last executing test programs: 1m55.35908137s ago: executing program 32 (id=558): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000e) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r4, 0x301, 0x800000, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000340)={{}, {}, [{0x2, 0x4}, {0x2, 0x7}, {0x2, 0x6}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x6}]}, 0x54, 0x3) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141}, 0x94) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 1m53.941350704s ago: executing program 33 (id=568): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getpeername(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x7, 0x7fffffff, {"79c15cee762ae6ebca0fbfdf520c2287"}, 0x1, 0x7ff, 0x7}}}, 0xa0) write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz0\x00', {0x0, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0xdfe8, 0x0, 0x8, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc21, 0x0, 0x0, 0x2], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x8, 0xfffffffc, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x400000, 0xfffffffd, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x4], [0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff], [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956]}, 0x45c) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) unshare(0x22020400) ftruncate(r4, 0xffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) times(0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0xfffffff9, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa}, 0x80, 0x0}, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r8, 0x16, 0x0, @void}, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000001200)=0x1a, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000cc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000140)="e8dd", 0x2}, 0x68) ioctl$UI_DEV_CREATE(r1, 0x5501) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x3e}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x65}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_BYTEORDER_OP={0x8}]}}}]}]}], {0x14}}, 0xec}}, 0x0) close$binfmt(r0) 1m2.149814586s ago: executing program 34 (id=889): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x590, 0x1c8, 0x3f0, 0x3f0, 0xf8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x7}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb0}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0xc004, 0x3, 0x44b, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@mcast2, 0x3a, 0x2d, 0x120}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) 41.724509788s ago: executing program 1 (id=1012): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0x10000, 0x1, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x0, 0x2}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_mount_image$ext4(&(0x7f0000009840)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000100)={[{@noblock_validity}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noload}, {@dioread_lock}, {@jqfmt_vfsv1}, {@noacl}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs289vFFUcAPDvTH9gBWxF/AX+qKKR+KOlgMrBgxpNPGBiogc9eGjahSALGFoTISSCMXgyxsS78ei/4MmTMZ5MvOrdkBDTi+BpzezMtLvLdumW3S6yn08yu+/Nj33vuzNv58282QCG1nT2kkTsiIg/ImIyzzavMJ2/XVu5sHB95cJCErXau38n9fX+WbmwUK5abre9yOxPI9Ivktjbptylc+dPzlerlbNFfnb51MezS+fOv3Di1PzxyvHK6YNHjhw+NPfySwdf7Emc2yMtUm998M3bR79qir8ljh6Z7rTw6Vqtx8UN1s6GdDI6wIrQlZGIyHbXWL39T8ZIrO28yXjz84FWDuirHeX5ur2LNeAOlvXmG2nyMCzKE312/VtOrZ2AV/vX/Ri4q6/lF0BZ3NeKKV8yunrHYKzl+raXpiPi/Yv/fpdN0Z/7EAAATX7K+j/PZ72d1v5fGg80rHdPMTY0FRH3RsSuiLgvTsfuiLg/or7ugxHxUJfltw6S3Nj/Sa9sKrANyvp/rxRjW839v7L3F1MjRW5nPf6x5NiJauVA/p18WHSjK3PtPry2LX9/4/ev1yu/sf+XTVn5ZV+wqMeV0W3N2yzOL8/fatylq5ci9oy2iz9ZHQlIIuLhiNizyTJOPPvDI+stu3n8HfRgnKn2fcQz+f6/GC3xl5LO45Ozd0W1cmC2PCpu9Otvl99Zr/xbir8Hsv1/d9vjfzX+qaRxvHap+zIu//nlutc0mz3+x5P36unxYt6n88vLZ+cixpOjeaUb5x9c27bMl+tn8e/f177974q1b2JvRGQH8aMR8VhEPF7U/YmIeDIi9nWI/5fXn/qodd7EhuPvryz+xa72/1piPFrntE+MnPz5x6ZCp9aSRfzXO+//w/XU/mLORn7/NlKvzR3NAAAA8P+T1p8BTNKZ1XSazszkzwTujkirZ5aWnzt25pPTi/mzglMxlpZ3uiYb7ofOFZf1ef5SROSPFpTLDxX3jb8dmajnZxbOVBcHHTwMue3rtP8s89fIoGsH9J3/a8Hw6qr9J/2rB7D1nP9heHXX/rf1rR7AVhtr1/4nBlETYOu1O/9/NoB6AFuvpf0b9oMh4v4fDC/tH4aX9g9DaWkibv4n+Y6J8pM2ufkdm4ix26IafUtEeltUQ6JPicH+LgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTKfwEAAP//DWXfgQ==") sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fstatfs(r5, 0xfffffffffffffffe) io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008840) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000140)={[{@nodioread_nolock}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@data_err_ignore}]}, 0x1, 0x54e, &(0x7f0000000880)="$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") r8 = semget$private(0x0, 0x20000000102, 0x0) semop(r8, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}], 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 41.609364777s ago: executing program 1 (id=1015): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0xfe, r0, &(0x7f0000000080)={0x10000013}) syz_emit_ethernet(0x82, &(0x7f0000000540)={@multicast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0xa, 0x5, 0x56, 0x2}]}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1017c2, 0x80) mount(&(0x7f00000001c0), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r2, r3+10000000}, &(0x7f00000000c0)) 40.474666429s ago: executing program 1 (id=1029): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}, 0x6e6bb6}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x440088c4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000004c0)=0xd) accept4$nfc_llcp(r0, &(0x7f0000000240), &(0x7f0000000300)=0x60, 0x80800) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000100)=""/228, 0xe4}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0xc) write(r1, &(0x7f0000000100)="3c3e0f2397b4d84500b5f812365f00000000000000", 0xff40) write$cgroup_subtree(r1, &(0x7f0000000200)={[{0x2d, 'io'}, {0x2d, 'hugetlb'}, {0x2b, 'io'}, {0x2d, 'cpuset'}, {0x2b, 'freezer'}]}, 0x22) 39.97345561s ago: executing program 1 (id=1031): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180500000000000000000000060001008500000011000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180500000000000000000000060001008500000011000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x4) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000040), 0x14c98, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}, {@cache_mmap}, {@fscache}, {@access_uid={'access', 0x3d, 0xee00}}, {@noextend}]}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000180)='K', 0x1}], 0x2}}], 0x1, 0x60008080) (async) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000180)='K', 0x1}], 0x2}}], 0x1, 0x60008080) sendto$inet6(r0, &(0x7f0000000300), 0x48, 0x3b00, 0x0, 0xfffffffffffffdfd) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x10d040, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r2, 0x89f0, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x7ac7, 0x0, "5dee090000000096cdd48097a40100"}) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) ppoll(&(0x7f0000000040)=[{r5, 0x8204}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000040)=[{r5, 0x8204}], 0x1, 0x0, 0x0, 0x0) connect$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r6, &(0x7f0000000100)='select \n', 0x10) (async) write(r6, &(0x7f0000000100)='select \n', 0x10) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000002c0)={0x5, 0x0, 0x4, {0x9, @sliced={0x9, [0x1, 0x6, 0x8, 0x5, 0x4, 0x6, 0x4, 0x1c4, 0x9, 0x7, 0x8, 0x3, 0x5, 0x415, 0x6, 0x4, 0x8001, 0x101, 0x0, 0x7, 0x1800, 0x5, 0x800, 0x1, 0x8589, 0x1, 0x3, 0x3b, 0x5, 0x6, 0x4, 0x6f9c, 0x200, 0x9, 0xff, 0x3, 0x0, 0x2, 0x80, 0x0, 0x400, 0x8, 0x8001, 0x10, 0x3, 0xfff, 0x80, 0x5], 0x8000}}, 0x386f}) 39.053534015s ago: executing program 1 (id=1051): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x307042, &(0x7f0000000040)={@align=0x7, {0x7, 0xf, 0x180, 0x2}}, 0xff, &(0x7f00000001c0), &(0x7f0000000200)=0x200}) r1 = socket$kcm(0xa, 0x3, 0x3a) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000004021dff0010000000e8fe55a1180015000600144003600e1205875d000008000000000000000001402000", 0x2f}], 0x1}, 0x8800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r3 = getpid() (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20"], 0x88}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) (async) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) recvmmsg(r5, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/216, 0xd8}, 0x10001}], 0x2, 0x40010000, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003a00290200800000fadbdf2502000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) (async) r7 = syz_open_dev$I2C(&(0x7f0000001940), 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000840)={[{0x2d, 'rlimit'}, {0x2b, 'net'}]}, 0xd) (async) ioctl$I2C_PEC(r7, 0x703, 0x41c5) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="b86295b0a8896ab01611e165e5972d02e46ec0247438f334bec8e0c48ee51aa7a573286d1998c093d5e21cf29a842ded9aacbff1893a40640e72c8a245804f2415eaa2f268819c8b73135c45e0325e813dec547e08fa05137fc675e1541c750a927f3fc31768c6a6c2f9f46663118d2b3afa65d65b11f1c8dfdec5184c11142b32ee473031c94a0668ae2e440df7c1569a896147b5b6c6c503fef5ab1a46d2b269b7c5f608112f8b8500"], 0x1a8}, 0x1, 0x0, 0x0, 0x84050}, 0x10000800) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2010759, &(0x7f00000000c0)={[{@noload}, {@noblock_validity}, {@discard}, {@nodiscard}, {@abort, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@noquota}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@lazytime}, {@resuid}, {@orlov}, {@noquota}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x6, 0x50c, &(0x7f00000002c0)="$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") 38.817588154s ago: executing program 1 (id=1058): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) 37.997581626s ago: executing program 35 (id=1058): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) 33.916131594s ago: executing program 3 (id=1093): mmap$IORING_OFF_SQ_RING(0x0, 0xb, 0x2000000, 