last executing test programs: 2m42.648644607s ago: executing program 4 (id=112): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100), 0x0, 0x48e, &(0x7f0000000140)="$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") mount$overlay(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x141104, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000c00)={0x1, [0x0]}, &(0x7f0000000c40)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000e00)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], 0xb9) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x9, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000d40)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r3, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) getdents64(r0, &(0x7f0000000700)=""/78, 0x4e) 2m39.212572178s ago: executing program 4 (id=119): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@migrate={0xac, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@empty, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x32}, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa}]}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0xac}, 0x1, 0x300000000000000, 0x0, 0x800}, 0x0) 2m39.129386277s ago: executing program 4 (id=120): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x81, 0x2d1, &(0x7f0000000b00)="$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") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)='A', 0x1}], 0x1}}, {{&(0x7f00000005c0)={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000640)="3d3ae39933472ecf3569f3c68e1b015e03c87b676c08", 0x16}, {0x0}], 0x2}}, {{&(0x7f0000000680)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x3, 0x4000801) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000)={0x0, 0x7}, 0x2) 2m39.100834368s ago: executing program 4 (id=122): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, 0x0, 0x4814) 2m38.995063028s ago: executing program 4 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000006600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006640)='./sys\x00', &(0x7f0000006680)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000066c0)='./sys/class/mtd/mtd0/size\x00', 0x0, 0x0) read(r0, &(0x7f0000006700), 0x20) r1 = io_uring_setup(0x4a86, &(0x7f0000006800)={0x0, 0x417c, 0x40, 0x8001002, 0x2b8}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000006880)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000006900)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000006980)=[{{0x0, 0x0, &(0x7f00000069c0)=[{&(0x7f0000006a00)="b2", 0x1}], 0x1, &(0x7f0000006a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18, 0xc00c815}}], 0x1, 0x20040804) accept4$unix(r2, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000006740)='./sys/class/mtd/mtd0/erasesize\x00', 0x0, 0x0) read(r4, &(0x7f0000006780), 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f00000067c0)='./sys/class/mtd/mtd0/writesize\x00', 0x0, 0x0) read(r5, &(0x7f0000006800), 0x20) syz_clone(0x1104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) fstat(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) capset(&(0x7f0000006700)={0x20080522}, &(0x7f0000006780)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r9 = syz_open_dev$mtd(&(0x7f00000065c0), 0x46, 0x1) ioctl$MEMREADOOB64(r9, 0x1269, 0x0) read$FUSE(r8, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000002280)={0x50, 0x0, r10, {0x7, 0x27, 0xfdf, 0x14a4014, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0xfffffffe}}, 0x50) read$FUSE(r8, &(0x7f0000002300)={0x2020}, 0x2020) 2m38.913167099s ago: executing program 4 (id=126): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x52, 0x6, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "001200", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, 0x0) (async, rerun: 32) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x8, r2, 0x0, 0x1, 0x0, &(0x7f0000000100), 0x1}) (async) ioctl(r0, 0x3b92, &(0x7f0000000000)="10") 2m23.271077448s ago: executing program 32 (id=126): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x52, 0x6, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "001200", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, 0x0) (async, rerun: 32) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x8, r2, 0x0, 0x1, 0x0, &(0x7f0000000100), 0x1}) (async) ioctl(r0, 0x3b92, &(0x7f0000000000)="10") 2m20.943561437s ago: executing program 0 (id=244): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100000008e}, 0x0) r2 = gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000005480)={0x50, 0x0, r7, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50) read$FUSE(r6, &(0x7f0000005500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r6, &(0x7f0000007540)={0x20, 0x0, r10, {0x403, 0x4, 0x8, 0x3}}, 0x20) syz_fuse_handle_req(r6, &(0x7f0000007580)="265ed300624cee917954148609d0f2ac522904a46fe5c8ce8b3d649d8b59dfb0c633a2151990de893de399d507986121aa114fd87163065d2988807d3e0953e6b084d8b607280f9207193bb76a79bb6d4f638d070435bddb76667d5dee6329e71b2c9befbb22bbde0c1b6da63b845f2c28d2c5f4deb07b4ae015fc576702112f75a755e76b6dc450719f63cd1939961e4c895f9054760c61f933bf74d185520f9aebaf3ab397a2089640ec41ab5cfe6c828b53c4cc544f9812034c719e712532763eff6e69ad7cc4d2f29f97ccce18f298ce417251430929d422e21cac05093609d97896d0beb7d4cce9f1975f01e7dd29ea061a868bb6607b7cf88a2e33dd5c5db31cbead98e06c2c7add9012b0483fe662532c81ab1a1ca8f20f1cd9020e06c2bdade3f311d08b47503b5b63b279a9be019006e6929670f53d5688c194e9f046d2322d71bc26245e698cd44d655c59b2e0ff43771a386abc38cd6e493e0a475ef525fa78671fd9954e7df71a3b7c7ed90379dffa4fd76f0367eca11c1d8de813979951eccc8c93b4f9fdb4785c0a9d207e65742bdd358e9dfbf29203c36b91fdd78db55b53ad1e713e32fc1f47bf3390f3db8dfbd514b4b31095c818e18b63ebad5cc3b406557f3a9380c5065ab11c64522b1752b2296bb00b7750ab82704ba197f26ab76e35da02ae87d25669d54d212aa680b579773c889902782d1c8067b16ff957bfa70cd8af4c366c1629e871cfb033d46c0d308c3ff5072fd8e23ee02986a128051b8e6dbaa2bc46bdc8772d923f2906eef68015bdb4cd66a2525269a91cbd7336c930c08190a8606d762c768d164d05eea38d63e99e1fab83ce2683b885e1619065acb1bed0bfd63e3cea5c9d7c9994df4036aa17f9eb0850f9eb42b17b19926fd9d814529c3cf4397e3f38f9626f0bb4f229b51c35773cbecc42ba22f8346c9c3a6f3ca7d8b25d0bbf30baf48bde92ea192e2484ef9b2160492edb5f2ce296b0b6b420d020b7d14d780db436b1a23b733051369536eae7c7148927c3ba3a968516039b0b14d9918a41a1bdd5002847e1c3d02f0dc2235857a9797038d164591757820e7d74dbadd42b8903f20434c6ac0f401fdbfcbed5dd3c5b5fb0ce1f9c81e8d1037fde8dd3fef1d5d7af6af8f36c0f4462909dbf694cc6fe80070bd5fac5a5ca4dffae4b2c67892f7c53af3644ffec29ab3d791bd7934ad38929a9d5fb9ecf10b9dec62e315ccb0e0de60bb1620daa8154a4cdec98d94d42ac1a4b5f8da6afcb7dfb53544fbbcaa3aa444182ff25064ace51a825fe89236e850a2c90e1c7db17871ea809c4a11a26f49b213cab87d4a42b747546fb9b15068faf1a8556f909f2c47202e7b65cddc708ded90bdde68725b787bdc2d4eeda60204bd0028f07ffc3052f93eb6343d1b2a9a5292e6574baa4a096fda6dd54f6d39e9462b6839b8ee2426e3fbf42a016dc0963145e602f2b0c351f123df48f608f74b04fc7e9cd018e7ab25bc1c12f8f58c0b2dce5714faa54820ef72f38566e3d776ea2d5b061a2e94710176f15d2221420abad8b8b733de253e602277848e7f1e0eb4d07f5eb0cc4d9f874e632007cbca23a5d7e4109cf5c4fafe5f607149bac37938734b77d9b183cf76014aa61507bd4eb44524e8326c58932c8b9f6a10e334cc602b5b8c956c7cb5ffa099274b599fc9c58327f85553e00263e548c93c89edf7a7c83cc10348662fc344c85378572a40b49ae65972fb40abd5e0a38af48207983f86c7bb6bf9b7853c4b1fb522d135a83bbdbb78130b4df3aa7cfa930868cd5a2d995ca9fe4f64c79485ab19d85b0c82a72f4a09ccab267320a61208ccef13c3546ab0f16e34cdc56d6e48a6d9c14c626528a3b191e3723b19d4388d5b9b61c7aec726b8752455f96e888ba7af82c127796e9b67432d1f60a3470c7bf4b924cf10f06a3e3f64c60c7c2b0fba4d1ebe4e52014b4052c2ba0d5b649c46e5cdc6c7159faff2adad2db2d3db9f4f9e9735ba28b7aa1c6c2fea9dab6c9617160d182dfc13e18f44e73c4377df42080d08a87fcfd46b4a4f30205457ad19ddd473fc3a67153d04e960f1dc7556fb158a1d584eb2bde917792892a30e9cd25d37a318cf06bd6541463adaf5d12adc50252f364ba05f89182018ded2179c23a1fc0b31d87139da39298b8d387446c70c4577a27f6df841d9f43106bc1bf44f5c7a41460e2afc9eea98f8e256919c0befd53d7d015412391963c9ad39a19aad265cdbd609628e1913adc2467b69c00865a88635c46a851e7252cf3dc5c3cc5dcb04e97c0742d1a844556744036c97710dd9b55f661506f36cfef2c6b7305b63f5c33469b33ad09e1b593a7ddfc97777954c71c8e4857ca49aa7e5de0d25d760f633660e1fd783cdc43b00a0ec149cc9c8385807c2f6b4cb255d6a15ac75ef63d0871b176d503f332c069ccfa7a2bacd11999ea792024b35c9faae5bf02bd5c844d04d9680c1fe35c2d90ce808b45932e754e4e1dd142ba5a7bd9ecdf7717095ed4359eba666fbdc1e849ccede72b0b37f0b8bc4f76b99222f8d199de11dbd0ff396236f4a37aab955126a60c9f0d457c7a394920aa9014611e5d994c8373516f061dcc57c881bdda5132b5ee984b15fd007828401c72df63c2efbc5f0e8545310ce65d0635dc73f0cb1c796c24b7ee62616116c13369ceb74ff8bda64a98e903dfcfd88b3c0c5f86191bcc8342578f23dc70fa6ceebde822ffedb7587a3f204d330be4977bbbc2529cf0ddf4c85b17f1088f48d878e72fb00e15a6144231108be816d2718c360e2fa8a236691c775a9a0ef3559696f5b8f85eec0aa2b1c4f01a2df6065bd31b23dd37718613fcbbb1566dc0607bf487c1a91f2b39a83755a6048e46d02ede0f5aaea8ee9e245d6c37891f5ebc9bb7ad2462b4ea4f1167b8c8e97e2f7b62c1c98ae0b808ee6033818d28a00ee72120820b2227da50d7f66d3318f6acc6398c81e529c5cb0df75e303954c2fa828760c1133fdbdf1fd7675b8634bdb496b054b91672fc7ac344a37bf60988870d54e5baf91334db883b2c69acb50676c2f871fd577747dd1d26c00a56e757b6a0edcd609ef5c3b3ef669ced2af5f19ad19194d04f23ff23546df47b2a40cca2e87f8fcc3a318e37c73f9f50bd06926c74078356ddddba42ee273e0c33c2fc6cdd1fd50daa6ed3b7b6ce558f89449fca6d8b05c90639283d44e14a854eb29d65ce5b9552597072cb148ccea15ef430630559293afaf204f22a890fc3009a2bc1b0844a49668354a940fbd0d5919faadfe5cb80e4c93d138ae28269a99c877426298b9ec7f01e9005da2d7977f34103de38b2f65bdc1c899ba96745ca977c46db6003b1ab840e677f0d8960b4e9f71e82fb89a8cc0702739276ec7a040c69e6dc0e439658d420737a2f6cbe7cb1ce904f4a39dbe8284971e527ef50976c89855f75d5e129a09a117a5c042411696f8a3bf02879a287b2b1ea2a6e1adaed0374341113bb8363f33aacd361339c9c06b4bd6e04f8fbf1f120f1992856608426d44abb6cc429a075c7bd22bdffc9493f218286f8eb585001fdf79327c8c17d462cc2ca5b435d444659767150c6e1000a74f001be398a1bb48863d3a4d4a71a4623e1721b003d7d2c038fdb405b814f37a95a6a53bbb365dddeefb83451676c7b57a23dd1d523958e2e2eb8d889c47cb7aa515e9b11b2c3accfe6739a8ef56b7a02adfd63ec9f9232c38e2aef3773a9a7d6f4844ea1d609f146f19e6c46fb6b961b8037e5d9ba34c0ca5c10a668ddc5d6f4c7951732f68c56ad9c1b3e53e09d33d9b377258ab2de957c8adcd4b68923ed6eaf2441e2d888d1d4653c5686ab712a82ca16cf475009e238e5a8df04ca2fa719e6308bd60026deea44355a6e878157ffc7f14a8d34275a9ed5f810ea4ed1827e4c91998aebe9aacbae14d95eed96a9de17463ae852f53d2bf3e92df959564e9550c1eeb0b052c00cd44c07b7f021cdad5c70908a74bca9ec4fa372f491aeadb297e8f571de1b376ef1b7194d8e434ba3867940606521399595be0ec4daab0b45c42e439adc5cbecc7310025ed8761a1d78adf3ee6b223577e473423cece99cde0807269de6929624ed1739b2380ed4688779ce9808595e9b87ed6f42d89b1676014cb8c9a3f7484aacdf794f056439fd1e5233de23141d5b87ca95b54721a01212666e8067cf683025f1219f4d0569c8cfb2d6ed67e7f051e2ef9d0b70a390ac7d53bf9c4e537c74afd223e311341583282ac6e4ab209a591ab0f4d7205512a74a01cd33b57d993fc5c548a757d757e1f32272c22b86fb2428b338eac75c21e4ce3fbfdc6f04a62856610308e65dca82a7637d7113a48c6ce0357fa454f6d58a1b61698c7b65dc9b8678f9d279b883f76e04ad1f1154e2f490afb7e397ce65ce297f6599b0671f3129bc87cf4221d8ce101f71a1df23b6343dc3d6e35ee2eb0a1e37e67e091fab994b8948e956320d7e512308641a129526ff2e73ba026fb72fd3da3482fde5374d54bc3ed6ae53f2b9b4d222db5f3126760285683ecbbd0f8b5bb964e5a1cfe404ce21588a21c2244e0f76520e139992f65a15299548f4dc5e4d1e54acf7592ee1f04e36987606bf10e4632c79d00e1ed985553b00a8e828dd193f5cbd7101cd36745804d474532fc51e708c7f124bf9231b9a7bd1ca4446060535054b4bfd5a61607f3ae45cf1deebfb9d8710e5523c8cd03565cd378e77b1b3323a7d97f28fd1a13aa40626abf69d7b66ee9db3d604b293966347a4fb36d089078f9808bc209109690ea47941ad7c141767b78eee93131a57b5e12690b7288ffecf22f39f308a80457ac6052b8f477bafc15a3ab30cfa3cbd7dda9803e5a5664694e77f528087de197c02fd4d133ea9133b9aa4377bcc0b62801982b999b6e7f76dff371dfd998704e340b4e5da88384fa8cf08d747c977105e4574bda02c56361338a0a9bd800e94c861a31d5d64d71cb65c0655f5b5cf5f900e348d7cc05d9c2dcf711859cbb8ffa54065e2e5462f4c1d80d28e5d5400090d4bf61565422b8df0f34f7a7c1e153d39c9d7340d15b8db226d323b4e3c50fd8aaa87ec9e5c3fbb3ad66462c6ec5ff31877024d119fdb7a16e69d324ca9819512c45c3852409f4899a41a4d16ca77dc3dba1ffbdc2af2fccaba1f04e048444154d5019a267bbcd440d7bb3516e9741e5f9c3ef1135e8c0d70e3c7800c10c000e9cfbddbb5aba9e43b3dc0164f92733590f6921bfb53aa1466a53b6146113795fc13d1621b3cbe0eadec02c469a4899232c23a5a88a9d659984c22ee523b5c5de84223a0f3f9bf1fcdb1efb4709252c0fab477823bf2505f9a2e4a36d0bdae824ecad15a4c313f0c9eb4423ea249710e353e61264630927f778c01978f5b50213d71fd746e40009432bf50b7932b7659942f0d1b6375b87d9b038ce271d7333ed282beb3925a330d881ac7611d3e8b869601b146fd82c06b340ae4823c4c429af4c15f2a2a2bdf383788e86b68c001866a86188cfd71b02bc8abef13703264f3ad08ff6602e15ff84715b7796541c87e26b0c6e086211943e52629f8c1e71fdaec972ab5a2c690c78b08d65651ae4b64070f7bb37931119881ef14c4c8e228d67d34f1c9eb855b39ad6e615bf24f7b453a76547edf2fa025c53bda95d783fb3f735852f28318a8a67c8ceb5279d380d724ee6eb2e76ba8807a0865fcafac50d09a92b85d27a238e4461a80cbbeaed62a844c17e498f6457aa642ebbd0aaeabf127b8f8fbdc2e28ff7fafaafe3016603461f256d7fca690a8643b9697800b3cd59e09ecae48baabccb63cad4a627f6bfba0759f1c186977e9698e6fbc16ec9d1c95ca8e2e075a1eed3ba6223e4df44be7da59a444715a78fdb90a1645c069ca0fd1609b7dce29ffa11f17266c32856f9ebc853c0c7cbbbd82667a5106b5b63f5328ae9d653dc5dd53194988f0e421db3851eee53c557e40a7ad293a22ffd3445d296347cef4187aab3c9c3c2a8e40be66919c30cef3de8125f3cc7342a43791cf1b3b117af99b04e0fd8170f17f4ba25bdcb24965501025188a430df86239d369a6e2c9245e914fe4be3a1eb48e22e2e1c72caeb4b0d1b69e8a817cc7ddf644d33e56ae32215604f267a80754619440ddb3621280a4b388c14ca19dfd398d744977849247d0bbc55d5a54ef062ad3cb3689168b28a0981946fa01737e081101b9c571d0ec4e5775159daccc110588fbd35bf6f0d55f99da967a3d3db1999e158958d7ce128571efaabc09c1aa7137c35f3edf7cfff386a79ba5acfa974366c442207a39ce67afc8469c2ddc6f45413dd654d9f59ae7fd31115dfeccc43c27bbcffab119106735b7782f9694a3e30159aee341f04540a54443562cafad5cf3336c6e900332b053d7c93bab45d8846cb5b880e11b979c13dfea06267932d89e258ef30768ec2ce1d7b020609a5ea6ad9eda78219542567029d1d4d2ffe797b7f95f16b8f599390b0b630decdc6e17593b7e4992d48e62c27cca2e423eded85cd4b436065496984d59044d38f317d0ba649837e5377ab3793c3f66c0509eb37ba365c94273b3cad97c5f607bcd312cdf3c8605dd5569e293d21c588969d7bfb17a228b53f2cd0387995945253c6ec8fad3777cafafcbb9151a54e653a142b5ad0c62682b8ec4b99f525dd853f75c17ae6264b7bf975138de9932d40be9f35ce25dd2a1e307fcf506eb6db8803c19b9880f96299ef58a6bdf32708346db540dae112b0f7ebfbe6f3f46635b7d98e232cc91eff2aa9c7fed6dd53d448db2fb8fc4c0dd661d47585c7966f9338f165e53b3d7777dd844be6a6c8885d95b839a32ea0bc83ec0ef8a5bd11b666d11fd8e27561d8afc4686e978ba31ff2f812f81a6a82956b95a0cce2966a37a4b9e33bd297ab8b1667f6ca5a6be65e4485a305651a4230b7a010a960b035dfb7a8474dec1965c6a9177f62484817807e0dc43ab2770b27adcb40f76c0e78639c55fdecb6c008f2e859ed496818b48e5fbe32376fb3c434afc0ff780867e7374a8d659cc1580e49678f4542e5cd3e54d5f4bd1ff6d186827d588ace5a8adf437dea11def7b57b6b8c992b86695d09c65aaf532d6b8cf12686df8b07bfb5a8aef7944f04c8bd00d500b8b7eb24516dbec0f5514dc48f70eb26a2b78042fb6b4726a20fcf73ccc9a14b75bb82e558e8bc4f7ff5453850f83d12896e9abf322e5b81b6efe679c8c98ee092e06302f9f1472931dbe5a815ac38b1bff79363c4f846caa755ab3ed5b60a938d5f1a9e10950aaa0c5d10c5c4f09abb8ce6b98867e6f8644e3b9d603f07f9c2d1044600635d432ce796b0b96baf572238711302f8fe486f3bd4b5a0463eefb0cb04271393cb1b47b033db62840b4c535da356de3db90961deefbf43060d57b303489aaf9c3bed935f8750d47b8e6aed8eba71f08d93246c92c7cfddea99f6e052bf18e787aca4cc04779dda1f67a420cbb5fbcee2f2ae28be664fad18b478e171dc3699116ae71421b86a5fa9732767c994f38519874b33f07b12b8baa5bc672017cb1e2c8e8897e541358da9a9e3bf8bf57ad3541fb434534190ddb95a5ad701e20548b269268fef7c20c15adb8a86dc8ed756f760370ef2bfff1261349b535b77f67a4118dc8f95c70e977ae39c7c77f2d4e2248028439b72325c033c68684fc8dd6050f0449e2c87debc00fb8bd5d1d9b9f31219b4243cb089362b345f2b9aa7089eb618e1407223ef1022dbaa856197f6cd8dcb7fc53afc16731e0f21b45a17fdc2c49bfd9f14e454c98536c507c3aca95ad57be395ea9d737a4a3237825cf102ca080e013230cd7a46e91237b2214a2b175ffb390ac9f12e5dd3124ffe1e152e148371425c6ae5c603715d5439e0f9e49e8048b56489ce79c26df2dab6ad0c8ac0b37e5d4fe10061f44f3d2314e1ee6245ed600c62a9c448faf905267cdb125ed7dd2a7a539770bd1ddeefd13a521991cae16160cadef434edc23fec333ec7b328c4a6213c5040848e835c6b3e0aebcae1d5884f7e8f654adb512c2f0227fae83ddae0dfa848e0ba9344404ef1d6da880f8eac71fb7e02f197859fdc1ec634dca3f46932e5f022689ed253e60f232e1acd96fce398961d62c4d63d7f37d48c26175298658c224bc1db73b8baaeab139065a9bd004bcaa24493c17f09961c09bd0cb828a8cb3cab56df2991646ff370040bc8507d3d16e66dc075c8d302c6586dbee27b32f93ea563a2692f65ada174e35bcd8cd3214c1a38cc00c90067828b9980da7dec04fbeaa2e550c8d06358ab446853e7daf007b0de5c9e361d75c40ad5f9f2923c10ea479e5852ad35f232d6d141ca7b4328c9d72dc5c247d1431688b2a325d88582733953ee50f997a5d8324cdcb01fda11a773093f344fb38b55c5f9e7706e1024cfb4f2e47544ebbaf792de3c4d8f1522e9d9ce73fdaf1740d3dc134a78b53c6167aec45c730016b8ad9d9bc4042b6835a5ff34c9d36da7418719a86be6637c896fa4a4eda862a9e73ab97e5a977aebf0fe64a7d507dc210a677873e155fe4b2cc3a96e558f4d54db6fc5fcdf166c4cd58bb5d1721378ccff170c0eba14b990ef610606909c205e34aabd15eb7a60406df5451871b18ae3cfb5af37b7f7bb2be80590d3be02c5d0c4143be66efcbe13c6927f54ed27884b3d6a73e90516552a0bbd81f7c76ed5f84ecfef2225e52b9cf6021895716aa29b540750eb64b31cd7be1e9fdaaf132681b23cfb2742fbeb4d1f40fd0bb1d13ba044b252f2f04b0d5fcb121977486c5754a569b81be7577cc0c9e918affbf9abc1b6dd567aab66b7e2aca396e79d53ced9695a65a704bbd9700b55ac8c968c5f43557060c6507a3557c8762a7dc8263eaba22d51fb7df435e20beeaa700609d774d1e212e7493b672324e1a907fc1546cdf7d4ff88029dd7e9c92fc530e3f55b6c1b103c69f14859524d07e454a3c5f987e01d21d9a5a6f842370cc3dadcde1b5822b0d0c47883dfee62b9b7209c3a7c399ed34604e164f806e68a5a24a53d0c5beccdc1389e87a5894061f95e7e8e8bf84ead6e7fb155938230f22b426d9041e8bea72dae14911824db9b65bb0ea0d0404cc8fabcb8f1863e13c8475beb68138e043dd67bf1b0d7e038f9f3d25c8ab1a52173af6b46d8260d677bf066058e89dd18b03fa20e79938dab01876102992f9df49dbe983526b9e0bc83c15cb9d52511eff20d18dcdd316bf334b98aed9024051b87bd3d767054470f4b7f59a207e9b9f17827497bec146aa1b0d18ef54ae5927c64b05f34c8508a0cfea02cf59b3c97a1d3e83a00b7ca495167f411b3f41c1409a8ac007e1cb08ef83c4cbe38117d4b1ef9b58dc0092371b1dbb1a1834f780282dc2f3b6bf36fd0dcc7619c28785b76910757376adfb014ca9ff8bfa3e291e7cba2caa05efad48b1506337b61f74b7b0f4abc18846af682f34708bbee9dee76837bcd192876d1861a20b3e77c9984aff5ebf0a2a4741d6e43b4ac056ea138e79230144578bfd4ae82b84ed109e4d5ff0f955ca481ac0231cae963b7d4db76d89d07e265973a16899fb3a6f8dba53473954589134b520e680f4c5e707fd056e75edb194004b81a40bce0407b6c294078b77e8abd8873c01f6918b2c7c6095c9f23b9841e90e8acde53ba60cd78911cac6fc2ef6bb5fcbb0d3da3e63d70b47495f2177afce5da37c59efde49aae133761847a6f0c8aa374790522ba04d466bd1f7860f53371f5eb2f506c5bc7bb6ab449e4a5c37866c31684b285cf5da17f36434b809f69c542c989449fd0eca50f5eacf8080cbbe8b84d1183095ae7416b8f2b98311451cf7cad2d8fb721e589f9e611376430359cf855444fd1415011e8c313834bf0e217ac7b03f8add941427b0d15b56378b2cd1e3925008c16cd5f95dd149c7e050e0a153e4333e63bd14816b4357fbaa5f706af6ee225057eb599bbe5714c9ff23204d1902230569839d8836e6b2525570b00eca8534aa0c29cf62dce61ec66d9c195be81279b698ec8565fd6754f636b9288247657efdb2b6356a82f014a1e6b24926fdd67810ef0a01295c664980f2057ca17362b0a5888c23ac21842f931a7d57cdeea73c4848c6c1cce20be979faa611f86509ce031fb4102a0fd30bea4f4f840c75d238362a2c4f8de16e81733ca90119f8c1ae148b184d0b113685594088ad8a947455dcfb782f8beb69e255dbed46ae2ee6f094168a52501fc68ed669fac390cd9320ba16d69c86d6f642aea836bb1d7c14593f15d8d33d452d8c87003d7ada1995e2b43f788b4ab00ec6f58869968f098218a3ca21a6f369d47a14cd3de7de8357902e8ecfb5f2e6beb5d3d32a6a6224fe3d6dc5c06eb117af0ab396acfcae58b2b1b9981cc71cc1cde07491b6b6d97e04c10ff216393dd28737d31c8f2cc9ebe161b96d407088b2bc456c331b676a0d7dca3df7f7080697d154fa14f351fd467e30b4ac3f4eb7b4adfb173ff20594cfe539c775c4275795d54782bae4b59cc64a45740ff73d21f5d6cf39e10bae4fbc48ac7799023796d7408ff9220a07a49552b18c5e35f98082297d2b4a0932e4d224c6807d49bf9b5de2eff1a8130da56124ecb5509241fe95be11eb0df066f5f819bc7db0f1ee90ea0aaf4ca4458ae7b5105d574de028c82714ad0d53bfc8ffab31c57762b38e433d6991d83ba5616162e27e8ac122c145547c4abe18260c6d32c755a44390ed41241ef375e1f5a4311263881a02dae71f837206413fc37ddf40a9bb72256d1625ee0b94c1c5715809bdb24224cd0698a5802a83e2328dfa22b80e31b9a5c7dc2fe0c68545905368806c308334c194803eed4a24a96bc5021b837a293dde7ba22b9ed27369b3584deda6489bd1b3fa2925beeacb7d3be367fd014547f82b4561c0120978b6ec2b32ac2634589b819a2c94fd20c081fe9eac7b0745f73a1981e21b05b1bd97a9a1d7218c0e6d0e473e15a1a7465cea98ba0c72af2f270b6a61bc51d1a0a9603b91fcdcc7314fe7aa007ecffe6c7eebf5a65e82a96325e86f9aec39feac6eee9501495c74000ec1f0923e79ad1fbf6dc581539047537794151473e00be353b3b8dbb6da0053826c7bdf16c43867cc9cab9d1220466ca29ef2d6172c4c0ff9067eba9d9775225efaeab1b8c634b4001d2a5c01628bd5550c4573fa017afa3f501f1a6b7d7a483dc0885ab9c2ee959a596ffbb68c7ea99e48f4304697edf7fdba5567735ace3433c15aa59863f87e4605206a31ccf268588de7ed37fcacf6bde80c68ad53de63feb4399cce137c5776abd15395402af07250938aa1c466511bd5754f9cf2f938faa37a683996c801c8fc8aae36a706c5d6e2d36e96ab77eec817ce4d56d2bcf5a43702a883b127a1da8b6ceae1b82573a9e9e9e297560f8d65a1f5fd4bf3d45af0841e691b6e637bd8b9f7c8e51b813b818b0baf2d9c5c9d116781d327b4b43309c7265612089f1dce60a41fd0aff4bcd1335d696f01cee7b371e13584c731a3c3ef7e1b9f3f41f91c4dc647b948c93a99c1ae79f5f530c68c3cc28bbd00", 0x2000, &(0x7f0000009580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000009640)={0x78, 0x0, 0x58c, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x8, 0x3, 0x6, 0x2, 0x0, 0x200800, 0x1, 0xa, 0xa000, 0xfffffffa, 0x0, r12, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f000000dbc0)=[{{&(0x7f0000000500)=@file={0x3, './file1\x00'}, 0x6e, &(0x7f00000009c0), 0x0, &(0x7f00000096c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, r12}}}], 0x20, 0x20000011}}, {{&(0x7f0000009700)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000009800)=[{&(0x7f0000009780)="dce3ec2e46ea7762068165fcffb233529df811d4c737a758235d618a249876c67787dc61f13b3a907d477b96a6f7ca2b48a097c38d30a994c13ffe50f35f1e5b7b900df5", 0x44}], 0x1, &(0x7f000000db40)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, r12}}}], 0x60, 0x400c040}}], 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000380)=0x2) recvmmsg(r4, &(0x7f00000003c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x158) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="010f000065c80000"], &(0x7f0000000700)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x88040, 0x12) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000580)='./file0/file1\x00', &(0x7f00000005c0), 0x0, 0x0, 0x3) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002380)=""/4096, 0xfdfa}], 0x1}}], 0x1, 0x40000141, 0x0) 2m20.075380059s ago: executing program 0 (id=254): syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001240)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001280)=0x7e) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001440)={0x1, 0x0, 0x209, 0x9, 0x200, 0x8001, 0x2, 0x200, {0x0, @in={{0x2, 0x4e23, @empty}}, 0xfffffffe, 0xfffd, 0x7, 0x8001, 0x6}}, &(0x7f0000001380)=0xb0) getsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r1, 0x84, 0x7d, &(0x7f00000013c0)={r2, 0x3}, &(0x7f0000001400)=0x8) migrate_pages(0x0, 0xac, &(0x7f0000000100)=0xe9ad, &(0x7f0000000140)=0x1) r3 = socket(0x2, 0x2, 0x1) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000180)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0) pread64$ublk_ch(r4, &(0x7f0000001500)=@buf_max_buf, 0x1000, 0x4) write$P9_RREMOVE(r4, &(0x7f0000000200)={0x7, 0x7b, 0x1}, 0x7) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000080)={'rose0\x00', {0x2, 0x0, @multicast1}}) 2m19.530852886s ago: executing program 0 (id=259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, r2, 0x25, 0x21, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x3000490, &(0x7f0000000000), 0x45, 0x7bc, &(0x7f0000000c80)="$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") 2m19.299533402s ago: executing program 0 (id=267): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1e0041c, &(0x7f00000007c0)={[{@rodir}, {@utf8}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@numtail}, {@uni_xlate}, {@numtail}, {@uni_xlateno}, {@fat=@check_strict}, {@utf8}, {@uni_xlateno}, {@utf8}, {@uni_xlateno}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@rodir}]}, 0x3, 0x28a, &(0x7f0000000d00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000fc0)='.