 0xb, 0x0, 0x1, 0x1, 0x21, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfe, 0x6, 0x9, {0xa, 0x25, 0x25, 0x3, 0x40, 0x1a1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x80, 0x7, 0x7, {0xa, 0x25, 0x25, 0x40009f, 0x1, 0x6}}}}}}}}]}}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x0) syz_usb_disconnect(r8) syz_usb_connect$uac2(0x0, 0x80, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r8, 0xc0085508, &(0x7f0000000780)) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000400)='syz_tun\x00', 0x10) syz_emit_ethernet(0x4a, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004a00003c006600000006907864010101ac1414aa8613000000030604e0230709263c1e6ad8c9da0000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES64], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x400, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x800, 0x0, 0x8}}}}}}, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x69e}, 0x0, 0x0, '\x00', {0x2, 0x434, 0x0, 0x0}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000078b28b9b8f4bb38795fbe9f04114f862f9b1b92bb7f17018a78856f9f71379461e175786e5cb69d6004ee4c6f6f0fbb667041972c339441b38fb22331fc91db1ff5920f4a4be688e31b87a7d0abc4092e69df1", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x40040) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7200050f09189bcc"], 0x8) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="500404"], 0x7) write$nci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="8cadc0707b801781bee6be4126a33b4bf0087ebceed173fb87473cf3e17c6bf70c9c4322e192451998e245d2b1b0de8dbaee9b13914a7544a81f41faeceaadbe62e5a1885b606715c998c00000"], 0x4) 329.241945ms ago: executing program 3 (id=778): r0 = socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x24, r4, 0x5, 0x10000000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x24, r4, 0x5, 0x10000000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x64, r2, 0x46c4e08818614dd5, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x4810) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x64, r2, 0x46c4e08818614dd5, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x4810) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020300001900000000000000000000000400030000000000000000000000000000000000000000000000000000000000050006006c0000000a00000000000000fc010000000000000000000000000000000000000000000004000400000000000700000000000000000000000000000000000000000000000200010000000000000000030000000005000500008000000a00000000000000ff0100000000000000000000000000010000000000000000030007000000000002004e20ac1e0001000000000000000017e9228f40133da12eb5f55c1f0f20906a15c8982905f35b321fb79fb7f8e7f8e5a5c397942414461eb641f8af9b7af4d4ab22d556ee233592e7e6375dd872453f0d0a6da660389e9e3dd3ca853a362f27891149848923e5"], 0xc8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3}}], {0x14}}, 0x94}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000780)={0x0, 0x2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000d80)=@ccm_128={{0x304}, "d2efd1dd3f7b6805", "92935a9f8f27eebbd9c8bb60c7da3c98", "ecfefab8", "59cd6b826c94a68f"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000d80)=@ccm_128={{0x304}, "d2efd1dd3f7b6805", "92935a9f8f27eebbd9c8bb60c7da3c98", "ecfefab8", "59cd6b826c94a68f"}, 0x28) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) r10 = syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x10, 0x810, r10, 0x49f7b000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000d40)={'sit0\x00', &(0x7f0000000d00)={@ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=0x64010100, 0x1f, 0x16}}) chdir(&(0x7f0000000040)='./file0\x00') setresuid(0x0, 0xee00, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f0000000100)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000080}}], 0x2, 0x0) (async) sendmmsg$unix(r12, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f0000000100)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000080}}], 0x2, 0x0) 280.756191ms ago: executing program 2 (id=779): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180), 0xfdef) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000009c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000ac0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000b00), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000b40)=0x100000000e2) keyctl$clear(0x3, 0xfffffffffffffffd) pread64(r0, &(0x7f0000001c00)=""/4084, 0xff4, 0x40000000) (fail_nth: 3) 158.451735ms ago: executing program 0 (id=780): add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000740)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x38}}, 0x0) shutdown(r0, 0x1) 35.388829ms ago: executing program 2 (id=781): r0 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) openat$smackfs_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x2102, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x6}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x6, 0x2e6827d4, 0xffffffff, 0x145, r5, 0x10000, '\x00', r7, r8, 0x4, 0x1, 0x3, 0x8}, 0x50) r9 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x4) write(r9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801009acd099bcc1b562a00002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c8000000950000000000"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000580)='c::jGN\x10\x00D:/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) 0s ago: executing program 0 (id=782): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x883, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x18}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200008d5}, 0x20004090) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4014) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xb49, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r5, &(0x7f00000004c0)="b0ae788775613c284f1e49ff10464c6f1d78c00d63cf4b6d9f9f1a420d07403de811e3a0c8b8895e756373636b5af3e7018b41730a0b5cde4433be0a31cc30494631338636f41040e5e6f02999baa43cf9618f327d5a70c38c17c69f315354c951471778b6507b0e56b0187d95c4320a7d7b3a30b4b90a8c75eab8630ee0e17d611aa7d2734243b65df8"}, 0x20) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r7}, [@thin_pool={0x0, 0x50, 0x0, 0x70, 'thin-pool\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram_num={'1:', 0x1}, 0x20, '256', 0x20, 0x1c, ' 1 read_only'}}]}) kernel console output (not intermixed with test programs): enabled [ 37.461641][ T5027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.901862][ T5034] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 38.176235][ T5040] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 38.181454][ T5040] syz.2.31 uses obsolete (PF_INET,SOCK_PACKET) [ 38.287175][ T4738] Bluetooth: hci1: command tx timeout [ 38.287277][ T4738] Bluetooth: hci2: command tx timeout [ 38.517002][ T4742] Bluetooth: hci3: command tx timeout [ 38.517553][ T4742] Bluetooth: hci0: command tx timeout [ 38.517695][ T4742] Bluetooth: hci4: command tx timeout [ 38.546310][ T4744] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.552276][ T5049] ip6_vti0: entered promiscuous mode [ 38.689212][ T5064] FAULT_INJECTION: forcing a failure. [ 38.689212][ T5064] name failslab, interval 1, probability 0, space 0, times 0 [ 38.689232][ T5064] CPU: 1 UID: 0 PID: 5064 Comm: syz.4.38 Not tainted syzkaller #0 PREEMPT [ 38.689242][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.689247][ T5064] Call trace: [ 38.689249][ T5064] show_stack+0x2c/0x3c (C) [ 38.689264][ T5064] __dump_stack+0x30/0x40 [ 38.689272][ T5064] dump_stack_lvl+0xd8/0x12c [ 38.689279][ T5064] dump_stack+0x1c/0x28 [ 38.689286][ T5064] should_fail_ex+0x418/0x58c [ 38.689296][ T5064] should_failslab+0xc4/0x120 [ 38.689305][ T5064] __kmalloc_noprof+0x108/0x6c8 [ 38.689313][ T5064] tomoyo_encode2+0x10c/0x330 [ 38.689322][ T5064] tomoyo_encode+0x34/0x50 [ 38.689329][ T5064] tomoyo_realpath_from_path+0x488/0x4dc [ 38.689343][ T5064] tomoyo_get_exe+0x58/0x8c [ 38.689351][ T5064] tomoyo_write_control+0x630/0x1114 [ 38.689361][ T5064] tomoyo_write+0x54/0x68 [ 38.689369][ T5064] vfs_write+0x2a4/0xa0c [ 38.689377][ T5064] ksys_write+0x12c/0x228 [ 38.689385][ T5064] __arm64_sys_write+0x84/0x98 [ 38.689393][ T5064] invoke_syscall+0x98/0x244 [ 38.689401][ T5064] el0_svc_common+0xec/0x23c [ 38.689408][ T5064] do_el0_svc+0x4c/0x5c [ 38.689415][ T5064] el0_svc+0x60/0x1d8 [ 38.689423][ T5064] el0t_64_sync_handler+0x44/0x104 [ 38.689430][ T5064] el0t_64_sync+0x198/0x19c [ 38.689443][ T5064] ERROR: Out of memory at tomoyo_realpath_from_path. [ 38.707499][ T5061] Illegal XDP return value 4294967274 on prog (id 3) dev N/A, expect packet loss! [ 38.815332][ T5083] loop1: detected capacity change from 0 to 4096 [ 38.815598][ T5085] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 38.823476][ T5083] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.823499][ T5083] EXT4-fs (loop1): Test dummy encryption mode enabled [ 38.823500][ T5085] netlink: 'syz.2.44': attribute type 3 has an invalid length. [ 38.823514][ T5085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 38.831576][ T5083] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 38.831615][ T5083] System zones: 0-5 [ 38.837181][ T5083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.851621][ T5083] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 38.899985][ T5098] FAULT_INJECTION: forcing a failure. [ 38.899985][ T5098] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.900007][ T5098] CPU: 0 UID: 0 PID: 5098 Comm: syz.2.48 Not tainted syzkaller #0 PREEMPT [ 38.900018][ T5098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.900024][ T5098] Call trace: [ 38.900027][ T5098] show_stack+0x2c/0x3c (C) [ 38.900042][ T5098] __dump_stack+0x30/0x40 [ 38.900052][ T5098] dump_stack_lvl+0xd8/0x12c [ 38.900059][ T5098] dump_stack+0x1c/0x28 [ 38.900066][ T5098] should_fail_ex+0x418/0x58c [ 38.900076][ T5098] should_fail+0x14/0x24 [ 38.900084][ T5098] should_fail_usercopy+0x20/0x30 [ 38.900096][ T5098] _inline_copy_from_user+0x3c/0x174 [ 38.900108][ T5098] do_sock_getsockopt+0x210/0x720 [ 38.900117][ T5098] __sys_getsockopt+0xfc/0x168 [ 38.900127][ T5098] __arm64_sys_getsockopt+0xc8/0xe4 [ 38.900136][ T5098] invoke_syscall+0x98/0x244 [ 38.900144][ T5098] el0_svc_common+0xec/0x23c [ 38.900151][ T5098] do_el0_svc+0x4c/0x5c [ 38.900159][ T5098] el0_svc+0x60/0x1d8 [ 38.900167][ T5098] el0t_64_sync_handler+0x44/0x104 [ 38.900174][ T5098] el0t_64_sync+0x198/0x19c [ 38.948941][ T4744] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.957592][ T5105] FAULT_INJECTION: forcing a failure. [ 38.957592][ T5105] name failslab, interval 1, probability 0, space 0, times 0 [ 38.957611][ T5105] CPU: 1 UID: 0 PID: 5105 Comm: syz.0.52 Not tainted syzkaller #0 PREEMPT [ 38.957623][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.957629][ T5105] Call trace: [ 38.957632][ T5105] show_stack+0x2c/0x3c (C) [ 38.957647][ T5105] __dump_stack+0x30/0x40 [ 38.957656][ T5105] dump_stack_lvl+0xd8/0x12c [ 38.957664][ T5105] dump_stack+0x1c/0x28 [ 38.957671][ T5105] should_fail_ex+0x418/0x58c [ 38.957681][ T5105] should_failslab+0xc4/0x120 [ 38.957689][ T5105] __kmalloc_noprof+0x108/0x6c8 [ 38.957698][ T5105] __keyctl_dh_compute+0x2fc/0xa64 [ 38.957707][ T5105] keyctl_dh_compute+0x104/0x164 [ 38.957715][ T5105] __arm64_sys_keyctl+0x358/0x3e8 [ 38.957725][ T5105] invoke_syscall+0x98/0x244 [ 38.957733][ T5105] el0_svc_common+0xec/0x23c [ 38.957741][ T5105] do_el0_svc+0x4c/0x5c [ 38.957748][ T5105] el0_svc+0x60/0x1d8 [ 38.957756][ T5105] el0t_64_sync_handler+0x44/0x104 [ 38.957763][ T5105] el0t_64_sync+0x198/0x19c [ 38.973426][ T5107] warning: `syz.0.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 38.995309][ T5113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.995492][ T5113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.002264][ T5113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54'. [ 39.086580][ T5121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 39.086601][ T5121] netlink: 36 bytes leftover after parsing attributes in process `syz.3.56'. [ 39.088855][ T5121] vlan0: entered promiscuous mode [ 39.113426][ T5123] device-mapper: table: 248:0: thin-pool: Error getting data device (-ENOENT) [ 39.113443][ T5123] device-mapper: ioctl: error adding target to table [ 39.534756][ T5140] virtio-fs: tag <> not found [ 42.020561][ T5144] loop2: detected capacity change from 0 to 2048 [ 42.051891][ T5153] FAULT_INJECTION: forcing a failure. [ 42.051891][ T5153] name failslab, interval 1, probability 0, space 0, times 0 [ 42.051911][ T5153] CPU: 0 UID: 0 PID: 5153 Comm: syz.0.68 Not tainted syzkaller #0 PREEMPT [ 42.051920][ T5153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.051925][ T5153] Call trace: [ 42.051928][ T5153] show_stack+0x2c/0x3c (C) [ 42.051943][ T5153] __dump_stack+0x30/0x40 [ 42.051951][ T5153] dump_stack_lvl+0xd8/0x12c [ 42.051958][ T5153] dump_stack+0x1c/0x28 [ 42.051965][ T5153] should_fail_ex+0x418/0x58c [ 42.051974][ T5153] should_failslab+0xc4/0x120 [ 42.051983][ T5153] __kmalloc_node_noprof+0x10c/0x6e4 [ 42.051992][ T5153] crypto_create_tfm_node+0x94/0x304 [ 42.052001][ T5153] crypto_alloc_tfm_node+0x100/0x22c [ 42.052008][ T5153] crypto_alloc_kpp+0x40/0x54 [ 42.052017][ T5153] __keyctl_dh_compute+0x420/0xa64 [ 42.052025][ T5153] keyctl_dh_compute+0x104/0x164 [ 42.052033][ T5153] __arm64_sys_keyctl+0x358/0x3e8 [ 42.052043][ T5153] invoke_syscall+0x98/0x244 [ 42.052051][ T5153] el0_svc_common+0xec/0x23c [ 42.052058][ T5153] do_el0_svc+0x4c/0x5c [ 42.052065][ T5153] el0_svc+0x60/0x1d8 [ 42.052073][ T5153] el0t_64_sync_handler+0x44/0x104 [ 42.052080][ T5153] el0t_64_sync+0x198/0x19c [ 42.055100][ T5154] FAULT_INJECTION: forcing a failure. [ 42.055100][ T5154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.055117][ T5154] CPU: 1 UID: 0 PID: 5154 Comm: syz.3.67 Not tainted syzkaller #0 PREEMPT [ 42.055129][ T5154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.055135][ T5154] Call trace: [ 42.055139][ T5154] show_stack+0x2c/0x3c (C) [ 42.055150][ T5154] __dump_stack+0x30/0x40 [ 42.055158][ T5154] dump_stack_lvl+0xd8/0x12c [ 42.055166][ T5154] dump_stack+0x1c/0x28 [ 42.055173][ T5154] should_fail_ex+0x418/0x58c [ 42.055182][ T5154] should_fail+0x14/0x24 [ 42.055190][ T5154] should_fail_usercopy+0x20/0x30 [ 42.055198][ T5154] _inline_copy_from_user+0x3c/0x3a4 [ 42.055209][ T5154] sk_getsockopt+0x140/0x18a8 [ 42.055217][ T5154] do_sock_getsockopt+0x278/0x720 [ 42.055227][ T5154] __sys_getsockopt+0xfc/0x168 [ 42.055236][ T5154] __arm64_sys_getsockopt+0xc8/0xe4 [ 42.055245][ T5154] invoke_syscall+0x98/0x244 [ 42.055253][ T5154] el0_svc_common+0xec/0x23c [ 42.055260][ T5154] do_el0_svc+0x4c/0x5c [ 42.055267][ T5154] el0_svc+0x60/0x1d8 [ 42.055274][ T5154] el0t_64_sync_handler+0x44/0x104 [ 42.055281][ T5154] el0t_64_sync+0x198/0x19c [ 42.373473][ T4828] rxe_eth0 speed is unknown, defaulting to 1000 [ 42.392776][ T5165] loop0: detected capacity change from 0 to 8 [ 42.423139][ T5165] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 42.423153][ T5165] unable to read xattr id index table [ 42.424451][ T5165] SQUASHFS error: zlib decompression failed, data probably corrupt [ 42.424467][ T5165] SQUASHFS error: Failed to read block 0x9b: -5 [ 