0x100010, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) 33.021422388s ago: executing program 7 (id=1101): mlockall(0x3) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xd46080ae, @remote, 0x1}, 0x1c, 0x0}}], 0x1, 0x2004c0d0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x10) syz_clone3(&(0x7f00000000c0)={0x280040700, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0, 0xf2}, 0x5d) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) 33.006713279s ago: executing program 3 (id=1102): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file1/file0\x00', 0x0, 0x10}, 0x18) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f00000000c0)='./file1/file0\x00', 0x1000056, &(0x7f0000000040)={[{@nouid32}, {@oldalloc}, {@noquota}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@orlov}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000001000/0x3000)=nil) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file1/file0\x00', 0x0, 0x10}, 0x18) (async) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f00000000c0)='./file1/file0\x00', 0x1000056, &(0x7f0000000040)={[{@nouid32}, {@oldalloc}, {@noquota}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@orlov}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) (async) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000001000/0x3000)=nil) (async) 32.885520009s ago: executing program 3 (id=1103): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)={[{@user_xattr}, {@data_err_ignore}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inlinecrypt}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x19, 0xfff3}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000000)={0x21, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0xda90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x10) r4 = socket(0x200000000000011, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 32.318486973s ago: executing program 7 (id=1106): pipe2$9p(&(0x7f0000000080), 0x90800) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) listen(r0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf806, 0x5, 0x0, 0x1}, 0x14) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback={0xfffffffffffffff6}, 0x1}, 0x1c) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 31.442849051s ago: executing program 3 (id=1109): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, 0x0, 0x0) 31.207666813s ago: executing program 7 (id=1113): syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x1, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @loopback, {[@timestamp_prespec={0x44, 0x44, 0xf, 0x3, 0xd, [{@empty, 0x101}, {@broadcast, 0x10000}, {@broadcast, 0x8000}, {@multicast1, 0xc}, {@rand_addr=0x64010100}, {@rand_addr=0x64010101, 0x400}, {@private=0xa010102}, {@multicast1, 0x3}]}, @timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) r0 = semget(0x3, 0x7, 0x100) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000000)=""/153) r1 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r2) r4 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x141660) io_setup(0x6, &(0x7f00000000c0)=0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_snmp6\x00') io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x7f, r4, 0x0, 0x0, 0x80000001, 0x0, 0x3, r6}]) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)) keyctl$link(0x8, r1, r3) r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000380)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r8, &(0x7f0000000640)='blacklist\x00', &(0x7f0000000680)={'syz', 0x3}, 0x0) r9 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r8, r2, r9, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001500)={'veth1_to_team\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r7, {r7}}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_tracing={0x1a, 0x5, &(0x7f00000000c0)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @jmp={0x5, 0x0, 0xb, 0x5, 0xa, 0xc, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x0, 0x1, 0x3, 0x2, 0xffffffffffffffe0, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000500)=""/4096, 0x41100, 0x30, '\x00', r10, 0x1a, r7, 0x8, &(0x7f0000001540)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001580)={0x3, 0xd, 0x6, 0x1}, 0x10, 0x2cecc, r11, 0x3, &(0x7f0000001600)=[r7], &(0x7f0000001640)=[{0x0, 0x2, 0x4, 0x5}, {0x0, 0x2, 0xe, 0x9}, {0x2, 0x5, 0x10, 0x1}], 0x10, 0x1}, 0x94) syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac1414bbac1414aa4e214001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES16=0x0], 0x0) 31.162683253s ago: executing program 7 (id=1114): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x1}}, './bus\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000600)={@multicast, @remote, @void, {@mpls_mc={0x8848, {[], @ipv6=@generic={0x5, 0x6, "f557c3", 0x0, 0x5c, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000003c0), 0x4) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = dup3(r0, r1, 0x80000) getsockname$inet(r7, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000280)=0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './bus/file0\x00'}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7, 0x2, 0x2, 0x8000, r7, 0x8, '\x00', r8, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x1, @value=r9}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)="83b401", &(0x7f0000000180), 0xd, r10}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', r8, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r12, 0x6a, 0x4, 0x20000002, 0x4) syz_emit_ethernet(0x8a, &(0x7f0000000bc0)={@local, @empty, @void, {@llc_tr={0x11, {@snap={0x3, 0xb080656178718752, '2', "e19252", 0x1a, "85806d5404c24c37c915ac0a5512f78e9b49cd9a795bb3363c8070c5b34273fc9fc9255e2b8661676bffd1ac1f31ff319e2af5f51c5fb4d9874f885b2257576260e2c773feb608d9cf04c81bb1e652845d8f6c9851e0441d083e86f315d8914aa3befd951ed3947684f67eda4f23857d781c4bfa"}}}}}, 0x0) write$tun(r3, &(0x7f00000013c0)={@val={0x0, 0x8906}, @void, @ipv4=@tcp={{0x1a, 0x4, 0x1, 0x37, 0x189, 0x66, 0x0, 0xdf, 0x6, 0x0, @loopback, @rand_addr=0x64010101, {[@end, @timestamp_prespec={0x44, 0x24, 0x15, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0xffffff36}, {@remote, 0x795}, {@loopback, 0xfffff8a8}, {@loopback, 0x5}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xb7, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x3}, {@multicast2, 0x8faa}, {@multicast2, 0x7}, {@remote, 0x8001}, {@multicast2, 0x1}]}]}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x9, 0x10, 0xf3a7, 0x0, 0xda, {[@mptcp=@add_addr={0x1e, 0xd, 0x0, 0xd, 0x8, @multicast1, 0x6, 'w?v'}]}}, {"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"}}}}, 0x18d) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@bh}, {@mblk_io_submit}, {@usrquota}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 30.750597488s ago: executing program 3 (id=1115): r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x208000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='/', 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x27}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x4e24, 0x3, 0x2, 0x0, 0x0, 0x2f}, {@in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x2, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'aegis256-generic\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = io_uring_setup(0x2ea5, &(0x7f0000000000)={0x0, 0xfffffffd, 0x1403, 0x40, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000001c0)={0x6, 0x8, 0x80000001}) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1c0000000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) pipe2(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r11, 0x10, 0xffffffff80000000) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0x10}, {0x0, 0xfff1}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 30.68167091s ago: executing program 7 (id=1116): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300090c000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000000000000000030005000000000002000000000000000000000000000000020013000b00"], 0x60}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043c07a9341467496be83f0e7a12182f8781"], 0xa) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x60002, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000280)={0x140, 0x960, 0x780, 0x2000, 0x4, 0x5, 0x1, 0x2, {0xd, 0x2}, {0x1000, 0x5}, {0x7, 0x9}, {0x1, 0x9}, 0x1, 0x2, 0x0, 0x0, 0x1, 0x3, 0x4, 0x9, 0x6e63689, 0xfffffffb, 0x8, 0x7cc, 0x0, 0x2, 0x3}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x4, 0x0, &(0x7f0000000b40)) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00') preadv(r5, &(0x7f0000000800)=[{&(0x7f0000000740)=""/83, 0x53}], 0x1, 0xe, 0x8) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/60, 0x3c}], 0x1, &(0x7f0000001880)=""/4096, 0x1000}, 0xf8d}], 0x1, 0x10122, 0x0) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000180)={'ip6erspan0\x00', @ifru_settings={0x4, 0x8, @cisco=&(0x7f0000000100)={0xf, 0x9}}}) socket$netlink(0x10, 0x3, 0x9) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_misc(r6, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, 0x0, 0x4000001) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x1, @mcast2, 0x3}, 0x1c) 30.606322666s ago: executing program 3 (id=1118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050040000500060008"], 0x4a) 30.457635739s ago: executing program 7 (id=1120): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) (async, rerun: 64) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0xc031, 0xffffffffffffffff, 0xc51dd000) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) (async, rerun: 32) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async, rerun: 32) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000600)={0x4, &(0x7f0000000700)=[{0x2e, '\x00', @buffer={"456f0504a2db40ce2475004f6c7d78c877704d931d1edda3ad25e2caee52fc90", 0x20}, 0xbe}, {0x21, '\x00', @st={0x4, [{0x2, @svalue=0x8000000000000000}, {0x1, @svalue=0x7fffffff}, {0x2, @svalue=0x7}, {0x3, @svalue=0x5}]}, 0x3}, {0x34, '\x00', @data=0x2, 0x4}, {0x18, '\x00', @st={0x4, [{0x2, @svalue=0xe682}, {0x1, @svalue=0x1}, {0x3, @uvalue=0x4}, {0x2, @svalue=0x9}]}, 