\x00', 0x101000, 0x108) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write(r6, &(0x7f0000000180)="0300", 0x2) r7 = dup(r5) syz_ublk_setup_queues(r7, r4, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 2m18.428744037s ago: executing program 0 (id=275): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417, 0x101}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x32}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x4}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0xe8) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0xa}, 0x1c) accept(r1, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000001c0)=0x80) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, 0x0, 0x0) listen(r1, 0xfff) syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}, @generic={0x22, 0x8, "ef5e44ddb6a9"}, @mss={0x2, 0x4, 0x8000}]}}}}}}}}, 0x0) 1m35.626434781s ago: executing program 0 (id=285): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='mnt\x00', 0x4, &(0x7f00000000c0), 0x0, 0x236, &(0x7f0000000100)="$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") ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='mnt/encrypted_dir\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='mnt/encrypted_dir\x00', 0x800, 0x181) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0xfffffffffffffffe) 1m35.626260371s ago: executing program 33 (id=285): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='mnt\x00', 0x4, &(0x7f00000000c0), 0x0, 0x236, &(0x7f0000000100)="$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") ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='mnt/encrypted_dir\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='mnt/encrypted_dir\x00', 0x800, 0x181) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0xfffffffffffffffe) 34.341284891s ago: executing program 6 (id=451): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x81, 0x2d1, &(0x7f0000000b00)="$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") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)='A', 0x1}], 0x1}}, {{&(0x7f00000005c0)={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000640)="3d3ae39933472ecf3569f3c68e1b015e03c87b676c08", 0x16}, {0x0}], 0x2}}, {{&(0x7f0000000680)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x3, 0x4000801) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000)={0x0, 0x7}, 0x2) 34.336291977s ago: executing program 6 (id=452): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2}, &(0x7f0000000040)) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2}, &(0x7f0000000040)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000080)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x60441, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x60441, 0x0) fallocate(r2, 0x10, 0x80000000, 0x1072000) r3 = mq_open(&(0x7f0000000240)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x2, 0x2c, &(0x7f00000002c0)={0x0, 0x1, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedreceive(r3, &(0x7f0000000380)=""/116, 0x74, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x70bd2a, 0x0, 0xa, 0x0, 0x2}, 0x0, 0x2}}, 0xf8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x70bd2a, 0x0, 0xa, 0x0, 0x2}, 0x0, 0x2}}, 0xf8}}, 0x0) 34.263287577s ago: executing program 6 (id=454): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000100)={0xa, 0x100, 0x1, {0x8000, 0x1000, 0x2, 0x870}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x70bd2d, 0x1, {0xa, 0x0, 0x70}, [@IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c055}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x582c, 0x18000, 0x2, 0x1dc}, &(0x7f00000001c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdb46, 0x8, 0x2, 0xf2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x101, 0x10, 0x2, 0x170}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3459, 0x80, 0x0, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80ad, 0x800, 0x1, 0xc1}, 0xffffffffffffffff}], 0x4, &(0x7f0000001fc0)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, '\x00', {0x2, 0xeb0, 0x0, &(0x7f0000000fc0)=@buf_512="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"}}, &(0x7f0000002040)) syz_io_uring_setup(0x735e, &(0x7f0000002080)={0x0, 0xc5f0, 0x2000, 0x3, 0x396, 0x0, r3}, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)) 34.183739707s ago: executing program 6 (id=457): r0 = syz_io_uring_setup(0x29d8, &(0x7f0000000e40)={0x0, 0x2600, 0xc00, 0x2, 0xf}, &(0x7f0000000ec0)=0x0, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000f80)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000001000)={0x6, 0xffffffffffffffff, 0x28, {0x2, 0x4}, 0x9}, 0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) ioprio_set$pid(0x2, 0x0, 0x4007) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000a80), 0x1022002, 0x0) r6 = dup(r5) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000ac0), 0x8000, 0x0) sendfile(r5, r7, 0x0, 0x8000fffffffe) r8 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000b40)={0x0, 0x2, 0x7, "19891509647a61095f296dc5f646cc67c8942867bdca001d2c6965a27dac88e5", 0x494e4f4b}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x2000000000000000, &(0x7f00000000c0)=ANY=[@ANYRES32=r7, @ANYRES64=r6, @ANYRESDEC=r9], &(0x7f0000000d40)='GPL\x00', 0x20004, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000d80)={0x0, 0x7}, 0x4) setsockopt$packet_int(r10, 0x107, 0x16, &(0x7f0000000dc0)=0x4, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000013c0)=ANY=[@ANYBLOB="ffffffffffff202309153e2d0800450000300000000000019078b71414bbac1414aa080090787f00000145000000fcff000040000000ac1414aae0000001ffe15f11295a9239fa24e6d6a6dd093a853fd8df7091cf9204c9f1460f0df112a5246dc068f107ba92a72855dbef2385e5d9513d0ec9079d73af14c8f412200f79f8f5fa59c272aa97f109832c018403379e0991aa11a1ee8bae569866922b43dd689e6ffbf2cf13ae403481e2e0be8ef65ef9f83c5cfe99b8001c543cc6780c673ee9e5659a88173aa400"/216], 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000401e002100000000000700000000000000"], 0x14}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000100)={0x1, @pix={0x0, 0x0, 0x34424752, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1018e58, &(0x7f0000000280)={[{@abort}, {@barrier}, {@auto_da_alloc}, {@errors_remount}, {@norecovery}, {@inlinecrypt}]}, 0x6, 0x60d, &(0x7f0000000400)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x4c, &(0x7f0000001040), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001080)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x110, 0x150, 0x150, 0x0, 0xf8010000, 0x1d8, 0x238, 0x238, 0x1d8, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xff], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x204) write$binfmt_elf64(r12, &(0x7f00000013c0)=ANY=[], 0x78) 34.02367913s ago: executing program 6 (id=458): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f00000003c0)='})%.\x00', 0x0, &(0x7f0000000400)={@align=0x6, {0xeb, 0xca59, 0x401}}, 0x7, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x7}) openat(r0, &(0x7f0000000500)='./proc\x00', 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="34010000", @ANYRES16=r2, @ANYBLOB="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"], 0x134}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e80), 0x0, 0x10, &(0x7f0000000ec0), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x321400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(r6, 0xffffffffffffffff, 0x8000, 0x3) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000f00)=r5, 0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=@delchain={0x24, 0x65, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x8, 0xfff3}, {0x1, 0xffe0}}}, 0x24}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r8, 0x407, 0x108001a4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000020000000000000022000000910a40000000000095", @ANYRESDEC=r1, @ANYRESDEC=r2], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, &(0x7f00000002c0), 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getregset(0x4205, r9, 0x409, &(0x7f0000000340)={0x0}) r10 = syz_open_dev$vim2m(&(0x7f0000000540), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000580)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r10, 0x40045612, &(0x7f00000005c0)=0x2) ppoll(&(0x7f0000000600)=[{r10, 0x100}], 0x1, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 33.90542593s ago: executing program 6 (id=459): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000c40)={[{@nombcache}, {@errors_remount}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@noquota}, {@orlov}, {@nodiscard}, {@usrjquota}, {@norecovery}, {@init_itable_val}]}, 0x6, 0x48a, &(0x7f0000000d40)="$eJzs3M9rHFUcAPDv7Cap/WVirT9aW42txYKaNOkPe/BSUfCgIOih4ikmaandNtJEaEvR1kM9SsG76Nm/wIv1IupJ8CQoeBShSC6tgrAyuzNxk+xuNslmt3Y/H5jkvbw3vPedmbf78mZnA+hZw+mPJGJbRPwSEYPV7OIKw9Vfd+avTP41f2UyiXL5jT+TSr3b81cm86r5flurmXK5SbvX346YKJWmL2T50blz743OXrr83JlzE6enT0+fHz9+/MjhvQPHxo+2Jc40rtu7P5jZs+uVt268Nnnyxjvff5n2d1tWXhtHuwxXj25dB9rdWJdtr0knfV3sCKtSjIj0dPVXxv9gFGPzQtlgvPxRVzsHbKhyuVDe1Lj4ahm4h6UTdaAX5W/06f+/+dahqcdd4daJWFjHuJNt1ZK+KGR1+rP/kTbCcEScvPr3Z+kWG7QOAQBQ6+aJiHi23vyvEA/X1Ls/u4cyFBEPRMSOiHgwInZGxEMRlbqPRMSjq2x/6R2S5fOf8uCaAmtROv97Ibu3tXj+l8/+YqiY5bZX4u9PTp0pTR/KjsnB6N+U5seatPHNSz990qisdv6Xbmn7+Vww68cffUsW6KYm5ibWE3OtW9cidvdV4x+I2viThTlvOj/eFRG719jGmSZlQyvG30QbJuXlzyOerp7/qzG/OP5c0vD+5Njzx8aPjt4XpelDo/lVsdwPP15/vVH7y8//gS8iWoy/DW7dLMeWJdf/ksM6lAxkqVJp+sLsKhv4OeL6rx9P/tOgeK3X/0DyZiWdd+3ixNzchbGIgeTV5X8f/2/fPJ/XT6//g/sX4k+iZvzvyPZJz/9jEbEnIvZGxOMR8UTW9ycjYl9E7G9yCL578al3G5U1jr/JqnwbpfFP1X39W7j+h9LU7KXLZyv369eQKJ799qvVx5/akp3/I5XcwWyfVl7/Wu3geo8fAAAA/B8UKp+BTwojC+lCYWSk+hn+nbGlUJqZnXvm1Mz756eqn5Ufiv5CvtI1WLMeOpat5eX58SX5w9m68afFzZX8yORMaarbwUOP29pg/Kd+L1Z//9bVHgIbyvNa0LuMf+hdxj/0LuMfepfxD72r3vj/sAv9ADpvhff/zZ3qB9B55v/Qu4x/6F0rjf99nXkWGeishs/GF9b1yP8qEnlPOtHWvZ/4emB939XQeiIKG97ExbvlqK4lUWyhzrXs2q/+pT/qVu5r+cssFiXyN/WVK2+qW9Sd1yMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB2+zcAAP//NbXUcA==") prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) 18.123965162s ago: executing program 34 (id=459): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000c40)={[{@nombcache}, {@errors_remount}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@noquota}, {@orlov}, {@nodiscard}, {@usrjquota}, {@norecovery}, {@init_itable_val}]}, 0x6, 0x48a, &(0x7f0000000d40)="$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") prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) 17.354278304s ago: executing program 2 (id=587): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x2b, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x11e, 0x1, 0x0, 0xfffffffffffffd61) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x80200, 0x0) close(r2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r3, &(0x7f0000000000)="4d5346543130300a0037a9dec7cb53c6aa51abaa6eb1b692e1fcf967407ca7426c00ed08479ebee9a227bf4e476a382d3e363cabef3ee01689bbf9a41879f0cd8159a79aaec5d650f79423f9cc37a97330e37536dc9f10df0032acb6a12e08054e", 0x61) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='WINNCM\n\x00', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000280)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x29, 0x6, 0x8}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000440)="241a0eaa83fe6131329bdb81c39639cff72333afdc163643aa470ef210b7df9f5f4174c45b41e5dc69d3ad8068b950d01d7734bcc4939b384cab5900079a2617458da6ff956e436a135e518916af12174fa869e17a8fd8c62f04788c1641f7417513df80e89c405c7a722a99c88483ce91cd09044da2745efceeac670f0ee5152d99aeb23d170bfbc424170f3e8db2660531aa2f8420c65e8ab69ad2a51f0d4ff98e970268baf8b4630610a66f7a9fb91b2761981e884908f33711f912b17b47fbcdd3042da4a879a17ef536940b01d8e16c7e3d36dbcba730bdfc98f94e87e85b0cb2f0872e2611e378d27b8e21f469") write(r5, &(0x7f0000000740)='dummy_udc.0', 0xb) 17.177341022s ago: executing program 2 (id=588): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB="bfa200000000000007020000d7feffff720200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bfa000000000000007013f0004000000850000005e000000b70000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.949337708s ago: executing program 2 (id=592): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff9, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xb}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x80}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x9}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x2}]}}]}, 0x58}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYRESHEX=0x0], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 16.824759973s ago: executing program 2 (id=594): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xd5848, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006df0663c2bbd7000ffdadf2500000000", @ANYRES32=0x0, @ANYBLOB="0110040004e80200"], 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1d3042, 0x40) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2, {0x8d0}}, './file0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x7, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r7, r5, 0x25, 0x0, @val=@perf_event={0x100}}, 0x18) syz_emit_ethernet(0x1011, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000440)={&(0x7f0000000480)=""/59, 0x12a000, 0x1000, 0x5, 0x4}, 0xffffffa2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000002c0)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) 16.561535112s ago: executing program 2 (id=597): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8090) add_key(0x0, 0x0, &(0x7f0000000940)="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", 0x356, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000002c0)={{0x8, 0x3, 0x7}, 'syz0\x00', 0x3e}) ioctl$UI_DEV_CREATE(r4, 0x5501) 16.35883174s ago: executing program 2 (id=601): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB="bfa200000000000007020000d7feffff720200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bfa00000000000000701fd0004000000850000005e000000b70000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.1000533s ago: executing program 35 (id=601): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB="bfa200000000000007020000d7feffff720200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bfa00000000000000701fd0004000000850000005e000000b70000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.173280638s ago: executing program 3 (id=694): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x200000000000000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r2, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) 5.038191599s ago: executing program 3 (id=696): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xb9, 0x10001, 0x9, 0x48681}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f00000002c0)={@loopback, @remote}) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) 4.793375385s ago: executing program 3 (id=697): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100), 0x0, 0x48e, &(0x7f0000000140)="$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") mount$overlay(0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x141104, 0x80) getdents64(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000c00)={0x1, [0x0]}, &(0x7f0000000c40)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000e00)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], 0xb9) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x9, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000d40)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r2, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) getdents64(r0, &(0x7f0000000700)=""/78, 0x4e) 4.178889022s ago: executing program 3 (id=701): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000711039000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) setresuid(0xee01, 0x0, 0x0) (async) setresuid(0xee01, 0x0, 0x0) syz_emit_ethernet(0x19e, &(0x7f0000000880)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x168, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, [{0x3, 0x9, "d33e6d4706598090a8030037ffffefffffffff23732407010000ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x20, "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"}]}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setresgid(0x0, r3, r3) sendmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0x20, 0x24040805}}], 0x2, 0x0) syz_pidfd_open(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x1008002, &(0x7f0000000500)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000fc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000c80)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000c80)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000cc0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000d00)) renameat2(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000d80)='./bus/file0\x00', 0x2) r4 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ae", 0x1, 0xffffffffffffffff) add_key(&(0x7f00000002c0)='asymmetric\x00', 0x0, 0x0, 0x0, r4) (async) add_key(&(0x7f00000002c0)='asymmetric\x00', 0x0, 0x0, 0x0, r4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000680)='100', 0x3) (async) write(r6, &(0x7f0000000680)='100', 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000640)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fedbdf250100000008000100ff"], 0x58}}, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="180100002000010000000000fbdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="180100002000010000000000fbdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000740)={0x2, &(0x7f0000000700)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @local}]}) 3.923411427s ago: executing program 1 (id=705): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) close_range(r0, r0, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x12240, 0x100) 3.868767519s ago: executing program 3 (id=707): syz_mount_image$vfat(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='.\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000015c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat(0xffffffffffffff9c, 0x0, 0x58342, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0xe68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x8001, 0x10000000, 0x8}, 0x92, 0x6}, [{0x4, 0xe, 0x8, 0xe42, 0x4, 0xec87}, {0x6, 0x40, 0x6, 0x458, 0x400, 0x7}, {0x40, 0xa6, 0x8, 0x0, 0x7, 0xf63}, {0x1, 0x2, 0xfc78, 0x3, 0x4, 0x7fff}, {0x0, 0x3c98, 0x1, 0x7fffffff, 0x9, 0xc}, {0x3, 0x7, 0x3, 0x0, 0x6, 0x4}, {0x1, 0x2, 0x0, 0x51, 0x6, 0x6}, {0xf, 0xfff, 0x9, 0x99, 0x6b2b}, {0x8e73, 0x3f8000, 0x1, 0x4, 0x7, 0x7}, {0x4, 0x3, 0x1, 0x4, 0x0, 0x400}, {0xec25, 0x60, 0xffffff00, 0xb45d, 0x552, 0x39f}, {0x100000, 0xfffff317, 0x2, 0x5, 0x974f, 0x17}, {0x4, 0x7, 0x100, 0x9, 0xfff, 0xffffffff}, {0xfffffff7, 0x101, 0x400, 0x6, 0x40, 0xb}, {0x0, 0x4, 0x5, 0x3, 0x81, 0x2}, {0xb2, 0x4c81440c, 0x8, 0x800, 0x2, 0xd66}, {0x4, 0x2bb, 0x80, 0xa, 0xfffffffa, 0x5}, {0xfffffffe, 0x5b92, 0x7, 0x4, 0x88f5, 0x9}, {0x6, 0xc, 0x200, 0x4, 0xfffffff1, 0x26}, {0x9, 0x56, 0x1, 0xd, 0x5, 0x1}, {0x5, 0x3, 0xc, 0xfffffff7, 0x2}, {0xfffffff7, 0xf9f5, 0x8, 0xfff, 0xe1, 0x2d5e}, {0x6, 0x10001, 0x2, 0xcb, 0x5, 0x4}, {0xe, 0x101, 0x80, 0xd, 0xfffffffc, 0x9}, {0x0, 0xb, 0xfffffff4, 0x9, 0xfff, 0x81}, {0x6, 0x4, 0x9, 0x38f5, 0xe, 0xb4}, {0x2, 0x6, 0x9, 0x3, 0xe5, 0x3800}, {0x9, 0x4, 0x1, 0x101, 0x49a, 0x40}, {0x100, 0xffffffff, 0x80000001, 0x3, 0x12ab, 0xbc}, {0xa4a9, 0x3, 0x9, 0x7, 0x9, 0xb}, {0x7fffffff, 0x4, 0x5, 0x3, 0x7fff, 0xc}, {0x5, 0x9, 0x75, 0xffff8001, 0x9, 0x6}, {0xb0, 0x4, 0xffffffff, 0x6d, 0x81, 0xfffffffa}, {0x100, 0x6, 0xffffffff, 0x0, 0x4, 0x9}, {0x6, 0x9, 0x9, 0x1, 0xffff, 0x2}, {0x800, 0x4, 0xfffffffe, 0x10001, 0x7fffffff, 0x100}, {0xb, 0x2, 0x4, 0xfffffff8, 0x6, 0xfffffff9}, {0x1, 0x9, 0x5, 0x6, 0x84, 0x7}, {0xa, 0x0, 0x909d, 0x1, 0x9}, {0xbe0, 0x3, 0x5, 0x2, 0x3, 0x80000001}, {0x6, 0x0, 0x8001, 0xce8, 0xc7f, 0x10001}, {0xcf4, 0xaad, 0x8, 0x6, 0x1, 0x3}, {0x6, 0x5, 0x5, 0x7, 0x7247, 0x2}, {0x80000000, 0xfe9, 0x32b2, 0x7, 0x5, 0x7ff}, {0x40, 0x9, 0x68, 0x0, 0x2, 0x98a}, {0x7, 0x0, 0x5b02, 0x6, 0x8001, 0x2}, {0x6, 0x4, 0x1ff, 0xd, 0x8, 0xffe}, {0x2, 0x9, 0x800, 0x0, 0xfffffff8, 0x3a}, {0x4, 0x9, 0x9, 0xfff, 0x3, 0xd4f}, {0xb44, 0x8, 0x9, 0x7f, 0x3, 0x3}, {0xc1, 0x6, 0x2, 0x6, 0x1, 0x5}, {0x40, 0x6be, 0x4d1, 0x5, 0x2, 0x7}, {0x1ff, 0xb25, 0x80000001, 0x1, 0xf}, {0x4, 0x6, 0x1, 0x32}, {0xe6e1, 0x5, 0xfffffff9, 0x2, 0x60, 0x1a0}, {0x401, 0x0, 0x8000, 0xffff65ca, 0xffffffc0, 0xf9}, {0xf, 0x2, 0x9, 0xa, 0x3, 0xffffffff}, {0x4, 0x3, 0x9, 0x6, 0x4, 0x7ff}, {0x7ff, 0xfffffffc, 0x15e5a53f, 0x67b, 0x1, 0x4}, {0x4, 0x7, 0x5, 0x10001, 0x8, 0x6}, {0x8f2, 0xfff, 0x6, 0x2, 0xc5, 0xfffffff8}, {0x8000, 0xc1, 0x8, 0x7fff, 0x7fff, 0x400}, {0x2900416, 0x10000, 0xe, 0x9, 0x1000, 0x9}, {0x10, 0xfffffff8, 0x0, 0x4, 0xe, 0x9}, {0x8, 0x8, 0x8000, 0x0, 0xd01, 0x3}, {0x800, 0x3, 0x0, 0x0, 0x4, 0xf87b}, {0x1, 0x1ff, 0x3, 0x3, 0x9, 0x3ff}, {0x7, 0xfffffff6, 0x0, 0xde, 0x3, 0x7}, {0x8, 0xaf00, 0x1, 0x1, 0x8, 0x1}, {0x4, 0x2, 0x9, 0xfd, 0x0, 0x7}, {0x0, 0x6, 0x8, 0xc, 0xf15f10b, 0x6}, {0x4d, 0x6, 0x8, 0x7, 0xe582, 0x6}, {0x4, 0x0, 0x40, 0x8, 0x0, 0xffff8000}, {0x9, 0x4, 0x6, 0x6, 0xa, 0x8}, {0x3, 0x401, 0x6, 0xe, 0x1ff000, 0x1}, {0xfffffb2a, 0x8, 0x5, 0xffff, 0x2, 0xffffff00}, {0x400, 0x6, 0x3, 0x9a, 0x1, 0x2000}, {0x5, 0x2, 0x81, 0xf, 0x5, 0x8}, {0x1, 0x4241, 0xfffffff8, 0x9, 0x400, 0xebed}, {0x5, 0x1ed, 0x2, 0x8, 0x707, 0xfc1a}, {0x1d, 0x33, 0xfffffff8, 0x2, 0x6, 0x9}, {0x9b, 0x6, 0x3a438d3b, 0x8000, 0x4}, {0x9, 0x81, 0x7fff, 0x800, 0x9}, {0x10, 0x4, 0x1, 0x622e, 0xd8, 0x9}, {0x33, 0x7, 0x9, 0x6, 0x1e, 0xd}, {0xd2, 0x7, 0x6, 0x2, 0x7, 0x1000}, {0x3, 0x0, 0x7, 0xab7, 0x5, 0x5}, {0xb, 0x7, 0xc, 0x1, 0x6, 0x80000000}, {0x3, 0x1, 0x2, 0x8, 0x2c, 0x10}, {0x50a49641, 0x2, 0x4, 0xef1, 0x8, 0x9a90}, {0x5e300141, 0x0, 0x7, 0x93, 0xa, 0x6e}, {0x36, 0x5, 0x6de, 0x80000001, 0x4}, {0x8, 0x2, 0x5, 0x4, 0x0, 0x57d}, {0x3, 0x6, 0x7fc, 0x6, 0x7, 0x8}, {0x5000, 0x7, 0x0, 0x4, 0x6, 0x4}, {0x4, 0x7fffffff, 0x7fff, 0xfffffffe, 0x100000, 0x5}, {0x7d, 0x343, 0x6, 0x1, 0xa19a, 0x5}, {0x1, 0x4, 0x962, 0xd, 0x1, 0x8}, {0x1a4, 0x2, 0xffff, 0xa, 0x0, 0x1}, {0x800, 0x81, 0x6, 0x3, 0xfffffff9, 0x8001}, {0x8000, 0x3, 0x0, 0x1, 0x2, 0x8}, {0x101, 0x4, 0x7f, 0x3b24, 0xc16, 0x1ff}, {0x80, 0x8, 0x3, 0x2, 0x34c, 0x2}, {0x9, 0x6, 0x2, 0x88, 0x4, 0x3ff}, {0x6, 0x4, 0xf, 0x5, 0xfffff157, 0x7}, {0x400000, 0xbefa, 0x9, 0x6, 0x4, 0xffffffff}, {0x2fd, 0x4, 0x8, 0x3, 0x6, 0x1}, {0xa1, 0x1, 0xd, 0x7, 0x4, 0xe1}, {0x6, 0x101, 0x7, 0x3, 0x0, 0x3}, {0x3, 0x6, 0x7, 0x9}, {0x2, 0xc, 0x23c, 0x8, 0x12, 0x80}, {0x0, 0x292, 0x2, 0x8, 0xffff, 0x2}, {0x9, 0x0, 0x3, 0x4, 0x40, 0xffffffff}, {0x80000000, 0x6f95, 0x23, 0xf9, 0x8, 0x7fff}, {0x5, 0x19de554e, 0xfffff4b2, 0xb97, 0x1, 0x7}, {0x9, 0x0, 0x521, 0x5, 0x3}, {0xffff, 0x4, 0xfb1, 0x3, 0x0, 0xfffffff8}, {0x6, 0x19c1, 0x7ff, 0xa, 0xda8b, 0x9b}, {0x3, 0x8, 0x7fff, 0x6, 0x7, 0x8}, {0x80, 0x5, 0x48, 0xce6, 0x3, 0x4}, {0x9, 0x3ae2, 0x1, 0x7, 0x7, 0xfff}, {0xb5, 0x7f, 0xffffacad, 0x0, 0x4}, {0x3, 0x0, 0x7455, 0xe, 0x8000, 0x4}, {0x8, 0x8, 0x10, 0x0, 0x0, 0x3}, {0x2, 0x8, 0x0, 0x5, 0x1ff, 0x6}, {0xd, 0x4, 0x73f57df3, 0x8, 0xffffff61, 0x8}, {0x7, 0x8, 0x5, 0x5, 0xb, 0x40}, {0x6f, 0x0, 0xffff, 0x81, 0xc, 0x10000}], [{0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {}, {}, {}, {0x5}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r4, 0x0, 