42.424475][ T5165] SQUASHFS error: Unable to read metadata cache entry [99] [ 42.424481][ T5165] SQUASHFS error: Unable to read inode 0x127 [ 42.519668][ T5187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 42.618527][ T5195] loop3: detected capacity change from 0 to 512 [ 42.663609][ T5195] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 42.663631][ T5195] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 42.663641][ T5195] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 42.663652][ T5195] page_type: f5(slab) [ 42.663662][ T5195] raw: 05ffc00000000040 ffff0000c186eb40 dead000000000100 dead000000000122 [ 42.663670][ T5195] raw: 0000000000000000 00000002000d000d 00000000f5000000 0000000000000000 [ 42.663678][ T5195] head: 05ffc00000000040 ffff0000c186eb40 dead000000000100 dead000000000122 [ 42.663686][ T5195] head: 0000000000000000 00000002000d000d 00000000f5000000 0000000000000000 [ 42.663694][ T5195] head: 05ffc00000000002 fffffdffc3600001 00000000ffffffff 00000000ffffffff [ 42.663702][ T5195] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 42.663707][ T5195] page dumped because: unmovable page [ 42.775710][ T13] IPVS: starting estimator thread 0... [ 42.776344][ T5215] IPVS: set_ctl: invalid protocol: 108 172.30.0.4:20002 [ 42.867134][ T5217] IPVS: using max 60 ests per chain, 144000 per kthread [ 42.996967][ T5233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.86'. [ 43.074300][ T5237] loop4: detected capacity change from 0 to 512 [ 43.093357][ T5245] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 43.109423][ T5237] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 43.109441][ T5237] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 43.109450][ T5237] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 43.109461][ T5237] page_type: f5(slab) [ 43.109471][ T5237] raw: 05ffc00000000040 ffff0000c186eb40 dead000000000100 dead000000000122 [ 43.109479][ T5237] raw: 0000000000000000 00000002000d000d 00000000f5000000 0000000000000000 [ 43.109488][ T5237] head: 05ffc00000000040 ffff0000c186eb40 dead000000000100 dead000000000122 [ 43.109495][ T5237] head: 0000000000000000 00000002000d000d 00000000f5000000 0000000000000000 [ 43.109503][ T5237] head: 05ffc00000000002 fffffdffc3600001 00000000ffffffff 00000000ffffffff [ 43.109511][ T5237] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 43.109516][ T5237] page dumped because: unmovable page [ 43.420149][ T5247] Bluetooth: MGMT ver 1.23 [ 43.450681][ T5251] netlink: 44 bytes leftover after parsing attributes in process `syz.0.95'. [ 43.694791][ T5259] overlayfs: failed to resolve './file2': -2 [ 43.743407][ T5260] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 44.540805][ T5304] loop0: detected capacity change from 0 to 512 [ 44.546128][ T5304] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 44.546176][ T5304] System zones: 1-12 [ 44.553187][ T5304] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.109: missing EA_INODE flag [ 44.554584][ T5304] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 44.556774][ T5304] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.109: error while reading EA inode 12 err=-117 [ 44.556842][ T5304] loop0: lost filesystem error report for type 5 error -117 [ 44.556952][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 44.556961][ C1] EXT4-fs (loop0): initial error at time 44: ext4_xattr_inode_iget:437: inode 12 [ 44.556976][ C1] EXT4-fs (loop0): last error at time 44: ext4_xattr_inode_iget:442 [ 44.569128][ T5304] EXT4-fs (loop0): 1 orphan inode deleted [ 44.573891][ T5304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.761669][ T4736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.781492][ T5320] loop0: detected capacity change from 0 to 8 [ 44.831732][ T5323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.909915][ T5328] rxe_eth0 speed is unknown, defaulting to 1000 [ 45.075157][ T5335] bond0: option arp_interval: invalid value () [ 45.075179][ T5335] bond0: option arp_interval: allowed values 0 - 2147483647 [ 45.326563][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 45.326637][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 45.332401][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 45.332462][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 45.332517][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 45.332562][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 45.332610][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 45.332654][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 45.332696][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 45.332748][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 45.333565][ T5370] lo: entered promiscuous mode [ 45.777282][ T5413] capability: warning: `syz.4.128' uses deprecated v2 capabilities in a way that may be insecure [ 45.938584][ T5419] loop0: detected capacity change from 0 to 512 [ 45.940496][ T5419] ======================================================= [ 45.940496][ T5419] WARNING: The mand mount option has been deprecated and [ 45.940496][ T5419] and is ignored by this kernel. Remove the mand [ 45.940496][ T5419] option from the mount to silence this warning. [ 45.940496][ T5419] ======================================================= [ 45.955761][ T5419] EXT4-fs (loop0): Test dummy encryption mode enabled [ 45.955775][ T5419] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 45.955782][ T5419] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.955789][ T5419] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.969909][ T5419] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.130: bad orphan inode 131072 [ 45.969937][ T5419] loop0: lost filesystem error report for type 5 error -117 [ 45.971410][ T5419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.973495][ T5423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.072940][ T4736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.576049][ T5448] loop2: detected capacity change from 0 to 1024 [ 46.589808][ T5448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.463253][ T5496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 47.529220][ T875] nintendo 0005:057E:2017.0001: hidraw0: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 47.571603][ T5504] loop0: detected capacity change from 0 to 512 [ 47.597655][ T5504] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.151: inode has both inline data and extents flags [ 47.597679][ T5504] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.597793][ T5504] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.151: couldn't read orphan inode 15 (err -117) [ 47.597808][ T5504] loop0: lost filesystem error report for type 5 error -117 [ 47.598281][ T5504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.624129][ T4736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.660821][ T5516] loop0: detected capacity change from 0 to 512 [ 47.822310][ T5522] netlink: 'syz.0.154': attribute type 1 has an invalid length. [ 47.824229][ T5522] FAULT_INJECTION: forcing a failure. [ 47.824229][ T5522] name failslab, interval 1, probability 0, space 0, times 0 [ 47.824245][ T5522] CPU: 1 UID: 0 PID: 5522 Comm: syz.0.154 Not tainted syzkaller #0 PREEMPT [ 47.824256][ T5522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 47.824262][ T5522] Call trace: [ 47.824265][ T5522] show_stack+0x2c/0x3c (C) [ 47.824281][ T5522] __dump_stack+0x30/0x40 [ 47.824290][ T5522] dump_stack_lvl+0xd8/0x12c [ 47.824298][ T5522] dump_stack+0x1c/0x28 [ 47.824306][ T5522] should_fail_ex+0x418/0x58c [ 47.824317][ T5522] should_failslab+0xc4/0x120 [ 47.824327][ T5522] __kvmalloc_node_noprof+0x160/0x7fc [ 47.824344][ T5522] io_alloc_cache_init+0x48/0x154 [ 47.824354][ T5522] io_rsrc_cache_init+0x2c/0x5c [ 47.824363][ T5522] io_ring_ctx_alloc+0x410/0x958 [ 47.824374][ T5522] io_uring_create+0x6c/0x830 [ 47.824385][ T5522] __arm64_sys_io_uring_setup+0x284/0x290 [ 47.824397][ T5522] invoke_syscall+0x98/0x244 [ 47.824406][ T5522] el0_svc_common+0xec/0x23c [ 47.824414][ T5522] do_el0_svc+0x4c/0x5c [ 47.824422][ T5522] el0_svc+0x60/0x1d8 [ 47.824431][ T5522] el0t_64_sync_handler+0x44/0x104 [ 47.824439][ T5522] el0t_64_sync+0x198/0x19c [ 48.297762][ T5562] i2c i2c-0: delete_device: Can't find device in list [ 48.298376][ T5561] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 48.411795][ T5568] loop4: detected capacity change from 0 to 512 [ 48.418264][ T5568] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.418285][ T5568] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.437995][ T5568] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 48.438621][ T5568] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.167: bg 0: block 248: padding at end of block bitmap is not set [ 48.438644][ T5568] loop4: lost filesystem error report for type 5 error -117 [ 48.439037][ T5568] Quota error (device loop4): write_blk: dquota write failed [ 48.439068][ T5568] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 48.439087][ T5568] EXT4-fs error (device loop4): ext4_acquire_dquot:7070: comm syz.4.167: Failed to acquire dquot type 1 [ 48.439097][ T5568] loop4: lost filesystem error report for type 5 error -28 [ 48.441137][ T5568] EXT4-fs (loop4): 1 truncate cleaned up [ 48.441599][ T5568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 48.448765][ T5568] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.167: deleted inode referenced: 12 [ 48.479167][ T4738] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 48.499654][ T4741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 48.540125][ T5576] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 48.540144][ T5576] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 48.540152][ T5576] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 48.540163][ T5576] page_type: f5(slab) [ 48.540172][ T5576] raw: 05ffc00000000040 ffff0000c186eb40 dead000000000100 dead000000000122 [ 48.540180][ T5576] raw: 0000000000000000 00000002000d000d 00000000f5000000 0000000000000000 [ 48.540188][ T5576] head: 05ffc00000000040 ffff0000c186eb40 dead000000000100 dead000000000122 [ 48.540196][ T5576] head: 0000000000000000 00000002000d000d 00000000f5000000 0000000000000000 [ 48.540204][ T5576] head: 05ffc00000000002 fffffdffc3600001 00000000ffffffff 00000000ffffffff [ 48.540211][ T5576] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 48.540216][ T5576] page dumped because: unmovable page [ 49.373910][ T5594] binder: 5593:5594 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 49.752211][ T5604] openvswitch: netlink: Key type 5126 is out of range max 32 [ 49.771301][ T5606] FAULT_INJECTION: forcing a failure. [ 49.771301][ T5606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.771327][ T5606] CPU: 0 UID: 0 PID: 5606 Comm: syz.3.178 Not tainted syzkaller #0 PREEMPT [ 49.771341][ T5606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 49.771347][ T5606] Call trace: [ 49.771350][ T5606] show_stack+0x2c/0x3c (C) [ 49.771365][ T5606] __dump_stack+0x30/0x40 [ 49.771374][ T5606] dump_stack_lvl+0xd8/0x12c [ 49.771383][ T5606] dump_stack+0x1c/0x28 [ 49.771391][ T5606] should_fail_ex+0x418/0x58c [ 49.771402][ T5606] should_fail+0x14/0x24 [ 49.771412][ T5606] should_fail_usercopy+0x20/0x30 [ 49.771422][ T5606] _inline_copy_from_user+0x3c/0x174 [ 49.771434][ T5606] __arm64_sys_clock_adjtime+0xf8/0x2b0 [ 49.771444][ T5606] invoke_syscall+0x98/0x244 [ 49.771453][ T5606] el0_svc_common+0xec/0x23c [ 49.771461][ T5606] do_el0_svc+0x4c/0x5c [ 49.771470][ T5606] el0_svc+0x60/0x1d8 [ 49.771479][ T5606] el0t_64_sync_handler+0x44/0x104 [ 49.771487][ T5606] el0t_64_sync+0x198/0x19c [ 49.801125][ T5610] loop3: detected capacity change from 0 to 1024 [ 49.802612][ T5610] EXT4-fs: Ignoring removed nobh option [ 49.802643][ T5610] EXT4-fs: Ignoring removed orlov option [ 49.807633][ T5610] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 49.829630][ T5610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.851639][ T4735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.214614][ T5621] FAULT_INJECTION: forcing a failure. [ 50.214614][ T5621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.214641][ T5621] CPU: 0 UID: 0 PID: 5621 Comm: syz.0.182 Not tainted syzkaller #0 PREEMPT [ 50.214652][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 50.214658][ T5621] Call trace: [ 50.214661][ T5621] show_stack+0x2c/0x3c (C) [ 50.214681][ T5621] __dump_stack+0x30/0x40 [ 50.214691][ T5621] dump_stack_lvl+0xd8/0x12c [ 50.214700][ T5621] dump_stack+0x1c/0x28 [ 50.214709][ T5621] should_fail_ex+0x418/0x58c [ 50.214719][ T5621] should_fail+0x14/0x24 [ 50.214727][ T5621] should_fail_usercopy+0x20/0x30 [ 50.214736][ T5621] _inline_copy_from_user+0x3c/0x174 [ 50.214749][ T5621] move_addr_to_kernel+0x88/0x168 [ 50.214757][ T5621] __sys_sendto+0x1b0/0x328 [ 50.214766][ T5621] __arm64_sys_sendto+0xec/0x10c [ 50.214776][ T5621] invoke_syscall+0x98/0x244 [ 50.214784][ T5621] el0_svc_common+0xec/0x23c [ 50.214791][ T5621] do_el0_svc+0x4c/0x5c [ 50.214798][ T5621] el0_svc+0x60/0x1d8 [ 50.214807][ T5621] el0t_64_sync_handler+0x44/0x104 [ 50.214814][ T5621] el0t_64_sync+0x198/0x19c [ 50.638278][ T5631] tmpfs: Bad value for 'nr_inodes' [ 50.638545][ T5631] autofs: Unknown parameter './file1' [ 50.818158][ T5639] loop3: detected capacity change from 0 to 2048 [ 50.818716][ T5639] ext4: Unknown parameter 'obj_type' [ 50.856629][ T5637] __nla_validate_parse: 63 callbacks suppressed [ 50.856643][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 51.052194][ T5657] netlink: 72 bytes leftover after parsing attributes in process `syz.0.194'. [ 51.487215][ T5672] loop3: detected capacity change from 0 to 8 [ 51.637023][ T875] nintendo 0005:057E:2017.0001: Failed to get joycon info; ret=-110 [ 51.637045][ T875] nintendo 0005:057E:2017.0001: Failed to retrieve controller info; ret=-110 [ 51.637054][ T875] nintendo 0005:057E:2017.0001: Failed to initialize controller; ret=-110 [ 51.651699][ T875] nintendo 0005:057E:2017.0001: probe - fail = -110 [ 51.651749][ T875] nintendo 0005:057E:2017.0001: probe with driver nintendo failed with error -110 [ 51.681466][ T5692] netlink: 72 bytes leftover after parsing attributes in process `syz.3.207'. [ 51.713855][ T5696] WARNING! power/level is deprecated; use power/control instead [ 51.813221][ T5708] only policy match revision 0 supported [ 51.813230][ T5708] unable to load match [ 51.814859][ T5708] tmpfs: Bad value for 'mpol' [ 52.141614][ T5719] loop0: detected capacity change from 0 to 8 [ 52.159516][ T5719] fuse: Bad value for 'fd' [ 52.176828][ T5722] loop3: detected capacity change from 0 to 512 [ 52.210848][ T5722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.215370][ T5722] capability: warning: `syz.3.219' uses 32-bit capabilities (legacy support in use) [ 52.226347][ T5722] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.219: iget: bad i_size value: 2533274857506816 [ 52.276531][ T5732] device-mapper: table: 248:1: crypt: Error decoding and setting key (-ENOKEY) [ 52.276548][ T5732] device-mapper: ioctl: error adding target to table [ 52.314002][ T5735] netlink: 'syz.0.223': attribute