0x401}]}) (async) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000080)=0x6) 30.443597547s ago: executing program 36 (id=1120): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) (async, rerun: 64) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0xc031, 0xffffffffffffffff, 0xc51dd000) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) (async, rerun: 32) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async, rerun: 32) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000600)={0x4, &(0x7f0000000700)=[{0x2e, '\x00', @buffer={"456f0504a2db40ce2475004f6c7d78c877704d931d1edda3ad25e2caee52fc90", 0x20}, 0xbe}, {0x21, '\x00', @st={0x4, [{0x2, @svalue=0x8000000000000000}, {0x1, @svalue=0x7fffffff}, {0x2, @svalue=0x7}, {0x3, @svalue=0x5}]}, 0x3}, {0x34, '\x00', @data=0x2, 0x4}, {0x18, '\x00', @st={0x4, [{0x2, @svalue=0xe682}, {0x1, @svalue=0x1}, {0x3, @uvalue=0x4}, {0x2, @svalue=0x9}]}, 0x401}]}) (async) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000080)=0x6) 24.008172771s ago: executing program 6 (id=1166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xc01, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000000)=ANY=[], 0x2b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x4c}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002f2049eb6dd0d0303000000000000000000000000000800"], 0x1c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x3002, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f00000001c0)=0x1, 0x4) accept4$bt_l2cap(r6, &(0x7f0000000280)={0x1f, 0x0, @fixed}, &(0x7f00000002c0)=0xe, 0x800) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) 22.518410621s ago: executing program 6 (id=1172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000060a010400000000090000000a0000010900010073797a310000000018000480140001800a0001007265646972000000040002800900020073797a3200000000140000001100"], 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6111b712000011ff00000000000000120000000000000001ff02000007ffffff000000000000000134ca5305caaebc"], 0xfdef) 22.05765183s ago: executing program 6 (id=1176): pipe2$9p(&(0x7f0000000080), 0x90800) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) listen(r0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf806, 0x5, 0x0, 0x1}, 0x14) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x7ffffffe}, 0x1c) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 21.021365815s ago: executing program 6 (id=1180): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c801}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x130e0e0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d6f64653d3030303030303030a73030303030303030303030303030352c"]) 20.827827794s ago: executing program 6 (id=1183): r0 = socket(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000080), 0x90800) sendmsg$unix(r0, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xc000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf806, 0x5, 0x0, 0x1}, 0x14) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) recvfrom$inet(r6, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r6, 0x1) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) 20.30570938s ago: executing program 6 (id=1189): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) clock_gettime(0x0, &(0x7f0000006800)) recvmmsg(r2, &(0x7f0000006680)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xfff}], 0x2, 0x100, 0x0) connect$unix(r1, &(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000740)={r4, 0x0, 0x0, 0x8000000}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYRES8=r2], 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r6, 0x0, 0x0}, 0x20) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$alg(0x26, 0x5, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000001080)) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000001040)={0x4, 0x3, 0x7, 0x0, 0xd, "4a0909d0ebddd5853657761b8ecc52f7f41b05"}) write$UHID_INPUT(r7, &(0x7f0000000000)={0xfc, {"fce3ad0eed0d07f91b50091887f70706d038e7ff7fc6e5539b0d3c0a8b089b3d35383a340890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b233107200773090acd3b78130daa61d8e8040040005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bde7095d6a345badc56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a91e0dad47f36fd9f73c152a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76ea0270e4c10d64cd5a62427264f2377fe763c434708337c8de98f371bb943a8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa7ea5677747430af4162b987b80c3e001cd34e1c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df11847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e30400f7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad046581927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fc83c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad83872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddba02635478d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f79400000000ddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df04b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e785419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02b7fa64b6de3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd502ac8044ae185d2ba300004e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f08df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88e4facfd4c735a20307c737afa2d60399473296b831dbd933d93990f00064279b10ea0c5833f41f157ea2302993dbe97fb1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea10c00a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeee964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac3fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2102596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e42df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480ec43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e069160f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df076f0ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f87296ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb90372927db6ff959c0837d2e7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef869c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d050000008926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023dd0000000400", 0x1000}}, 0x1006) r8 = syz_open_dev$vim2m(&(0x7f0000000500), 0xb53d, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000540)={0xffffeffe, 0x1, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000000)={0x1f, 0x1, 0x4}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000000c0)=0x9) 19.949153878s ago: executing program 37 (id=1189): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) clock_gettime(0x0, &(0x7f0000006800)) recvmmsg(r2, &(0x7f0000006680)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xfff}], 0x2, 0x100, 0x0) connect$unix(r1, &(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000740)={r4, 0x0, 0x0, 0x8000000}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYRES8=r2], 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r6, 0x0, 0x0}, 0x20) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$alg(0x26, 0x5, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000001080)) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000001040)={0x4, 0x3, 0x7, 0x0, 0xd, "4a0909d0ebddd5853657761b8ecc52f7f41b05"}) write$UHID_INPUT(r7, &(0x7f0000000000)={0xfc, {"fce3ad0eed0d07f91b50091887f70706d038e7ff7fc6e5539b0d3c0a8b089b3d35383a340890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b233107200773090acd3b78130daa61d8e8040040005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bde7095d6a345badc56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a91e0dad47f36fd9f73c152a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76ea0270e4c10d64cd5a62427264f2377fe763c434708337c8de98f371bb943a8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa7ea5677747430af4162b987b80c3e001cd34e1c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df11847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e30400f7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad046581927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fc83c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad83872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddba02635478d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f79400000000ddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df04b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e785419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02b7fa64b6de3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd502ac8044ae185d2ba300004e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f08df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88e4facfd4c735a20307c737afa2d60399473296b831dbd933d93990f00064279b10ea0c5833f41f157ea2302993dbe97fb1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea10c00a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeee964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac3fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2102596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e42df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480ec43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e069160f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df076f0ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f87296ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb90372927db6ff959c0837d2e7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef869c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d050000008926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023dd0000000400", 0x1000}}, 0x1006) r8 = syz_open_dev$vim2m(&(0x7f0000000500), 0xb53d, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000540)={0xffffeffe, 0x1, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000000)={0x1f, 0x1, 0x4}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000000c0)=0x9) 17.44821971s ago: executing program 8 (id=1204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000005c0)=0x800008, 0x4) write(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = dup(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002740)={'syztnl1\x00', &(0x7f0000002680)={'syztnl1\x00', 