0x4, 0xfffffffffffffffe) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000001000), r5) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05000000000000000000020100000900010073797a3000000000070002006c6f0000070003006c6f"], 0x30}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "1770e235285db2cb", "278aa3520f3a0ff8cef6713fa6b703a6", "610cde48", "dbb0e9ddc00c20ee"}, 0x28) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x4) ioctl$FE_READ_SIGNAL_STRENGTH(r2, 0x80026f47, &(0x7f0000000fc0)) 3.781501871s ago: executing program 1 (id=708): syz_io_uring_setup(0xefd, &(0x7f0000000140)={0x0, 0xaa32, 0x10000, 0x5, 0x59}, &(0x7f0000000100), &(0x7f00000004c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5963, 0x11000, 0x20000000, 0x4d}, &(0x7f0000000480)=0x0, &(0x7f0000000bc0), &(0x7f0000000080)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') exit(0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a000000000000000800", @ANYRES32], 0x20}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x143042, 0x0) pwritev2(r6, &(0x7f0000000280)=[{&(0x7f00000002c0)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x1, @random="bfcdabb1e9b7", 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000500)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x80002, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000d80)={{0xffffffffffffffff, &(0x7f0000000600)='/dev/ppp\x00', 0x400002, &(0x7f0000000740)={@_ha_fsid={[0x3, 0x7]}, {0x8, 0x3, 0xfffff001, 0x4dca}}, 0x3, &(0x7f0000000780), &(0x7f00000007c0)=0x6}, 0x5, &(0x7f0000000cc0)=[{0x3, 0x7, &(0x7f0000000800)='-$#\x00', &(0x7f0000000840)="59b5eca4d7c94735337b411d30f2996e74448b53dcbb392673997d2d99e766308ecc1b9387e2ca63519ae854c5", 0x2d}, {0x2, 0x6, &(0x7f0000000880)='\xde($$&\x00', &(0x7f00000008c0)="094ddcb10e15ef135197961091a3acc97636b9d7336daa7aa1cf722830406e41480955545b396871106cb60637b27a92dc446cc3d160e350471805086b2443762715c8270b6b88399f266f67e2e118a011d546d204a1bb2b5e285aeaa37440d0c3e807ee2e40c0d83da001dfc4599328dff7a3d26042d797f146f03db7ed0b692664932bfc6896c57c31b2b911558021f4781eb9bc8a554981ce602e5af1ee3de6c02b1b49906f7e6f52", 0xaa, 0x20}, {0x1, 0x2, &(0x7f0000000980)='mountinfo\x00', &(0x7f00000009c0)="216ce1b451617410cf0800e28cf94c77300c5acdf4d0ba403a844c07855c61147885db967d07417e5a8a124b660f183527152a6bb6cd9962e35f643f1318745aca125fcd12b731e8629caf938ebe038e43b6f5e0fb7360967d014f6f202dd64d68c013ac7b9182c648060c5f3509c73f1c58e1b8", 0x74, 0x10}, {0x1, 0x4, &(0x7f0000000a40)='#[#\x00', &(0x7f0000000a80)="d780a9728778f10dac1aa040addb4a4224f8389bd3b5aa3c078cf124275864b5baef19ff62aa55484977cc54fddf126a73e3d9b294cf0c171afde67765ba4e979e5816cb6b48757ffe6f67a3e46cc9b1108445c267b446c96aa542bfab32e97769ccf0a4fb9f11c2575c7c6f5e843c54a8ecc5fa9a86865ee8a599cdf7d4bbd7f3068e2e544647006097ea7c030c8d991078", 0x92, 0x2}, {0x3, 0x3, &(0x7f0000000b40)='-\x00', &(0x7f0000000c00)="b3760795543090256f2b3cce85ca35a5d88f05ff747b511a97e2b9c1f59aef5e421889536a570538c1bff81210ee0cce0bc28ca24bdc67fdc0023e414563f8b2541521a0e717d42a91b740357e0effade62d8c01e91b282dae3b86b5dca1b8c787b51085da29908f28f62ab3bf6329ff229b2ef1d843ecdbe6d1c2afd28d8ddea9b20692", 0x84, 0x2}]}) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000580)=0x400004) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x143603, 0x0) ioctl(r10, 0x40047438, &(0x7f0000000600)) ioctl$PPPIOCCONNECT(r10, 0x4004743a, &(0x7f0000000640)) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000680)=0xc203400) pwritev(r8, &(0x7f00000006c0)=[{&(0x7f0000000700)='\x00*', 0x2}], 0x1, 0xffffffff, 0x8) ioctl$EVIOCSREP(r6, 0x40084503, &(0x7f0000000300)=[0x3, 0x7fff]) syz_io_uring_submit(r2, r0, r1, &(0x7f00000001c0)=@IORING_OP_PIPE={0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x6}}) io_uring_enter(r3, 0x1, 0xfffffffd, 0xa3, 0x0, 0x0) 3.134217732s ago: executing program 3 (id=716): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800120000000400380205000900010000000500"], 0x88}}, 0x0) 2.900904982s ago: executing program 36 (id=716): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800120000000400380205000900010000000500"], 0x88}}, 0x0) 2.848046828s ago: executing program 1 (id=722): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f00000004c0)=0xffff0d37, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs]}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs]}) r4 = dup3(r3, r2, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000480)='./file1\x00', 0x200000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f00000009c0)="$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") openat(r4, &(0x7f0000000c80)='./file1\x00', 0x1ef280, 0xa0) (async) openat(r4, &(0x7f0000000c80)='./file1\x00', 0x1ef280, 0xa0) open_tree(0xffffffffffffff9c, &(0x7f0000000680)='\x00', 0x89901) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000680)='\x00', 0x89901) mount_setattr(r5, &(0x7f0000001dc0)='.\x00', 0x8000, &(0x7f0000001e00)={0x81, 0x8a}, 0x20) statfs(&(0x7f0000000cc0)='./file1\x00', &(0x7f0000000d00)=""/58) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire]}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) socket$kcm(0xa, 0x922000000003, 0x11) (async) r7 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000680), 0x4c00}], 0x1}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) recvmsg$kcm(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000d80)=""/4122, 0x101a}], 0x1}, 0x406) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x50, 0x2000000, &(0x7f0000000340)}) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000600)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0x7}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001e80)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001f40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000700)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000700)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 2.11548778s ago: executing program 7 (id=726): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070100000400000085000000aa002800bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x5ddb343c6bddcfb5, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.971839284s ago: executing program 7 (id=728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x1}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000007c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000007c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x21, 0xffffffffffffffff, 0x20) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000204e0000", 0x58}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x23e, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x86, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x25}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x9, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xbc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x80007, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x23e, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x86, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x25}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x9, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xbc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x80007, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r8, &(0x7f0000001780)={&(0x7f00000017c0)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001880)='k', 0x1}], 0x1}, 0x20000885) 1.952381095s ago: executing program 5 (id=729): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="283fa14c", @ANYRES16=r2, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="0a001800030303030303000014005a801000018005000200eb00000004000100"], 0x3c}}, 0x0) (async) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x7) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x5, 0x6, 0x9, 0x1, 0x8, 0x0}) capset(&(0x7f0000000040)={0x20080522, r4}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) (async) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x210, &(0x7f0000000280)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x92012, r5, 0x26000) (async) r6 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x6, 0x5}, {0x4, 0x2, 0x6}, 0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000f80), 0x0, 0x0) rt_tgsigqueueinfo(r4, r4, 0x17, &(0x7f0000000100)={0x10, 0x2ed4, 0x80000001}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1+00000010000002', 0x63) (async) ioctl$VIDIOC_DECODER_CMD(r9, 0xc0485660, &(0x7f0000000680)={0x0, 0x1, @start={0x7, 0x1}}) 1.883968726s ago: executing program 1 (id=730): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca34880080000"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) recvmmsg(r0, &(0x7f0000000240), 0x400014c, 0x40000103, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000480)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f00000004c0)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000500)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000540), 0x3000, 0x0, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @rand_addr=0x64010100, 0xffffffffffffffff, "f8c34f4517cc3dccdfe177179674f904d4dfe6f4ca41663d9925edfd66bed25c", 0x7fff, 0x8001, 0x530d, 0x98}, 0x3c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f00000003c0)=0xe8) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000700, r4, &(0x7f0000000400)) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x89, @dev={0xac, 0x14, 0x14, 0x41}, 0x4e23, 0x1, 'wrr\x00', 0x0, 0x5a, 0x4f}, 0x2c) sendmsg$sock(r2, &(0x7f00000022c0)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @loopback}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000002000)="e3c2849fcaedf7f8c4bee207c7aa3b759aa3f2027148271ac23d77998f8d2f074f9c44ebc6b93523d2ed06ae89bf054e443c076fe72457dd7653b59e7ff080fed30a02e367388c744a1dd9d1620956c4ccb628614c6f44dd96090dba9e8c36dc8360da0555", 0x65}, {&(0x7f0000002080)="bd243b9c79d4c9a477bd9100a4cbe48501db36ae9274b4434c1e684e5912934d4c34c108b4afc69170ffd68f37c44c17741b4d3c44cb26cc24c25f32153a7d1d3817983d4a3bb1eea529c77f511eb13bc84fb583d4133cee09b6674c1c3c7602573b96f36b3b59502fe686157601d7941881614a914812900da7a59aaa220dfd20dc615f94ec0860c27f330042c87b329dd2e4be8d741d69929fdcba7ce7844140c07fce08c78142ecd195a98d7127b129714f24a0bd6784017e37e84d2b0a9fd87dca8d5dbe2e7d2f4924e1872434d7bf1dd8630a57fe62511fc3cdcfcffe57cab3c9699434807b65501f6bef4f979c3bb39f3066d71effe9", 0xf9}, {&(0x7f0000002180)="920d861e0b80ea7577378ac207c73923d3308c13514187", 0x17}], 0x4, &(0x7f0000002200)=[@timestamping={{0x14, 0x1, 0x25, 0x51d9f9ce}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x3a55}}], 0xc0}, 0x8000) 1.718997393s ago: executing program 5 (id=732): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x4}]}, @enum64={0x6, 0x6, 0x0, 0x13, 0x0, 0x8, [{0x1000000, 0x8, 0x2b6}, {0x7, 0x7, 0x4e}, {0x3, 0x8, 0xd83}, {0x1, 0x1000, 0x5}, {0x1, 0x3, 0x2}, {0xf, 0xffff, 0x4}]}]}, {0x0, [0x0, 0x30, 0x30, 0x0, 0x2e, 0x61, 0x0, 0x60]}}, &(0x7f0000000940)=""/4089, 0x8a, 0xff9, 0x1}, 0x28) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff7f, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='.\x02\x00', 0x22004002, &(0x7f00000001c0)={[{@grpquota}, {@barrier}, {@jqfmt_vfsv1}, {@nodelalloc}, {@noblock_validity}, {@grpjquota, 0x2e}], [{@fowner_gt}, {@smackfsdef={'smackfsdef', 0x3d, 'subj_type'}}]}, 0x7f, 0x46c, &(0x7f00000004c0)="$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") 1.569390387s ago: executing program 7 (id=734): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101001, 0xa0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000300000085000000410000001800000001000000000000000400000095"], &(0x7f0000000180)='GPL\x00', 0x400, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 1.497719562s ago: executing program 5 (id=735): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x802, 0x0, 0x0, 0x10000}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004a00010226bd7000000000000a0000031b485e6b586d3b2c7d8a9211a44eca6e30e001f229b63b0d49ee6de6a78691902b2e6aba3a6da2ee30a8ece194ccd9559b5794a4"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x202, 0x2, 0x3, 0x200, 0x1, 0x2}, 0x30, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000280)={'virt_wifi0\x00', @random="01000000b7d0"}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) close(r3) r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000340)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf250200000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4044089}, 0x4048804) connect$nfc_llcp(r4, &(0x7f00000004c0)={0x27, r6, 0x0, 0x1, 0x8, 0xc7, "ebac01ae77a8a0aebe84d849bd99e2f012564101df4e9c74ee407b01a6f6aaba0ed3fa0a57e224c8beb0072a2bd09112a48dcbaeed19644a79a368a7aedc7d", 0x1a}, 0x60) 1.48264955s ago: executing program 7 (id=736): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002340)={0x13, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x170, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x4840cf1ab2c88d22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x99}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xee0}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xcf78}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf8}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x170}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) 1.339465217s ago: executing program 7 (id=738): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000002c0)=@nfc_llcp={0xa, 0x0, 0x0, 0x0, 0x4, 0x0, "be467b1f4cfd8c642c13334c199f91732d13b884b4ad52d055d6d5ae3b991ffc48ca221108c4d3aa623010eab68d9504000034ea00000001f000"}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000380)="80005b", 0x3}, {&(0x7f00000003c0)="bb801d2b6e", 0x5}], 0x2, 0x0, 0x0, 0x900}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x8, &(0x7f0000000480)=[{0x0, 0x9, 0x8, 0xffff8000}, {0x1, 0x7, 0x47, 0x3}, {0x0, 0x8, 0x3, 0xff}, {0x2, 0xd3, 0x8, 0x9}, {0x5, 0x2, 0x8, 0x5}, {0xaadb, 0x0, 0x28, 0x9}, {0x1, 0xc8, 0x8, 0x3}, {0x5244, 0xff, 0xe3}]}) io_setup(0x800, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000440)=r1, 0x1) io_setup(0x0, &(0x7f0000000400)) io_cancel(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0xd2b2, r0, &(0x7f0000000180)="97f07eab7109568f7356c56bd2f1d9b12d55686932a507dc7f61675cfa9ea9d16a49d2d1c92068bfde01be27778d19274dccdd30dfaf7392c2137534265e9e3a5b411ef9b02c613e6d79fc72367c230ba5fe1843256d62bf0b07", 0x5a, 0x3, 0x0, 0x1, r1}, &(0x7f0000000240)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000280)}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000640)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r4, r6, 0x16, 0x0, @void}, 0x10) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, &(0x7f00000006c0)={'binder1\x00'}) 1.246738775s ago: executing program 8 (id=739): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.122439521s ago: executing program 5 (id=740): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000080), 0x2, 0x786, &(0x7f0000000fc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TTL={0x5, 0x4, 0x9}}]}, 0x30}}, 0x0) 1.061401097s ago: executing program 8 (id=741): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/syzkaller0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@can_newroute={0x1c, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0x1d, 0x1, 0x5}, [@CGW_LIM_HOPS={0x5, 0xd, 0x2}]}, 0x1c}}, 0x0) 956.975905ms ago: executing program 1 (id=742): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89000000120081ae08060cdc030000007f1be3f74002000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014007282800022004009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000040)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1, 0x0, 0x0, 0x20040001}, 0x40040) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x84400, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x16, &(0x7f00000005c0)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r7, r4, 0x25, 0x0, @void}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0xc0, 0x2, 0x7, 0x3002, 0xffffffffffffffff, 0xfffffffd, '\x00', r4, r2}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r8, 0x4000, r2}, 0x18) 509.003452ms ago: executing program 5 (id=743): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) (async) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) (async) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f00000003c0), 0x56) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0xa, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="10032400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000240)={0x11, 0x0, r11}, 0x14) 506.844944ms ago: executing program 1 (id=744): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000001200)={0x52, 0x3, 0x36, {0x101, 0x6}, {0xc, 0xd9}, @const={0x6, {0x100, 0x6, 0xe1, 0x5}}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x100, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x277c7000) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000f40)=0x9, 0x4) r3 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x8, &(0x7f00000000c0)={[0x8]}) r4 = syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000680)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nomblk_io_submit}, {@data_err_ignore}, {@noblock_validity}]}, 0xfe, 0x47c, &(0x7f0000000740)="$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") r5 = syz_io_uring_setup(0x80, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001000)=0x0, &(0x7f0000001040)=0x0, &(0x7f0000001080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000010c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001140)="8a84", 0xfffffffffffffe44, 0x40000100, 0x1}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) unlinkat(r4, &(0x7f0000000bc0)='./file1\x00', 0x200) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000640)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001180), 0x101400, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000011c0)={0x0, r10}, 0x8) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000c00)={'ip6gre0\x00', 0x0, 0x4, 0xf9, 0x4, 0xfd1a, 0xb, @mcast1, @remote, 0x1, 0x20, 0x4, 0x10000}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r0, 0x0, 0x5f, 0x4b, &(0x7f0000000cc0)="70bc72ee0760398b6e18be7ee74c093a69a5d0d98701c59f7cd3e514c472ec81729b1a1a609f5744bcee80e1f9660becb73f2940f84995386beab9f07643a7ba036626584739178825d07104f1c18b056c5684c58cbb9c7c7a877f8e66390d", &(0x7f0000000d40)=""/75, 0x1, 0x0, 0x5f, 0x5e, &(0x7f0000000dc0)="012f3a0940ed29d4374e63a22b6f3bedd94d463b173bc9146db196adc6ebcb020d3c3f67d50999d40a318833418f6b7d773ecf0505ad399c96714472b467116f4d7ec7705d5eca40873dc5d3bc829453d314b53091ff4a3fca5e2ede0bb881", &(0x7f0000000e40)="314dba54fa37cffc17c3251f4d9668b4984fa417db02d738493909c3c43e39981db172e5efb12bc306c8cb2351b28c29c344bf7a0d7194fedd0318af17e6fb5cf364e41ef24f00fe2fd8b731c268cbacf081a8fe5c37e6680f345ec7c31e", 0x0, 0x0, 0xe}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', r11, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000280)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r12}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 442.152981ms ago: executing program 8 (id=745): ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[r0, r1, r2, 0x0], &(0x7f0000000100)=[0x0, 0xff, 0x2, 0xffffffffffff05d5], 0x4, 0x1}) 333.355508ms ago: executing program 7 (id=746): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_io_uring_setup(0x36b8, &(0x7f0000000080)={0x0, 0x17c9, 0x0, 0x80002, 0x20011}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_SETXATTR={0x2a, 0x8, 0x0, 0x0, 0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, 0x1, {0x0, 0x0, 0x0, 0x0}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) io_uring_enter(r1, 0xff, 0xe, 0x6, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 302.143632ms ago: executing program 8 (id=747): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x4008, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x114, r2, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x30008014}, 0x24000001) 232.644695ms ago: executing program 5 (id=748): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x4001}) (async) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', 0x1}) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0xd}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000700)=0x207, 0x4) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000940)={{0xffffffffffffffff, &(0x7f0000000800)='syz0\x00', 0x80, &(0x7f0000000840)={@_ha_fsid={[0x58]}, {0x2, 0x20, 0x2, 0xd6}}, 0x7, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x96}, {[0x280000, 0xd, 0xa67, 0x1]}, 0x7ff, 0x40, &(0x7f0000000900)=""/64}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000740)={'lo\x00', 0x0}) sendto$packet(r5, &(0x7f0000000780)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f00000007c0)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000)=0x200000, 0x4) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) close(0x3) (async, rerun: 32) r11 = socket(0x10, 0x803, 0x0) write(r11, &(0x7f0000000300)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000340), 0x4) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002100000000020000000000000008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xcc}, 0x8) (async, rerun: 64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0xb88, @private1, 0x4}], 0x1c) (rerun: 64) sendmmsg$inet6(r12, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}], 0x1, 0x200040d0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r12, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYRES32=0x2, @ANYBLOB="7ef9676605ee18597e16bbdb4a191f60d97e2452d1649f2be2f3947e3859b1b5da89994cc686947e9fa5276e3e6ad725f75eafcef131b615b29b1efabc4ac18a99c77703aefdc248da8fa5609d681f18581c061a315d4bd4c2a8df3e8a38dd"], 0x8) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r12, 0x84, 0x65, &(0x7f0000000b00)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, '\x00', 0x43}}, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in6={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1b6}, @in6={0xa, 0x4e23, 0xd62b, @remote, 0x8}, @in6={0xa, 0x4e21, 0x401, @empty, 0x81}], 0xac) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020605000000860000000000000300000205000400010000000500010007000000140007800800060000000002080013400000000646060000000000000d000300686173683a6e6574000000000900020073797a3000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) 105.363612ms ago: executing program 8 (id=749): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070100000400000085000000aa003700bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x5ddb343c6bddcfb5, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 8 (id=750): r0 = socket(0x10, 0x3, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000017c0)=""/4096) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0) r4 = openat(r3, &(0x7f00000000c0)='./file0/file0\x00', 0x42, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000180)=""/49, 0x31) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff5e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000016c0), 0x87}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r7, 0x300f000, 0xe, 0x0, &(0x7f0000001780)="0049c69d2786a4b8d3dce769c270", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRESHEX=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x6) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000740)=r8, 0x4) sendmsg$inet(r10, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20000000) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0xa) getdents64(r11, &(0x7f0000000200)=""/49, 0x31) renameat2(r11, &(0x7f0000000240)='./file1\x00', r3, &(0x7f0000000280)='./file1\x00', 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000bc0)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x5, 0x4, 0x3, 0x2, 0x10001, 