type 21 has an invalid length. [ 52.314020][ T5735] netlink: 'syz.0.223': attribute type 23 has an invalid length. [ 52.314030][ T5735] IPv6: NLM_F_CREATE should be specified when creating new route [ 52.490484][ C1] vxcan1: j1939_tp_rxtimer: 0x0000000058f5bd08: rx timeout, send abort [ 52.574756][ T5746] loop5: detected capacity change from 0 to 7 [ 52.576267][ T5746] Dev loop5: unable to read RDB block 7 [ 52.576283][ T5746] loop5: unable to read partition table [ 52.576361][ T5746] loop5: partition table beyond EOD, truncated [ 52.576372][ T5746] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 52.587708][ T4738] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 52.587737][ T4738] Bluetooth: hci1: command 0x206a tx timeout [ 52.619441][ T5746] Dev loop5: unable to read RDB block 7 [ 52.619461][ T5746] loop5: unable to read partition table [ 52.619544][ T5746] loop5: partition table beyond EOD, truncated [ 52.619561][ T5746] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 52.654758][ T5753] loop4: detected capacity change from 0 to 512 [ 52.662209][ T5753] EXT4-fs (loop4): orphan cleanup on readonly fs [ 52.662442][ T5753] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.231: EA inode 11 has unexpected i_nlink=2 ref_count=0 [ 52.662457][ T5753] loop4: lost filesystem error report for type 5 error -117 [ 52.663265][ T5753] EXT4-fs (loop4): 1 orphan inode deleted [ 52.664295][ T5753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 52.810798][ T5760] loop2: detected capacity change from 0 to 1024 [ 52.813485][ T5760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.813695][ T5760] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.821713][ T5760] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 52.821844][ T5760] EXT4-fs (loop2): orphan cleanup on readonly fs [ 52.825537][ T5760] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #3: block 3: comm syz.2.233: lblock 3 mapped to illegal pblock 3 (length 1) [ 52.825561][ T5760] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 52.826307][ T5760] Quota error (device loop2): write_blk: dquota write failed [ 52.826326][ T5760] Quota error (device loop2): find_free_dqentry: Can't write quota data block 3 [ 52.826392][ T5760] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 52.826416][ T5760] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.233: Failed to acquire dquot type 0 [ 52.826427][ T5760] loop2: lost filesystem error report for type 5 error -117 [ 52.826943][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 52.826951][ C1] EXT4-fs (loop2): initial error at time 52: ext4_map_blocks:832: inode 3: block 3 [ 52.826982][ C1] EXT4-fs (loop2): last error at time 52: ext4_acquire_dquot:7070 [ 52.838244][ T5760] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 3: comm syz.2.233: lblock 3 mapped to illegal pblock 3 (length 1) [ 52.838263][ T5760] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 52.839213][ T5760] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 52.839239][ T5760] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.233: Failed to acquire dquot type 0 [ 52.839253][ T5760] loop2: lost filesystem error report for type 5 error -117 [ 52.840250][ T5760] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.233: Freeing blocks not in datazone - block = 0, count = 4096 [ 52.840266][ T5760] loop2: lost filesystem error report for type 5 error -117 [ 52.846786][ T5760] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 3: comm syz.2.233: lblock 3 mapped to illegal pblock 3 (length 1) [ 52.846811][ T5760] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 52.848419][ T5760] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 52.848457][ T5760] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.233: Failed to acquire dquot type 0 [ 52.848469][ T5760] loop2: lost filesystem error report for type 5 error -117 [ 52.848809][ T5760] EXT4-fs (loop2): 1 orphan inode deleted [ 52.868010][ T5760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.871104][ T5760] EXT4-fs: Cannot specify journal on remount [ 52.950882][ T4746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.988049][ T5763] loop1: detected capacity change from 0 to 512 [ 52.990719][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000df042966: rx timeout, send abort [ 52.991107][ C1] vxcan1: j1939_tp_rxtimer: 0x0000000058f5bd08: abort rx timeout. Force session deactivation [ 53.008134][ T5763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 53.008183][ T5763] System zones: 1-12 [ 53.009113][ T5763] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.235: missing EA_INODE flag [ 53.009128][ T5763] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 53.009787][ T5763] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.235: error while reading EA inode 12 err=-117 [ 53.009809][ T5763] loop1: lost filesystem error report for type 5 error -117 [ 53.010539][ T5763] EXT4-fs (loop1): 1 orphan inode deleted [ 53.011013][ T5763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.045921][ T4735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.080168][ T5768] device-mapper: table: 248:3: thin-pool: Error getting data device (-ENOENT) [ 53.080184][ T5768] device-mapper: ioctl: error adding target to table [ 53.490127][ T4744] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.490758][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000df042966: abort rx timeout. Force session deactivation [ 53.514972][ T4741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.539803][ T5778] device-mapper: table: 248:4: integrity: Integrity profile not supported (-EINVAL) [ 53.539820][ T5778] device-mapper: ioctl: error adding target to table [ 53.594834][ T5788] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 53.594922][ T5788] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 53.594972][ T5788] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 53.595019][ T5788] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 53.595071][ T5788] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 53.595123][ T5788] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 53.595167][ T5788] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 53.595209][ T5788] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 53.595251][ T5788] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 53.595293][ T5788] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 53.668014][ T5800] syzkaller1: entered allmulticast mode [ 53.729729][ T5798] bond1 (unregistering): Released all slaves [ 53.890152][ T5818] loop1: detected capacity change from 0 to 1024 [ 53.890567][ T5818] EXT4-fs: quotafile must be on filesystem root [ 53.974383][ T5827] loop2: detected capacity change from 0 to 1024 [ 53.974746][ T5827] EXT4-fs: Ignoring removed oldalloc option [ 53.974755][ T5827] EXT4-fs: Ignoring removed orlov option [ 54.012892][ T30] audit: type=1326 audit(53.980:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5835 comm="syz.1.257" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f7a228 code=0x7ffc0000 [ 54.012926][ T30] audit: type=1326 audit(53.980:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5835 comm="syz.1.257" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f7a228 code=0x7ffc0000 [ 54.012943][ T30] audit: type=1326 audit(53.980:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5835 comm="syz.1.257" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f7a228 code=0x7ffc0000 [ 54.012957][ T30] audit: type=1326 audit(53.980:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5835 comm="syz.1.257" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f7a228 code=0x7ffc0000 [ 54.012972][ T30] audit: type=1326 audit(53.980:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5835 comm="syz.1.257" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff94f7a228 code=0x7ffc0000 [ 54.012986][ T30] audit: type=1326 audit(53.980:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5835 comm="syz.1.257" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f7a228 code=0x7ffc0000 [ 54.013006][ T30] audit: type=1326 audit(53.980:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5835 comm="syz.1.257" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f7a228 code=0x7ffc0000 [ 54.013020][ T30] audit: type=1326 audit(53.980:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5835 comm="syz.1.257" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f7a228 code=0x7ffc0000 [ 54.013035][ T30] audit: type=1326 audit(53.980:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5835 comm="syz.1.257" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f7a228 code=0x7ffc0000 [ 54.013049][ T30] audit: type=1326 audit(53.980:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5835 comm="syz.1.257" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff94f7a228 code=0x7ffc0000 [ 54.015324][ T5827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.073604][ T5840] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 54.087977][ T4746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.106202][ T5840] loop1: detected capacity change from 0 to 4096 [ 54.118155][ T5840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.141212][ T5844] loop2: detected capacity change from 0 to 8192 [ 54.179599][ T5844] loop2: AHDI p1 p4 [ 54.179707][ T5844] loop2: p1 start 4063234 is beyond EOD, truncated [ 54.500106][ T5853] syzkaller0: entered promiscuous mode [ 54.500125][ T5853] syzkaller0: entered allmulticast mode [ 54.599536][ T5855] loop0: detected capacity change from 0 to 512 [ 54.604159][ T5855] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 54.628360][ T5855] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e00ee018, mo2=0082] [ 54.628393][ T5855] System zones: 0-2, 18-18, 34-34 [ 54.631737][ T5855] EXT4-fs (loop0): 1 orphan inode deleted [ 54.632429][ T5855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.012557][ T4744] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.041834][ T5870] loop4: detected capacity change from 0 to 512 [ 55.042249][ T5870] ext3: Unknown parameter 'noacl' [ 55.725850][ T5916] netlink: 48 bytes leftover after parsing attributes in process `syz.1.283'. [ 55.769532][ T4736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.807781][ T5920] fuse: Bad value for 'fd' [ 55.827615][ T5922] bpf: Bad value for 'gid' [ 55.827867][ T5922] FAULT_INJECTION: forcing a failure. [ 55.827867][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 55.827880][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz.0.287 Not tainted syzkaller #0 PREEMPT [ 55.827891][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 55.827896][ T5922] Call trace: [ 55.827899][ T5922] show_stack+0x2c/0x3c (C) [ 55.827913][ T5922] __dump_stack+0x30/0x40 [ 55.827922][ T5922] dump_stack_lvl+0xd8/0x12c [ 55.827931][ T5922] dump_stack+0x1c/0x28 [ 55.827938][ T5922] should_fail_ex+0x418/0x58c [ 55.827949][ T5922] should_failslab+0xc4/0x120 [ 55.827960][ T5922] __kmalloc_noprof+0x108/0x6c8 [ 55.827970][ T5922] copy_net_ns+0x16c/0x698 [ 55.827982][ T5922] create_new_namespaces+0x304/0x50c [ 55.827995][ T5922] unshare_nsproxy_namespaces+0x120/0x170 [ 55.828007][ T5922] ksys_unshare+0x438/0x6e0 [ 55.828018][ T5922] __arm64_sys_unshare+0x40/0x54 [ 55.828028][ T5922] invoke_syscall+0x98/0x244 [ 55.828037][ T5922] el0_svc_common+0xec/0x23c [ 55.828045][ T5922] do_el0_svc+0x4c/0x5c [ 55.828053][ T5922] el0_svc+0x60/0x1d8 [ 55.828062][ T5922] el0t_64_sync_handler+0x44/0x104 [ 55.828070][ T5922] el0t_64_sync+0x198/0x19c [ 55.982423][ T5932] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 55.982459][ T5932] Error validating options; rc = [-22] [ 55.997613][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 56.002167][ T5936] loop3: detected capacity change from 0 to 256 [ 56.002440][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 56.005007][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 56.005120][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 56.005216][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 56.005329][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 56.005506][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 56.005833][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 56.005943][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 56.006053][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 56.182375][ T5945] bond1: entered promiscuous mode [ 56.182575][ T5945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.592401][ T5968] tipc: Started in network mode [ 56.592423][ T5968] tipc: Node identity 00000000000000000000ffffac1414bb, cluster identity 4711 [ 56.592445][ T5968] tipc: Enabling of bearer rejected, failed to enable media [ 56.745047][ T5975] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 56.758883][ T5975] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.977145][ T4742] Bluetooth: Wrong link type (-71) [ 57.086707][ T5988] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 57.257225][ T5988] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.309: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 57.257468][ T5988] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 57.259036][ T5988] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.309: couldn't read orphan inode 11 (err -117) [ 57.259073][ T5988] loop3: lost filesystem error report for type 5 error -117 [ 57.260382][ T5988] EXT4-fs (loop3): 1 truncate cleaned up [ 57.264292][ T5988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.441687][ T5991] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 57.441706][ T5991] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 57.441714][ T5991] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 57.441725][ T5991] page_type: f5(slab) [ 57.441734][ T5991] raw: 05ffc00000000040 ffff0000c186eb40 dead000000000100 dead000000000122 [ 57.441742][ T5991] raw: 0000000000000000 00000002000d000d 00000000f5000000 0000000000000000 [ 57.441751][ T5991] head: 05ffc00000000040 ffff0000c186eb40 dead000000000100 dead000000000122 [ 57.441758][ T5991] head: 0000000000000000 00000002000d000d 00000000f5000000 0000000000000000 [ 57.441766][ T5991] head: 05ffc00000000002 fffffdffc3600001 00000000ffffffff 00000000ffffffff [ 57.441774][ T5991] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 57.441779][ T5991] page dumped because: unmovable page [ 57.493366][ T4744] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.545801][ T6012] binder: 6011:6012 ioctl c0306201 20000680 returned -14 [ 57.545937][ T6012] binder: 6011:6012 got reply transaction with no transaction stack [ 57.545996][ T6012] binder: 6011:6012 transaction reply to 0:0 failed 3/29201/-71, code 2 size 88-24 line 3156 [ 57.546408][ T6012] binder: 6011:6012 ioctl c0306201 20000780 returned -14 [ 57.985163][ T6050] input: syz0 as /devices/virtual/input/input2 [ 58.026553][ T6054] set_capacity_and_notify: 3 callbacks suppressed [ 58.026567][ T6054] loop0: detected capacity change from 0 to 1024 [ 58.037887][ T6054] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 58.043175][ T6054] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.326: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.043206][ T6054] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 58.043441][ T6054] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 48: comm syz.0.326: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.043459][ T6054] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 58.043595][ T6054] EXT4-fs error (device loop0): ext4_acquire_dquot:7070: comm syz.0.326: Failed to acquire dquot type 0 [ 58.043611][ T6054] loop0: lost filesystem error report for type 5 error -117 [ 58.044034][ T6054] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 58.044049][ T6054] loop0: lost filesystem error report for type 5 error -117 [ 58.044320][ T6054] EXT4-fs error (device loop0): ext4_evict_inode:269: inode #11: comm syz.0.326: mark_inode_dirty error [ 58.044342][ T6054] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.044603][ T6054] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 58.044669][ T6054] EXT4-fs (loop0): 1 orphan inode deleted [ 58.045159][ T6054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.059342][ T42] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.059361][ T42] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 58.060388][ T42] EXT4-fs error (device loop0): ext4_release_dquot:7106: comm kworker/u8:3: Failed to release dquot type 0 [ 58.060403][ T42] loop0: lost filesystem error report for type 5 error -117 [ 58.100937][ T4736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.101547][ T4736] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 58.101561][ T4736] loop0: lost filesystem error report for type 5 error -117 [ 58.102496][ T4736] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 58.102517][ T4736] loop0: lost filesystem error report for type 5 error -117 [ 58.102815][ T4736] EXT4-fs error (device loop0): ext4_quota_off:7354: inode #3: comm syz-executor: mark_inode_dirty error [ 58.102829][ T4736] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 58.102936][ T4736] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 58.102947][ T4736] loop0: lost filesystem error report for type 5 error -117 [ 58.329705][ T4735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.561702][ T6096] loop3: detected capacity change from 0 to 512 [ 58.569901][ T6096] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.336: corrupted in-inode xattr: invalid ea_ino [ 58.569924][ T6096] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.570030][ T6096] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.336: couldn't read orphan inode 15 (err -117) [ 58.570045][ T6096] loop3: lost filesystem error report for type 5 error -117 [ 58.587495][ T6096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.608823][ T6099] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 58.627637][ T6096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.658085][ T6101] nbd1: detected capacity change from 0 to 63 [ 58.660271][ T6101] block nbd1: NBD_DISCONNECT [ 58.660753][ T6101] block nbd1: Disconnected due to user request. [ 58.660766][ T6101] block nbd1: shutting down sockets [ 58.665721][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 58.665758][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 58.665771][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 58.665779][ T11] Buffer I/O error on dev nbd1, logical block 2, async page read [ 58.665787][ T11] Buffer I/O error on dev nbd1, logical block 3, async page read [ 58.667931][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.667952][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 58.671240][ T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 58.671257][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 58.671266][ T11] Buffer I/O error on dev nbd1, logical block 2, async page read [ 58.671275][ T11] Buffer I/O error on dev nbd1, logical block 3, async page read [ 58.671399][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 58.671410][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 58.671418][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 58.671479][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 58.671543][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 58.671609][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 58.671675][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 58.671784][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 58.671813][ T4726] ldm_validate_partition_table(): Disk read failed. [ 58.671851][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 58.672034][ T4726] Dev nbd1: unable to read RDB block 0 [ 58.672557][ T4726] nbd1: unable to read partition table [ 58.683678][ T4726] ldm_validate_partition_table(): Disk read failed. [ 58.683991][ T4726] Dev nbd1: unable to read RDB block 0 [ 58.685604][ T4726] nbd1: unable to read partition table [ 58.789421][ T6111] FAULT_INJECTION: forcing a failure. [ 58.789421][ T6111] name failslab, interval 1, probability 0, space 0, times 0 [ 58.789443][ T6111] CPU: 0 UID: 0 PID: 6111 Comm: syz.1.342 Not tainted syzkaller #0 PREEMPT [ 58.789455][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 58.789460][ T6111] Call trace: [ 58.789463][ T6111] show_stack+0x2c/0x3c (C) [ 58.789479][ T6111] __dump_stack+0x30/0x40 [ 58.789487][ T6111] dump_stack_lvl+0xd8/0x12c [ 58.789495][ T6111] dump_stack+0x1c/0x28 [ 58.789502][ T6111] should_fail_ex+0x418/0x58c [ 58.789511][ T6111] should_failslab+0xc4/0x120 [ 58.789521][ T6111] kmem_cache_alloc_noprof+0x94/0x5d4 [ 58.789530][ T6111] dst_alloc+0xf4/0x15c [ 58.789540][ T6111] xfrm_alloc_dst+0x7c/0x160 [ 58.789549][ T6111] xfrm_resolve_and_create_bundle+0x10d8/0x2c60 [ 58.789556][ T6111] xfrm_lookup_with_ifid+0x238/0x19e4 [ 58.789564][ T6111] xfrm_lookup_route+0x4c/0x1cc [ 58.789570][ T6111] ip_route_output_flow+0xd4/0x158 [ 58.789579][ T6111] udp_sendmsg+0xefc/0x1ab4 [ 58.789588][ T6111] inet_sendmsg+0xb4/0xd8 [ 58.789598][ T6111] __sock_sendmsg+0xc8/0x17c [ 58.789607][ T6111] sock_write_iter+0x220/0x310 [ 58.789617][ T6111] vfs_write+0x51c/0xa0c [ 58.789626][ T6111] ksys_write+0x12c/0x228 [ 58.789633][ T6111] __arm64_sys_write+0x84/0x98 [ 58.789641][ T6111] invoke_syscall+0x98/0x244 [ 58.789649][ T6111] el0_svc_common+0xec/0x23c [ 58.789656][ T6111] do_el0_svc+0x4c/0x5c [ 58.789663][ T6111] el0_svc+0x60/0x1d8 [ 58.789671][ T6111] el0t_64_sync_handler+0x44/0x104 [ 58.789679][ T6111] el0t_64_sync+0x198/0x19c [ 59.471734][ T6127] validate_nla: 56 callbacks suppressed [ 59.471750][ T6127] netlink: 'syz.3.348': attribute type 1 has an invalid length. [ 59.475439][ T6133] binder: tried to use weak ref as strong ref [ 59.475450][ T6133] binder: 6131:6133 Acquire 1 refcount change on invalid ref 0 ret -22 [ 59.475564][ T6133] binder: 6131:6133 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 59.475576][ T6133] binder: 6133 RLIMIT_NICE not set [ 59.494998][ T6127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.507430][ T6127] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 59.509828][ T6127] netlink: 'syz.3.348': attribute type 1 has an invalid length. [ 59.526516][ T6138] C: renamed from veth1_to_team (while UP) [ 59.535683][ T6138] netlink: 'syz.2.349': attribute type 1 has an invalid length. [ 59.535923][ T6138] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 59.569717][ T6142] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 59.620185][ T6142] netlink: 'syz.0.351': attribute type 8 has an invalid length. [ 59.810275][ T6148] process 'syz.0.354' launched './file2' with NULL argv: empty string added [ 60.129318][ T6167] loop0: detected capacity change from 0 to 256 [ 60.136848][ T6167] FAT-fs (loop0): Directory bread(block 1285) failed [ 60.139816][ T6167] FAT-fs (loop0): Directory bread(block 1286) failed [ 60.139837][ T6167] FAT-fs (loop0): Directory bread(block 1287) failed [ 60.139922][ T6167] FAT-fs (loop0): Directory bread(block 1288) failed [ 60.188045][ T6167] FAT-fs (loop0): Directory bread(block 1285) failed [ 60.188068][ T6167] FAT-fs (loop0): Directory bread(block 1286) failed [ 60.188081][ T6167] FAT-fs (loop0): Directory bread(block 1287) failed [ 60.188101][ T6167] FAT-fs (loop0): Directory bread(block 1288) failed [ 60.188280][ T6167] FAT-fs (loop0): Directory bread(block 1285) failed [ 60.188293][ T6167] FAT-fs (loop0): Directory bread(block 1286) failed [ 60.499565][ T6181] tmpfs: Unknown parameter 'grardlimit' [ 60.866565][ T6193] cougar: G6 mapped to space [ 60.891413][ T6193] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 60.891433][ T6193] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 60.891441][ T6193] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 60.891452][ T6193] page_type: f5(slab) [ 60.891461][ T6193] raw: 05ffc00000000040 ffff0000c186eb40 dead000000000100 dead000000000122 [ 60.891470][ T6193] raw: 0000000000000000 00000002000d000d 00000000f5000000 0000000000000000 [ 60.891478][ T6193] head: 05ffc00000000040 ffff0000c186eb40 dead000000000100 dead000000000122 [ 60.891485][ T6193] head: 0000000000000000 00000002000d000d 00000000f5000000 0000000000000000 [ 60.891494][ T6193] head: 05ffc00000000002 fffffdffc3600001 00000000ffffffff 00000000ffffffff [ 60.891501][ T6193] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 60.891506][ T6193] page dumped because: unmovable page [ 62.146427][ T6260] __nla_validate_parse: 33 callbacks suppressed [ 62.146444][ T6260] netlink: 964 bytes leftover after parsing attributes in process `syz.3.388'. [ 62.168561][ T6262] overlayfs: failed to clone upperpath [ 62.412731][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 62.416693][ T6280] macvtap1: entered promiscuous mode [ 62.416709][ T6280] dummy0: entered promiscuous mode [ 62.416822][ T6280] macvtap1: entered allmulticast mode [ 62.416829][ T6280] dummy0: entered allmulticast mode [ 62.420420][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 62.421797][ T6280] dummy0: left allmulticast mode [ 62.427984][ T6280] macvtap1: left promiscuous mode [ 62.427999][ T6280] macvtap1: left allmulticast mode [ 62.430791][ T10] dummy0: left promiscuous mode [ 62.986446][ T6330] netlink: 'syz.2.407': attribute type 21 has an invalid length. [ 62.986504][ T6330] netlink: 132 bytes leftover after parsing attributes in process `syz.2.407'. [ 63.406203][ T6352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.415'. [ 63.590940][ T6365] loop2: detected capacity change from 0 to 2048 [ 63.601439][ T6365] EXT4-fs: Mount option(s) incompatible with ext3 [ 63.941173][ T6381] loop0: detected capacity change from 0 to 512 [ 63.947613][ T6381] EXT4-fs: Ignoring removed nobh option [ 63.947760][ T6381] EXT4-fs (loop0): unable to read superblock [ 64.263612][ T6392] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 64.510395][ T1613] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.510425][ T1613] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.511250][ T26] cfg80211: failed to load regulatory.db [ 64.595228][ T6412] netlink: 'syz.2.433': attribute type 1 has an invalid length. [ 64.646265][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 64.829624][ T6426] nfs: Unknown parameter '00000000000000000000000' [ 65.056651][ T6439] input: syz0 as /devices/virtual/input/input4 [ 65.239736][ T30] kauditd_printk_skb: 568 callbacks suppressed [ 65.239751][ T30] audit: type=1326 audit(65.200:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.3.444" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8077a228 code=0x7ffc0000 [ 65.240821][ T30] audit: type=1326 audit(65.210:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.3.444" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8077a228 code=0x7ffc0000 [ 65.242911][ T30] audit: type=1326 audit(65.210:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.3.444" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8077a228 code=0x7ffc0000 [ 65.244008][ T30] audit: type=1326 audit(65.210:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.3.444" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8077a228 code=0x7ffc0000 [ 65.244187][ T30] audit: type=1326 audit(65.210:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.3.444" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=470 compat=0 ip=0xffff8077a228 code=0x7ffc0000 [ 65.244202][ T30] audit: type=1326 audit(65.210:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.3.444" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8077a228 code=0x7ffc0000 [ 65.244218][ T30] audit: type=1326 audit(65.210:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.3.444" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8077a228 code=0x7ffc0000 [ 65.244393][ T30] audit: type=1326 audit(65.210:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.3.444" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8077a228 code=0x7ffc0000 [ 65.244407][ T30] audit: type=1326 audit(65.210:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.3.444" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8077a228 code=0x7ffc0000 [ 65.244471][ T30] audit: type=1326 audit(65.210:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.3.444" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8077a228 code=0x7ffc0000 [ 65.271833][ T6457] loop2: detected capacity change from 0 to 8 [ 65.272181][ T6457] squashfs: Unknown parameter '0x0000000000000003' [ 65.330453][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.444'. [ 65.342021][ T6459] loop0: detected capacity change from 0 to 128 [ 65.349254][ T6459] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.352572][ T6459] FAT-fs (loop0): bogus number of reserved sectors [ 65.352586][ T6459] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 65.352593][ T6459] FAT-fs (loop0): Can't find a valid FAT filesystem [ 65.353464][ T6459] FAULT_INJECTION: forcing a failure. [ 65.353464][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 65.353478][ T6459] CPU: 0 UID: 0 PID: 6459 Comm: syz.0.445 Not tainted syzkaller #0 PREEMPT [ 65.353488][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.353494][ T6459] Call trace: [ 65.353497][ T6459] show_stack+0x2c/0x3c (C) [ 65.353512][ T6459] __dump_stack+0x30/0x40 [ 65.353521][ T6459] dump_stack_lvl+0xd8/0x12c [ 65.353529][ T6459] dump_stack+0x1c/0x28 [ 65.353537][ T6459] should_fail_ex+0x418/0x58c [ 65.353547][ T6459] should_failslab+0xc4/0x120 [ 65.353557][ T6459] kmem_cache_alloc_noprof+0x94/0x5d4 [ 65.353568][ T6459] alloc_empty_file+0x6c/0x1cc [ 65.353579][ T6459] alloc_file+0x58/0x98 [ 65.353588][ T6459] alloc_file_pseudo+0xe0/0x198 [ 65.353599][ T6459] sock_alloc_file+0xb4/0x1ac [ 65.353610][ T6459] __sys_socket+0x90/0xec [ 65.353621][ T6459] __arm64_sys_socket+0x84/0x9c [ 65.353632][ T6459] invoke_syscall+0x98/0x244 [ 65.353640][ T6459] el0_svc_common+0xec/0x23c [ 65.353648][ T6459] do_el0_svc+0x4c/0x5c [ 65.353656][ T6459] el0_svc+0x60/0x1d8 [ 65.353665][ T6459] el0t_64_sync_handler+0x44/0x104 [ 65.353673][ T6459] el0t_64_sync+0x198/0x19c [ 65.492735][ T6472] fuse: Bad value for 'fd' [ 65.586759][ T6476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'. [ 66.059721][ T6494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.470999][ T6499] netlink: 68 bytes leftover after parsing attributes in process `syz.3.461'. [ 66.566057][ T6509] netlink: 72 bytes leftover after parsing attributes in process `syz.2.465'. [ 66.604933][ T6512] 9p: Bad value for 'rfdno' [ 67.133236][ T6535] loop1: detected capacity change from 0 to 512 [ 67.167283][ T6535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.206492][ T4744] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.250309][ T6554] loop1: detected capacity change from 0 to 8 [ 67.288347][ T6554] SQUASHFS error: Failed to read block 0x4e8: -5 [ 67.489945][ T6558] batadv_slave_1: entered promiscuous mode [ 67.490262][ T6558] __nla_validate_parse: 1 callbacks suppressed [ 67.490269][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'. [ 67.490413][ T6558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.495908][ T6558] batadv_slave_1 (unregistering): left promiscuous mode [ 67.495949][ T6558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.581721][ T6560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.695569][ T6565] loop0: detected capacity change from 0 to 256 [ 67.699038][ T6565] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.137076][ T6587] netlink: 'syz.1.485': attribute type 3 has an invalid length. [ 68.638607][ T6609] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.639310][ T6610] ip_tables: iptables: counters copy to user failed while replacing table [ 68.639617][ T6611] ip_tables: iptables: counters copy to user failed while replacing table [ 68.759245][ T6623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.090445][ T6639] team_slave_0: entered allmulticast mode [ 69.100866][ T6638] netlink: 48 bytes leftover after parsing attributes in process `syz.3.501'. [ 69.102344][ T6637] team_slave_0: entered promiscuous mode [ 69.113767][ T6641] netlink: 'syz.2.502': attribute type 21 has an invalid length. [ 69.113781][ T6641] netlink: 128 bytes leftover after parsing attributes in process `syz.2.502'. [ 69.113809][ T6641] netlink: 'syz.2.502': attribute type 4 has an invalid length. [ 69.113816][ T6641] netlink: 'syz.2.502': attribute type 3 has an invalid length. [ 69.113822][ T6641] netlink: 3 bytes leftover after parsing attributes in process `syz.2.502'. [ 69.327179][ T6661] loop1: detected capacity change from 0 to 512 [ 69.328581][ T6661] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 69.328599][ T6661] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.340957][ T6661] EXT4-fs (loop1): 1 truncate cleaned up [ 69.341890][ T6661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.359559][ T6661] EXT4-fs error (device loop1): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.1.511: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 69.360886][ T6661] EXT4-fs error (device loop1) in ext4_delete_entry:2746: Corrupt filesystem [ 69.644507][ T4744] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.713676][ T6673] loop1: detected capacity change from 0 to 512 [ 69.812970][ T6678] FAULT_INJECTION: forcing a failure. [ 69.812970][ T6678] name failslab, interval 1, probability 0, space 0, times 0 [ 69.812989][ T6678] CPU: 1 UID: 0 PID: 6678 Comm: syz.1.515 Not tainted syzkaller #0 PREEMPT [ 69.812999][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.813003][ T6678] Call trace: [ 69.813006][ T6678] show_stack+0x2c/0x3c (C) [ 69.813022][ T6678] __dump_stack+0x30/0x40 [ 69.813030][ T6678] dump_stack_lvl+0xd8/0x12c [ 69.813037][ T6678] dump_stack+0x1c/0x28 [ 69.813044][ T6678] should_fail_ex+0x418/0x58c [ 69.813054][ T6678] should_failslab+0xc4/0x120 [ 69.813063][ T6678] __kmalloc_cache_noprof+0x94/0x5fc [ 69.813072][ T6678] fuse_pqueue_alloc+0x58/0xe0 [ 69.813080][ T6678] fuse_dev_chan_new+0x28/0xb0 [ 69.813087][ T6678] fuse_get_tree+0x4c/0x31c [ 69.813095][ T6678] vfs_get_tree+0x90/0x28c [ 69.813105][ T6678] fc_mount+0x24/0xac [ 69.813114][ T6678] do_new_mount+0x2a4/0x538 [ 69.813121][ T6678] path_mount+0x5f0/0xa88 [ 69.813127][ T6678] do_mount+0xe8/0x148 [ 69.813134][ T6678] __arm64_sys_mount+0x33c/0x388 [ 69.813141][ T6678] invoke_syscall+0x98/0x244 [ 69.813149][ T6678] el0_svc_common+0xec/0x23c [ 69.813156][ T6678] do_el0_svc+0x4c/0x5c [ 69.813163][ T6678] el0_svc+0x60/0x1d8 [ 69.813171][ T6678] el0t_64_sync_handler+0x44/0x104 [ 69.813178][ T6678] el0t_64_sync+0x198/0x19c [ 69.813661][ T6676] loop1: detected capacity change from 0 to 512 [ 70.039181][ T6684] binder: 6683:6684 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 70.039200][ T6684] binder: 6684 RLIMIT_NICE not set [ 70.042253][ T6684] batman_adv: batadv0: Adding interface: vxlan0 [ 70.042262][ T6684] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.042275][ T6684] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 70.215801][ T6695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.581143][ T4738] Bluetooth: hci1: connection err: -111 [ 70.626236][ T6711] usb usb4: usbfs: process 6711 (syz.2.526) did not claim interface 0 before use [ 70.688969][ T6708] netlink: 'syz.0.525': attribute type 1 has an invalid length. [ 72.071686][ T6752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.182171][ T6754] Cannot find add_set index 0 as target [ 72.543025][ T6764] ip_tables: iptables: counters copy to user failed while replacing table [ 72.946393][ T6775] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 73.042766][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 73.100961][ T6792] loop1: detected capacity change from 0 to 512 [ 73.127796][ T6792] EXT4-fs (loop1): 1 truncate cleaned up [ 73.130482][ T6792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.164517][ T4742] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.165746][ T4742] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.166035][ T4742] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.166558][ T4742] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.166806][ T4742] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.255220][ T6814] FAULT_INJECTION: forcing a failure. [ 73.255220][ T6814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.255242][ T6814] CPU: 1 UID: 0 PID: 6814 Comm: syz.0.551 Not tainted syzkaller #0 PREEMPT [ 73.255253][ T6814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.255259][ T6814] Call trace: [ 73.255262][ T6814] show_stack+0x2c/0x3c (C) [ 73.255278][ T6814] __dump_stack+0x30/0x40 [ 73.255286][ T6814] dump_stack_lvl+0xd8/0x12c [ 73.255294][ T6814] dump_stack+0x1c/0x28 [ 73.255301][ T6814] should_fail_ex+0x418/0x58c [ 73.255310][ T6814] should_fail+0x14/0x24 [ 73.255318][ T6814] should_fail_usercopy+0x20/0x30 [ 73.255327][ T6814] simple_read_from_buffer+0xc4/0x238 [ 73.255341][ T6814] proc_fail_nth_read+0x1a8/0x248 [ 73.255353][ T6814] vfs_read+0x230/0x8c8 [ 73.255361][ T6814] ksys_read+0x12c/0x228 [ 73.255369][ T6814] __arm64_sys_read+0x84/0x98 [ 73.255377][ T6814] invoke_syscall+0x98/0x244 [ 73.255385][ T6814] el0_svc_common+0xec/0x23c [ 73.255392][ T6814] do_el0_svc+0x4c/0x5c [ 73.255400][ T6814] el0_svc+0x60/0x1d8 [ 73.255407][ T6814] el0t_64_sync_handler+0x44/0x104 [ 73.255415][ T6814] el0t_64_sync+0x198/0x19c [ 73.258380][ T6803] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.325928][ T4744] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.332228][ T6816] binder: 6815:6816 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 73.332336][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332377][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332411][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332441][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332499][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332532][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332561][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332590][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332621][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332649][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332677][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332705][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332738][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332788][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332822][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332850][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332882][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332911][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332939][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332967][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.332999][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333028][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333056][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333086][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333115][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333143][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333172][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333199][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333229][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333258][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333286][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333314][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333351][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333381][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333409][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333438][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333468][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333497][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333536][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333566][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333596][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333624][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333652][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333680][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333711][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333740][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333768][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333796][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333826][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333855][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333883][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333911][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333943][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333971][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.333999][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.334027][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.334058][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.334088][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.334116][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.334144][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.334175][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.334202][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.334230][ T6816] binder: 6815:6816 ioctl c0306201 20000080 returned -14 [ 73.427789][ T6822] usb usb7: usbfs: process 6822 (syz.1.555) did not claim interface 0 before use [ 73.461998][ T6825] netlink: 'syz.3.556': attribute type 10 has an invalid length. [ 73.462049][ T6826] netlink: 'syz.3.556': attribute type 10 has an invalid length. [ 73.463880][ T6822] loop1: detected capacity change from 0 to 1024 [ 73.472785][ T6822] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.480563][ T6822] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #3: block 1: comm syz.1.555: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.480589][ T6822] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 73.480702][ T6822] __quota_error: 61 callbacks suppressed [ 73.480708][ T6822] Quota error (device loop1): write_blk: dquota write failed [ 73.480720][ T6822] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 73.480740][ T6822] EXT4-fs error (device loop1): ext4_acquire_dquot:7070: comm syz.1.555: Failed to acquire dquot type 0 [ 73.480751][ T6822] loop1: lost filesystem error report for type 5 error -117 [ 73.481066][ T6822] EXT4-fs error (device loop1): ext4_free_blocks:6719: comm syz.1.555: Freeing blocks not in datazone - block = 0, count = 4096 [ 73.481152][ T6822] loop1: lost filesystem error report for type 5 error -117 [ 73.481904][ T6825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.482922][ T6822] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.555: Invalid inode bitmap blk 0 in block_group 0 [ 73.482938][ T6822] loop1: lost filesystem error report for type 5 error -117 [ 73.482951][ T6825] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 73.483818][ T6822] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 73.483835][ T6822] loop1: lost filesystem error report for type 5 error -117 [ 73.484961][ T6822] EXT4-fs (loop1): 1 orphan inode deleted [ 73.485438][ T6822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.525866][ T12] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.529740][ T12] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 73.529763][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7106: comm kworker/u8:0: Failed to release dquot type 0 [ 73.540942][ T6831] loop0: detected capacity change from 0 to 256 [ 73.585797][ T4968] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.606157][ T6822] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.650498][ T6803] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.650538][ T6803] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.650601][ T6803] bridge_slave_0: entered allmulticast mode [ 73.651109][ T6803] bridge_slave_0: entered promiscuous mode [ 73.653296][ T6803] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.653348][ T6803] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.653407][ T6803] bridge_slave_1: entered allmulticast mode [ 73.653931][ T6803] bridge_slave_1: entered promiscuous mode [ 73.666825][ T6803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.667999][ T6803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.681968][ T4968] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.724546][ T6845] veth3: entered promiscuous mode [ 73.726008][ T6803] team0: Port device team_slave_0 added [ 73.731886][ T6803] team0: Port device team_slave_1 added [ 73.751638][ T6803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.751650][ T6803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.751661][ T6803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.775329][ T4968] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.780808][ T6803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.780819][ T6803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.780834][ T6803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.804391][ T6803] hsr_slave_0: entered promiscuous mode [ 73.804876][ T6803] hsr_slave_1: entered promiscuous mode [ 73.805057][ T6803] debugfs: 'hsr0' already exists in 'hsr' [ 73.805067][ T6803] Cannot create hsr debugfs directory [ 73.858815][ T4968] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.898373][ T6803] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.901551][ T6803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.902018][ T6803] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.903247][ T6803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.903807][ T6803] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 73.905712][ T6803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.906240][ T6803] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.911631][ T6803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.921405][ T6803] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.921434][ T6803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.921511][ T6803] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.921539][ T6803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.951081][ T6803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.961425][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.961896][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.988890][ T6803] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.012289][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.012319][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.012745][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.012764][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.050588][ T4968] bridge_slave_1: left allmulticast mode [ 74.050622][ T4968] bridge_slave_1: left promiscuous mode [ 74.051183][ T4968] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.055372][ T4968] bridge_slave_0: left allmulticast mode [ 74.055392][ T4968] bridge_slave_0: left promiscuous mode [ 74.055468][ T4968] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.113797][ T6850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.125046][ T6850] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz.1.555: Invalid inode table block 18446744069414584321 in block_group 0 [ 74.125067][ T6850] loop1: lost filesystem error report for type 5 error -117 [ 74.162457][ T4968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.202681][ T4968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.218338][ T4968] bond0 (unregistering): Released all slaves [ 74.220871][ T4968] bond1 (unregistering): Released all slaves [ 74.286435][ T4738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.295482][ T4738] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.302770][ T4738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.308392][ T4738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.309482][ T4738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.410215][ T6916] netlink: 1 bytes leftover after parsing attributes in process `syz.2.570'. [ 74.410240][ T6916] openvswitch: netlink: Actions may not be safe on all matching packets [ 74.410329][ T6914] netlink: 1 bytes leftover after parsing attributes in process `syz.2.570'. [ 74.410347][ T6914] openvswitch: netlink: Actions may not be safe on all matching packets [ 74.418761][ T6914] loop2: detected capacity change from 0 to 1024 [ 74.522724][ T6803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.599590][ T6895] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.619625][ T4427] 8021q: adding VLAN 0 to HW filter on device eth1 [ 74.680765][ T4968] hsr_slave_0: left promiscuous mode [ 74.681715][ T4968] hsr_slave_1: left promiscuous mode [ 74.682498][ T4968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.682516][ T4968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.683539][ T4968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.683551][ T4968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.698488][ T4968] veth1_macvtap: left promiscuous mode [ 74.698528][ T4968] veth0_macvtap: left promiscuous mode [ 74.698589][ T4968] veth1_vlan: left promiscuous mode [ 74.698619][ T4968] veth0_vlan: left promiscuous mode [ 74.844526][ T4968] team0 (unregistering): Port device team_slave_1 removed [ 74.857143][ T4968] team0 (unregistering): Port device team_slave_0 removed [ 74.922475][ T4427] 8021q: adding VLAN 0 to HW filter on device eth0 [ 74.948058][ T6803] veth0_vlan: entered promiscuous mode [ 74.950750][ T6803] veth1_vlan: entered promiscuous mode [ 75.001128][ T6803] veth0_macvtap: entered promiscuous mode [ 75.015181][ T6803] veth1_macvtap: entered promiscuous mode [ 75.042270][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.046079][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.064968][ T532] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.065054][ T532] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.065120][ T532] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.065174][ T532] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.132699][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.132715][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.192275][ T6895] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.192311][ T6895] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.192378][ T6895] bridge_slave_0: entered allmulticast mode [ 75.192819][ T6895] bridge_slave_0: entered promiscuous mode [ 75.203719][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.203733][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.205703][ T6895] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.214400][ T6895] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.214498][ T6895] bridge_slave_1: entered allmulticast mode [ 75.214960][ T6895] bridge_slave_1: entered promiscuous mode [ 75.228273][ T4742] Bluetooth: hci5: command tx timeout [ 75.236824][ T6895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.252586][ T6895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.266662][ T4427] 8021q: adding VLAN 0 to HW filter on device eth2 [ 75.274939][ T6895] team0: Port device team_slave_0 added [ 75.279326][ T6895] team0: Port device team_slave_1 added [ 75.295831][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.295847][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.295877][ T6895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.296378][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.296385][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.296397][ T6895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.346786][ T6998] loop2: detected capacity change from 0 to 512 [ 75.359239][ T4968] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.393702][ T6895] hsr_slave_0: entered promiscuous mode [ 75.394005][ T6895] hsr_slave_1: entered promiscuous mode [ 75.394192][ T6895] debugfs: 'hsr0' already exists in 'hsr' [ 75.394203][ T6895] Cannot create hsr debugfs directory [ 75.450560][ T6895] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 75.462338][ T6895] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.462735][ T6895] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 75.468542][ T6895] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.484464][ T4968] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.493907][ T6895] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 75.495048][ T6895] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.496244][ T6895] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 75.501414][ T6895] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.748605][ T7020] tipc: Enabling of bearer rejected, failed to enable media [ 75.766550][ T6998] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 75.766572][ T6998] FAT-fs (loop2): Filesystem has been set read-only [ 75.768707][ T6998] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 75.784002][ T4968] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.813832][ T6895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.820226][ T6895] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.832708][ T6895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.832724][ T6895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.871393][ T1205] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.871422][ T1205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.873040][ T1205] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.873063][ T1205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.901928][ T7029] netlink: 44 bytes leftover after parsing attributes in process `syz.2.581'. [ 75.902998][ T7029] netlink: 44 bytes leftover after parsing attributes in process `syz.2.581'. [ 75.930667][ T4968] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.940476][ T7034] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 75.941892][ T7032] netlink: 'syz.2.582': attribute type 39 has an invalid length. [ 75.987352][ T7037] xt_nfacct: accounting object `syz0' does not exist [ 76.261249][ T7049] loop5: detected capacity change from 0 to 512 [ 76.261684][ T7049] ext4: Unknown parameter 'obj_user' [ 76.287725][ T7050] loop5: detected capacity change from 0 to 512 [ 76.296230][ T7050] ext4: Unknown parameter 'obj_user' [ 76.347647][ T4742] Bluetooth: hci2: command tx timeout [ 76.356226][ T4968] bridge_slave_1: left allmulticast mode [ 76.356246][ T4968] bridge_slave_1: left promiscuous mode [ 76.356326][ T4968] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.359613][ T4968] bridge_slave_0: left allmulticast mode [ 76.359628][ T4968] bridge_slave_0: left promiscuous mode [ 76.359706][ T4968] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.501702][ T4968] batman_adv: batadv0: Removing interface: vxlan0 [ 76.521462][ T4968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.548497][ T4968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.567830][ T4968] bond0 (unregistering): Released all slaves [ 76.587783][ T4427] 8021q: adding VLAN 0 to HW filter on device eth3 [ 76.595593][ T6895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.630158][ T4968] tipc: Left network mode [ 76.791229][ T7081] loop2: detected capacity change from 0 to 7 [ 76.791614][ T7081] Dev loop2: unable to read RDB block 7 [ 76.791628][ T7081] loop2: unable to read partition table [ 76.791683][ T7081] loop2: partition table beyond EOD, truncated [ 76.791692][ T7081] loop_reread_partitions: partition scan of loop2 (被x]4 ) failed (rc=-5) [ 76.838297][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 76.838332][ T7088] netlink: 84 bytes leftover after parsing attributes in process `syz.2.590'. [ 76.859534][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'. [ 76.886002][ T6895] veth0_vlan: entered promiscuous mode [ 76.921297][ T7108] loop2: detected capacity change from 0 to 1024 [ 76.925129][ T7108] EXT4-fs: Ignoring removed bh option [ 76.926120][ T7108] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 76.947839][ T7112] netlink: 28 bytes leftover after parsing attributes in process `syz.5.593'. [ 76.964999][ T6895] veth1_vlan: entered promiscuous mode [ 76.968131][ T7117] overlayfs: failed lookup in lower (newroot/132, name='bus', err=-40): overlapping layers [ 76.968502][ T7117] overlayfs: failed lookup in lower (newroot/132, name='file0', err=-40): overlapping layers [ 76.968652][ T7109] overlayfs: failed lookup in lower (newroot/132, name='file0', err=-40): overlapping layers [ 76.979388][ T7123] fuse: Bad value for 'fd' [ 76.983783][ T7108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.005580][ T6895] veth0_macvtap: entered promiscuous mode [ 77.011530][ T6895] veth1_macvtap: entered promiscuous mode [ 77.032819][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.040802][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.082306][ T6231] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.082589][ T6231] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.082669][ T6231] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.082709][ T6231] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.088754][ T4427] 8021q: adding VLAN 0 to HW filter on device eth4 [ 77.090621][ T4746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.118490][ T7128] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 77.137618][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.594'. [ 77.144905][ T1205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.144921][ T1205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.168876][ T7134] Soft offlining pfn 0x216a31 at process virtual address 0x20ffe000 [ 77.186519][ T7134] Memory failure: 0x216a31: unhandlable page. [ 77.203069][ T1205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.203087][ T1205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.250752][ T4968] hsr_slave_0: left promiscuous mode [ 77.251087][ T4968] hsr_slave_1: left promiscuous mode [ 77.251370][ T4968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.251381][ T4968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.251809][ T4968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.251818][ T4968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.260173][ T4968] veth1_macvtap: left promiscuous mode [ 77.260198][ T4968] veth0_macvtap: left promiscuous mode [ 77.260240][ T4968] veth1_vlan: left promiscuous mode [ 77.260272][ T4968] veth0_vlan: left promiscuous mode [ 77.307192][ T4742] Bluetooth: hci5: command tx timeout [ 77.364874][ T4968] team0 (unregistering): Port device team_slave_1 removed [ 77.378979][ T4968] team0 (unregistering): Port device team_slave_0 removed [ 77.589995][ T7162] ip6tnl1: entered promiscuous mode [ 77.698280][ T4427] 8021q: adding VLAN 0 to HW filter on device eth5 [ 77.801676][ T7193] loop6: detected capacity change from 0 to 512 [ 77.825830][ T7193] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.834873][ T7193] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.606: corrupted xattr block 33: invalid header [ 77.840225][ T7193] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.606: corrupted xattr block 33: invalid header [ 77.840570][ T7193] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.606: corrupted xattr block 33: invalid header [ 77.914103][ T7193] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.606: corrupted xattr block 33: invalid header [ 77.916245][ T7193] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 77.923971][ T7193] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 77.923993][ T7193] EXT4-fs (loop6): This should not happen!! Data will be lost [ 77.923993][ T7193] [ 77.924002][ T7193] EXT4-fs (loop6): Total free blocks count 0 [ 77.924010][ T7193] EXT4-fs (loop6): Free/Dirty block details [ 77.924025][ T7193] EXT4-fs (loop6): free_blocks=65280 [ 77.924039][ T7193] EXT4-fs (loop6): dirty_blocks=31 [ 77.924046][ T7193] EXT4-fs (loop6): Block reservation details [ 77.924052][ T7193] EXT4-fs (loop6): i_reserved_data_blocks=31 [ 77.939183][ T7193] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 77.946735][ T4427] 8021q: adding VLAN 0 to HW filter on device eth6 [ 78.126271][ T7232] loop2: detected capacity change from 0 to 4096 [ 78.140340][ T7232] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 78.178198][ T4427] 8021q: adding VLAN 0 to HW filter on device eth7 [ 78.263734][ T7250] device-mapper: ioctl: name not supplied when creating device [ 78.335372][ T7254] sctp: [Deprecated]: syz.2.614 (pid 7254) Use of int in maxseg socket option. [ 78.335372][ T7254] Use struct sctp_assoc_value instead [ 78.408516][ T7261] ip_tables: iptables: counters copy to user failed while replacing table [ 78.427150][ T4742] Bluetooth: hci2: command tx timeout [ 78.459120][ T7269] netlink: 68 bytes leftover after parsing attributes in process `syz.5.618'. [ 78.459140][ T7269] netlink: 68 bytes leftover after parsing attributes in process `syz.5.618'. [ 78.521738][ T7275] input: syz0 as /devices/virtual/input/input6 [ 78.610081][ T7280] netlink: 72 bytes leftover after parsing attributes in process `syz.2.621'. [ 78.723177][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 78.860955][ T7292] fuse: Bad value for 'fd' [ 78.862789][ T7291] loop6: detected capacity change from 0 to 2048 [ 78.892733][ T7291] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.929247][ T6895] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.139675][ T7314] ip6erspan0: entered allmulticast mode [ 79.407694][ T4742] Bluetooth: hci5: command tx timeout [ 79.507688][ T7326] overlayfs: failed to clone upperpath [ 79.535783][ T4996] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.535953][ T4996] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.542525][ T4996] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 79.574537][ T7336] fido_id[7336]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 79.578377][ T7339] fuse: Bad value for 'fd' [ 79.932101][ T7351] loop6: detected capacity change from 0 to 512 [ 79.955407][ T7351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.957406][ T7351] EXT4-fs (loop6): shut down requested (2) [ 79.970728][ T6895] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.992499][ T7356] loop6: detected capacity change from 0 to 256 [ 80.113943][ T7365] device-mapper: table: 248:0: ram13 too small for target: start=0, len=14344, dev_size=8192 [ 80.113960][ T7365] device-mapper: core: Cannot calculate initial queue limits [ 80.113965][ T7365] device-mapper: ioctl: unable to set up device queue for new table. [ 80.239799][ T7369] netlink: 'syz.3.645': attribute type 12 has an invalid length. [ 80.240739][ T7371] netlink: 'syz.3.645': attribute type 12 has an invalid length. [ 80.390435][ T7382] loop5: detected capacity change from 0 to 512 [ 80.392829][ T7382] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.414220][ T7382] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 80.461738][ T7389] overlayfs: failed to clone upperpath [ 80.507416][ T4742] Bluetooth: hci2: command tx timeout [ 80.828526][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 80.830080][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 81.466908][ T4742] Bluetooth: hci5: command tx timeout [ 81.472117][ T7429] FAULT_INJECTION: forcing a failure. [ 81.472117][ T7429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.472134][ T7429] CPU: 1 UID: 0 PID: 7429 Comm: syz.6.662 Not tainted syzkaller #0 PREEMPT [ 81.472145][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 81.472151][ T7429] Call trace: [ 81.472154][ T7429] show_stack+0x2c/0x3c (C) [ 81.472174][ T7429] __dump_stack+0x30/0x40 [ 81.472184][ T7429] dump_stack_lvl+0xd8/0x12c [ 81.472194][ T7429] dump_stack+0x1c/0x28 [ 81.472203][ T7429] should_fail_ex+0x418/0x58c [ 81.472214][ T7429] should_fail+0x14/0x24 [ 81.472223][ T7429] should_fail_usercopy+0x20/0x30 [ 81.472233][ T7429] strncpy_from_user+0x48/0x388 [ 81.472246][ T7429] __arm64_sys_add_key+0x150/0x43c [ 81.472259][ T7429] invoke_syscall+0x98/0x244 [ 81.472267][ T7429] el0_svc_common+0xec/0x23c [ 81.472276][ T7429] do_el0_svc+0x4c/0x5c [ 81.472284][ T7429] el0_svc+0x60/0x1d8 [ 81.472292][ T7429] el0t_64_sync_handler+0x44/0x104 [ 81.472300][ T7429] el0t_64_sync+0x198/0x19c [ 81.475232][ T7429] netlink: 76 bytes leftover after parsing attributes in process `syz.6.662'. [ 81.951513][ T7461] loop6: detected capacity change from 0 to 1024 [ 82.017472][ T7461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.021159][ T7457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.667'. [ 82.118398][ T7481] loop0: detected capacity change from 0 to 512 [ 82.133401][ T7481] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.152341][ T7481] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #17: comm syz.0.669: inode has both inline data and extents flags [ 82.152364][ T7481] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 82.153217][ T7481] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.669: couldn't read orphan inode 17 (err -117) [ 82.153236][ T7481] loop0: lost filesystem error report for type 5 error -117 [ 82.153820][ T7481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.179268][ T7481] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.669: bg 0: block 65: padding at end of block bitmap is not set [ 82.180555][ T7481] Quota error (device loop0): write_blk: dquota write failed [ 82.180607][ T7481] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 82.180636][ T7481] EXT4-fs error (device loop0): ext4_acquire_dquot:7070: comm syz.0.669: Failed to acquire dquot type 0 [ 82.184274][ T7481] Could not find key with description: [syz0] [ 82.184284][ T7481] process_request_key_err: No key [ 82.184289][ T7481] Could not find valid key in user session keyring for sig specified in mount option: [syz0] [ 82.184294][ T7481] One or more global auth toks could not properly register; rc = [-2] [ 82.184304][ T7481] Error validating options; rc = [-2] [ 82.184895][ T7481] Quota error (device loop0): write_blk: dquota write failed [ 82.184942][ T7481] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 82.184961][ T7481] EXT4-fs error (device loop0): ext4_acquire_dquot:7070: comm syz.0.669: Failed to acquire dquot type 0 [ 82.209774][ T4736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.223556][ T30] audit: type=1326 audit(338.180:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7484 comm="syz.5.670" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab97a228 code=0x7ffc0000 [ 82.223585][ T30] audit: type=1326 audit(338.180:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7484 comm="syz.5.670" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab97a228 code=0x7ffc0000 [ 82.223602][ T30] audit: type=1326 audit(338.180:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7484 comm="syz.5.670" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab97a228 code=0x7ffc0000 [ 82.223618][ T30] audit: type=1326 audit(338.180:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7484 comm="syz.5.670" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab97a228 code=0x7ffc0000 [ 82.223632][ T30] audit: type=1326 audit(338.180:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7484 comm="syz.5.670" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab97a228 code=0x7ffc0000 [ 82.223653][ T30] audit: type=1326 audit(338.180:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7484 comm="syz.5.670" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffab97a228 code=0x7ffc0000 [ 82.284721][ T7493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.412483][ T7496] Bluetooth: hci0: unsupported parameter 5134 [ 82.412498][ T7496] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 82.414327][ T7496] netlink: 244 bytes leftover after parsing attributes in process `syz.0.674'. [ 82.415268][ T7496] overlayfs: failed to resolve './file2': -2 [ 82.582454][ T6895] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.727248][ T7524] fuse: Bad value for 'fd' [ 82.732322][ T7523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.732497][ T7523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.851909][ T7528] loop5: detected capacity change from 0 to 8 [ 82.857441][ T7528] SQUASHFS error: Unable to read inode 0x127 [ 82.977078][ T7543] fuse: Bad value for 'fd' [ 82.992441][ T4742] Bluetooth: hci0: unexpected event 0x2f length: 1017 > 255 [ 83.350385][ T7557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.550140][ T7566] loop5: detected capacity change from 0 to 512 [ 84.906082][ T7617] loop0: detected capacity change from 0 to 512 [ 84.917848][ T7617] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 85.181138][ T7617] EXT4-fs (loop0): 1 truncate cleaned up [ 85.182485][ T7617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.569027][ T7638] x_tables: duplicate underflow at hook 2 [ 85.724682][ T7658] netlink: 12 bytes leftover after parsing attributes in process `syz.6.714'. [ 85.779942][ T4736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.808631][ T7668] FAULT_INJECTION: forcing a failure. [ 85.808631][ T7668] name failslab, interval 1, probability 0, space 0, times 0 [ 85.808652][ T7668] CPU: 0 UID: 0 PID: 7668 Comm: syz.0.718 Not tainted syzkaller #0 PREEMPT [ 85.808664][ T7668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 85.808669][ T7668] Call trace: [ 85.808672][ T7668] show_stack+0x2c/0x3c (C) [ 85.808688][ T7668] __dump_stack+0x30/0x40 [ 85.808698][ T7668] dump_stack_lvl+0xd8/0x12c [ 85.808706][ T7668] dump_stack+0x1c/0x28 [ 85.808714][ T7668] should_fail_ex+0x418/0x58c [ 85.808727][ T7668] should_failslab+0xc4/0x120 [ 85.808738][ T7668] __kmalloc_noprof+0x108/0x6c8 [ 85.808750][ T7668] tomoyo_encode2+0x10c/0x330 [ 85.808760][ T7668] tomoyo_encode+0x34/0x50 [ 85.808769][ T7668] tomoyo_realpath_from_path+0x488/0x4dc [ 85.808777][ T7668] tomoyo_path_number_perm+0x1f0/0x500 [ 85.808791][ T7668] tomoyo_file_ioctl+0x2c/0x3c [ 85.808800][ T7668] security_file_ioctl+0xdc/0x2b0 [ 85.808813][ T7668] __arm64_sys_ioctl+0xb0/0x1cc [ 85.808823][ T7668] invoke_syscall+0x98/0x244 [ 85.808832][ T7668] el0_svc_common+0xec/0x23c [ 85.808840][ T7668] do_el0_svc+0x4c/0x5c [ 85.808849][ T7668] el0_svc+0x60/0x1d8 [ 85.808858][ T7668] el0t_64_sync_handler+0x44/0x104 [ 85.808866][ T7668] el0t_64_sync+0x198/0x19c [ 85.808880][ T7668] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.809076][ T7668] loop9: detected capacity change from 0 to 7 [ 85.810584][ C0] blk_print_req_error: 74 callbacks suppressed [ 85.810598][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.810628][ C0] buffer_io_error: 138 callbacks suppressed [ 85.810634][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.810928][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.810955][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.811009][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.811027][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.811072][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.811096][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.812410][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.812446][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.812532][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.812551][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.812614][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.812632][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.812650][ T7668] ldm_validate_partition_table(): Disk read failed. [ 85.812691][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.812709][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.812764][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.812781][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.812833][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.812850][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.812999][ T7668] Dev loop9: unable to read RDB block 0 [ 85.813233][ T7668] loop9: unable to read partition table [ 85.813299][ T7668] loop9: partition table beyond EOD, truncated [ 85.815057][ T7668] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 85.954841][ T4738] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 85.954886][ T4738] Bluetooth: hci2: Injecting HCI hardware error event [ 85.970502][ T4742] Bluetooth: hci2: hardware error 0x00 [ 86.107408][ T7675] loop5: detected capacity change from 0 to 512 [ 86.134951][ T7675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.147395][ T7675] netlink: 'syz.5.720': attribute type 10 has an invalid length. [ 86.173649][ T7682] loop0: detected capacity change from 0 to 512 [ 86.174001][ T7682] EXT4-fs: Ignoring removed oldalloc option [ 86.174510][ T7682] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 86.175146][ T7682] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 86.175374][ T7682] EXT4-fs (loop0): orphan cleanup on readonly fs [ 86.175383][ T7682] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.722: bad orphan inode 267 [ 86.175393][ T7682] loop0: lost filesystem error report for type 5 error -117 [ 86.175538][ T7682] EXT4-fs (loop0): Remounting filesystem read-only [ 86.175941][ T7682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 86.198181][ T7682] EXT4-fs (loop0): shut down requested (1) [ 86.213389][ T6803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.264325][ T4736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 86.354699][ T7706] netlink: 'syz.0.729': attribute type 3 has an invalid length. [ 86.354716][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.729'. [ 86.354915][ T7706] netlink: 'syz.0.729': attribute type 3 has an invalid length. [ 86.354923][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.729'. [ 86.364143][ T7705] loop0: detected capacity change from 0 to 512 [ 86.381777][ T7705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.394446][ T7712] loop5: detected capacity change from 0 to 2048 [ 86.395579][ T7706] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #2: block 18: comm syz.0.729: lblock 23 mapped to illegal pblock 18 (length 1) [ 86.410138][ T7712] loop5: p2 < > p3 p4 [ 86.412516][ T7712] loop5: p3 start 65535 is beyond EOD, truncated [ 86.412531][ T7712] loop5: p4 size 262144 extends beyond EOD, truncated [ 86.426170][ T7712] FAT-fs (loop5p2): bogus number of reserved sectors [ 86.426184][ T7712] FAT-fs (loop5p2): Can't find a valid FAT filesystem [ 86.441625][ T4736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.573097][ T7725] overlayfs: failed to resolve './file0/file0/file0': -2 [ 86.641157][ T7731] 9p: Bad value for 'rfdno' [ 86.649802][ T7732] FAULT_INJECTION: forcing a failure. [ 86.649802][ T7732] name failslab, interval 1, probability 0, space 0, times 0 [ 86.649834][ T7732] CPU: 1 UID: 0 PID: 7732 Comm: syz.6.737 Not tainted syzkaller #0 PREEMPT [ 86.649846][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 86.649852][ T7732] Call trace: [ 86.649855][ T7732] show_stack+0x2c/0x3c (C) [ 86.649869][ T7732] __dump_stack+0x30/0x40 [ 86.649878][ T7732] dump_stack_lvl+0xd8/0x12c [ 86.649885][ T7732] dump_stack+0x1c/0x28 [ 86.649892][ T7732] should_fail_ex+0x418/0x58c [ 86.649901][ T7732] should_failslab+0xc4/0x120 [ 86.649913][ T7732] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 86.649923][ T7732] sock_alloc_inode+0x30/0x180 [ 86.649932][ T7732] alloc_inode+0x68/0x198 [ 86.649942][ T7732] sock_alloc+0x4c/0x204 [ 86.649951][ T7732] __sock_create+0x108/0x670 [ 86.649960][ T7732] __sys_socket_create+0xc0/0x11c [ 86.649969][ T7732] __sys_socket+0x44/0xec [ 86.649978][ T7732] __arm64_sys_socket+0x84/0x9c [ 86.649987][ T7732] invoke_syscall+0x98/0x244 [ 86.649995][ T7732] el0_svc_common+0xec/0x23c [ 86.650002][ T7732] do_el0_svc+0x4c/0x5c [ 86.650009][ T7732] el0_svc+0x60/0x1d8 [ 86.650017][ T7732] el0t_64_sync_handler+0x44/0x104 [ 86.650024][ T7732] el0t_64_sync+0x198/0x19c [ 86.650044][ T7732] socket: no more sockets [ 86.845151][ T7744] fuse: Bad value for 'fd' [ 86.871567][ T7740] loop6: detected capacity change from 0 to 2048 [ 86.881167][ T7740] ext4: Unknown parameter 'fowner>00000000004294967295' [ 86.881692][ T7755] loop5: detected capacity change from 0 to 128 [ 86.882043][ T7755] vfat: Unknown parameter '4 k%Ct{' [ 86.936698][ T7740] loop7: detected capacity change from 0 to 7 [ 86.942140][ T7740] Dev loop7: unable to read RDB block 7 [ 86.942161][ T7740] loop7: unable to read partition table [ 86.942227][ T7740] loop7: partition table beyond EOD, truncated [ 86.942237][ T7740] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 86.953938][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.6.740'. [ 86.971629][ T7740] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 86.989532][ T7740] bond1 (unregistering): Released all slaves [ 87.046401][ T7758] batman_adv: batadv0: Adding interface: syzkaller0 [ 87.046416][ T7758] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.046435][ T7758] batman_adv: batadv0: Interface activated: syzkaller0 [ 87.056769][ T6232] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.079894][ T6232] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.079966][ T6232] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.080012][ T6232] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.227840][ T7763] erspan1: entered promiscuous mode [ 87.249966][ T7765] loop6: detected capacity change from 0 to 512 [ 87.259933][ T7765] EXT4-fs: Ignoring removed nobh option [ 87.261090][ T7765] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 87.261104][ T7765] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 87.264651][ T7765] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.745: inode has both inline data and extents flags [ 87.264674][ T7765] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.265056][ T7765] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.745: couldn't read orphan inode 15 (err -117) [ 87.265077][ T7765] loop6: lost filesystem error report for type 5 error -117 [ 87.265928][ T7765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.306654][ T7765] overlayfs: missing 'workdir' [ 87.340137][ T7773] veth0: mtu less than device minimum [ 87.340485][ T7773] netlink: 20 bytes leftover after parsing attributes in process `syz.5.747'. [ 87.377602][ T6895] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.843581][ T7792] FAULT_INJECTION: forcing a failure. [ 87.843581][ T7792] name failslab, interval 1, probability 0, space 0, times 0 [ 87.843771][ T7792] CPU: 1 UID: 0 PID: 7792 Comm: syz.6.749 Not tainted syzkaller #0 PREEMPT [ 87.843783][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 87.843788][ T7792] Call trace: [ 87.843791][ T7792] show_stack+0x2c/0x3c (C) [ 87.843810][ T7792] __dump_stack+0x30/0x40 [ 87.843819][ T7792] dump_stack_lvl+0xd8/0x12c [ 87.843826][ T7792] dump_stack+0x1c/0x28 [ 87.843833][ T7792] should_fail_ex+0x418/0x58c [ 87.843843][ T7792] should_failslab+0xc4/0x120 [ 87.843852][ T7792] __kvmalloc_node_noprof+0x160/0x7fc [ 87.843861][ T7792] traverse+0xe4/0x4a4 [ 87.843870][ T7792] seq_read_iter+0xb00/0xbe8 [ 87.843877][ T7792] proc_reg_read_iter+0x1c0/0x220 [ 87.843887][ T7792] vfs_read+0x498/0x8c8 [ 87.843895][ T7792] ksys_pread64+0x118/0x1ac [ 87.843903][ T7792] __arm64_sys_pread64+0xa8/0xc0 [ 87.843911][ T7792] invoke_syscall+0x98/0x244 [ 87.843919][ T7792] el0_svc_common+0xec/0x23c [ 87.843926][ T7792] do_el0_svc+0x4c/0x5c [ 87.843933][ T7792] el0_svc+0x60/0x1d8 [ 87.843941][ T7792] el0t_64_sync_handler+0x44/0x104 [ 87.843948][ T7792] el0t_64_sync+0x198/0x19c [ 88.109531][ T7737] syz.0.731 (7737): drop_caches: 2 [ 88.119007][ T4742] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 89.009280][ T12] IPVS: starting estimator thread 0... [ 89.012692][ T7818] 9p: Bad value for 'rfdno' [ 89.044454][ T7823] fuse: fd is not a fuse device [ 89.086547][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 89.086562][ T30] audit: type=1326 audit(345.040:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7827 comm="syz.0.757" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9357a228 code=0x0 [ 89.118452][ T7819] IPVS: using max 59 ests per chain, 141600 per kthread [ 89.249367][ T4742] Bluetooth: hci0: unexpected cc 0x0402 length: 4 > 1 [ 89.320896][ T7859] FAULT_INJECTION: forcing a failure. [ 89.320896][ T7859] name failslab, interval 1, probability 0, space 0, times 0 [ 89.320936][ T7859] CPU: 1 UID: 0 PID: 7859 Comm: syz.6.762 Not tainted syzkaller #0 PREEMPT [ 89.320946][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 89.320951][ T7859] Call trace: [ 89.320953][ T7859] show_stack+0x2c/0x3c (C) [ 89.320969][ T7859] __dump_stack+0x30/0x40 [ 89.320977][ T7859] dump_stack_lvl+0xd8/0x12c [ 89.320984][ T7859] dump_stack+0x1c/0x28 [ 89.320991][ T7859] should_fail_ex+0x418/0x58c [ 89.321001][ T7859] should_failslab+0xc4/0x120 [ 89.321010][ T7859] __kmalloc_flags_noprof+0x140/0x724 [ 89.321019][ T7859] alloc_slab_obj_exts+0x70/0x1bc [ 89.321028][ T7859] __memcg_slab_post_alloc_hook+0x408/0x824 [ 89.321036][ T7859] __kvmalloc_node_noprof+0x4f8/0x7fc [ 89.321045][ T7859] traverse+0xe4/0x4a4 [ 89.321053][ T7859] seq_read_iter+0xb00/0xbe8 [ 89.321061][ T7859] proc_reg_read_iter+0x1c0/0x220 [ 89.321070][ T7859] vfs_read+0x498/0x8c8 [ 89.321078][ T7859] ksys_pread64+0x118/0x1ac [ 89.321086][ T7859] __arm64_sys_pread64+0xa8/0xc0 [ 89.321094][ T7859] invoke_syscall+0x98/0x244 [ 89.321102][ T7859] el0_svc_common+0xec/0x23c [ 89.321109][ T7859] do_el0_svc+0x4c/0x5c [ 89.321116][ T7859] el0_svc+0x60/0x1d8 [ 89.321124][ T7859] el0t_64_sync_handler+0x44/0x104 [ 89.321131][ T7859] el0t_64_sync+0x198/0x19c [ 89.652306][ T7875] device-mapper: table: 248:1: thin-pool: Error opening metadata block device (-ENOENT) [ 89.652322][ T7875] device-mapper: ioctl: error adding target to table [ 89.674000][ T7879] loop0: detected capacity change from 0 to 1024 [ 89.685311][ T7879] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 89.731517][ T7886] netlink: 'syz.5.765': attribute type 5 has an invalid length. [ 90.126946][ T7918] mmap: syz.2.768 (7918) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.299998][ T7935] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 90.555384][ T30] audit: type=1326 audit(346.511:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7965 comm="syz.5.772" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab97a228 code=0x7ffc0000 [ 90.556120][ T30] audit: type=1326 audit(346.511:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7965 comm="syz.5.772" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab97a228 code=0x7ffc0000 [ 90.556403][ T30] audit: type=1326 audit(346.511:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7965 comm="syz.5.772" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=44 compat=0 ip=0xffffab97a228 code=0x7ffc0000 [ 90.556461][ T30] audit: type=1326 audit(346.511:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7965 comm="syz.5.772" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab97a228 code=0x7ffc0000 [ 90.556509][ T30] audit: type=1326 audit(346.511:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7965 comm="syz.5.772" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab97a228 code=0x7ffc0000 [ 90.560976][ T30] audit: type=1326 audit(346.521:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7965 comm="syz.5.772" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab97a228 code=0x7ffc0000 [ 90.561002][ T30] audit: type=1326 audit(346.521:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7965 comm="syz.5.772" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab97a228 code=0x7ffc0000 [ 90.561018][ T30] audit: type=1326 audit(346.521:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7965 comm="syz.5.772" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab97a228 code=0x7ffc0000 [ 90.561033][ T30] audit: type=1326 audit(346.521:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7965 comm="syz.5.772" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab97a228 code=0x7ffc0000 [ 90.860547][ T8004] bond1: (slave syz_tun): Removing an active aggregator [ 90.870724][ T8004] bond1: (slave syz_tun): Releasing backup interface [ 90.874918][ T8004] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 90.920534][ T7921] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.920593][ T7921] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.934646][ T7921] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.934722][ T7921] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.952708][ T7921] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.954264][ T7921] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 90.958659][ T7921] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 90.960740][ T7921] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 90.960763][ T7921] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 91.130420][ T8027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.130617][ T8027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.377298][ T8027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.377474][ T8027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.473658][ T8065] ================================================================== [ 91.473670][ T8065] BUG: KASAN: slab-use-after-free in pool_ctr+0x77c/0xc00 [ 91.473689][ T8065] Read of size 8 at addr ffff0000d8cb4818 by task syz.0.782/8065 [ 91.473696][ T8065] [ 91.473701][ T8065] CPU: 1 UID: 0 PID: 8065 Comm: syz.0.782 Not tainted syzkaller #0 PREEMPT [ 91.473714][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 91.473719][ T8065] Call trace: [ 91.473722][ T8065] show_stack+0x2c/0x3c (C) [ 91.473734][ T8065] __dump_stack+0x30/0x40 [ 91.473743][ T8065] dump_stack_lvl+0xd8/0x12c [ 91.473751][ T8065] print_address_description+0xb0/0x238 [ 91.473762][ T8065] print_report+0x68/0x84 [ 91.473771][ T8065] kasan_report+0x8c/0xc4 [ 91.473783][ T8065] __asan_report_load8_noabort+0x20/0x2c [ 91.473796][ T8065] pool_ctr+0x77c/0xc00 [ 91.473808][ T8065] dm_table_add_target+0x44c/0xb18 [ 91.473816][ T8065] table_load+0x27c/0x764 [ 91.473826][ T8065] dm_ctl_ioctl+0x884/0xbbc [ 91.473836][ T8065] __arm64_sys_ioctl+0x154/0x1cc [ 91.473846][ T8065] invoke_syscall+0x98/0x244 [ 91.473855][ T8065] el0_svc_common+0xec/0x23c [ 91.473863][ T8065] do_el0_svc+0x4c/0x5c [ 91.473871][ T8065] el0_svc+0x60/0x1d8 [ 91.473879][ T8065] el0t_64_sync_handler+0x44/0x104 [ 91.473887][ T8065] el0t_64_sync+0x198/0x19c [ 91.473896][ T8065] [ 91.473898][ T8065] Allocated by task 8065: [ 91.473902][ T8065] kasan_save_track+0x40/0x78 [ 91.473911][ T8065] kasan_save_alloc_info+0x40/0x50 [ 91.473922][ T8065] __kasan_kmalloc+0x9c/0xb4 [ 91.473931][ T8065] __kmalloc_cache_node_noprof+0x39c/0x618 [ 91.473941][ T8065] dm_get_table_device+0x1f0/0x62c [ 91.473951][ T8065] dm_get_device+0x2b0/0x634 [ 91.473957][ T8065] pool_ctr+0x464/0xc00 [ 91.473967][ T8065] dm_table_add_target+0x44c/0xb18 [ 91.473973][ T8065] table_load+0x27c/0x764 [ 91.473981][ T8065] dm_ctl_ioctl+0x884/0xbbc [ 91.473989][ T8065] __arm64_sys_ioctl+0x154/0x1cc [ 91.473997][ T8065] invoke_syscall+0x98/0x244 [ 91.474003][ T8065] el0_svc_common+0xec/0x23c [ 91.474010][ T8065] do_el0_svc+0x4c/0x5c [ 91.474016][ T8065] el0_svc+0x60/0x1d8 [ 91.474022][ T8065] el0t_64_sync_handler+0x44/0x104 [ 91.474028][ T8065] el0t_64_sync+0x198/0x19c [ 91.474035][ T8065] [ 91.474036][ T8065] Freed by task 8065: [ 91.474040][ T8065] kasan_save_track+0x40/0x78 [ 91.474048][ T8065] kasan_save_free_info+0x54/0x6c [ 91.474059][ T8065] __kasan_slab_free+0x74/0xa4 [ 91.474068][ T8065] kfree+0x188/0x658 [ 91.474075][ T8065] dm_put_table_device+0x238/0x2a0 [ 91.474084][ T8065] dm_get_device+0x468/0x634 [ 91.474090][ T8065] pool_ctr+0x524/0xc00 [ 91.474100][ T8065] dm_table_add_target+0x44c/0xb18 [ 91.474106][ T8065] table_load+0x27c/0x764 [ 91.474115][ T8065] dm_ctl_ioctl+0x884/0xbbc [ 91.474123][ T8065] __arm64_sys_ioctl+0x154/0x1cc [ 91.474130][ T8065] invoke_syscall+0x98/0x244 [ 91.474137][ T8065] el0_svc_common+0xec/0x23c [ 91.474143][ T8065] do_el0_svc+0x4c/0x5c [ 91.474149][ T8065] el0_svc+0x60/0x1d8 [ 91.474155][ T8065] el0t_64_sync_handler+0x44/0x104 [ 91.474161][ T8065] el0t_64_sync+0x198/0x19c [ 91.474167][ T8065] [ 91.474169][ T8065] The buggy address belongs to the object at ffff0000d8cb4800 [ 91.474169][ T8065] which belongs to the cache kmalloc-96 of size 96 [ 91.474175][ T8065] The buggy address is located 24 bytes inside of [ 91.474175][ T8065] freed 96-byte region [ffff0000d8cb4800, ffff0000d8cb4860) [ 91.474184][ T8065] [ 91.474186][ T8065] The buggy address belongs to the physical page: [ 91.474189][ T8065] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118cb4 [ 91.474197][ T8065] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 91.474204][ T8065] page_type: f5(slab) [ 91.474212][ T8065] raw: 05ffc00000000000 ffff0000c0001280 dead000000000100 dead000000000122 [ 91.474219][ T8065] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 91.474224][ T8065] page dumped because: kasan: bad access detected [ 91.474227][ T8065] [ 91.474229][ T8065] Memory state around the buggy address: [ 91.474233][ T8065] ffff0000d8cb4700: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 91.474238][ T8065] ffff0000d8cb4780: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 91.474243][ T8065] >ffff0000d8cb4800: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 91.474247][ T8065] ^ [ 91.474251][ T8065] ffff0000d8cb4880: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 91.474257][ T8065] ffff0000d8cb4900: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 91.474261][ T8065] ================================================================== [ 91.474326][ T8065] Disabling lock debugging due to kernel taint [ 91.729867][ T8070] ip_tables: iptables: counters copy to user failed while replacing table [ 92.290556][ T4742] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.377278][ T8065] device-mapper: table: 248:2: device 1:1 not in table devices list [ 92.377301][ T8065] device-mapper: table: 248:2: thin-pool: Error creating metadata object (-EPERM) [ 92.377311][ T8065] device-mapper: ioctl: error adding target to table [ 92.377319][ T8065] device-mapper: table: 248:2: dm_table_destroy: dm_put_device call missing for 1:1 [ 92.985462][ T4742] Bluetooth: hci5: command 0x0c1a tx timeout [ 92.985480][ T51] Bluetooth: hci1: command 0x206a tx timeout [ 92.985520][ T4738] Bluetooth: hci4: command 0x0c1a tx timeout [ 94.354754][ T4738] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.064327][ T51] Bluetooth: hci1: command 0x206a tx timeout [ 95.064559][ T4738] Bluetooth: hci4: command 0x0c1a tx timeout [ 95.074300][ T4738] Bluetooth: hci5: command 0x0c1a tx timeout [ 97.143267][ T4738] Bluetooth: hci1: command 0x206a tx timeout