0x0, 0x8000, 0x1, 0x9, 0x3ff, {{0x1a, 0x4, 0x1, 0x6, 0x68, 0x67, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x52, 0x3, [{0x7, 0xc, "1ce1308837639e201a46"}, {0x0, 0xa, "b0b997ea688bc18a"}, {0x7, 0xc, "1184b820142594941e17"}, {0x2, 0x11, "86af83d5a05050575cc8782b9e7d8a"}, {0x5, 0xc, "d5bd0fdf382a6764e89a"}, {0x1, 0xd, "1e28b3e659093c3cc7fd26"}]}, @noop]}}}}}) sendmmsg$inet6(r2, &(0x7f00000027c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xaf}, 0x1c, &(0x7f0000002340)=[{&(0x7f0000000500)="ec2faa723c003856f3f1dadfeffedc799ce1cddf9286cace64f6aa41a85987d9516f62477e8f1c66d29ceb54b55cb0d5c76bb0ef6cf9ab04f53159fe82fe3b069dd985704a9922b22d52b7ad5d01640596ff669e4a165c07523896998278a4fbf92e96da89c10accd3f2789893a2be272a4c0dac7db23d74d1de129748fa", 0x7e}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000002100)="e6a7de5932ea4d76d520fc5fee0fefd6028817ffeae3d4fdc3d7d94bd6b404f36858a4b45e7ec3348a3a57e227c789950e54afe2e7701d27d3cce1e0e243add3be469d12e60b061df162438b00296844f0302237d8b7a163bd0de49677e8b92e9cb5f7b5a4a79e868cb877183c079663d02c3af84adfafc9b7489fbd6cb7cc5f805974732982db631de1fcb6553e85030914e59a0e0007c3f8640b298b4f6e829bde33a999149a3532e1e4e71ce63e4014d49f50", 0xb4}, {&(0x7f00000021c0)="1ec4aa089ad3fbed4ab4a64b5cbdd25c5d572707d42749b926507229b34808efff373d95a1176266f32dee4cc824d52c6c890b73c6d05acfc9db14eaa66c0d91d16c78b038193ce4e8829429312301050f42d0d4d701865baee97f82a2e8ca9122e44b999b99e4b03b6a536387bbd0c7ffc246748101bd6ac0c6e57651e85a8735616fe02b88294e76aab5a2ddc8e660981c725d84d4954a8cd7b1eef46bd945", 0xa0}, {&(0x7f0000002280)="93aa4066382072043fffbb7a57069ecacad5258154fa1791252679fe378d28ea0b3971625fd6ad8baba5be58e4e9506ecf30adb1174728ebe1bb34635031656a653cd7bd9225524e7b3c8359047add3ee52f7d11e44b42", 0x57}, {&(0x7f0000002300)="89614e3980647c7ac477db8cbe697782795c32243a52efe0a50f7f2d5a", 0x1d}], 0x6, &(0x7f00000023c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x8, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x80}, @enc_lim={0x4, 0x1, 0x81}, @jumbo={0xc2, 0x4, 0xc8}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x84, 0x4, 0x0, 0x3, 0x0, [@remote, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x2c, 0x2, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0x1, [0xb]}}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x3b, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x1, [0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x9}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x54fe6bed}}, @flowinfo={{0x14, 0x29, 0xb, 0x401}}], 0x110}}, {{&(0x7f00000025c0)={0xa, 0x4e22, 0x4, @mcast1, 0x1}, 0x1c, &(0x7f0000002640)=[{&(0x7f0000002600)="879fd81c47951ce7d9a276a2e2e2be01939f9a5691761c84ab8abd2b18d13bddcedcd733b1b5", 0x26}], 0x1, &(0x7f0000002780)=[@pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r3}}}], 0x28}}], 0x2, 0x44000) r4 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r4, &(0x7f0000000000)="6000fc0340143340000000000000000000000000000000010000000000000000347eeb9a94dce54e", 0x28, 0x200400b4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty, 0x5}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f0000000440)={0x80}) socket$inet_mptcp(0x2, 0x1, 0x106) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113830000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee6ff80bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b8125690361eec3b181dcfd7c2fb2d1f8975b579a085bee32d414c1f3ab987a9de6385ae8021f4ca33b9b35fe817e98beb9cefe7f40fd6f0ea3affbdaaa897c70fb01d270a7b00d36fb5ab8fa92ac014a106e3e4decc68652503ca54fcef437d96c8a05d59ddcc8abf09cd77e93e940207b03189c5d4661e43df6f1f036c8d85a2ad7615a021f8cbe507ef94fb9f33315366e9ae080000001b532226b63b460d68808a67529637bf7f6731ad0cf1718bae3c8b9d2f89050cb496fe791381af6fab290900000000000000d640a5fde1f7d5eaa97cd25523fbd77300000000000000d67559b0c848aa3e7091f33e2dfc351e903ce85488fb25691249545bcf877011847df184bae6d3f5d0c016ec7d581d5b2fcb494d8c2df1929398ec5c3675ed16c27fff46a695eed7f50c531a612d5677b5e949ee4f16d10e41074702c4e89ee401ec2ec65f38f64189f1fa2cc0a42add3119025764759de2f093c26fe51d2f7635bb06bdf0b97d4a96cb0813e084232421c6026629fbf4c81954d11e154659b54fcf3468577295c700000000000000000000000000000000fe31e1e02dd54ac3c7af2b3d76a63b79ca6f9a20b26761254aee1352ad08118a58802cc8f107852b8f5382f0871255ce5c0b31e39637850330f520d03ed2aa076efa8401613537585d45bd27454beccdc32645cfe67921df3f2bbf88cacc83f82e916f0ee19ad20cdf5ce3b2ee147f78c1caf8b8024bac9809015b2210d7c2471dfd73f6eb"], &(0x7f0000000100)='GPL\x00'}, 0x94) 16.56105366s ago: executing program 8 (id=1207): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x3) clock_adjtime(0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0xb8, 0x30}, &(0x7f0000000700)=0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r2, 0x20, &(0x7f0000000540)={&(0x7f0000000340)=""/230, 0xe6, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x83}}, &(0x7f00000001c0)='GPL\x00', 0xd7, 0x0, &(0x7f0000000280), 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, r2, 0x8, &(0x7f00000002c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x9, 0x0, 0x1}, 0x10, r5, r2, 0x3, &(0x7f00000005c0)=[r0, r0], &(0x7f0000000600)=[{0x1, 0x2, 0x0, 0x5}, {0x5, 0x1, 0x8, 0x6}, {0x1, 0x4, 0x4, 0x3}], 0x10, 0x280}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.551315561s ago: executing program 8 (id=1211): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x9, 0x80, {}, {0xffffffffffffffff}, 0xc3c, 0x9}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="200000001d14ffff28bd7000fdfbdd2508000100"], 0x20}, 0x1, 0x0, 0x0, 0x40084}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@dioread_lock}, {@journal_checksum}], [{@fowner_eq={'fowner', 0x3d, r2}}]}, 0x1, 0x4e5, &(0x7f0000000500)="$eJzs3ctrXNcZAPBvZixZktX60VJsF2qDC+4Da/SgWGoLpau2C0OpoZsWXFUaK45GGqEZOZbwQk52XmQREhIIWWQZyF+QTZxNTCBknZBtyCI4JI4CSSAwYe7M2HrMyIotz8i6vx+M5r50v3Nm+M7ce+4rgNQ6XfuTiRiMiA8i4nB9dOMCp+tva3evT9VemahWL36RSZarjTcXbf7foYhYjYi+iPjX3yL+n9kat7y8MjtZLBYWq9VqNSLylbmFfHl55dyVucmZwkxhfmT8/MTE+PDY6MSu1fXm80/fvPDWP3rf/Oa5O7dfePftWrEGG/PW12M31aveE0fXTTsQEX9+HMG6INeoT3+3C8JDqX1/P4uIM0n+H45c8m0CaVD7+f2+erDd7NVq0zuNhYF9I5tsA2eyQxFRH85mh4bq2/A/j4FssVSu/P5yaWl+ur6tfCR6spevFAvDjX2FI9GTqY2PJMP3x0c3jY9FJNvAL+b6k/GhqVJxurNNHbDJoU35/3Wunv9AStjlh/SS/5BeD53/g7tbDqDz/P5Desl/SC/5D+kl/yG95D+kl/yH9JL/kF7b5X9vB8sBdNQ/L1yovarN69+nry4vzZaunpsulGeH5pamhqZKiwtDM6XSTHLNztyD1lcslRZG/hBL1/KVQrmSLy+vXJorLc1XLiXX9V8q9HSkVsBOHD1166NMRKz+sT95xbqffLkK+1u1mnFZP6RUrtsNENA1uv4hvX7EPn7bm4QBT7YWt+jdoK/15L/EwmMJB3RAttsFALrm7AnH/yCt9P9Deun/h/SyjQ88ZP9/PKj/X/sCe5f+f0ivwTbP//rJumd3DUfETyPiw1zPweazvoD9IPtZprH9f/bwr7fc0L83821yiKA3Ip559eLL1yYrlcWR2vQv702vvNKYPtqN8gM71czTZh4DAOm1dvf6VPPVybif/7V+EsLW+AcafZN9yTGEgbXMhnMVMrt07sLqjYg43ip+pvG88/qRj4G13Jb4xxrvmfoqkvIeSJ6b3pn4J9bF/9W6+Ccf+VOBdLhVa3+GW+VfNsnpuJd/G9ufwV06ttm+/cvea/9ybdq/UxvWtNo2xlOvPftp2/g3Ik62jN+M15fE2hy/VrazO6zjnf/++xft5lVfr6+nVfym2lC+MreQLy+vnEvuIzdTmB8ZPz8xMT48NjqRT/qo882e6q3+dPz929vVf6BN/Hp9P25Z/9q03+6w/t/98r3/nN4m/m/OtP7+jyXvrT///oj43Q7jfzX6yf/azavFn25d/zsD28SvTRvbYfzyS3937TAA7CHl5ZXZyWKxsGhg7w/0741idGzgjUf69+weqcUTOvCglqP9/ibwZLif9N0uCQAAAAAAAAAAALBTnTiduNt1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYD34IAAD//zSd2aQ=") recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f00000002c0)=""/190, 0xbe}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000480)=""/2, 0x2}, {&(0x7f0000000a00)=""/232, 0xe8}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/236, 0xec}], 0x6, &(0x7f0000002380)=""/230, 0xe6}, 0x1}], 0x1, 0x5dfe288d12c4ba25, &(0x7f00000024c0)={0x0, 0x989680}) mount$bpf(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x20050, &(0x7f0000000b00)=ANY=[@ANYBLOB="676d643d8e665f218c931e60e059757bfcb4e1ae32a6e565dfb1badeb7629abae664b0bd349430c360795f915e50aaa69c973fca95487a1dd3bb5f596c9a9a185b4a45b4568cee4a44338ab909469de239bc1dc7451447718f4167f512a0efb2a27b9be425e3ca33e727615b9f096338dff6a562075095c0118cb9c72de55daa9755ab6cb71493d1df1203fe7a90a8c74a103bb7301c8a1a3a0ad478431dc3f7a40ffbab3f63a34df457558ec261bc82d063e1bd8d1784469e18593804ba211154a3e9466e7fcd", @ANYRESHEX=r3, @ANYBLOB=',subj_user=,euid<', @ANYRESDEC=r0, @ANYBLOB=',fsmagic=0x0000000000000009,fsmagic=0x0000000000000005,\x00']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd0d, &(0x7f00000001c0)="0400000000000000000000156e01") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0}, &(0x7f0000000c80)=0xc) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1010000, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66643ddd5f7fa4d1d20c37504c845ccb9f60a71455a883dbe13a4e06f0dce025bfec40928da869d645d176e163f3235d7f73cb0727c2b7b53211765addd3ba09c30901b859a36347415cad724e97c974a84a791aafda5e19969b95868207fa7adad07519ed", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB=',max_read=0x0000000000000009,allow_other,allow_other,default_permissions,allow_other,allow_other,blksize=0x0000000000001e00,max_read=0x0000000000000005,allow_other,allow_other,fowner<', @ANYRESDEC=r0, @ANYBLOB=',obj_type=ext4\x00,euid<', @ANYRESDEC=r2, @ANYBLOB="2c6673757569643d62646330341e38612d383433002d653230312d393937382d6431a432626162352c666f776e65723e", @ANYRESDEC=r2, @ANYBLOB=',fowner<', @ANYRESDEC=r5, @ANYBLOB="2c736d61636b66737472616e736d7574653d212c212d5b7db62c2e2c2c00"]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) 15.532449911s ago: executing program 38 (id=1118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050040000500060008"], 0x4a) 14.679269729s ago: executing program 8 (id=1214): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x88001) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r3 = getpid() bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x10}, 0x18) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000003e0007010000000005000000047c0000040049800c000180060006003b00000118000280140006800e"], 0x3c}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 14.572503572s ago: executing program 8 (id=1215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x86dd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x3, 