0xa}}, {0x4}}]}, @qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000954}, 0x8840) kernel console output (not intermixed with test programs): batadv0: Removing interface: batadv_slave_0 [ 66.726315][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.726324][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.740386][ T5943] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 66.748732][ T5957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.280'. [ 66.798148][ T5964] loop5: detected capacity change from 0 to 512 [ 66.808912][ T5964] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 66.808933][ T5964] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 66.816991][ T5964] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.283: bg 0: block 104: invalid block bitmap [ 66.817013][ T5964] loop5: lost filesystem error report for type 5 error -117 [ 66.817191][ T5964] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 66.817204][ T5964] loop5: lost filesystem error report for type 5 error -117 [ 66.817962][ T5964] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.283: invalid indirect mapped block 1 (level 1) [ 66.817981][ T5964] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 66.825129][ T5971] loop2: detected capacity change from 0 to 128 [ 66.830943][ T5971] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 66.831148][ C0] EXT4-fs (loop5): error count since last fsck: 3 [ 66.831162][ C0] EXT4-fs (loop5): initial error at time 66: ext4_validate_block_bitmap:436 [ 66.831179][ C0] EXT4-fs (loop5): last error at time 66: ext4_free_branches:1023: inode 11 [ 66.834297][ T5971] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 66.845687][ T5964] EXT4-fs (loop5): 1 truncate cleaned up [ 66.846146][ T5964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.851950][ T5971] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 67.750388][ T4712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.750955][ T4712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.751218][ T4712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.751537][ T4712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.751750][ T4712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.769714][ T4721] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.832948][ T5983] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.846777][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.886818][ T4714] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.906300][ T1291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.922490][ T5995] binder: 5994:5995 tried to acquire reference to desc 0, got 1 instead [ 67.927965][ T5995] binder: 5994:5995 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 67.927980][ T5995] binder: 5995 RLIMIT_NICE not set [ 67.928043][ T5995] binder: 5995 RLIMIT_NICE not set [ 67.928232][ T5995] binder: 5995 RLIMIT_NICE not set [ 67.928263][ T5995] binder_alloc: 5994: binder_alloc_buf, no vma [ 67.928286][ T5995] binder: cannot allocate buffer: vma cleared, target dead or dying [ 67.928304][ T5995] binder: 5994:5995 transaction reply to 5994:5995 failed 6/29189/-3, code 0 size 0-0 line 3409 [ 67.928324][ T5995] binder: send failed reply for transaction 5 to 5994:5995 [ 67.928955][ T4800] binder: undelivered TRANSACTION_COMPLETE [ 67.928968][ T4800] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.953359][ T4800] binder: undelivered TRANSACTION_ERROR: 29190 [ 67.988779][ T1291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.060253][ T6006] process 'syz.2.289' launched './file2' with NULL argv: empty string added [ 68.280134][ T6012] FAULT_INJECTION: forcing a failure. [ 68.280134][ T6012] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 68.280156][ T6012] CPU: 1 UID: 0 PID: 6012 Comm: syz.5.292 Not tainted syzkaller #0 PREEMPT [ 68.280166][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 68.280172][ T6012] Call trace: [ 68.280175][ T6012] show_stack+0x2c/0x3c (C) [ 68.280194][ T6012] __dump_stack+0x30/0x40 [ 68.280206][ T6012] dump_stack_lvl+0xd8/0x12c [ 68.280218][ T6012] dump_stack+0x1c/0x28 [ 68.280229][ T6012] should_fail_ex+0x418/0x58c [ 68.280238][ T6012] should_fail_alloc_page+0xec/0x10c [ 68.280247][ T6012] prepare_alloc_pages+0x194/0x484 [ 68.280256][ T6012] __alloc_frozen_pages_noprof+0x180/0x578 [ 68.280265][ T6012] alloc_pages_mpol+0x1fc/0x3d0 [ 68.280275][ T6012] folio_alloc_mpol_noprof+0x4c/0x248 [ 68.280285][ T6012] shmem_alloc_folio+0xa0/0x150 [ 68.280298][ T6012] shmem_alloc_and_add_folio+0x28c/0xb30 [ 68.280310][ T6012] shmem_get_folio_gfp+0x4d8/0x1378 [ 68.280322][ T6012] shmem_fault+0x15c/0x32c [ 68.280334][ T6012] __do_fault+0xf4/0x4a8 [ 68.280343][ T6012] do_pte_missing+0x1764/0x28bc [ 68.280351][ T6012] handle_mm_fault+0x14d0/0x2b58 [ 68.280364][ T6012] __get_user_pages+0x82c/0x13b0 [ 68.280373][ T6012] populate_vma_page_range+0x260/0x358 [ 68.280383][ T6012] __mm_populate+0x204/0x328 [ 68.280392][ T6012] vm_mmap_pgoff+0x358/0x46c [ 68.280401][ T6012] ksys_mmap_pgoff+0xd0/0x5b4 [ 68.280410][ T6012] __arm64_sys_mmap+0x110/0x12c [ 68.280422][ T6012] invoke_syscall+0x98/0x244 [ 68.280434][ T6012] el0_svc_common+0xec/0x23c [ 68.280446][ T6012] do_el0_svc+0x4c/0x5c [ 68.280457][ T6012] el0_svc+0x60/0x1d8 [ 68.280466][ T6012] el0t_64_sync_handler+0x44/0x104 [ 68.280474][ T6012] el0t_64_sync+0x198/0x19c [ 68.347873][ T1291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.436570][ T1291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.513896][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.513966][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.514064][ T5983] bridge_slave_0: entered allmulticast mode [ 68.546624][ T5983] bridge_slave_0: entered promiscuous mode [ 68.549567][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.549591][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.557248][ T5983] bridge_slave_1: entered allmulticast mode [ 68.559231][ T5983] bridge_slave_1: entered promiscuous mode [ 68.570464][ T4721] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.650143][ T4721] Bluetooth: hci6: command 0x0419 tx timeout [ 68.659699][ T4721] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.720242][ T5983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.721286][ T5983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.728355][ T5983] team0: Port device team_slave_0 added [ 68.729132][ T5983] team0: Port device team_slave_1 added [ 68.742905][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.742917][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.742932][ T5983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.757279][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.757291][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.757307][ T5983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.801048][ T1291] bridge_slave_1: left allmulticast mode [ 68.801068][ T1291] bridge_slave_1: left promiscuous mode [ 68.801137][ T1291] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.803256][ T1291] bridge_slave_0: left allmulticast mode [ 68.803269][ T1291] bridge_slave_0: left promiscuous mode [ 68.803337][ T1291] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.890898][ T1291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.904322][ T1291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.930552][ T1291] bond0 (unregistering): Released all slaves [ 68.935550][ T5983] hsr_slave_0: entered promiscuous mode [ 68.935918][ T5983] hsr_slave_1: entered promiscuous mode [ 68.936100][ T5983] debugfs: 'hsr0' already exists in 'hsr' [ 68.936110][ T5983] Cannot create hsr debugfs directory [ 69.007150][ T5983] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 69.009426][ T5983] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.010411][ T5983] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 69.012305][ T5983] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.012695][ T5983] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 69.014431][ T5983] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.014829][ T5983] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 69.017000][ T5983] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.062192][ T5983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.067214][ T5983] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.071143][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.071172][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.080852][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.080898][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.132314][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4 [ 69.290801][ T4399] 8021q: adding VLAN 0 to HW filter on device eth6 [ 69.298897][ T5983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.417955][ T1291] hsr_slave_0: left promiscuous mode [ 69.418529][ T1291] hsr_slave_1: left promiscuous mode [ 69.418804][ T1291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.418814][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.419112][ T1291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.419121][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.427021][ T1291] veth1_macvtap: left promiscuous mode [ 69.427054][ T1291] veth0_macvtap: left promiscuous mode [ 69.427096][ T1291] veth1_vlan: left promiscuous mode [ 69.427127][ T1291] veth0_vlan: left promiscuous mode [ 69.536680][ T1291] team0 (unregistering): Port device team_slave_1 removed [ 69.543570][ T1291] team0 (unregistering): Port device team_slave_0 removed [ 69.588432][ T4399] 8021q: adding VLAN 0 to HW filter on device eth5 [ 69.589320][ T5983] veth0_vlan: entered promiscuous mode [ 69.599598][ T5983] veth1_vlan: entered promiscuous mode [ 69.608416][ T5983] veth0_macvtap: entered promiscuous mode [ 69.611096][ T5983] veth1_macvtap: entered promiscuous mode [ 69.615468][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.618358][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.666701][ T1471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.666715][ T1471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.670314][ T1386] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.670673][ T1386] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.670781][ T1386] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.670809][ T1386] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.687454][ T1386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.687468][ T1386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.760104][ T4399] 8021q: adding VLAN 0 to HW filter on device eth7 [ 69.769971][ T4721] Bluetooth: hci1: command tx timeout [ 69.783914][ T1291] IPVS: stop unused estimator thread 0... [ 69.800422][ T6106] could not allocate digest TFM handle sha384-avx2 [ 69.859947][ T4721] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.649705][ T4721] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.730215][ T4712] Bluetooth: hci6: command 0x0419 tx timeout [ 70.730267][ T4721] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.859727][ T4721] Bluetooth: hci1: command tx timeout [ 71.939662][ T4721] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.729802][ T4721] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.809754][ T4721] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.809765][ T4712] Bluetooth: hci6: command 0x0419 tx timeout [ 73.929672][ T4712] Bluetooth: hci1: command tx timeout [ 74.889638][ T4712] Bluetooth: hci6: command 0x0419 tx timeout [ 76.010898][ T4712] Bluetooth: hci1: command tx timeout [ 109.452130][ T6250] ip_tables: iptables: counters copy to user failed while replacing table [ 109.538883][ T6264] __nla_validate_parse: 2 callbacks suppressed [ 109.538900][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.299'. [ 109.538920][ T6264] netlink: 'syz.6.299': attribute type 10 has an invalid length. [ 109.538930][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.6.299'. [ 109.547333][ T6258] loop5: detected capacity change from 0 to 512 [ 109.549678][ T6259] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20000 [ 109.552827][ T6259] netlink: 'syz.1.295': attribute type 1 has an invalid length. [ 109.553062][ T6258] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 109.553077][ T6258] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 109.554792][ T6264] geneve2: entered promiscuous mode [ 109.554806][ T6264] geneve2: entered allmulticast mode [ 109.573001][ T6258] EXT4-fs (loop5): 1 truncate cleaned up [ 109.577765][ T6258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.590865][ T6258] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6542: inode #12: comm syz.5.298: bad extra_isize 62 (inode size 256) [ 109.592184][ T6259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.592948][ T6258] EXT4-fs (loop5): Remounting filesystem read-only [ 109.850481][ T6259] netlink: 'syz.1.295': attribute type 1 has an invalid length. [ 109.850497][ T6259] netlink: 228 bytes leftover after parsing attributes in process `syz.1.295'. [ 109.921809][ T6271] futex_wake_op: syz.1.300 tries to shift op by -1; fix this program [ 109.923513][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 109.923525][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 109.923541][ T6271] netlink: 'syz.1.300': attribute type 18 has an invalid length. [ 109.979090][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.058539][ T6280] loop5: detected capacity change from 0 to 8192 [ 110.446590][ T6286] tipc: Started in network mode [ 110.446613][ T6286] tipc: Node identity ac1414aa, cluster identity 4711 [ 110.447134][ T6286] tipc: New replicast peer: 172.20.20.187 [ 110.448299][ T6286] tipc: Enabled bearer , priority 10 [ 111.137906][ T6295] input: syz0 as /devices/virtual/input/input2 [ 111.328367][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.6.309'. [ 111.328394][ T6304] netlink: 'syz.6.309': attribute type 10 has an invalid length. [ 111.328474][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.6.309'. [ 111.330890][ T6304] geneve2: entered allmulticast mode [ 111.350318][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 111.350336][ T6306] netlink: 'syz.2.310': attribute type 10 has an invalid length. [ 111.350345][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.310'. [ 111.352972][ T6306] geneve2: entered allmulticast mode [ 111.377685][ T6308] loop6: detected capacity change from 0 to 512 [ 111.396668][ T6308] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.411824][ T6308] EXT4-fs error (device loop6): ext4_validate_block_bitmap:427: comm syz.6.311: bg 0: bad block bitmap checksum [ 111.446637][ T6312] loop2: detected capacity change from 0 to 1024 [ 111.466492][ T5983] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.467502][ T6312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.480487][ T6312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.522581][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 111.524787][ T6317] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 111.562929][ T24] tipc: Node number set to 2886997162 [ 111.621221][ T6327] loop2: detected capacity change from 0 to 256 [ 112.034901][ T30] audit: type=1326 audit(112.010:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6335 comm="syz.1.319" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a379e28 code=0x7ffc0000 [ 112.035829][ T30] audit: type=1326 audit(112.010:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6335 comm="syz.1.319" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a379e28 code=0x7ffc0000 [ 112.036857][ T30] audit: type=1326 audit(112.010:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6335 comm="syz.1.319" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8a379e28 code=0x7ffc0000 [ 112.037005][ T30] audit: type=1326 audit(112.010:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6335 comm="syz.1.319" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a379e28 code=0x7ffc0000 [ 112.037082][ T30] audit: type=1326 audit(112.010:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6335 comm="syz.1.319" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a379e28 code=0x7ffc0000 [ 112.037246][ T30] audit: type=1326 audit(112.010:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6335 comm="syz.1.319" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8a379e28 code=0x7ffc0000 [ 112.039000][ T30] audit: type=1326 audit(112.010:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6335 comm="syz.1.319" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a379e28 code=0x7ffc0000 [ 112.039150][ T6334] loop5: detected capacity change from 0 to 2048 [ 112.039734][ T30] audit: type=1326 audit(112.010:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6335 comm="syz.1.319" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8a379e28 code=0x7ffc0000 [ 112.073543][ T6334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.088749][ T30] audit: type=1326 audit(112.060:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6335 comm="syz.1.319" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a379e28 code=0x7ffc0000 [ 112.089478][ T30] audit: type=1326 audit(112.060:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6335 comm="syz.1.319" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a379e28 code=0x7ffc0000 [ 112.090768][ T6334] overlayfs: missing 'lowerdir' [ 112.110759][ T6336] input: syz0 as /devices/virtual/input/input3 [ 112.110848][ T6336] input: failed to attach handler leds to device input3, error: -6 [ 112.113923][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.295497][ T6359] netlink: 'syz.2.325': attribute type 1 has an invalid length. [ 112.302594][ T6359] loop2: detected capacity change from 0 to 512 [ 112.304511][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.304699][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.323376][ T6359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.323955][ T6354] loop5: detected capacity change from 0 to 4096 [ 112.324263][ T6354] ext4: Unknown parameter 'appraise_type' [ 112.344850][ T6359] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: comm syz.2.325: invalid size [ 112.431269][ T6366] Trying to write to read-only block-device nullb0 [ 113.087005][ T6399] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 113.224797][ T6401] loop1: detected capacity change from 0 to 4096 [ 113.226688][ T6401] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.226700][ T6401] EXT4-fs (loop1): Test dummy encryption mode enabled [ 113.238083][ T6401] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec0a8, mo2=0002] [ 113.238123][ T6401] System zones: 0-5 [ 113.244339][ T6401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.258644][ T6406] tap0: tun_chr_ioctl cmd 2147767521 [ 113.273083][ T6401] netlink: 'syz.1.332': attribute type 1 has an invalid length. [ 113.475584][ T6412] loop3: detected capacity change from 0 to 8192 [ 113.558043][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.622902][ T6419] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.632796][ T6419] syz.2.337 (pid 6419) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 113.655608][ T4714] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.700918][ T6424] FAULT_INJECTION: forcing a failure. [ 113.700918][ T6424] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 113.700940][ T6424] CPU: 1 UID: 0 PID: 6424 Comm: syz.2.340 Not tainted syzkaller #0 PREEMPT [ 113.700951][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 113.700957][ T6424] Call trace: [ 113.700960][ T6424] show_stack+0x2c/0x3c (C) [ 113.700979][ T6424] __dump_stack+0x30/0x40 [ 113.700991][ T6424] dump_stack_lvl+0xd8/0x12c [ 113.701003][ T6424] dump_stack+0x1c/0x28 [ 113.701014][ T6424] should_fail_ex+0x418/0x58c [ 113.701023][ T6424] should_fail_alloc_page+0xec/0x10c [ 113.701032][ T6424] prepare_alloc_pages+0x194/0x484 [ 113.701042][ T6424] __alloc_frozen_pages_noprof+0x180/0x578 [ 113.701051][ T6424] alloc_pages_mpol+0x1fc/0x3d0 [ 113.701061][ T6424] folio_alloc_mpol_noprof+0x4c/0x248 [ 113.701071][ T6424] shmem_alloc_folio+0xa0/0x150 [ 113.701084][ T6424] shmem_alloc_and_add_folio+0x28c/0xb30 [ 113.701096][ T6424] shmem_get_folio_gfp+0x4d8/0x1378 [ 113.701108][ T6424] shmem_fault+0x15c/0x32c [ 113.701120][ T6424] __do_fault+0xf4/0x4a8 [ 113.701128][ T6424] do_pte_missing+0x1764/0x28bc [ 113.701136][ T6424] handle_mm_fault+0x14d0/0x2b58 [ 113.701149][ T6424] __get_user_pages+0x82c/0x13b0 [ 113.701158][ T6424] populate_vma_page_range+0x260/0x358 [ 113.701168][ T6424] __mm_populate+0x204/0x328 [ 113.701177][ T6424] vm_mmap_pgoff+0x358/0x46c [ 113.701186][ T6424] ksys_mmap_pgoff+0xd0/0x5b4 [ 113.701195][ T6424] __arm64_sys_mmap+0x110/0x12c [ 113.701207][ T6424] invoke_syscall+0x98/0x244 [ 113.701219][ T6424] el0_svc_common+0xec/0x23c [ 113.701231][ T6424] do_el0_svc+0x4c/0x5c [ 113.701242][ T6424] el0_svc+0x60/0x1d8 [ 113.701251][ T6424] el0t_64_sync_handler+0x44/0x104 [ 113.701259][ T6424] el0t_64_sync+0x198/0x19c [ 113.781879][ T6426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 113.786164][ T6426] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #12: comm syz.5.341: corrupted in-inode xattr: e_value size too large [ 113.806617][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 114.113867][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.573811][ T6443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.576007][ T6443] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 114.577206][ T6443] EXT4-fs (loop2): Remounting filesystem read-only [ 114.577380][ T6443] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.580338][ T6451] set_capacity_and_notify: 3 callbacks suppressed [ 114.580347][ T6451] loop3: detected capacity change from 0 to 256 [ 114.580705][ T6451] vfat: Unknown parameter 'non' [ 114.611457][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.669723][ T6451] loop3: detected capacity change from 0 to 128 [ 114.681833][ T6451] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.980030][ T6469] IPVS: length: 173 != 24 [ 114.982473][ T6469] FAULT_INJECTION: forcing a failure. [ 114.982473][ T6469] name failslab, interval 1, probability 0, space 0, times 0 [ 114.982488][ T6469] CPU: 0 UID: 0 PID: 6469 Comm: syz.5.352 Not tainted syzkaller #0 PREEMPT [ 114.982499][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 114.982504][ T6469] Call trace: [ 114.982507][ T6469] show_stack+0x2c/0x3c (C) [ 114.982529][ T6469] __dump_stack+0x30/0x40 [ 114.982541][ T6469] dump_stack_lvl+0xd8/0x12c [ 114.982552][ T6469] dump_stack+0x1c/0x28 [ 114.982564][ T6469] should_fail_ex+0x418/0x58c [ 114.982573][ T6469] should_failslab+0xc4/0x120 [ 114.982582][ T6469] kmem_cache_alloc_noprof+0x94/0x5d4 [ 114.982591][ T6469] __kernfs_new_node+0xf0/0x7d8 [ 114.982602][ T6469] kernfs_new_node+0xe8/0x130 [ 114.982613][ T6469] __kernfs_create_file+0x60/0x2e0 [ 114.982624][ T6469] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 114.982636][ T6469] internal_create_group+0x550/0xb30 [ 114.982650][ T6469] internal_create_groups+0x64/0x138 [ 114.982658][ T6469] sysfs_create_groups+0x2c/0x3c [ 114.982666][ T6469] device_add_attrs+0x17c/0x4e4 [ 114.982677][ T6469] device_add+0x420/0x9e0 [ 114.982687][ T6469] netdev_register_kobject+0x184/0x328 [ 114.982700][ T6469] register_netdevice+0xd74/0x14c0 [ 114.982710][ T6469] tun_set_iff+0x628/0xc0c [ 114.982721][ T6469] __tun_chr_ioctl+0x6f4/0x18f4 [ 114.982731][ T6469] tun_chr_ioctl+0x38/0x4c [ 114.982741][ T6469] __arm64_sys_ioctl+0x154/0x1cc [ 114.982750][ T6469] invoke_syscall+0x98/0x244 [ 114.982762][ T6469] el0_svc_common+0xec/0x23c [ 114.982773][ T6469] do_el0_svc+0x4c/0x5c [ 114.982785][ T6469] el0_svc+0x60/0x1d8 [ 114.982793][ T6469] el0t_64_sync_handler+0x44/0x104 [ 114.982801][ T6469] el0t_64_sync+0x198/0x19c [ 115.114597][ T6480] FAULT_INJECTION: forcing a failure. [ 115.114597][ T6480] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 115.114621][ T6480] CPU: 1 UID: 0 PID: 6480 Comm: syz.1.355 Not tainted syzkaller #0 PREEMPT [ 115.114632][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 115.114637][ T6480] Call trace: [ 115.114640][ T6480] show_stack+0x2c/0x3c (C) [ 115.114665][ T6480] __dump_stack+0x30/0x40 [ 115.114678][ T6480] dump_stack_lvl+0xd8/0x12c [ 115.114690][ T6480] dump_stack+0x1c/0x28 [ 115.114702][ T6480] should_fail_ex+0x418/0x58c [ 115.114711][ T6480] should_fail_alloc_page+0xec/0x10c [ 115.114720][ T6480] prepare_alloc_pages+0x194/0x484 [ 115.114730][ T6480] __alloc_frozen_pages_noprof+0x180/0x578 [ 115.114739][ T6480] alloc_pages_mpol+0x1fc/0x3d0 [ 115.114749][ T6480] folio_alloc_mpol_noprof+0x4c/0x248 [ 115.114759][ T6480] shmem_alloc_folio+0xa0/0x150 [ 115.114772][ T6480] shmem_alloc_and_add_folio+0x28c/0xb30 [ 115.114784][ T6480] shmem_get_folio_gfp+0x4d8/0x1378 [ 115.114796][ T6480] shmem_fault+0x15c/0x32c [ 115.114808][ T6480] __do_fault+0xf4/0x4a8 [ 115.114816][ T6480] do_pte_missing+0x1764/0x28bc [ 115.114825][ T6480] handle_mm_fault+0x14d0/0x2b58 [ 115.114837][ T6480] __get_user_pages+0x82c/0x13b0 [ 115.114847][ T6480] populate_vma_page_range+0x260/0x358 [ 115.114856][ T6480] __mm_populate+0x204/0x328 [ 115.114865][ T6480] vm_mmap_pgoff+0x358/0x46c [ 115.114874][ T6480] ksys_mmap_pgoff+0xd0/0x5b4 [ 115.114884][ T6480] __arm64_sys_mmap+0x110/0x12c [ 115.114895][ T6480] invoke_syscall+0x98/0x244 [ 115.114908][ T6480] el0_svc_common+0xec/0x23c [ 115.114920][ T6480] do_el0_svc+0x4c/0x5c [ 115.114931][ T6480] el0_svc+0x60/0x1d8 [ 115.114940][ T6480] el0t_64_sync_handler+0x44/0x104 [ 115.114948][ T6480] el0t_64_sync+0x198/0x19c [ 115.303248][ T6494] loop6: detected capacity change from 0 to 8192 [ 115.331193][ T6494] binder: 6493:6494 ioctl 40046205 0 returned -22 [ 115.331798][ T6494] binder: 6493:6494 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 115.331815][ T6494] binder: 6494 RLIMIT_NICE not set [ 115.528637][ T4708] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.564042][ T6500] gadgetfs: bound to dummy_udc driver [ 115.588527][ T6501] loop3: detected capacity change from 0 to 512 [ 115.602287][ T6501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.617401][ T6515] loop6: detected capacity change from 0 to 256 [ 115.622508][ T6514] loop2: detected capacity change from 0 to 512 [ 115.623852][ T6515] vfat: Unknown parameter 'shortnáme' [ 115.632327][ T6514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.637459][ T6514] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.365: corrupted xattr block 33: invalid header [ 115.643996][ T6514] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.365: corrupted xattr block 33: invalid header [ 115.645026][ T6514] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.365: corrupted xattr block 33: invalid header [ 115.679461][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.697321][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.717522][ T6520] loop6: detected capacity change from 0 to 512 [ 115.764599][ T6530] fuse: Bad value for 'fd' [ 115.817086][ T6533] loop3: detected capacity change from 0 to 256 [ 115.908560][ T6543] __nla_validate_parse: 4 callbacks suppressed [ 115.908574][ T6543] netlink: 27 bytes leftover after parsing attributes in process `syz.2.373'. [ 116.328130][ T6557] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 116.430154][ T6562] Illegal XDP return value 1048578 on prog (id 33) dev syz_tun, expect packet loss! [ 116.852328][ T6583] loop6: detected capacity change from 0 to 256 [ 116.857435][ T6583] vfat: Unknown parameter 'shortnî6›SZÀ‰8Ôame' [ 116.881533][ T6583] FAULT_INJECTION: forcing a failure. [ 116.881533][ T6583] name failslab, interval 1, probability 0, space 0, times 0 [ 116.881552][ T6583] CPU: 0 UID: 0 PID: 6583 Comm: syz.6.383 Tainted: G L syzkaller #0 PREEMPT [ 116.881565][ T6583] Tainted: [L]=SOFTLOCKUP [ 116.881568][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 116.881574][ T6583] Call trace: [ 116.881576][ T6583] show_stack+0x2c/0x3c (C) [ 116.881598][ T6583] __dump_stack+0x30/0x40 [ 116.881610][ T6583] dump_stack_lvl+0xd8/0x12c [ 116.881622][ T6583] dump_stack+0x1c/0x28 [ 116.881633][ T6583] should_fail_ex+0x418/0x58c [ 116.881647][ T6583] should_failslab+0xc4/0x120 [ 116.881655][ T6583] kmem_cache_alloc_node_noprof+0x98/0x604 [ 116.881665][ T6583] alloc_io_context+0x34/0x250 [ 116.881677][ T6583] set_task_ioprio+0x44c/0x580 [ 116.881688][ T6583] __arm64_sys_ioprio_set+0x6f8/0x920 [ 116.881697][ T6583] invoke_syscall+0x98/0x244 [ 116.881709][ T6583] el0_svc_common+0xec/0x23c [ 116.881724][ T6583] do_el0_svc+0x4c/0x5c [ 116.881736][ T6583] el0_svc+0x60/0x1d8 [ 116.881744][ T6583] el0t_64_sync_handler+0x44/0x104 [ 116.881753][ T6583] el0t_64_sync+0x198/0x19c [ 117.004653][ T6589] netlink: 48 bytes leftover after parsing attributes in process `syz.5.386'. [ 117.198573][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.389'. [ 117.633323][ T6612] loop6: detected capacity change from 0 to 512 [ 117.636256][ T6612] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 117.642269][ T6612] EXT4-fs (loop6): 1 truncate cleaned up [ 117.645241][ T6612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.792616][ T6611] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.392: bad entry in directory: directory entry overrun - offset=92, inode=1, rec_len=1024, size=1024 fake=0 [ 117.797314][ T6611] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.392: bad entry in directory: directory entry overrun - offset=92, inode=1, rec_len=1024, size=1024 fake=0 [ 117.798019][ T6611] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.392: bad entry in directory: directory entry overrun - offset=92, inode=1, rec_len=1024, size=1024 fake=0 [ 117.799142][ T6611] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.392: bad entry in directory: directory entry overrun - offset=92, inode=1, rec_len=1024, size=1024 fake=0 [ 117.812320][ T6611] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.392: bad entry in directory: directory entry overrun - offset=92, inode=1, rec_len=1024, size=1024 fake=0 [ 117.815450][ T6611] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.392: bad entry in directory: directory entry overrun - offset=92, inode=1, rec_len=1024, size=1024 fake=0 [ 117.816081][ T6611] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.392: bad entry in directory: directory entry overrun - offset=92, inode=1, rec_len=1024, size=1024 fake=0 [ 117.816675][ T6611] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.392: bad entry in directory: directory entry overrun - offset=92, inode=1, rec_len=1024, size=1024 fake=0 [ 117.817649][ T6611] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.392: bad entry in directory: directory entry overrun - offset=92, inode=1, rec_len=1024, size=1024 fake=0 [ 117.818200][ T6611] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.392: bad entry in directory: directory entry overrun - offset=92, inode=1, rec_len=1024, size=1024 fake=0 [ 117.892385][ T5983] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.930515][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.930546][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.523303][ T6630] loop3: detected capacity change from 0 to 1024 [ 164.537727][ T6630] loop3: detected capacity change from 0 to 1024 [ 164.586041][ T6631] loop6: detected capacity change from 0 to 2048 [ 164.586386][ T6631] EXT4-fs: Ignoring removed i_version option [ 164.598647][ T6630] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 164.613536][ T6630] JBD2: no valid journal superblock found [ 164.616350][ T6630] EXT4-fs (loop3): Could not load journal inode [ 164.824839][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 164.824861][ T6638] macvlan0: entered promiscuous mode [ 164.831804][ T6631] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.838934][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.6.393'. [ 164.918311][ T5983] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.107200][ T6648] input: syz0 as /devices/virtual/input/input4 [ 165.665099][ T6652] Bluetooth: MGMT ver 1.23 [ 165.688274][ T6657] loop3: detected capacity change from 0 to 1024 [ 165.909014][ T6661] input: syz0 as /devices/virtual/input/input5 [ 165.911264][ T6660] input: syz0 as /devices/virtual/input/input6 [ 165.928317][ T6657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 166.033335][ T6671] loop2: detected capacity change from 0 to 512 [ 166.033744][ T6671] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 166.469556][ T6680] loop1: detected capacity change from 0 to 256 [ 166.519591][ T6680] overlayfs: failed to resolve './bus': -2 [ 166.564268][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 166.578476][ T6684] loop5: detected capacity change from 0 to 256 [ 166.578941][ T6683] loop6: detected capacity change from 0 to 128 [ 166.585068][ T6683] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.585236][ T6684] FAT-fs (loop5): IO charset macromü”h8 Â?¹Ü¡–Í·ô<ë¹Á:‹7 [ 166.585236][ T6684] !’ØyP=ÈÆ÷üÄ'‡£oÉÕÈ not found [ 166.597785][ T6683] netlink: 60 bytes leftover after parsing attributes in process `syz.6.406'. [ 166.651881][ T6689] loop5: detected capacity change from 0 to 1024 [ 166.662073][ T6689] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 166.663650][ T6689] JBD2: no valid journal superblock found [ 166.663859][ T6689] EXT4-fs (loop5): Could not load journal inode [ 166.815779][ T6691] input: syz0 as /devices/virtual/input/input7 [ 167.307506][ T5983] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.433060][ T6702] loop1: detected capacity change from 0 to 512 [ 167.433808][ T6702] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 167.433817][ T6702] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 167.623769][ T6705] input: syz0 as /devices/virtual/input/input8 [ 167.718558][ T6702] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.412: bg 0: block 104: invalid block bitmap [ 167.718586][ T6702] loop1: lost filesystem error report for type 5 error -117 [ 167.718784][ T6702] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 167.718795][ T6702] loop1: lost filesystem error report for type 5 error -117 [ 167.719638][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 167.719656][ C1] EXT4-fs (loop1): initial error at time 167: ext4_validate_block_bitmap:436 [ 167.719672][ C1] EXT4-fs (loop1): last error at time 167: ext4_mb_clear_bb:6680 [ 167.734656][ T6702] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.412: invalid indirect mapped block 1 (level 1) [ 167.734677][ T6702] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 167.737250][ T6702] EXT4-fs (loop1): 1 truncate cleaned up [ 167.738943][ T6702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.772754][ T6702] overlayfs: missing 'lowerdir' [ 167.793636][ T6709] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 167.793646][ T6709] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 167.794965][ T6709] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.413: bg 0: block 104: invalid block bitmap [ 167.794981][ T6709] loop5: lost filesystem error report for type 5 error -117 [ 167.795109][ T6709] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 167.795119][ T6709] loop5: lost filesystem error report for type 5 error -117 [ 167.795328][ T6709] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.413: invalid indirect mapped block 1 (level 1) [ 167.795342][ T6709] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 167.795579][ T6709] EXT4-fs (loop5): 1 truncate cleaned up [ 167.796026][ T6709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.860419][ T6719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.864397][ T6719] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.416: corrupted xattr block 33: invalid header [ 168.864690][ T6719] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.416: corrupted xattr block 33: invalid header [ 168.864865][ T6719] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.416: corrupted xattr block 33: invalid header [ 168.870148][ T6719] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 168.957945][ T6730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.031352][ T6734] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 169.033208][ T6733] pim6reg: entered allmulticast mode [ 169.084402][ T6734] syz.6.419: attempt to access beyond end of device [ 169.084402][ T6734] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 169.084444][ T6734] Buffer I/O error on dev loop6, logical block 57847, async page read [ 169.088526][ T6734] syz.6.419: attempt to access beyond end of device [ 169.088526][ T6734] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 169.088548][ T6734] Buffer I/O error on dev loop6, logical block 57847, async page read [ 169.088572][ T6734] syz.6.419: attempt to access beyond end of device [ 169.088572][ T6734] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 169.088584][ T6734] Buffer I/O error on dev loop6, logical block 57847, async page read [ 169.088604][ T6734] syz.6.419: attempt to access beyond end of device [ 169.088604][ T6734] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 169.088614][ T6734] Buffer I/O error on dev loop6, logical block 57847, async page read [ 169.088632][ T6734] syz.6.419: attempt to access beyond end of device [ 169.088632][ T6734] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 169.088647][ T6734] Buffer I/O error on dev loop6, logical block 57847, async page read [ 169.088665][ T6734] syz.6.419: attempt to access beyond end of device [ 169.088665][ T6734] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 169.088675][ T6734] Buffer I/O error on dev loop6, logical block 57847, async page read [ 169.088694][ T6734] syz.6.419: attempt to access beyond end of device [ 169.088694][ T6734] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 169.088703][ T6734] Buffer I/O error on dev loop6, logical block 57847, async page read [ 169.088720][ T6734] syz.6.419: attempt to access beyond end of device [ 169.088720][ T6734] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 169.088729][ T6734] Buffer I/O error on dev loop6, logical block 57847, async page read [ 169.088745][ T6734] syz.6.419: attempt to access beyond end of device [ 169.088745][ T6734] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 169.088754][ T6734] Buffer I/O error on dev loop6, logical block 57847, async page read [ 169.088769][ T6734] syz.6.419: attempt to access beyond end of device [ 169.088769][ T6734] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 169.088778][ T6734] Buffer I/O error on dev loop6, logical block 57847, async page read [ 169.110336][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.148580][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.153093][ T6733] warning: `syz.6.419' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 169.254774][ T6741] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.284348][ T6741] netlink: 60 bytes leftover after parsing attributes in process `syz.5.421'. [ 169.335838][ T5693] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.402733][ T6749] FAT-fs (loop3): IO charset macromü”h8 Â?¹Ü¡–Í·ô<ë¹Á:‹7 [ 169.402733][ T6749] !’ØyP=ÈÆ÷üÄ'‡£oÉÕÈ not found [ 169.613606][ T6759] set_capacity_and_notify: 5 callbacks suppressed [ 169.613620][ T6759] loop5: detected capacity change from 0 to 512 [ 169.637153][ T6759] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.654612][ T6759] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 169.657659][ T6759] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.426: bg 0: block 248: padding at end of block bitmap is not set [ 169.657687][ T6759] loop5: lost filesystem error report for type 5 error -117 [ 169.658714][ T6759] __quota_error: 48 callbacks suppressed [ 169.658725][ T6759] Quota error (device loop5): write_blk: dquota write failed [ 169.658758][ T6759] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 169.658780][ T6759] EXT4-fs error (device loop5): ext4_acquire_dquot:7070: comm syz.5.426: Failed to acquire dquot type 1 [ 169.658791][ T6759] loop5: lost filesystem error report for type 5 error -28 [ 169.659662][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 169.659680][ C1] EXT4-fs (loop5): last error at time 169: ext4_acquire_dquot:7070 [ 169.665865][ T6759] EXT4-fs (loop5): 1 truncate cleaned up [ 169.666336][ T6759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 169.718929][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 169.768459][ T6763] bpf: Bad value for 'uid' [ 169.961778][ T6768] loop6: detected capacity change from 0 to 8192 [ 170.066635][ T6776] loop6: detected capacity change from 0 to 512 [ 170.097749][ T6776] EXT4-fs (loop6): orphan cleanup on readonly fs [ 170.101819][ T6776] EXT4-fs error (device loop6): ext4_xattr_inode_iget:473: comm syz.6.431: EA inode 11 has unexpected i_nlink=2 ref_count=0 [ 170.101837][ T6776] loop6: lost filesystem error report for type 5 error -117 [ 170.108090][ T6776] EXT4-fs (loop6): 1 orphan inode deleted [ 170.108512][ T6776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 170.123914][ T6779] loop5: detected capacity change from 0 to 512 [ 170.133842][ T6779] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 170.133859][ T6779] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 170.135218][ T6779] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.432: bg 0: block 104: invalid block bitmap [ 170.135235][ T6779] loop5: lost filesystem error report for type 5 error -117 [ 170.135355][ T6779] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 170.135364][ T6779] loop5: lost filesystem error report for type 5 error -117 [ 170.135489][ T6779] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.432: invalid indirect mapped block 1 (level 1) [ 170.135502][ T6779] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 170.135919][ T6779] EXT4-fs (loop5): 1 truncate cleaned up [ 170.136347][ T6779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.195266][ T6785] loop2: detected capacity change from 0 to 512 [ 170.205569][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.218522][ T6785] EXT4-fs (loop2): 1 truncate cleaned up [ 170.218936][ T6785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.271490][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.321007][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 170.321033][ T6793] netlink: 'syz.2.437': attribute type 10 has an invalid length. [ 170.321043][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.437'. [ 170.395025][ T5983] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.537852][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.563951][ T6814] lo speed is unknown, defaulting to 1000 [ 170.563984][ T6814] lo speed is unknown, defaulting to 1000 [ 170.564482][ T6814] FAULT_INJECTION: forcing a failure. [ 170.564482][ T6814] name failslab, interval 1, probability 0, space 0, times 0 [ 170.564501][ T6814] CPU: 0 UID: 0 PID: 6814 Comm: syz.3.443 Tainted: G L syzkaller #0 PREEMPT [ 170.564514][ T6814] Tainted: [L]=SOFTLOCKUP [ 170.564517][ T6814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 170.564522][ T6814] Call trace: [ 170.564524][ T6814] show_stack+0x2c/0x3c (C) [ 170.564544][ T6814] __dump_stack+0x30/0x40 [ 170.564555][ T6814] dump_stack_lvl+0xd8/0x12c [ 170.564565][ T6814] dump_stack+0x1c/0x28 [ 170.564574][ T6814] should_fail_ex+0x418/0x58c [ 170.564583][ T6814] should_failslab+0xc4/0x120 [ 170.564591][ T6814] kmem_cache_alloc_noprof+0x94/0x5d4 [ 170.564599][ T6814] __kernfs_new_node+0xf0/0x7d8 [ 170.564609][ T6814] kernfs_new_node+0xe8/0x130 [ 170.564617][ T6814] __kernfs_create_file+0x60/0x2e0 [ 170.564627][ T6814] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 170.564647][ T6814] internal_create_group+0x550/0xb30 [ 170.564655][ T6814] internal_create_groups+0x64/0x138 [ 170.564662][ T6814] sysfs_create_groups+0x2c/0x3c [ 170.564669][ T6814] device_add_attrs+0x17c/0x4e4 [ 170.564679][ T6814] device_add+0x420/0x9e0 [ 170.564687][ T6814] ib_register_device+0x73c/0x9e4 [ 170.564697][ T6814] siw_newlink+0x74c/0xbe0 [ 170.564708][ T6814] nldev_newlink+0x47c/0x4f4 [ 170.564715][ T6814] rdma_nl_rcv+0x4f0/0x814 [ 170.564724][ T6814] netlink_unicast+0x600/0x7f8 [ 170.564734][ T6814] netlink_sendmsg+0x648/0x948 [ 170.564744][ T6814] __sock_sendmsg+0xc8/0x17c [ 170.564753][ T6814] ____sys_sendmsg+0x3d0/0x6c8 [ 170.564763][ T6814] ___sys_sendmsg+0x198/0x224 [ 170.564772][ T6814] __sys_sendmsg+0x158/0x204 [ 170.564782][ T6814] __arm64_sys_sendmsg+0x88/0x9c [ 170.564791][ T6814] invoke_syscall+0x98/0x244 [ 170.564801][ T6814] el0_svc_common+0xec/0x23c [ 170.564811][ T6814] do_el0_svc+0x4c/0x5c [ 170.564820][ T6814] el0_svc+0x60/0x1d8 [ 170.564828][ T6814] el0t_64_sync_handler+0x44/0x104 [ 170.564835][ T6814] el0t_64_sync+0x198/0x19c [ 170.565918][ T6814] siw: device registration error -12 [ 170.566158][ T6814] lo speed is unknown, defaulting to 1000 [ 170.566172][ T6814] lo speed is unknown, defaulting to 1000 [ 170.566341][ T6814] lo speed is unknown, defaulting to 1000 [ 170.567274][ T6814] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 170.569147][ T6817] nfs: Unknown parameter 'defcontext' [ 170.573167][ T6814] lo speed is unknown, defaulting to 1000 [ 170.573537][ T6814] lo speed is unknown, defaulting to 1000 [ 170.573892][ T6814] lo speed is unknown, defaulting to 1000 [ 170.574202][ T6814] lo speed is unknown, defaulting to 1000 [ 170.574517][ T6814] lo speed is unknown, defaulting to 1000 [ 170.616536][ T6824] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 170.671520][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 170.671547][ T6828] netlink: 'syz.1.449': attribute type 10 has an invalid length. [ 170.671557][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.449'. [ 170.673251][ T6828] geneve2: entered promiscuous mode [ 170.673264][ T6828] geneve2: entered allmulticast mode [ 170.689361][ T6831] loop6: detected capacity change from 0 to 256 [ 170.696549][ T6831] FAT-fs (loop6): IO charset macromü”h8 Â?¹Ü¡–Í·ô<ë¹Á:‹7 [ 170.696549][ T6831] !’ØyP=ÈÆ÷üÄ'‡£oÉÕÈ not found [ 170.722180][ T6832] loop5: detected capacity change from 0 to 8192 [ 170.854884][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.456'. [ 170.857409][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.5.456'. [ 171.052044][ T6857] netlink: 'syz.6.458': attribute type 178 has an invalid length. [ 171.326349][ T6862] kernel read not supported for file /!selinuxw (pid: 6862 comm: syz.2.461) [ 171.332195][ T6862] netlink: 'syz.2.461': attribute type 16 has an invalid length. [ 171.390611][ T6865] loop2: detected capacity change from 0 to 128 [ 171.507446][ T6869] loop2: detected capacity change from 0 to 128 [ 171.522937][ T6869] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.527111][ T6869] EXT4-fs warning (device loop2): __ext4_ioctl:1564: Setting inode version is not supported with metadata_csum enabled. [ 171.556414][ T4714] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.603072][ T6872] loop2: detected capacity change from 0 to 256 [ 171.606114][ T6872] FAT-fs (loop2): IO charset macromü”h8 Â?¹Ü¡–Í·ô<ë¹Á:‹7 [ 171.606114][ T6872] !’ØyP=ÈÆ÷üÄ'‡£oÉÕÈ not found [ 171.984520][ T6891] input: syz0 as /devices/virtual/input/input9 [ 172.121291][ T6886] SQUASHFS error: Unable to read directory block [631:26] [ 172.122107][ T6886] SQUASHFS error: Unable to read directory block [631:26] [ 172.217801][ T6894] tipc: Started in network mode [ 172.217823][ T6894] tipc: Node identity ac1414aa, cluster identity 4711 [ 172.217903][ T6894] tipc: New replicast peer: 172.20.20.187 [ 172.218293][ T6894] tipc: Enabled bearer , priority 10 [ 172.639770][ T6900] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 172.639792][ T6900] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 172.654988][ T6900] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.472: bg 0: block 104: invalid block bitmap [ 172.655007][ T6900] loop5: lost filesystem error report for type 5 error -117 [ 172.655157][ T6900] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 172.655291][ T6900] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.472: invalid indirect mapped block 1 (level 1) [ 172.655304][ T6900] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 172.655534][ T6900] EXT4-fs (loop5): 1 truncate cleaned up [ 172.655978][ T6900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.678543][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.796720][ T6910] netlink: 144 bytes leftover after parsing attributes in process `syz.1.474'. [ 172.984303][ T6914] input: syz0 as /devices/virtual/input/input10 [ 173.219726][ T4470] tipc: Node number set to 2886997162 [ 173.864264][ T6940] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 174.323738][ T4712] Bluetooth: hci0: unexpected event 0x0f length: 84 > 4 [ 174.323760][ T4712] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 174.349986][ T6949] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 174.350004][ T6949] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 174.353853][ T6949] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.484: bg 0: block 104: invalid block bitmap [ 174.353869][ T6949] fserror_report: 1 callbacks suppressed [ 174.353875][ T6949] loop2: lost filesystem error report for type 5 error -117 [ 174.354204][ T6949] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 174.354220][ T6949] loop2: lost filesystem error report for type 5 error -117 [ 174.354680][ T6949] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.484: invalid indirect mapped block 1 (level 1) [ 174.354696][ T6949] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 174.355334][ T6949] EXT4-fs (loop2): 1 truncate cleaned up [ 174.355880][ T6949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.492093][ T6956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.492318][ T6957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.797968][ T6961] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 174.863631][ T6961] bond1 (unregistering): Released all slaves [ 175.211160][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.254924][ T6971] tipc: Enabling of bearer rejected, already enabled [ 175.419013][ T4712] Bluetooth: hci2: ISO packet for unknown connection handle 201 [ 175.419042][ T4712] Bluetooth: hci2: ISO packet for unknown connection handle 201 [ 175.419062][ T4712] Bluetooth: hci2: ISO packet for unknown connection handle 201 [ 175.419080][ T4712] Bluetooth: hci2: ISO packet for unknown connection handle 201 [ 175.419097][ T4712] Bluetooth: hci2: ISO packet for unknown connection handle 201 [ 175.419114][ T4712] Bluetooth: hci2: ISO packet for unknown connection handle 201 [ 175.419131][ T4712] Bluetooth: hci2: ISO packet for unknown connection handle 201 [ 175.419147][ T4712] Bluetooth: hci2: ISO packet for unknown connection handle 201 [ 175.419163][ T4712] Bluetooth: hci2: ISO packet for unknown connection handle 201 [ 175.419180][ T4712] Bluetooth: hci2: ISO packet for unknown connection handle 201 [ 175.446741][ T6990] set_capacity_and_notify: 4 callbacks suppressed [ 175.446751][ T6990] loop1: detected capacity change from 0 to 2048 [ 175.579029][ T6996] can0: slcan on ttyS3. [ 175.890465][ T7004] netlink: 'syz.3.496': attribute type 1 has an invalid length. [ 175.975233][ T7014] loop3: detected capacity change from 0 to 512 [ 175.982342][ T7014] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 175.982358][ T7014] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 175.983440][ T7014] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.498: bg 0: block 104: invalid block bitmap [ 175.983458][ T7014] loop3: lost filesystem error report for type 5 error -117 [ 175.983804][ T7014] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 175.983823][ T7014] loop3: lost filesystem error report for type 5 error -117 [ 175.984055][ T7014] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.498: invalid indirect mapped block 1 (level 1) [ 175.984072][ T7014] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 175.988546][ T7014] EXT4-fs (loop3): 1 truncate cleaned up [ 175.989005][ T7014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.252193][ T7067] tipc: Started in network mode [ 176.252214][ T7067] tipc: Node identity ac1414aa, cluster identity 4711 [ 176.252309][ T7067] tipc: New replicast peer: 172.20.20.187 [ 176.252496][ T7067] tipc: Enabled bearer , priority 10 [ 176.304053][ T7069] loop5: detected capacity change from 0 to 7 [ 176.310281][ T7069] loop5: [ 176.310295][ T7069] loop5: partition table partially beyond EOD, truncated [ 176.341190][ T6991] can0 (unregistered): slcan off ttyS3. [ 176.471754][ T7086] nbd: must specify a size in bytes for the device [ 176.834111][ T7098] FAULT_INJECTION: forcing a failure. [ 176.834111][ T7098] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 176.834139][ T7098] CPU: 1 UID: 0 PID: 7098 Comm: syz.1.506 Tainted: G L syzkaller #0 PREEMPT [ 176.834152][ T7098] Tainted: [L]=SOFTLOCKUP [ 176.834156][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 176.834161][ T7098] Call trace: [ 176.834164][ T7098] show_stack+0x2c/0x3c (C) [ 176.834185][ T7098] __dump_stack+0x30/0x40 [ 176.834198][ T7098] dump_stack_lvl+0xd8/0x12c [ 176.834210][ T7098] dump_stack+0x1c/0x28 [ 176.834224][ T7098] should_fail_ex+0x418/0x58c [ 176.834234][ T7098] should_fail_alloc_page+0xec/0x10c [ 176.834244][ T7098] prepare_alloc_pages+0x194/0x484 [ 176.834253][ T7098] __alloc_frozen_pages_noprof+0x180/0x578 [ 176.834263][ T7098] alloc_pages_mpol+0x1fc/0x3d0 [ 176.834273][ T7098] folio_alloc_mpol_noprof+0x4c/0x248 [ 176.834283][ T7098] shmem_alloc_folio+0xa0/0x150 [ 176.834296][ T7098] shmem_alloc_and_add_folio+0x28c/0xb30 [ 176.834308][ T7098] shmem_get_folio_gfp+0x4d8/0x1378 [ 176.834320][ T7098] shmem_fault+0x15c/0x32c [ 176.834332][ T7098] __do_fault+0xf4/0x4a8 [ 176.834340][ T7098] do_pte_missing+0x1764/0x28bc [ 176.834349][ T7098] handle_mm_fault+0x14d0/0x2b58 [ 176.834361][ T7098] __get_user_pages+0x82c/0x13b0 [ 176.834371][ T7098] populate_vma_page_range+0x260/0x358 [ 176.834380][ T7098] __mm_populate+0x204/0x328 [ 176.834389][ T7098] vm_mmap_pgoff+0x358/0x46c [ 176.834398][ T7098] ksys_mmap_pgoff+0xd0/0x5b4 [ 176.834408][ T7098] __arm64_sys_mmap+0x110/0x12c [ 176.834419][ T7098] invoke_syscall+0x98/0x244 [ 176.834432][ T7098] el0_svc_common+0xec/0x23c [ 176.834443][ T7098] do_el0_svc+0x4c/0x5c [ 176.834455][ T7098] el0_svc+0x60/0x1d8 [ 176.834464][ T7098] el0t_64_sync_handler+0x44/0x104 [ 176.834472][ T7098] el0t_64_sync+0x198/0x19c [ 176.835886][ T7097] syzkaller0: entered promiscuous mode [ 176.835899][ T7097] syzkaller0: entered allmulticast mode [ 176.866737][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.938896][ T7097] loop5: detected capacity change from 0 to 512 [ 176.954278][ T7097] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 176.961198][ T7097] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 176.961295][ T7097] EXT4-fs (loop5): orphan cleanup on readonly fs [ 176.971396][ T7097] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.507: Invalid block bitmap block 0 in block_group 0 [ 176.971417][ T7097] loop5: lost filesystem error report for type 5 error -117 [ 176.974404][ T7097] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.507: Invalid block bitmap block 0 in block_group 0 [ 176.974420][ T7097] loop5: lost filesystem error report for type 5 error -117 [ 176.977543][ T7097] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.507: Invalid block bitmap block 0 in block_group 0 [ 176.977566][ T7097] loop5: lost filesystem error report for type 5 error -117 [ 176.978020][ T7097] Quota error (device loop5): write_blk: dquota write failed [ 176.978049][ T7097] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 176.978061][ T7097] EXT4-fs error (device loop5): ext4_acquire_dquot:7070: comm syz.5.507: Failed to acquire dquot type 1 [ 176.978070][ T7097] loop5: lost filesystem error report for type 5 error -28 [ 176.978837][ T7097] EXT4-fs (loop5): 1 orphan inode deleted [ 176.979401][ T7048] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 176.979427][ T7048] EXT4-fs error (device loop5): ext4_release_dquot:7106: comm kworker/u8:34: Failed to release dquot type 1 [ 176.979437][ T7048] loop5: lost filesystem error report for type 5 error -117 [ 176.979640][ C1] EXT4-fs (loop5): error count since last fsck: 5 [ 176.979659][ C1] EXT4-fs (loop5): last error at time 176: ext4_release_dquot:7106 [ 177.017630][ T7097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.031637][ T7114] overlay: ./proc/devices is not a directory [ 177.108871][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.266892][ T7127] loop5: detected capacity change from 0 to 2048 [ 177.346741][ T7134] loop2: detected capacity change from 0 to 256 [ 177.347071][ T7134] vfat: Unknown parameter '‹tf8' [ 177.365858][ T7135] capability: warning: `syz.3.511' uses 32-bit capabilities (legacy support in use) [ 177.373548][ T4470] tipc: Node number set to 2886997162 [ 177.379303][ T7127] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.425451][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.625371][ T7156] loop5: detected capacity change from 0 to 512 [ 177.633876][ T7156] EXT4-fs: Ignoring removed oldalloc option [ 177.642912][ T7156] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.642936][ T7156] EXT4-fs (loop5): Test dummy encryption mode enabled [ 177.684183][ T7156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.844457][ T7173] ip6gretap1: entered allmulticast mode [ 177.876047][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.117039][ T7182] syz_tun: entered allmulticast mode [ 178.137575][ T7182] loop2: detected capacity change from 0 to 512 [ 178.146642][ T7182] EXT4-fs: test_dummy_encryption requires encrypt feature [ 178.168319][ T7178] syz_tun: left allmulticast mode [ 178.200355][ T7189] pimreg: entered allmulticast mode [ 178.201216][ T7189] pimreg: left allmulticast mode [ 178.288905][ T7198] FAULT_INJECTION: forcing a failure. [ 178.288905][ T7198] name failslab, interval 1, probability 0, space 0, times 0 [ 178.288928][ T7198] CPU: 1 UID: 0 PID: 7198 Comm: syz.1.527 Tainted: G L syzkaller #0 PREEMPT [ 178.288941][ T7198] Tainted: [L]=SOFTLOCKUP [ 178.288945][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 178.288951][ T7198] Call trace: [ 178.288954][ T7198] show_stack+0x2c/0x3c (C) [ 178.288973][ T7198] __dump_stack+0x30/0x40 [ 178.288985][ T7198] dump_stack_lvl+0xd8/0x12c [ 178.288997][ T7198] dump_stack+0x1c/0x28 [ 178.289008][ T7198] should_fail_ex+0x418/0x58c [ 178.289017][ T7198] should_failslab+0xc4/0x120 [ 178.289026][ T7198] kmem_cache_alloc_noprof+0x94/0x5d4 [ 178.289035][ T7198] vm_area_alloc+0x2c/0x144 [ 178.289046][ T7198] create_init_stack_vma+0x218/0x850 [ 178.289059][ T7198] alloc_bprm+0x4bc/0x69c [ 178.289067][ T7198] do_execveat_common+0x17c/0x52c [ 178.289075][ T7198] __arm64_sys_execveat+0xe4/0x10c [ 178.289083][ T7198] invoke_syscall+0x98/0x244 [ 178.289096][ T7198] el0_svc_common+0xec/0x23c [ 178.289108][ T7198] do_el0_svc+0x4c/0x5c [ 178.289119][ T7198] el0_svc+0x60/0x1d8 [ 178.289128][ T7198] el0t_64_sync_handler+0x44/0x104 [ 178.289136][ T7198] el0t_64_sync+0x198/0x19c [ 178.382422][ T7201] input: syz0 as /devices/virtual/input/input11 [ 178.556979][ T7194] loop5: detected capacity change from 0 to 512 [ 178.561596][ T7194] EXT4-fs (loop5): Test dummy encryption mode enabled [ 178.568268][ T7194] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.526: inode has both inline data and extents flags [ 178.568284][ T7194] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.569644][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 178.569662][ C1] EXT4-fs (loop5): initial error at time 178: ext4_orphan_get:1403: inode 15 [ 178.569683][ C1] EXT4-fs (loop5): last error at time 178: ext4_orphan_get:1403: inode 15 [ 178.569758][ T7194] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.526: couldn't read orphan inode 15 (err -117) [ 178.569770][ T7194] loop5: lost filesystem error report for type 5 error -117 [ 178.586862][ T7194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.652742][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.697426][ T7206] loop3: detected capacity change from 0 to 8192 [ 178.942645][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 178.942667][ T7223] netlink: 'syz.3.535': attribute type 10 has an invalid length. [ 178.942679][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.535'. [ 178.946197][ T7217] psci: CPU1 killed (polled 0 ms) [ 178.947272][ T7221] random: crng reseeded on system resumption [ 178.974448][ T7223] geneve2: entered promiscuous mode [ 178.974461][ T7223] geneve2: entered allmulticast mode [ 179.224377][ T7226] rxe_eth0 speed is unknown, defaulting to 1000 [ 179.225724][ T7231] ubi: bad wear-leveling threshold 536871552 [ 179.665622][ T7226] lo speed is unknown, defaulting to 1000 [ 180.068227][ T7261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.170545][ T7266] EXT4-fs (loop1): shut down requested (2) [ 180.173046][ T7266] netlink: 'syz.1.546': attribute type 8 has an invalid length. [ 180.173058][ T7266] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 180.177792][ T7265] VFS: file-max limit 0 reached [ 180.221161][ T7266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.365074][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 180.365101][ T7273] netlink: 'syz.3.549': attribute type 10 has an invalid length. [ 180.365129][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.549'. [ 180.388180][ T7273] geneve2: entered promiscuous mode [ 180.388193][ T7273] geneve2: entered allmulticast mode [ 180.403359][ T7272] tipc: Enabling of bearer rejected, already enabled [ 180.451749][ T7275] FAULT_INJECTION: forcing a failure. [ 180.451749][ T7275] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 180.451772][ T7275] CPU: 0 UID: 0 PID: 7275 Comm: syz.5.551 Tainted: G L syzkaller #0 PREEMPT [ 180.451785][ T7275] Tainted: [L]=SOFTLOCKUP [ 180.451788][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 180.451794][ T7275] Call trace: [ 180.451796][ T7275] show_stack+0x2c/0x3c (C) [ 180.451816][ T7275] __dump_stack+0x30/0x40 [ 180.451828][ T7275] dump_stack_lvl+0xd8/0x12c [ 180.451840][ T7275] dump_stack+0x1c/0x28 [ 180.451852][ T7275] should_fail_ex+0x418/0x58c [ 180.451861][ T7275] should_fail_alloc_page+0xec/0x10c [ 180.451870][ T7275] prepare_alloc_pages+0x194/0x484 [ 180.451879][ T7275] __alloc_frozen_pages_noprof+0x180/0x578 [ 180.451889][ T7275] alloc_pages_mpol+0x1fc/0x3d0 [ 180.451899][ T7275] folio_alloc_mpol_noprof+0x4c/0x248 [ 180.451909][ T7275] shmem_alloc_folio+0xa0/0x150 [ 180.451922][ T7275] shmem_alloc_and_add_folio+0x28c/0xb30 [ 180.451935][ T7275] shmem_get_folio_gfp+0x4d8/0x1378 [ 180.451947][ T7275] shmem_fault+0x15c/0x32c [ 180.451959][ T7275] __do_fault+0xf4/0x4a8 [ 180.451968][ T7275] do_pte_missing+0x1764/0x28bc [ 180.451976][ T7275] handle_mm_fault+0x14d0/0x2b58 [ 180.451989][ T7275] __get_user_pages+0x82c/0x13b0 [ 180.451999][ T7275] populate_vma_page_range+0x260/0x358 [ 180.452009][ T7275] __mm_populate+0x204/0x328 [ 180.452018][ T7275] vm_mmap_pgoff+0x358/0x46c [ 180.452027][ T7275] ksys_mmap_pgoff+0xd0/0x5b4 [ 180.452036][ T7275] __arm64_sys_mmap+0x110/0x12c [ 180.452049][ T7275] invoke_syscall+0x98/0x244 [ 180.452061][ T7275] el0_svc_common+0xec/0x23c [ 180.452073][ T7275] do_el0_svc+0x4c/0x5c [ 180.452084][ T7275] el0_svc+0x60/0x1d8 [ 180.452093][ T7275] el0t_64_sync_handler+0x44/0x104 [ 180.452101][ T7275] el0t_64_sync+0x198/0x19c [ 180.527399][ T7277] set_capacity_and_notify: 2 callbacks suppressed [ 180.527410][ T7277] loop2: detected capacity change from 0 to 512 [ 180.537310][ T7277] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 180.537320][ T7277] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 180.545992][ T7277] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.552: bg 0: block 104: invalid block bitmap [ 180.546009][ T7277] loop2: lost filesystem error report for type 5 error -117 [ 180.546196][ T7277] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 180.546208][ T7277] loop2: lost filesystem error report for type 5 error -117 [ 180.546342][ T7277] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.552: invalid indirect mapped block 1 (level 1) [ 180.546355][ T7277] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 180.547471][ T7277] EXT4-fs (loop2): 1 truncate cleaned up [ 180.547926][ T7277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.693535][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.760322][ T7283] loop3: detected capacity change from 0 to 256 [ 180.771960][ T7283] FAT-fs (loop3): data area starts beyond volume (274 > 64) [ 180.771983][ T7283] FAT-fs (loop3): Can't find a valid FAT filesystem [ 180.811328][ T7283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.811493][ T7283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.237718][ T7301] tipc: Started in network mode [ 181.237740][ T7301] tipc: Node identity ac1414aa, cluster identity 4711 [ 181.237816][ T7301] tipc: New replicast peer: 172.20.20.187 [ 181.238023][ T7301] tipc: Enabled bearer , priority 10 [ 181.297250][ T7307] loop5: detected capacity change from 0 to 512 [ 181.310013][ T7307] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 181.310028][ T7307] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 181.312428][ T7307] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.564: bg 0: block 104: invalid block bitmap [ 181.312444][ T7307] loop5: lost filesystem error report for type 5 error -117 [ 181.312691][ T7307] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 181.312703][ T7307] loop5: lost filesystem error report for type 5 error -117 [ 181.312855][ T7307] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.564: invalid indirect mapped block 1 (level 1) [ 181.312868][ T7307] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 181.313096][ T7307] EXT4-fs (loop5): 1 truncate cleaned up [ 181.313541][ T7307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.465306][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.558318][ T7313] netlink: 'syz.3.566': attribute type 1 has an invalid length. [ 181.582443][ T7313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.599467][ T7316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.567'. [ 181.674766][ T7320] team_slave_0: entered allmulticast mode [ 181.706845][ T7322] FAULT_INJECTION: forcing a failure. [ 181.706845][ T7322] name failslab, interval 1, probability 0, space 0, times 0 [ 181.706864][ T7322] CPU: 0 UID: 0 PID: 7322 Comm: syz.3.570 Tainted: G L syzkaller #0 PREEMPT [ 181.706877][ T7322] Tainted: [L]=SOFTLOCKUP [ 181.706880][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 181.706885][ T7322] Call trace: [ 181.706888][ T7322] show_stack+0x2c/0x3c (C) [ 181.706907][ T7322] __dump_stack+0x30/0x40 [ 181.706919][ T7322] dump_stack_lvl+0xd8/0x12c [ 181.706931][ T7322] dump_stack+0x1c/0x28 [ 181.706942][ T7322] should_fail_ex+0x418/0x58c [ 181.706951][ T7322] should_failslab+0xc4/0x120 [ 181.706960][ T7322] __kmalloc_node_noprof+0x10c/0x6e4 [ 181.706970][ T7322] __vmalloc_node_range_noprof+0x43c/0xe9c [ 181.706981][ T7322] __vmalloc_node_noprof+0xec/0x14c [ 181.706991][ T7322] __vmalloc_noprof+0x64/0x8c [ 181.707000][ T7322] bpf_check+0xd90/0x2414 [ 181.707013][ T7322] bpf_prog_load+0xf4c/0x1554 [ 181.707023][ T7322] __sys_bpf+0x7d4/0x82c [ 181.707032][ T7322] __arm64_sys_bpf+0xd0/0xec [ 181.707041][ T7322] invoke_syscall+0x98/0x244 [ 181.707053][ T7322] el0_svc_common+0xec/0x23c [ 181.707069][ T7322] do_el0_svc+0x4c/0x5c [ 181.707081][ T7322] el0_svc+0x60/0x1d8 [ 181.707090][ T7322] el0t_64_sync_handler+0x44/0x104 [ 181.707098][ T7322] el0t_64_sync+0x198/0x19c [ 181.709473][ T7322] syz.3.570: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 181.709552][ T7322] CPU: 0 UID: 0 PID: 7322 Comm: syz.3.570 Tainted: G L syzkaller #0 PREEMPT [ 181.709565][ T7322] Tainted: [L]=SOFTLOCKUP [ 181.709568][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 181.709573][ T7322] Call trace: [ 181.709575][ T7322] show_stack+0x2c/0x3c (C) [ 181.709591][ T7322] __dump_stack+0x30/0x40 [ 181.709609][ T7322] dump_stack_lvl+0xd8/0x12c [ 181.709621][ T7322] dump_stack+0x1c/0x28 [ 181.709632][ T7322] warn_alloc+0x1c4/0x1d8 [ 181.709648][ T7322] __vmalloc_node_range_noprof+0x670/0xe9c [ 181.709659][ T7322] __vmalloc_node_noprof+0xec/0x14c [ 181.709669][ T7322] __vmalloc_noprof+0x64/0x8c [ 181.709679][ T7322] bpf_check+0xd90/0x2414 [ 181.709691][ T7322] bpf_prog_load+0xf4c/0x1554 [ 181.709701][ T7322] __sys_bpf+0x7d4/0x82c [ 181.709711][ T7322] __arm64_sys_bpf+0xd0/0xec [ 181.709720][ T7322] invoke_syscall+0x98/0x244 [ 181.709732][ T7322] el0_svc_common+0xec/0x23c [ 181.709744][ T7322] do_el0_svc+0x4c/0x5c [ 181.709755][ T7322] el0_svc+0x60/0x1d8 [ 181.709763][ T7322] el0t_64_sync_handler+0x44/0x104 [ 181.709771][ T7322] el0t_64_sync+0x198/0x19c [ 181.734098][ T7322] Mem-Info: [ 181.734109][ T7322] active_anon:19 inactive_anon:17134 isolated_anon:0 [ 181.734109][ T7322] active_file:2917 inactive_file:14958 isolated_file:0 [ 181.734109][ T7322] unevictable:768 dirty:57 writeback:0 [ 181.734109][ T7322] slab_reclaimable:9318 slab_unreclaimable:98794 [ 181.734109][ T7322] mapped:29519 shmem:12084 pagetables:1341 [ 181.734109][ T7322] sec_pagetables:0 bounce:0 [ 181.734109][ T7322] kernel_misc_reclaimable:0 [ 181.734109][ T7322] free:1451093 free_pcp:7465 free_cma:7616 [ 181.734140][ T7322] Node 0 active_anon:76kB inactive_anon:68536kB active_file:11668kB inactive_file:59832kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:118076kB dirty:228kB writeback:0kB shmem:48336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11008kB pagetables:5364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 181.734162][ T7322] Node 0 DMA free:3077888kB boost:0kB min:20400kB low:25500kB high:30600kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 181.734187][ T7322] lowmem_reserve[]: 0 0 3637 3637 3637 [ 181.734206][ T7322] Node 0 Normal free:2726484kB boost:0kB min:24652kB low:30812kB high:36972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:76kB inactive_anon:68536kB active_file:11668kB inactive_file:59832kB unevictable:3072kB writepending:228kB zspages:16kB present:5242880kB managed:3724676kB mlocked:0kB bounce:0kB free_pcp:29860kB local_pcp:29860kB free_cma:0kB [ 181.734230][ T7322] lowmem_reserve[]: 0 0 0 0 0 [ 181.734248][ T7322] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 181.734308][ T7322] Node 0 Normal: 1409*4kB (UME) 736*8kB (UME) 640*16kB (UME) 1517*32kB (UME) 458*64kB (UME) 150*128kB (UME) 60*256kB (UME) 31*512kB (UME) 22*1024kB (M) 7*2048kB (UM) 620*4096kB (UM) = 2726436kB [ 181.734387][ T7322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 181.734394][ T7322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 181.734400][ T7322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 181.734407][ T7322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 181.734413][ T7322] 29956 total pagecache pages [ 181.734417][ T7322] 1 