0x8, 0xfffff58c, 0xffffffff, 0x1, 0xcc}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000540)=@xdp={0x2c, 0xdd86, r9, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="2703", 0x2}], 0x1}, 0x4005) 14.256288734s ago: executing program 8 (id=1220): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000702000000000200000000", @ANYRES32=0x0, @ANYBLOB="0382000000000000140012800c0001006d616376746170006400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="f78fa7db95cd714f96bc140fd1bfa9583b5fc213fa215c92cd103be39fcf95f23c62"], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x8854) 14.108293607s ago: executing program 39 (id=1220): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000702000000000200000000", @ANYRES32=0x0, @ANYBLOB="0382000000000000140012800c0001006d616376746170006400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="f78fa7db95cd714f96bc140fd1bfa9583b5fc213fa215c92cd103be39fcf95f23c62"], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x8854) 3.813603759s ago: executing program 2 (id=1271): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)={[{@user_xattr}, {@data_err_ignore}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inlinecrypt}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x19, 0xfff3}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000000)={0x21, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 3.401693113s ago: executing program 0 (id=1275): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x6402, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) 3.401379203s ago: executing program 0 (id=1276): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0xe4, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 3.366462451s ago: executing program 0 (id=1278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xc01, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000000)=ANY=[], 0x2b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x4c}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc7f}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002f2049eb6dd0d0303000000000000000000000000000800"], 0x1c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x3002, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f00000001c0)=0x1, 0x4) accept4$bt_l2cap(r6, &(0x7f0000000280)={0x1f, 0x0, @fixed}, &(0x7f00000002c0)=0xe, 0x800) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) 3.302784353s ago: executing program 4 (id=1280): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xfffc, @multicast1}}]}, 0x40}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000440)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x100, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x0, 0x0, 0x7}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 3.117093097s ago: executing program 4 (id=1283): mmap$IORING_OFF_SQ_RING(0x0, 0xb, 0x2000000, 0x100010, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) eventfd2(0x9, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) 3.106144783s ago: executing program 9 (id=1284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000060a010400000000090000000a0000010900010073797a310000000018000480140001800a0001007265646972000000040002800900020073797a3200000000140000001100"], 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6111b712000011ff00000000000000120000000000000001ff02000000000000000000600000000134ca5305caaebc"], 0xfdef) 2.973362683s ago: executing program 2 (id=1285): mmap$IORING_OFF_SQ_RING(0x0, 0xb, 0x2000000, 0x100010, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) eventfd2(0x9, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) 2.901657369s ago: executing program 9 (id=1286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000200)='X\x00\x00', 0x3}], 0x1) 2.802188792s ago: executing program 9 (id=1287): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (fail_nth: 4) 2.652357852s ago: executing program 9 (id=1288): r0 = syz_io_uring_setup(0x5fab, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x6) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x800, @loopback}}) io_uring_enter(r0, 0x5, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) close_range(0xffffffffffffffff, r5, 0x2) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x8000) write(r7, &(0x7f0000000640)='\"\"', 0x2) r9 = fsmount(r7, 0x1, 0xe) fchdir(r9) getsockopt$EBT_SO_GET_ENTRIES(r9, 0x0, 0x81, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x1}, &(0x7f0000000080)=0x8) 2.545683837s ago: executing program 9 (id=1289): mmap$IORING_OFF_SQ_RING(0x0, 0xb, 0x2000000, 0x100010, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) eventfd2(0x9, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) 2.495810066s ago: executing program 0 (id=1291): mmap$IORING_OFF_SQ_RING(0x0, 0xb, 0x2000000, 0x100010, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) 2.148939219s ago: executing program 4 (id=1296): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x50, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x19) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}, 0x1, 0x0, 0x0, 0x4014}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000080) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '-'}]}], {0x14}}, 0x80}}, 0x40) write(r4, &(0x7f0000000000)='7', 0x1) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) 2.011482974s ago: executing program 2 (id=1298): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)={[{@user_xattr}, {@data_err_ignore}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inlinecrypt}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x19, 0xfff3}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000000)={0x21, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0xda90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x10) r4 = socket(0x200000000000011, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="0200000000000038", 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fadvise64(r0, 0x2, 0x6, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7800, 0x78f, 0x3, 0x70, {{0x11, 0x4, 0x3, 0xd, 0x44, 0x67, 0x0, 0x80, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1b, 0x6f, [@rand_addr=0x64010102, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}]}, @rr={0x7, 0x13, 0x9b, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000611844000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', r5, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.936604551s ago: executing program 4 (id=1299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000060a010400000000090000000a0000010900010073797a310000000018000480140001800a0001007265646972000000040002800900020073797a3200000000140000001100"], 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6111b712000011ff00000000000000120000000000000001ff02000000000000000000ff0000000134ca5305caaebc"], 0xfdef) 1.889490298s ago: executing program 5 (id=1300): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) (async) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x34}}, 0x40) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r1, &(0x7f0000000240)="b0bdc474", 0x4) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000240)={0x30, 0x0, 0x27d496bfea27fef2, 0x0, 0x80, 0x5, 0x8, 0x0}) (async) ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f0000002d40)={&(0x7f0000002cc0)=[{&(0x7f00000018c0)="d4e486fe4c1a12d2f05b83d9bfaa9a55c3470702eca933370593da4d757040f7f920414121abe12095755482a80356baa757436bb67a21c47473ea5ff527c840439145e76e259ab0e5fe2978ecbb1ba506d94a924ccf90d0cd058f45579c8eecbce78afce8cfd734a65e66544b7875c98ce7117e0381a6a33a7c1e69366dbae768e862164127db5d201cf70db3ef1c57d24eb4d1c934a8ba90663659645c95e8e6ce299b3bc0b07269673bac256c548bc5e6123d0714c5532b190446204b3f361088e7d4aaa4a246ee73728023a1f2e30ac6925e5e5484cbfed7a429a2e29cbb96e13f09cc6ee670933a", 0xea}, {&(0x7f00000019c0)="db17a7090e97806d5142c93a8564bfcccbc1160d", 0x14}, {&(0x7f0000001a00)="45cb7769c27778791c838f7efd9f991e0a3493c93e66fc30162a886847f5ebec09de0edf4c72f7b0eb0adb6c5046d6b2aeb7c5c3d714ecf0cbaa993c2dc2", 0x3e}, {&(0x7f0000001a40)="30261422d71e6ca7de5a90f94b8b8459af2afcc369fb3a27406a046ec0bf360f0bb298", 0x23}, {&(0x7f0000002b40)="c4e6a7763f20a88c5af122e0e8c845a228dfa9e65184c18ed680b6fc26e44ed380fa7c48c499a88d1dcc1772c050ec1e1bc1a32d13d60a49ed9b4c36a5b7f1db963fa7c2641e3dbd2ef194da4d5e43417605c00fa4e737b1cc6b6c57a446126eec56bb05913a73f6127a56d2ef6ff492e9603abaf2d0e979567d2009089adff670fc005db72ae9188ab55e2eb3b4bff3e02c18d428a674242e618d3f21fd0c4306a6a398e43586ac69de6ba5659a8459597bbc855d26ed13bf5636c7fc900b3b3b3b0395531849df0565", 0xca}, {&(0x7f0000002c40)="9d32d03a399afec0997b78db43a42ad7c69b73eeafbc9d8dddbe350162838f41c0204d183b2dc92e758049d89e6b821a584643bbe4c1962e4c76c3abe04242b82b242d3f34279e705f61", 0x4a}], 0x6, 0x0, 0x0, 0x2, 0x3, 0x2, 0x3, 0x4}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}]}, 0x5c}}, 0x0) (async) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x10, 0x0, 0x1300) (async) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x7, @local, 0x5}, 0x80, 0x0}, 0x24044040) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file2\x00', 0x1c146c4086fe30b3, &(0x7f00000000c0), 0x3, 0x44a, &(0x7f0000001440)="$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") r6 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000376000/0x2000)=nil, 0x2000, 0x0, 0x2010, r6, 0x80000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x17, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000500042018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f6ffffffb702000008000000b70300000500010085000000cb01020095"], &(0x7f0000000140)='GPL\x00', 0x2, 0xfee, &(0x7f0000001b40)=""/4078, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000000602, 0x0) r8 = dup(r7) mmap(&(0x7f0000472000/0x1000)=nil, 0x1000, 0xb, 0x13, r8, 0x1fa000) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x10142, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r10, 0x11, 0x66, 0x0, &(0x7f0000000040)) (async) write$UHID_INPUT(r9, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0xfffffe69) 1.525617686s ago: executing program 5 (id=1301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x1000000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 1.391845308s ago: executing program 4 (id=1302): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)={[{@user_xattr}, {@data_err_ignore}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inlinecrypt}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x19, 0xfff3}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000000)={0x21, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0xda90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x10) r4 = socket(0x200000000000011, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="0200000000000038", 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fadvise64(r0, 0x2, 0x6, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7800, 0x78f, 0x3, 0x70, {{0x11, 0x4, 0x3, 0xd, 0x44, 0x67, 0x0, 0x80, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1b, 0x6f, [@rand_addr=0x64010102, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}]}, @rr={0x7, 0x13, 0x9b, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000611844000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', r5, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.066572718s ago: executing program 2 (id=1303): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, 0xfffffffffffffffe) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x200) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000fcffffff0000000000800000850000003600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x28) 902.115646ms ago: executing program 0 (id=1304): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 901.405045ms ago: executing program 2 (id=1305): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0xe4ff, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) 577.654041ms ago: executing program 5 (id=1306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x183002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8, 0x1b, 0x18}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) syz_open_dev$video4linux(&(0x7f0000000080), 0x4000000000000e, 0x1) socket$packet(0x11, 0x2, 0x300) 576.998497ms ago: executing program 0 (id=1307): mmap$IORING_OFF_SQ_RING(0x0, 0xb, 0x2000000, 0x100010, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) eventfd2(0x9, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) 558.278621ms ago: executing program 2 (id=1308): mmap$IORING_OFF_SQ_RING(0x0, 0xb, 0x2000000, 0x100010, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) eventfd2(0x9, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) 549.21144ms ago: executing program 5 (id=1309): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x17, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000000000fc841000000500000085000000ba0000004e08ffff000000001800000000000000009d1648d0533cdb970000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 433.763047ms ago: executing program 5 (id=1310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x5000000, 0x0, 0x24040011}, 0x0) 421.375742ms ago: executing program 5 (id=1311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000070500060008"], 0x4a) 411.144964ms ago: executing program 9 (id=1312): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711827000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a400000001a0a010400000000000000000100000a090001"], 0x368}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x82040, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000001340)=ANY=[@ANYBLOB="09000000000000000a004e210000000dfc020000000000000000000000000000910f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000a004e230000000e000000000000000000000000000000009e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000006fe8000000000000000000000000000aaa4fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300010001fe800000000000000000000000000037ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000000b2001000000000000000000000000000204000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000007ff010000000000000000000000000001a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000401000000000000000000000000000000011d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000009ff0100000000000000000000000000010200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da691e7c3e322ae259497947e3276d19a5f783f79bcd28048cabb1a8cd9df30228384b5446b5be55225ab7d2b4ff35d9aea17826dcd63867ca6ebe105ffb813ba07caca6cb00c9b247050c830b2c67ed04ff1366092f836f0cbf0d2a096aa6b7a371b57d5d229b00"], 0x410) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0x1, 0x1f2}}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x30182db, &(0x7f0000000080)={[{@grpid}, {@noauto_da_alloc}, {@errors_remount}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@nojournal_checksum}]}, 0x0, 0x666, &(0x7f0000000cc0)="$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") 0s ago: executing program 4 (id=1313): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000140081000500020008"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b27", 0x10) r9 = accept$alg(r8, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="cab8e9d3cff80ae5e800000001000500", 0x10}], 0x1, &(0x7f0000000840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}], 0x1, 0x40440d4) recvmmsg(r9, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000040)=""/243, 0xf3}], 0x2}, 0x2a45}], 0x1, 0x40000043, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0xfc96, 0x20, 0x3, 0x168}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa602, 0x10, 0x3, 0x2f7, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x831, 0x1, 0x3, 0x2e3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb080, 0x800, 0x0, 0x2eb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa9c8, 0x4000, 0x2, 0x18c, 0x0, r4}}], 0x4, &(0x7f0000001700)={0x2e, 0x6e, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, '\x00', {0x3, 0x73a, 0x0, &(0x7f0000000700)=@buf_4k="4c14641458f9863e8c0f99e1224491e9b3d3d372bca9e39c719022af5e8383f4def879cd913aa88a7ff43810d214b2b6fbb80fea1dd37b24bfd76e806ce1f94d8150cde47126078b3ed99ffa9bf93e8a99fd1153dfd66971f20fdf773ec07ab47f9ee707a3658b6d2b2b9d20a043e31442f9f2ae8f2e952c3a1387d35af883c12b5b9b1933615eda34aa14051e026acd64ad6fa801c2234e9db05654e36ef367be22477ddf9ada191c2393ad4d72727b221fc0c79f5808d9afe5e3682c2592003b993ec60b55d3df6f75bd655740c172b1839cf594ac7b7edd3da6761a79020fd1b6d0958c9ffddad9ab3aa1cc33941accd734d812ca73b1cc3e9eb11e3d45c6aeae359598e919cfd5ce30bacced861cc30621abcc193f022ccbacee79a2897fa3cad2b0a7d0780cc7bb9f9f6cac1f4b67d1328a71093e452193b6c3a5b9173f88cc0d7992f3a8999df25e9f654413ae1e7f02d872fcbaaaf990ed629ea43fed83c26ff1353eeb169b07d52e903b882166d1ee38ed6a6cb5a238d60d905f7714b109a57083fb498a05b1481ef40baa357149b23b8fe1130b8f77b04a1ff1de7de1a780b6c570d45186ada4ab7d669a66aa91e285ffd6f70467cefb1457f9a0e3e60dd81f49c3e3f2189c443a187cefb3a5c4c683e3b9100351ef79bebfcba59f0f752376ec9795fb603dfc44234a7715284c1a2f52a824fddf0a9b220b3c4fdee74223ba7e29eedc76326985ae64a3e30ace75830a6423a269380296d3089782763597230f007a861bfc5d7cb09df8787fc46c04edbca6b80767514531756d1a0926e3acfbc661b79156f5065c433176cab91498c35cd13649dc103c35cc4d60c283945bd2f83a46ba93720fa7308df2c156352b9a18da5ca6bdb634b214306619e09e807396f5ecaada48a922421672cdc1f4c344ff1f08627431b500ee582c853f2d2362976c51e52e724b445e7b787bf2fa608d2fe1c7616525e26bf81b1905929885ea8b43222f05ef9b573b0ee2ddd9bc684edef01d059f709e329b3d1a0e40def9e5419345ad66f498c02a990a4d7f1d25390fe532abb791dfb217b1353770c9f9c92cc2412173b7e8957db772fda70ac21286029ec1599a96aa4165df7c489580d9de439318279d5ad7957a4906122a2cd08b7f57c4c27277f6b2adc92f505af9a3eb977f6441081e79c68f39f23efff5766f772df62f071344a209df25004ead81dd2ca7047a96dd29bbe91166e42f607411fb67126682ebb230af30bd9406dcfc1225a218465d23e0d26097374c6b0f89b1db167f609eed6239819f3fda3b86b7ec99bdfbc01397f9139c77ab8817a0201c4166e1d29110f0834cfe3beae32f9f78457dce3794b61ef41981ebf4cb86ef5740e55b06127ffbcf4fbfec824940639769f6cf4ebe65aadcd0ae64c07c6ddaf84d22bd5db114899fa77ab1ce35e3950d616be04f630f464c7e5cc619f5c9d0c03029101c880fe135619e80d6c75386f6791a3b0593b31299f40aa342cc7839eae1958291e55c257c348abf298917c46586df94c00696c26dc8d616497faca1c8e87689ff64145ac8a4767c15f87d1f654bed5f60b5b678e78514ae9a845911a58096df07106ae5c13d5f46fe083e61ee9816646fe33289aaa92ef52998f398a2cb2d096a8c8e984eec69bd1bf866d6eb696c6d7466fb3193af4c585373ffe38923e2990bfc486347735ffb3fe3e9985b62fbfa53e138407e760d5570167e487ad4ec3a856b47cb4e5b33628a743e1ce543ebc0a4b034c212411d81e0458d3f83a0cb6b0103be53020856ee92e4de04474932512fa9f6720517226dab2ec21277d4c3d10532cf08616683ef5f9fe05413e3602effb8df4bf0183e773c3e153277147fbaaba4c64e4fb4034b813cb1bacd308ffc7629a687be878109dc4ec226aa98329726a0b9ae73a2ff46df4348d8630a09ea41e8fa92123ba21e86d80b0421040d47faf660f8ddc7025c431a5d37553898bd7d61e8ff600b4372712bd8cae0465cd8d6e6d9e53674d87f4f223cde30222f6e128805552887dfa8bc116fd54e185f9c7588aa9d3a72d44ca700f5dc1030275c30e825034d59da432aa058fb93c274627c3f9468f0af34a25b4d12906e1cec3298a84c192be69380cd99fef0f8fbc24b5e91126e44b181f7bd67fd7ad9409b8b7e98fcd2f07ab4df053204fb46ae2b05e2409a79be04520d50dbce3b57f4a2fa65bc50c322e25277bae68f3795f93f67417fb4ae9bb004c1c07ca2ac9b6ee3cd79104ea31ffe19c4c7ef17aa08efedecad8ab3452f39384f3ec0e4d088167881fa36e6052cd069193ba91309098d1a267251c930f3b0bb79e5d95f017d3c3f12dbad09faede86a4429bb544818eabb29a3da876434eaca6cfc88ef3e50c0db1dde6da847ad0c8a21fefbc405c7a6ab2ed326e3cefa9e03f4a03a30d5213c78bf512b0092234f216fd001129a5ca6102e6d9acee741ad9fd84c68014793a927e446afc83e121ea45d3a4fe6b55b9b2556be27419a0695a4ae793470e959646937b15ac3a51d900ad46bbc4b869dbbd9a687c7fb44455075f4c3efca605e42a97ee61a8118f0cc59c223ce244810442f2866ad879e1e5645dcecf802747b80b9e3177641c7f0b831e5074ebc254c66d9e4d0386451ac76ecaba8a6f35ff43b401d96a3fdb85c51a6e47e01d25ba44be77eb3c93e476cafbfc9b91cfe27ed69bb1adf529cba483227f7b7fb0cd715fdf6ebb7a1fc59aef033ec81da762178a8e63253496146ecb6f3a7bbbfaf9ad7825702bd971c1ce9ad526a6547d4280fd191ed16cdb8f5099dbd8accac3e51d92e8372b6b124de5925ab64892e3867d3f5638d9055992ef2841f11042432e28ef082fdcb1f95ffb2ea9ef480762e16d78b0a37dfc37c6922e53d60bfe809be01b801debf