pages in swap cache [ 181.734420][ T7322] Free swap = 124984kB [ 181.734424][ T7322] Total swap = 124996kB [ 181.734427][ T7322] 2097152 pages RAM [ 181.734431][ T7322] 0 pages HighMem/MovableOnly [ 181.734434][ T7322] 395935 pages reserved [ 181.734437][ T7322] 8192 pages cma reserved [ 181.734440][ T7322] 0 pages hwpoisoned [ 181.981695][ T7328] loop3: detected capacity change from 0 to 512 [ 182.949808][ T1146] tipc: Node number set to 2886997162 [ 182.952530][ T7335] loop5: detected capacity change from 0 to 512 [ 182.975561][ T7335] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 182.975572][ T7335] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 182.995847][ T7335] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.575: bg 0: block 104: invalid block bitmap [ 182.995866][ T7335] loop5: lost filesystem error report for type 5 error -117 [ 182.996069][ T7335] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 182.996085][ T7335] loop5: lost filesystem error report for type 5 error -117 [ 182.996233][ T7335] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.575: invalid indirect mapped block 1 (level 1) [ 182.996247][ T7335] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 182.999643][ C0] EXT4-fs (loop5): error count since last fsck: 3 [ 182.999658][ C0] EXT4-fs (loop5): initial error at time 182: ext4_validate_block_bitmap:436 [ 182.999670][ C0] EXT4-fs (loop5): last error at time 182: ext4_free_branches:1023: inode 11 [ 183.968634][ T7335] EXT4-fs (loop5): 1 truncate cleaned up [ 183.969116][ T7335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.981426][ T7328] EXT4-fs warning (device loop3): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop3. [ 186.907879][ T7345] loop2: detected capacity change from 0 to 1024 [ 186.935196][ T7348] netlink: 44 bytes leftover after parsing attributes in process `syz.3.577'. [ 187.043185][ T7345] loop2: detected capacity change from 0 to 1024 [ 187.143030][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.180564][ T4721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.204303][ T4721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.206068][ T4721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.206474][ T4721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.206709][ T4721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.277051][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 187.277077][ T7372] netlink: 48 bytes leftover after parsing attributes in process `syz.2.582'. [ 187.302194][ T7372] geneve3: entered promiscuous mode [ 187.302207][ T7372] geneve3: entered allmulticast mode [ 187.374647][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.374676][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.548080][ T7398] ip_tables: iptables: counters copy to user failed while replacing table [ 187.584132][ T7396] netlink: 108 bytes leftover after parsing attributes in process `syz.2.584'. [ 187.587612][ T7402] netlink: 14 bytes leftover after parsing attributes in process `syz.3.586'. [ 187.793506][ T7363] rxe_eth0 speed is unknown, defaulting to 1000 [ 188.074838][ T7418] loop3: detected capacity change from 0 to 1024 [ 188.078129][ T7047] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.168162][ T7423] netlink: 64 bytes leftover after parsing attributes in process `syz.2.592'. [ 188.270987][ T7047] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.363163][ T7363] lo speed is unknown, defaulting to 1000 [ 188.386693][ T7047] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.437121][ T7047] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.656916][ T7439] ip_tables: iptables: counters copy to user failed while replacing table [ 188.657859][ T7047] bridge_slave_1: left allmulticast mode [ 188.657876][ T7047] bridge_slave_1: left promiscuous mode [ 188.657952][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.667597][ T7047] bridge_slave_0: left allmulticast mode [ 188.667611][ T7047] bridge_slave_0: left promiscuous mode [ 188.667687][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.686034][ T7047] pim6reg: left allmulticast mode [ 189.070410][ T7047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.075752][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 189.075775][ T7455] netlink: 48 bytes leftover after parsing attributes in process `syz.1.605'. [ 189.079034][ T7047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.080235][ T7047] bond0 (unregistering): Released all slaves [ 189.112533][ T7047] IPVS: stopping backup sync thread 6399 ... [ 189.146680][ T4712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.147902][ T4712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.148349][ T4712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.148829][ T4712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.149144][ T4712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.167680][ T7455] geneve2: entered promiscuous mode [ 189.167698][ T7455] geneve2: entered allmulticast mode [ 189.181181][ T7454] tipc: Enabling of bearer rejected, already enabled [ 189.292649][ T4712] Bluetooth: hci4: command tx timeout [ 189.302329][ T7036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.302354][ T7036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.302370][ T7036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.302385][ T7036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.308399][ T7467] loop3: detected capacity change from 0 to 512 [ 189.645972][ T7482] input: syz0 as /devices/virtual/input/input12 [ 189.649338][ T7484] loop5: detected capacity change from 0 to 512 [ 189.659801][ T7484] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 189.659816][ T7484] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 189.668667][ T7484] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.611: bg 0: block 104: invalid block bitmap [ 189.668695][ T7484] loop5: lost filesystem error report for type 5 error -117 [ 189.669506][ T7484] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 189.669529][ T7484] loop5: lost filesystem error report for type 5 error -117 [ 189.669647][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 189.669662][ C0] EXT4-fs (loop5): initial error at time 189: ext4_validate_block_bitmap:436 [ 189.669675][ C0] EXT4-fs (loop5): last error at time 189: ext4_mb_clear_bb:6680 [ 189.687357][ T7484] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.611: invalid indirect mapped block 1 (level 1) [ 189.687378][ T7484] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 189.687669][ T7484] EXT4-fs (loop5): 1 truncate cleaned up [ 189.700396][ T7484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.883721][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.990225][ T7498] dlm: non-version read from control device 86 [ 190.207879][ T7458] rxe_eth0 speed is unknown, defaulting to 1000 [ 190.244813][ T4399] 8021q: adding VLAN 0 to HW filter on device eth8 [ 190.258174][ T7363] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.258201][ T7363] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.258268][ T7363] bridge_slave_0: entered allmulticast mode [ 190.282256][ T7363] bridge_slave_0: entered promiscuous mode [ 190.295959][ T7363] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.301253][ T7363] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.301324][ T7363] bridge_slave_1: entered allmulticast mode [ 190.319964][ T7363] bridge_slave_1: entered promiscuous mode [ 190.322348][ T7506] syzkaller1: entered promiscuous mode [ 190.322364][ T7506] syzkaller1: entered allmulticast mode [ 190.402916][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 190.402940][ T7519] netlink: 48 bytes leftover after parsing attributes in process `syz.3.617'. [ 190.451350][ T7519] geneve2: entered promiscuous mode [ 190.451364][ T7519] geneve2: entered allmulticast mode [ 190.552721][ T7524] ip_tables: iptables: counters copy to user failed while replacing table [ 190.565747][ T7363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.566754][ T7363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.643962][ T7526] input: syz0 as /devices/virtual/input/input13 [ 190.829759][ T7047] hsr_slave_0: left promiscuous mode [ 190.830152][ T7047] hsr_slave_1: left promiscuous mode [ 190.830422][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.830433][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.830758][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.830767][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.857142][ T7047] veth1_macvtap: left promiscuous mode [ 190.857170][ T7047] veth0_macvtap: left promiscuous mode [ 190.857290][ T7047] veth1_vlan: left promiscuous mode [ 190.857326][ T7047] veth0_vlan: left promiscuous mode [ 191.177023][ T7047] team0 (unregistering): Port device team_slave_1 removed [ 191.193512][ T7047] team0 (unregistering): Port device team_slave_0 removed [ 191.210718][ T4721] Bluetooth: hci1: command tx timeout [ 191.266987][ T7363] team0: Port device team_slave_0 added [ 191.267831][ T7363] team0: Port device team_slave_1 added [ 191.309331][ T7458] lo speed is unknown, defaulting to 1000 [ 191.316653][ T4399] 8021q: adding VLAN 0 to HW filter on device eth9 [ 191.338346][ T7363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.338357][ T7363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.338373][ T7363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.353612][ T7363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.353622][ T7363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.353633][ T7363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.371743][ T4712] Bluetooth: hci4: command tx timeout [ 191.443365][ T7562] loop3: detected capacity change from 0 to 512 [ 191.470115][ T7363] hsr_slave_0: entered promiscuous mode [ 191.477024][ T7363] hsr_slave_1: entered promiscuous mode [ 191.478671][ T7363] debugfs: 'hsr0' already exists in 'hsr' [ 191.478685][ T7363] Cannot create hsr debugfs directory [ 191.499536][ T7562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.499553][ T7562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.516781][ T7562] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 191.533651][ T7562] EXT4-fs (loop3): 1 truncate cleaned up [ 191.534092][ T7562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.553301][ T7567] geneve2: entered promiscuous mode [ 191.553314][ T7567] geneve2: entered allmulticast mode [ 191.572213][ T7568] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 191.748380][ T7047] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.851936][ T7047] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.875443][ T7593] loop5: detected capacity change from 0 to 512 [ 191.888320][ T7593] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 191.888332][ T7593] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 191.889322][ T7593] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.632: bg 0: block 104: invalid block bitmap [ 191.889356][ T7593] loop5: lost filesystem error report for type 5 error -117 [ 191.889627][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 191.889646][ C0] EXT4-fs (loop5): initial error at time 191: ext4_validate_block_bitmap:436 [ 191.889662][ C0] EXT4-fs (loop5): last error at time 191: ext4_validate_block_bitmap:436 [ 191.900768][ T7593] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 191.900784][ T7593] loop5: lost filesystem error report for type 5 error -117 [ 191.914318][ T7593] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.632: invalid indirect mapped block 1 (level 1) [ 191.914337][ T7593] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 191.914972][ T7593] EXT4-fs (loop5): 1 truncate cleaned up [ 191.915411][ T7593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.041730][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.103674][ T7047] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.222960][ T7047] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.267551][ T7610] loop5: detected capacity change from 0 to 128 [ 192.285949][ T7610] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.309804][ T7458] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.309834][ T7458] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.309900][ T7458] bridge_slave_0: entered allmulticast mode [ 192.310446][ T7458] bridge_slave_0: entered promiscuous mode [ 192.318280][ T4399] 8021q: adding VLAN 0 to HW filter on device eth11 [ 192.336927][ T7458] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.336957][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.337044][ T7458] bridge_slave_1: entered allmulticast mode [ 192.337470][ T7458] bridge_slave_1: entered promiscuous mode [ 192.361540][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.412105][ T7363] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 192.415519][ T7622] loop8: detected capacity change from 0 to 6 [ 192.417251][ T7622] Dev loop8: unable to read RDB block 6 [ 192.417267][ T7622] loop8: unable to read partition table [ 192.417330][ T7622] loop8: partition table beyond EOD, truncated [ 192.417340][ T7622] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 192.437824][ T7621] ip_tables: iptables: counters copy to user failed while replacing table [ 192.465553][ T7363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.467520][ T7363] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 192.475228][ T7363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.478340][ T7458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.489004][ T7363] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 192.496109][ T7363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.498333][ T7458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.514713][ T7363] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 192.519333][ T7363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.561303][ T7458] team0: Port device team_slave_0 added [ 192.573595][ T7458] team0: Port device team_slave_1 added [ 192.633538][ T7458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.633550][ T7458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.633564][ T7458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.715596][ T7458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.715612][ T7458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.715627][ T7458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.781790][ T7047] bridge_slave_1: left allmulticast mode [ 192.781811][ T7047] bridge_slave_1: left promiscuous mode [ 192.781889][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.783901][ T7047] bridge_slave_0: left allmulticast mode [ 192.783915][ T7047] bridge_slave_0: left promiscuous mode [ 192.783978][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.949898][ T7654] VFS: file-max limit 0 reached [ 193.057586][ T7047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.064441][ T7047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.066571][ T7047] bond0 (unregistering): Released all slaves [ 193.114631][ T7658] tipc: Enabling of bearer rejected, already enabled [ 193.141334][ T7047] tipc: Disabling bearer [ 193.142543][ T7047] tipc: Left network mode [ 193.154408][ T7458] hsr_slave_0: entered promiscuous mode [ 193.154924][ T7047] IPVS: stopping backup sync thread 6317 ... [ 193.165436][ T7458] hsr_slave_1: entered promiscuous mode [ 193.165683][ T7458] debugfs: 'hsr0' already exists in 'hsr' [ 193.165695][ T7458] Cannot create hsr debugfs directory [ 193.195954][ T5693] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.217099][ T4399] 8021q: adding VLAN 0 to HW filter on device eth10 [ 193.244714][ T7663] loop3: detected capacity change from 0 to 1024 [ 193.274182][ T7663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 193.360013][ T4712] Bluetooth: hci1: command tx timeout [ 193.378515][ T7663] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.640: lblock 0 mapped to illegal pblock 0 (length 6) [ 193.395894][ T7666] FAULT_INJECTION: forcing a failure. [ 193.395894][ T7666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.395917][ T7666] CPU: 0 UID: 0 PID: 7666 Comm: syz.5.642 Tainted: G L syzkaller #0 PREEMPT [ 193.395931][ T7666] Tainted: [L]=SOFTLOCKUP [ 193.395935][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 193.395941][ T7666] Call trace: [ 193.395944][ T7666] show_stack+0x2c/0x3c (C) [ 193.395965][ T7666] __dump_stack+0x30/0x40 [ 193.395977][ T7666] dump_stack_lvl+0xd8/0x12c [ 193.395988][ T7666] dump_stack+0x1c/0x28 [ 193.396000][ T7666] should_fail_ex+0x418/0x58c [ 193.396009][ T7666] should_fail+0x14/0x24 [ 193.396016][ T7666] should_fail_usercopy+0x20/0x30 [ 193.396024][ T7666] _inline_copy_from_user+0x3c/0x174 [ 193.396038][ T7666] ____sys_sendmsg+0x254/0x6c8 [ 193.396050][ T7666] ___sys_sendmsg+0x198/0x224 [ 193.396061][ T7666] __sys_sendmsg+0x158/0x204 [ 193.396072][ T7666] __arm64_sys_sendmsg+0x88/0x9c [ 193.396084][ T7666] invoke_syscall+0x98/0x244 [ 193.396097][ T7666] el0_svc_common+0xec/0x23c [ 193.396108][ T7666] do_el0_svc+0x4c/0x5c [ 193.396120][ T7666] el0_svc+0x60/0x1d8 [ 193.396128][ T7666] el0t_64_sync_handler+0x44/0x104 [ 193.396137][ T7666] el0t_64_sync+0x198/0x19c [ 193.438062][ T7663] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.640: lblock 0 mapped to illegal pblock 0 (length 1) [ 193.443120][ T7663] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 193.443138][ T7663] EXT4-fs (loop3): This should not happen!! Data will be lost [ 193.443138][ T7663] [ 193.449704][ T4712] Bluetooth: hci4: command tx timeout [ 193.477504][ T7363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.513658][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 193.516938][ T7363] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.560119][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.560144][ T7036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.560674][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.560695][ T7036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.597127][ T7363] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.597141][ T7363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.789312][ T7690] loop3: detected capacity change from 0 to 1024 [ 193.833463][ T7690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.057301][ T7690] __nla_validate_parse: 2 callbacks suppressed [ 194.057323][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 194.083436][ T7710] tipc: Enabling of bearer rejected, already enabled [ 194.090972][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 194.091509][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 194.091998][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 194.092048][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 194.244169][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.354330][ T7047] hsr_slave_0: left promiscuous mode [ 194.363428][ T7047] hsr_slave_1: left promiscuous mode [ 194.363755][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.363766][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.368893][ T7733] loop3: detected capacity change from 0 to 512 [ 194.378381][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.378394][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.408195][ T7733] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 194.408213][ T7733] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 194.420494][ T7733] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.651: bg 0: block 104: invalid block bitmap [ 194.420527][ T7733] loop3: lost filesystem error report for type 5 error -117 [ 194.421319][ T7733] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 194.421332][ T7733] loop3: lost filesystem error report for type 5 error -117 [ 194.422667][ T7733] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.651: invalid indirect mapped block 1 (level 1) [ 194.422686][ T7733] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 194.423143][ T7733] EXT4-fs (loop3): 1 truncate cleaned up [ 194.423733][ T7733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.442758][ T7047] veth1_macvtap: left promiscuous mode [ 194.442788][ T7047] veth0_macvtap: left promiscuous mode [ 194.442834][ T7047] veth1_vlan: left promiscuous mode [ 194.442884][ T7047] veth0_vlan: left promiscuous mode [ 194.457546][ T7736] netlink: 'syz.5.650': attribute type 2 has an invalid length. [ 194.502110][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.614443][ T7747] loop3: detected capacity change from 0 to 8 [ 194.708428][ T7753] SQUASHFS error: Failed to read block 0x60: -5 [ 194.721154][ T7047] team0 (unregistering): Port device team_slave_1 removed [ 194.725378][ T7047] team0 (unregistering): Port device team_slave_0 removed [ 194.841405][ T4399] 8021q: adding VLAN 0 to HW filter on device eth12 [ 194.917980][ T7458] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 194.937117][ T7458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.937464][ T7458] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 194.947409][ T7458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.950121][ T7458] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 194.960744][ T7458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.961898][ T7458] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 194.974446][ T7458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 195.064505][ T7363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.117030][ T7458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.149239][ T7047] IPVS: stop unused estimator thread 0... [ 195.157322][ T7458] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.167846][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.167879][ T7031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.168403][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.168422][ T7031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.246809][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 195.246838][ T7778] netlink: 48 bytes leftover after parsing attributes in process `syz.3.657'. [ 195.370082][ T4712] Bluetooth: hci1: command tx timeout [ 195.398483][ T7794] tipc: Enabling of bearer rejected, already enabled [ 195.412808][ T7363] veth0_vlan: entered promiscuous mode [ 195.438283][ T7363] veth1_vlan: entered promiscuous mode [ 195.497899][ T7363] veth0_macvtap: entered promiscuous mode [ 195.518757][ T7363] veth1_macvtap: entered promiscuous mode [ 195.537677][ T4712] Bluetooth: hci4: command tx timeout [ 195.551494][ T7363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.552580][ T7363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.622124][ T7048] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.622250][ T7048] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.622270][ T7048] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.622285][ T7048] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.671567][ T7031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.671578][ T7031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.714140][ T7031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.714155][ T7031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.752577][ T7458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.831999][ T4399] 8021q: adding VLAN 0 to HW filter on device eth13 [ 195.942439][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.667'. [ 195.942467][ T7837] netlink: 48 bytes leftover after parsing attributes in process `syz.5.667'. [ 196.016345][ T7458] veth0_vlan: entered promiscuous mode [ 196.030825][ T7458] veth1_vlan: entered promiscuous mode [ 196.064517][ T7458] veth0_macvtap: entered promiscuous mode [ 196.075879][ T7458] veth1_macvtap: entered promiscuous mode [ 196.077380][ T7844] tipc: Started in network mode [ 196.077397][ T7844] tipc: Node identity ac1414aa, cluster identity 4711 [ 196.077475][ T7844] tipc: New replicast peer: 172.20.20.187 [ 196.077713][ T7844] tipc: Enabled bearer , priority 10 [ 196.095400][ T7458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.117836][ T7458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.127183][ T7031] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.127275][ T7031] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.127308][ T7031] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.127331][ T7031] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.182790][ T7850] loop5: detected capacity change from 0 to 512 [ 196.205909][ T7850] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 196.205920][ T7850] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 196.228492][ T7850] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.670: bg 0: block 104: invalid block bitmap [ 196.228511][ T7850] loop5: lost filesystem error report for type 5 error -117 [ 196.229122][ T7850] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 196.229140][ T7850] loop5: lost filesystem error report for type 5 error -117 [ 196.229653][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 196.229669][ C0] EXT4-fs (loop5): initial error at time 196: ext4_validate_block_bitmap:436 [ 196.229681][ C0] EXT4-fs (loop5): last error at time 196: ext4_mb_clear_bb:6680 [ 196.246738][ T7850] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.670: invalid indirect mapped block 1 (level 1) [ 196.246759][ T7850] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 196.247064][ T7850] EXT4-fs (loop5): 1 truncate cleaned up [ 196.247495][ T7850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.266992][ T7051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.267002][ T7051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.302243][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.316568][ T7031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.316579][ T7031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.402861][ T7859] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 196.402881][ T7859] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 196.402887][ T7859] PKCS7: Unsupported data type 106 [ 196.416375][ T4814] atkbd serio0: keyboard reset failed on [ 196.460047][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.8.602'. [ 196.547608][ T7867] loop8: detected capacity change from 0 to 512 [ 196.617263][ T4399] 8021q: adding VLAN 0 to HW filter on device eth14 [ 196.632249][ T7880] loop8: detected capacity change from 0 to 512 [ 197.023706][ T4399] 8021q: adding VLAN 0 to HW filter on device eth15 [ 197.199656][ T4814] tipc: Node number set to 2886997162 [ 197.449900][ T4712] Bluetooth: hci1: command tx timeout [ 199.256166][ T7920] loop8: detected capacity change from 0 to 256 [ 199.264626][ T7923] loop5: detected capacity change from 0 to 512 [ 199.275940][ T7923] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 199.275956][ T7923] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 199.278279][ T7923] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.682: bg 0: block 104: invalid block bitmap [ 199.278296][ T7923] loop5: lost filesystem error report for type 5 error -117 [ 199.278410][ T7921] tipc: Enabling of bearer rejected, already enabled [ 199.278612][ T7923] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 199.278631][ T7923] loop5: lost filesystem error report for type 5 error -117 [ 199.278775][ T7923] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.682: invalid indirect mapped block 1 (level 1) [ 199.278789][ T7923] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 199.279270][ T7923] EXT4-fs (loop5): 1 truncate cleaned up [ 199.279782][ T7923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.391156][ T7920] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.476902][ T7938] loop3: detected capacity change from 0 to 1024 [ 199.492973][ T7937] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 199.515076][ T7938] EXT4-fs (loop3): Unsupported encryption level 255 [ 199.526335][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.722104][ T7048] IPVS: starting estimator thread 0... [ 199.776358][ T7966] loop3: detected capacity change from 0 to 512 [ 199.788513][ T7966] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 199.788676][ T7966] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 199.788688][ T7966] EXT4-fs (loop3): group descriptors corrupted! [ 199.797329][ T7966] __nla_validate_parse: 1 callbacks suppressed [ 199.797342][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.692'. [ 199.797356][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 199.810128][ T7965] IPVS: using max 60 ests per chain, 144000 per kthread [ 199.834251][ T7963] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20002 [ 199.962299][ T7975] tipc: Enabling of bearer rejected, already enabled [ 200.048178][ T7977] ip_tables: iptables: counters copy to user failed while replacing table [ 200.462003][ T7987] loop3: detected capacity change from 0 to 512 [ 200.500675][ T7987] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 200.500692][ T7987] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 200.528493][ T7987] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.697: bg 0: block 104: invalid block bitmap [ 200.528516][ T7987] loop3: lost filesystem error report for type 5 error -117 [ 200.528675][ T7987] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 200.528685][ T7987] loop3: lost filesystem error report for type 5 error -117 [ 200.529669][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 200.529685][ C0] EXT4-fs (loop3): initial error at time 200: ext4_validate_block_bitmap:436 [ 200.529697][ C0] EXT4-fs (loop3): last error at time 200: ext4_mb_clear_bb:6680 [ 200.565215][ T7987] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.697: invalid indirect mapped block 1 (level 1) [ 200.565241][ T7987] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 200.589268][ T7987] EXT4-fs (loop3): 1 truncate cleaned up [ 200.594666][ T7987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.882161][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.982857][ T8011] IPv6: addrconf: prefix option has invalid lifetime [ 201.017338][ T8011] loop3: detected capacity change from 0 to 1024 [ 201.028743][ T8011] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 201.040722][ T8011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.083615][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 201.083648][ T8017] netlink: 48 bytes leftover after parsing attributes in process `syz.1.704'. [ 201.087951][ T8014] netlink: 252 bytes leftover after parsing attributes in process `syz.3.701'. [ 201.088171][ T8011] netlink: 252 bytes leftover after parsing attributes in process `syz.3.701'. [ 201.166742][ T4708] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 201.178224][ T4708] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 201.178439][ T4708] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 201.178597][ T4708] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 201.178761][ T4708] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 201.178904][ T4708] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 201.179045][ T4708] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 201.179449][ T4708] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 201.206813][ T4708] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 201.207009][ T4708] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 201.586269][ T8033] loop8: detected capacity change from 0 to 512 [ 201.592455][ T8033] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 201.592471][ T8033] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 201.597140][ T8033] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.711: bg 0: block 104: invalid block bitmap [ 201.597161][ T8033] loop8: lost filesystem error report for type 5 error -117 [ 201.597519][ T8033] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 201.597532][ T8033] loop8: lost filesystem error report for type 5 error -117 [ 201.597726][ T8033] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.711: invalid indirect mapped block 1 (level 1) [ 201.597742][ T8033] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 201.598134][ T8033] EXT4-fs (loop8): 1 truncate cleaned up [ 201.636813][ T8033] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.862606][ T6950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.895555][ T8044] sctp: [Deprecated]: syz.5.715 (pid 8044) Use of int in max_burst socket option deprecated. [ 201.895555][ T8044] Use struct sctp_assoc_value instead [ 201.922967][ T7458] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.006527][ T7060] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.043744][ T8049] loop8: detected capacity change from 0 to 256 [ 202.044216][ T8049] vfat: Bad value for 'uid' [ 202.044225][ T8049] vfat: Bad value for 'uid' [ 202.084163][ T7060] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.101206][ T8049] syz_tun: entered promiscuous mode [ 202.102591][ T8049] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 202.155436][ T7060] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.206066][ T8054] loop7: detected capacity change from 0 to 512 [ 202.212220][ T8054] EXT4-fs: Ignoring removed nobh option [ 202.243740][ T7060] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.245010][ T8054] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.282110][ T8054] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #2: block 3: comm syz.7.720: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 202.325344][ T4721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.326281][ T4721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.328629][ T4721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.329248][ T4721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.338678][ T4721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.489121][ T7363] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.533236][ T7060] bridge_slave_1: left allmulticast mode [ 202.533258][ T7060] bridge_slave_1: left promiscuous mode [ 202.533348][ T7060] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.534190][ T7060] bridge_slave_0: left allmulticast mode [ 202.534200][ T7060] bridge_slave_0: left promiscuous mode [ 202.534258][ T7060] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.582081][ T8055] mmap: syz.8.721 (8055) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 202.625973][ T8072] loop7: detected capacity change from 0 to 512 [ 202.646390][ T8072] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 202.646432][ T8072] EXT4-fs (loop7): failed to initialize system zone (-117) [ 202.646492][ T8072] EXT4-fs (loop7): mount failed [ 202.794807][ T8076] EXT4-fs error (device loop5): ext4_xattr_inode_iget:473: comm syz.5.724: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 202.794829][ T8076] loop5: lost filesystem error report for type 5 error -117 [ 202.795428][ T8076] EXT4-fs (loop5): 1 orphan inode deleted [ 202.799167][ T8076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.857920][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.895909][ T7060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.909394][ T7060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.920739][ T7060] bond0 (unregistering): Released all slaves [ 202.924619][ T7060] bond1 (unregistering): Released all slaves [ 202.965349][ T9] syz2: Port: 1 Link DOWN [ 202.977819][ T7060] tipc: Disabling bearer [ 202.978036][ T7060] tipc: Left network mode [ 203.049049][ T8079] sctp: [Deprecated]: syz.5.725 (pid 8079) Use of int in max_burst socket option deprecated. [ 203.049049][ T8079] Use struct sctp_assoc_value instead [ 203.308167][ T8103] netlink: 16 bytes leftover after parsing attributes in process `syz.8.731'. [ 203.417393][ T8108] IPVS: set_ctl: invalid protocol: 137 172.20.20.65:20003 [ 203.463453][ T8061] rxe_eth0 speed is unknown, defaulting to 1000 [ 203.477876][ T8110] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 203.478029][ T8110] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 203.478150][ T8110] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #13: comm syz.5.732: iget: bad i_size value: 12154757448730 [ 203.478169][ T8110] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 203.478870][ T8110] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.732: couldn't read orphan inode 13 (err -117) [ 203.478893][ T8110] loop5: lost filesystem error report for type 5 error -117 [ 203.503911][ T8110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.585918][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.852575][ T4399] 8021q: adding VLAN 0 to HW filter on device eth16 [ 203.921216][ T7060] hsr_slave_0: left promiscuous mode [ 203.927413][ T7060] hsr_slave_1: left promiscuous mode [ 203.928128][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.928139][ T7060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.929320][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.929332][ T7060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.951563][ T7060] veth1_macvtap: left promiscuous mode [ 203.951589][ T7060] veth0_macvtap: left promiscuous mode [ 203.951636][ T7060] veth1_vlan: left promiscuous mode [ 203.951666][ T7060] veth0_vlan: left promiscuous mode [ 204.115735][ T8151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.313821][ T7060] team0 (unregistering): Port device team_slave_1 removed [ 204.329301][ T7060] team0 (unregistering): Port device team_slave_0 removed [ 204.409989][ T4712] Bluetooth: hci0: command tx timeout [ 204.447282][ T8151] netlink: 'syz.5.740': attribute type 4 has an invalid length. [ 204.447544][ T4769] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19) [ 204.470538][ T7059] smc: removing ib device syz2 [ 204.497847][ T5693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.681195][ T8171] syzkaller0: entered promiscuous mode [ 204.681213][ T8171] syzkaller0: entered allmulticast mode [ 204.926962][ T8185] syzkaller0: left promiscuous mode [ 204.926983][ T8185] syzkaller0: left allmulticast mode [ 205.092368][ T8184] netlink: 72 bytes leftover after parsing attributes in process `syz.5.748'. [ 205.135623][ T7059] ================================================================== [ 205.135635][ T7059] BUG: KASAN: slab-use-after-free in kobject_uevent_net_broadcast+0x110/0x53c [ 205.135658][ T7059] Read of size 8 at addr ffff0000d6bd4550 by task kworker/u8:45/7059 [ 205.135666][ T7059] [ 205.135672][ T7059] CPU: 0 UID: 0 PID: 7059 Comm: kworker/u8:45 Tainted: G L syzkaller #0 PREEMPT [ 205.135683][ T7059] Tainted: [L]=SOFTLOCKUP [ 205.135686][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 205.135691][ T7059] Workqueue: ib-unreg-wq ib_unregister_work [ 205.135703][ T7059] Call trace: [ 205.135706][ T7059] show_stack+0x2c/0x3c (C) [ 205.135718][ T7059] __dump_stack+0x30/0x40 [ 205.135728][ T7059] dump_stack_lvl+0xd8/0x12c [ 205.135738][ T7059] print_address_description+0xb0/0x238 [ 205.135745][ T7059] print_report+0x68/0x84 [ 205.135752][ T7059] kasan_report+0x8c/0xc4 [ 205.135762][ T7059] __asan_report_load8_noabort+0x20/0x2c [ 205.135771][ T7059] kobject_uevent_net_broadcast+0x110/0x53c [ 205.135780][ T7059] kobject_uevent_env+0x518/0x944 [ 205.135788][ T7059] kobject_uevent+0x2c/0x3c [ 205.135796][ T7059] device_del+0x5f8/0x71c [ 205.135805][ T7059] remove_one_compat_dev+0x5c/0x7c [ 205.135814][ T7059] disable_device+0x184/0x240 [ 205.135823][ T7059] __ib_unregister_device+0x214/0x33c [ 205.135832][ T7059] ib_unregister_work+0x20/0x38 [ 205.135840][ T7059] process_scheduled_works+0x91c/0x1250 [ 205.135850][ T7059] worker_thread+0x798/0xbd0 [ 205.135859][ T7059] kthread+0x304/0x3d4 [ 205.135866][ T7059] ret_from_fork+0x10/0x20 [ 205.135874][ T7059] [ 205.135876][ T7059] Allocated by task 8061: [ 205.135879][ T7059] kasan_save_track+0x40/0x78 [ 205.135886][ T7059] kasan_save_alloc_info+0x40/0x50 [ 205.135894][ T7059] __kasan_kmalloc+0x9c/0xb4 [ 205.135901][ T7059] __kmalloc_cache_noprof+0x2f4/0x5fc [ 205.135907][ T7059] uevent_net_init+0xcc/0x2a0 [ 205.135914][ T7059] ops_init+0x2cc/0x528 [ 205.135922][ T7059] setup_net+0x118/0x2fc [ 205.135930][ T7059] copy_net_ns+0x454/0x698 [ 205.135938][ T7059] create_new_namespaces+0x304/0x50c [ 205.135945][ T7059] unshare_nsproxy_namespaces+0x120/0x170 [ 205.135952][ T7059] ksys_unshare+0x438/0x6e0 [ 205.135959][ T7059] __arm64_sys_unshare+0x40/0x54 [ 205.135965][ T7059] invoke_syscall+0x98/0x244 [ 205.135974][ T7059] el0_svc_common+0xec/0x23c [ 205.135982][ T7059] do_el0_svc+0x4c/0x5c [ 205.135990][ T7059] el0_svc+0x60/0x1d8 [ 205.135995][ T7059] el0t_64_sync_handler+0x44/0x104 [ 205.136001][ T7059] el0t_64_sync+0x198/0x19c [ 205.136007][ T7059] [ 205.136009][ T7059] Freed by task 8061: [ 205.136012][ T7059] kasan_save_track+0x40/0x78 [ 205.136018][ T7059] kasan_save_free_info+0x54/0x6c [ 205.136025][ T7059] __kasan_slab_free+0x74/0xa4 [ 205.136032][ T7059] kfree+0x188/0x658 [ 205.136037][ T7059] uevent_net_exit+0x1b0/0x1cc [ 205.136043][ T7059] ops_undo_list+0x3cc/0x81c [ 205.136051][ T7059] setup_net+0x2a0/0x2fc [ 205.136059][ T7059] copy_net_ns+0x454/0x698 [ 205.136066][ T7059] create_new_namespaces+0x304/0x50c [ 205.136073][ T7059] unshare_nsproxy_namespaces+0x120/0x170 [ 205.136081][ T7059] ksys_unshare+0x438/0x6e0 [ 205.136087][ T7059] __arm64_sys_unshare+0x40/0x54 [ 205.136093][ T7059] invoke_syscall+0x98/0x244 [ 205.136101][ T7059] el0_svc_common+0xec/0x23c [ 205.136109][ T7059] do_el0_svc+0x4c/0x5c [ 205.136117][ T7059] el0_svc+0x60/0x1d8 [ 205.136122][ T7059] el0t_64_sync_handler+0x44/0x104 [ 205.136128][ T7059] el0t_64_sync+0x198/0x19c [ 205.136133][ T7059] [ 205.136134][ T7059] The buggy address belongs to the object at ffff0000d6bd4540 [ 205.136134][ T7059] which belongs to the cache kmalloc-32 of size 32 [ 205.136140][ T7059] The buggy address is located 16 bytes inside of [ 205.136140][ T7059] freed 32-byte region [ffff0000d6bd4540, ffff0000d6bd4560) [ 205.136147][ T7059] [ 205.136149][ T7059] The buggy address belongs to the physical page: [ 205.136153][ T7059] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000d6bd4f00 pfn:0x116bd4 [ 205.136160][ T7059] flags: 0x5ffc00000000200(workingset|node=0|zone=2|lastcpupid=0x7ff) [ 205.136168][ T7059] page_type: f5(slab) [ 205.136174][ T7059] raw: 05ffc00000000200 ffff0000c0001780 fffffdffc32e1910 fffffdffc3c5d890 [ 205.136180][ T7059] raw: ffff0000d6bd4f00 0000000000400023 00000000f5000000 0000000000000000 [ 205.136184][ T7059] page dumped because: kasan: bad access detected [ 205.136187][ T7059] [ 205.136188][ T7059] Memory state around the buggy address: [ 205.136192][ T7059] ffff0000d6bd4400: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 205.136197][ T7059] ffff0000d6bd4480: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 205.136201][ T7059] >ffff0000d6bd4500: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 205.136205][ T7059] ^ [ 205.136208][ T7059] ffff0000d6bd4580: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 205.136213][ T7059] ffff0000d6bd4600: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 205.136216][ T7059] ================================================================== [ 205.136220][ T7059] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 205.829269][ T4399] 8021q: adding VLAN 0 to HW filter on device eth17 [ 206.018593][ T7060] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.024063][ T7060] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.054078][ T7060] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.065885][ T7060] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.100778][ T7060] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.123759][ T7060] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.144409][ T7060] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.163902][ T7060] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.191737][ T4399] 8021q: adding VLAN 0 to HW filter on device eth19 [ 206.211098][ T7060] bridge_slave_1: left allmulticast mode [ 206.211113][ T7060] bridge_slave_1: left promiscuous mode [ 206.211178][ T7060] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.211842][ T7060] bridge_slave_0: left allmulticast mode [ 206.211851][ T7060] bridge_slave_0: left promiscuous mode [ 206.211900][ T7060] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.225702][ T7060] bridge_slave_1: left allmulticast mode [ 206.225716][ T7060] bridge_slave_1: left promiscuous mode [ 206.225770][ T7060] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.226373][ T7060] bridge_slave_0: left allmulticast mode [ 206.226381][ T7060] bridge_slave_0: left promiscuous mode [ 206.226427][ T7060] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.292819][ T7060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.293667][ T7060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.294271][ T7060] bond0 (unregistering): Released all slaves [ 206.323149][ T7060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.324004][ T7060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.324627][ T7060] bond0 (unregistering): Released all slaves [ 206.351823][ T7060] tipc: Disabling bearer [ 206.351868][ T7060] tipc: Left network mode [ 206.575488][ T4399] 8021q: adding VLAN 0 to HW filter on device eth18 [ 206.589253][ T7060] hsr_slave_0: left promiscuous mode [ 206.589430][ T7060] hsr_slave_1: left promiscuous mode [ 206.596322][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.596336][ T7060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.596584][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.596593][ T7060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.597801][ T7060] hsr_slave_0: left promiscuous mode [ 206.597973][ T7060] hsr_slave_1: left promiscuous mode [ 206.598185][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.598193][ T7060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.598380][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.598388][ T7060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.619864][ T7060] veth1_macvtap: left promiscuous mode [ 206.619883][ T7060] veth0_macvtap: left promiscuous mode [ 206.619925][ T7060] veth1_vlan: left promiscuous mode [ 206.619954][ T7060] veth0_vlan: left promiscuous mode [ 206.620392][ T7060] veth1_macvtap: left promiscuous mode [ 206.620408][ T7060] veth0_macvtap: left promiscuous mode [ 206.620441][ T7060] veth1_vlan: left promiscuous mode [ 206.620465][ T7060] veth0_vlan: left promiscuous mode [ 206.729421][ T7060] team0 (unregistering): Port device team_slave_1 removed [ 206.736155][ T7060] team0 (unregistering): Port device team_slave_0 removed [ 206.809126][ T7060] team0 (unregistering): Port device team_slave_1 removed [ 206.822150][ T7060] team0 (unregistering): Port device team_slave_0 removed [ 207.016400][ T7060] IPVS: stop unused estimator thread 0... [ 207.245634][ T4399] 8021q: adding VLAN 0 to HW filter on device eth20 [ 207.348498][ T4399] 8021q: adding VLAN 0 to HW filter on device eth22 [ 207.447951][ T4399] 8021q: adding VLAN 0 to HW filter on device eth21 [ 207.549493][ T4399] 8021q: adding VLAN 0 to HW filter on device eth23 [ 207.654621][ T4399] 8021q: adding VLAN 0 to HW filter on device eth25 [ 207.758320][ T4399] 8021q: adding VLAN 0 to HW filter on device eth24 [ 207.867196][ T4399] 8021q: adding VLAN 0 to HW filter on device eth26 [ 208.063869][ T4399] 8021q: adding VLAN 0 to HW filter on device eth27