5cf7fe18f2ddb2d560985bb6c4180a8fadca489d20949f941beb5e23d3a425bd7a8371c8246eb510365f9264fc76c7d1b3c6b384b1d61276eae8fb703ecc187529e4857871b0ef4c04c89566e7f2587ccd0a55cb6056f2ddada13a0d1f40235d301dbbbdae5ff7bf4c3d2a5047454d3a048d602abe2779af485393202cd1fd999401376a4df3e8745aa7a745f8ca70fc05441b57c7b4fbdb98857e11669494bd068e907f240632679f8f37b04f045238a49d48ed52c78e137951deb529f8033ee0feaca6c416a3632badbc8e19415e1fbfab11c7c46ad520de7651518e1e076817bace18bcf11c9af46383a2690d606b7366420c3c0c9cf0457bf6bd83b9de5ec392770826d9de9befbd2bfa7a785309c0ef1b4d3961aeb3e7faf501c7f386a45d950cf53df9e00896637e084ab7ead586b996906c82a905f7ebbb2e8a5335ef134ecd48285f4f46e6d3415fd9757e7238cf021683461bab988a6651408e791f781150a5405419e2a70dff7cb79e273ede490e88167182c6e4954d6e8070acfac1a3abb66f9a1372b2bcce14da0fe874db5bf2ef9c32fa373080f40e1fdd9ba86156f09244725da1cef77aba52832b38babfebe22609843439fb348298cdb81c77eb0af8ad1c80aa11a03f487143d756da9a46decdbcce9e7003c2b98504f8001b185a02fab0ebaf96ffeff938c07250c95da6840b63addc498e3a06fa6ccbf8879050f05fa771e4c46d8bc74e70d0ac17b89b14c6b0a68ada4197597eec2e052e9e4840f99eebdceb4ecdea655584db3e8b8791154efd043b79f16e8a48820a6a866c802e60031f330dc24639c233f96b7c70b286891f3850a4d5fa61b734da6a36e8f5f4361c7b44f3412b6a4a1d27eac1af7039dfe934cd0631d221dd5ca2c14f1132f6cc82b82577fa4ae447415fc174275d8c8210fd5aad2c0ce0f284125961d464a08b7ffeffc6e6dc00775969b2b62251e837500a43090599fa75e05c56767c9a411dc9d171634b7cc8e607bca9d716c92027cbc8fea5c16b196edd6c57120494d1b63029461748bb84f500fe45377022b6f58b84351510558ecd7e78df5addcb8a3ecb4c6c813f8a0a4ca46f96d07ea3b8edbaeb35a322b4c052aeb1aac35e602b6914d23796d0b09adc0ceeb13f650dabcebec9533ca05c096dbd9b960ca3448232e9f168be1b5b7cebb3f671ad92a98cca50489b29cb45001721f68be385978c64250ff67b9f4f72b4c1f5c985832257a2e903763af5081ef0ee7abcf6b6ec6919e880974c0e7b8a0cb2e35b57e07eb59fd179a3e0a5849e1a3654ae8ebd50bddcc8f7d19c0d05825e65bde25b7757aabb3717886617266a7a97d27a025c62a5011af8184385bc3821b3bfa564fe920cc4e3ad67bed2cbec75e1c95f558e856433997d85cdba9b7b01e3b8c74a02a0c6cced61a93a2567991f9d625535cab59514975a7bafcf62d9b9053837cb3d03d40f720447a004d758c3691b5ba0c92bbf3898cc8c74eb93f897a9894cf1a22c1cfa0784d5fa5055b593dd28070b4260bd977e54c94236d81d7bbd86f93d90afa8300e3280a3c516c748e43b87c29ef150feae15b626f119b5d0c438af26f74b4833efff518dd51d3ca1b9ef9312c67cc0437ed55244245b5da2cc2d054487cc3b671e23f989ba99c30c171d69c7d80edfb8bf05876627df47d113a2d11f4143dadc14189ca6966ebdb739cff3ca516b8ec6377b0bca91817088a181932a7395428f36e7fe4915a79994c4750fb797f55f8e7c09246108b7132ed4a23e87b21b077531f42bb1d99b8d00143c199baea22c46caed27901626dff28850187787b3ece51eda638149c9d7ba155bafb3657f209de0e368931dccbe5f7f12f37169e9528b0196724de00402d503019b508573e34c234d9c1eb6d44bb691225f772ef956491bb369da98c4a69bf39de1d6081bed737d7bb4bf2dcf626cb77a0c056556df0ae9e4b8d8dbb16c64826efc0e8623b45d052796213e6ffa488f6a2ff91f714a7e0cd212f2a02ec81a3e623aa9890afe245887e115e43784770289cafb7064d92f015b2e52ac27f768c89e8557b6cda800ec0a943bf509227eac035576eda80e78caadb600d2b0725f025d784a16dcaf2a0fce330dc4a0b34c771fcdef354c95310820eacae6a7d14a828231fbd870f7d06c029138b75cfaf3bdf69891f3585e635e53533fb681a076c5035274d92cb506dd371de93d81eb8b79bbc0ae467243044a47a23a5f0a419f29df6881f7ce1dec0886642ce85b06e68ecb4b9ef14c40d1aecc88c2864ff4e818e6582a2cc30deea39763393d717dabd42b681edadc2a5f78c51cb8978593cb88131bd630258e77d77558a46cd44916edce5f9e3aa21dbce1db22e776f302d77096767159dd09c9d3d61448cbbea986a1379fcb58323a0d57d92aa62bac7f68b3894b68edc1638845b782206c62f8bba177c47da2fe0097ff3d97695931aadc6d3f151bf3adeb8d4d1cf1da5c30523e8d08a2ff165143ce4d0957eea688acca69e1e7a5fe150555368f8611a92d78e4ed54a1723fb34c0ce908a828a6751333c3b0c0e9fd811f95de6a1de4c1270941f8582dc60a1cbcebeedc813390d716af00897257a4a501bf0d6fa9abf27238164167671b9dff434ee033383ec7765b1a22a866f9401d920abed65c9fe865427d38315ddfdd19a92cc80718ac03142b920783dece9dfb7a0a43e158398555e513de7b8584bf83b08f0e49c339a96faa4d17891fe4121eef410a7ef9d8bbc1aa93f9d00ea46ab026247c3db0ac0c715a9d23830ea8e645a5b7880b9858768e1837e2bf8fb1bfcccb4d6cfe905ed1d9c67a299d854ba1575b06"}}, &(0x7f0000001780)) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_ublk_add_dev(r4, r5, r6, 0x0, &(0x7f0000001800)={0x2e, 0x21, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000017c0)=@any_dev={0x1, 0xff, 0x0, 0x0, 0x1000, 0x1, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000001880)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000018c0), &(0x7f0000001900)=0xc) r13 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r13, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r14, r15, r16, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r17, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") r18 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r18) keyctl$search(0xa, r18, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 8574] __sock_sendmsg+0xc8/0x17c [ 181.877538][ T8574] __sys_sendto+0x250/0x328 [ 181.877547][ T8574] __arm64_sys_sendto+0xec/0x10c [ 181.877557][ T8574] invoke_syscall+0x98/0x244 [ 181.877567][ T8574] el0_svc_common+0xec/0x23c [ 181.877577][ T8574] do_el0_svc+0x4c/0x5c [ 181.877586][ T8574] el0_svc+0x64/0x260 [ 181.877595][ T8574] el0t_64_sync_handler+0x44/0x104 [ 181.877603][ T8574] el0t_64_sync+0x198/0x19c [ 181.999820][ T26] usb usb15-port1: attempt power cycle [ 182.150755][ T39] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.643789][ T39] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.646838][ T8578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.646863][ T8578] IPv6: NLM_F_CREATE should be set when creating new route [ 182.755977][ T26] usb usb15-port1: unable to enumerate USB device [ 183.016981][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.017170][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.133160][ T8594] 8021q: VLANs not supported on sit0 [ 183.133298][ T5329] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.133326][ T5329] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.133344][ T5329] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.133359][ T5329] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.170796][ T39] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.179444][ T8603] loop0: detected capacity change from 0 to 512 [ 183.203541][ T8603] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.901: invalid indirect mapped block 4294967295 (level 1) [ 183.204677][ T8603] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 183.205946][ T8603] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.901: invalid indirect mapped block 4294967295 (level 1) [ 183.205969][ T8603] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 183.206249][ T8603] EXT4-fs (loop0): 2 truncates cleaned up [ 183.207012][ T8603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.223290][ T8603] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.901: bg 0: block 5: invalid block bitmap [ 183.238210][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.324683][ T39] bridge_slave_1: left allmulticast mode [ 183.324717][ T39] bridge_slave_1: left promiscuous mode [ 183.324818][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.334838][ T39] bridge_slave_0: left allmulticast mode [ 183.336023][ T39] bridge_slave_0: left promiscuous mode [ 183.337420][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.432279][ T39] bond1 (unregistering): (slave bond0): Releasing active interface [ 183.474269][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.513827][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.553454][ T39] bond0 (unregistering): Released all slaves [ 183.555896][ T39] bond1 (unregistering): Released all slaves [ 183.579251][ T8566] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.579385][ T8566] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.579480][ T8566] bridge_slave_0: entered allmulticast mode [ 183.579944][ T8566] bridge_slave_0: entered promiscuous mode [ 183.580646][ T8566] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.580673][ T8566] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.580735][ T8566] bridge_slave_1: entered allmulticast mode [ 183.591051][ T8566] bridge_slave_1: entered promiscuous mode [ 183.599249][ T8566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.602211][ T8566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.610797][ T8566] team0: Port device team_slave_0 added [ 183.613262][ T8566] team0: Port device team_slave_1 added [ 183.626110][ T8566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.626141][ T8566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.626159][ T8566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.647389][ T8566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.648805][ T8566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.655591][ T8566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.699721][ T8566] hsr_slave_0: entered promiscuous mode [ 183.701408][ T8566] hsr_slave_1: entered promiscuous mode [ 183.703118][ T8566] debugfs: 'hsr0' already exists in 'hsr' [ 183.704445][ T8566] Cannot create hsr debugfs directory [ 183.763934][ T8646] netlink: 156 bytes leftover after parsing attributes in process `syz.0.908'. [ 183.811742][ T8642] loop6: detected capacity change from 0 to 512 [ 183.824425][ T4727] Bluetooth: hci3: command tx timeout [ 183.884898][ T8661] loop1: detected capacity change from 0 to 128 [ 183.885224][ T8661] vfat: Unknown parameter '0177777777777777777777700000000000000000000ÿÿ' [ 183.946022][ T8642] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.911: bg 0: block 184: padding at end of block bitmap is not set [ 183.946057][ T8642] loop6: lost filesystem error report for type 5 error -117 [ 183.949549][ T8642] EXT4-fs (loop6): Remounting filesystem read-only [ 183.949739][ T8642] EXT4-fs (loop6): 1 truncate cleaned up [ 183.954415][ T8642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.966313][ T5331] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 183.966343][ T5331] Quota error (device loop6): write_blk: dquota write failed [ 183.966364][ T5331] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 183.966380][ T5331] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 183.966394][ T5331] Quota error (device loop6): write_blk: dquota write failed [ 183.966405][ T5331] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 183.966433][ T5331] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 183.966445][ T5331] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 183.966486][ T5331] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 184.025459][ T4404] 8021q: adding VLAN 0 to HW filter on device eth8 [ 184.061613][ T7038] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.123212][ T8675] loop1: detected capacity change from 0 to 1024 [ 184.164626][ T8675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.189233][ T8566] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 184.205901][ T8566] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.210065][ T39] hsr_slave_0: left promiscuous mode [ 184.211667][ T39] hsr_slave_1: left promiscuous mode [ 184.212913][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.212928][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.214721][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.214733][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.220248][ T39] veth1_macvtap: left promiscuous mode [ 184.220300][ T39] veth0_macvtap: left promiscuous mode [ 184.220358][ T39] veth1_vlan: left allmulticast mode [ 184.220441][ T39] veth1_vlan: left promiscuous mode [ 184.220486][ T39] veth0_vlan: left promiscuous mode [ 184.346566][ T39] team0 (unregistering): Port device team_slave_1 removed [ 184.350320][ T39] team0 (unregistering): Port device team_slave_0 removed [ 184.401823][ T8566] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 184.407732][ T8566] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.413518][ T8566] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 184.416451][ T8566] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.418396][ T8566] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 184.421168][ T8566] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.456439][ T8566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.468110][ T8566] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.480852][ T5339] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.480896][ T5339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.486601][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.486646][ T5339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.595332][ T4404] 8021q: adding VLAN 0 to HW filter on device eth9 [ 184.646754][ T8566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.744901][ T8566] veth0_vlan: entered promiscuous mode [ 184.747669][ T8566] veth1_vlan: entered promiscuous mode [ 184.765205][ T8566] veth0_macvtap: entered promiscuous mode [ 184.773989][ T8566] veth1_macvtap: entered promiscuous mode [ 184.785088][ T4404] 8021q: adding VLAN 0 to HW filter on device eth10 [ 184.786334][ T8566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.787864][ T8566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.832989][ T5337] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.833327][ T5337] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.833427][ T5337] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.833539][ T5337] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.849388][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.849420][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.875782][ T5339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.875815][ T5339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.963698][ T8752] netlink: 'syz.7.890': attribute type 83 has an invalid length. [ 185.004670][ T8759] loop3: detected capacity change from 0 to 1024 [ 185.014914][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.100569][ T4404] 8021q: adding VLAN 0 to HW filter on device eth11 [ 185.105914][ T8759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 185.110833][ T8762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.120981][ T8762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.133931][ T8780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.134240][ T8780] bridge0: port 3(bond1) entered blocking state [ 185.136567][ T8780] bridge0: port 3(bond1) entered disabled state [ 185.136684][ T8780] bond1: entered allmulticast mode [ 185.137390][ T8780] bond1: entered promiscuous mode [ 185.138019][ T8762] 8021q: VLANs not supported on sit0 [ 185.144128][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 185.915233][ T4727] Bluetooth: hci3: command tx timeout [ 186.124864][ T8811] loop7: detected capacity change from 0 to 512 [ 186.125263][ T8811] EXT4-fs: Ignoring removed nobh option [ 186.131938][ T8811] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 186.132105][ T8811] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -61 [ 186.135469][ T8811] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #13: comm syz.7.926: inode has both inline data and extents flags [ 186.135502][ T8811] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 186.140817][ T8811] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.926: couldn't read orphan inode 13 (err -117) [ 186.140852][ T8811] loop7: lost filesystem error report for type 5 error -117 [ 186.142819][ C1] EXT4-fs (loop7): error count since last fsck: 2 [ 186.142834][ C1] EXT4-fs (loop7): initial error at time 186: ext4_orphan_get:1399: inode 13 [ 186.142854][ C1] EXT4-fs (loop7): last error at time 186: ext4_orphan_get:1404 [ 186.154788][ T8811] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.171542][ T8811] EXT4-fs (loop7): shut down requested (2) [ 186.173834][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.7.926'. [ 186.198668][ T8811] sctp: [Deprecated]: syz.7.926 (pid 8811) Use of int in max_burst socket option deprecated. [ 186.198668][ T8811] Use struct sctp_assoc_value instead [ 186.273841][ T8566] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.309922][ T8825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.319557][ T8825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.769569][ T8836] loop1: detected capacity change from 0 to 1024 [ 187.331268][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.331314][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.869148][ T8908] loop7: detected capacity change from 0 to 1024 [ 187.870776][ T8908] EXT4-fs: Ignoring removed orlov option [ 187.873222][ T8908] EXT4-fs: Mount option(s) incompatible with ext3 [ 187.979262][ T4727] Bluetooth: hci3: command tx timeout [ 188.800013][ T4727] Bluetooth: hci2: unexpected event for opcode 0x202d [ 188.800068][ T4727] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 188.904493][ T8929] loop7: detected capacity change from 0 to 4096 [ 188.910933][ T8929] EXT4-fs: inline encryption not supported [ 188.916317][ T8929] EXT4-fs (loop7): Test dummy encryption mode enabled [ 188.923165][ T8929] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.940473][ T8930] netlink: 'syz.6.947': attribute type 10 has an invalid length. [ 188.947459][ T8930] team0: Port device dummy0 added [ 189.055096][ T8940] netlink: 'syz.3.950': attribute type 83 has an invalid length. [ 189.396304][ T8952] loop1: detected capacity change from 0 to 512 [ 189.397696][ T8952] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 189.400399][ T8952] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.954: bg 0: block 4: invalid block bitmap [ 189.400431][ T8952] loop1: lost filesystem error report for type 5 error -117 [ 189.400602][ T8952] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 189.400620][ T8952] loop1: lost filesystem error report for type 5 error -117 [ 189.400761][ T8952] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.954: invalid indirect mapped block 1 (level 1) [ 189.400781][ T8952] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 189.400941][ T8952] EXT4-fs (loop1): 1 truncate cleaned up [ 189.402977][ T8952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.448699][ T8956] loop6: detected capacity change from 0 to 4096 [ 189.449077][ T8956] EXT4-fs: inline encryption not supported [ 189.454411][ T8956] EXT4-fs (loop6): Test dummy encryption mode enabled [ 189.458080][ T8956] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.467013][ T8958] loop3: detected capacity change from 0 to 4096 [ 189.467441][ T8958] EXT4-fs: inline encryption not supported [ 189.472438][ T8958] EXT4-fs (loop3): Test dummy encryption mode enabled [ 189.489493][ T8958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.535143][ T8962] loop0: detected capacity change from 0 to 128 [ 189.535496][ T8962] vfat: Unknown parameter '0177777777777777777777700000000000000000000ÿÿ' [ 189.937017][ T4727] Bluetooth: hci0: Zero size dump init pkt [ 189.988528][ T8566] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.049436][ T4727] Bluetooth: hci3: command tx timeout [ 191.038016][ T7038] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.057376][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.080526][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.151288][ T8984] loop1: detected capacity change from 0 to 512 [ 191.151627][ T8984] EXT4-fs: Ignoring removed oldalloc option [ 191.161151][ T8984] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.962: bad orphan inode 32 [ 191.161184][ T8984] loop1: lost filesystem error report for type 5 error -117 [ 191.161447][ T8984] ext4_test_bit(bit=31, block=4) = 0 [ 191.161468][ T8984] EXT4-fs (loop1): 1 truncate cleaned up [ 191.161941][ T8984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.173161][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.224924][ T9004] loop1: detected capacity change from 0 to 4096 [ 193.235128][ T9004] EXT4-fs: inline encryption not supported [ 193.592091][ T9004] EXT4-fs (loop1): Test dummy encryption mode enabled [ 193.598908][ T9004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.956904][ T9013] loop0: detected capacity change from 0 to 512 [ 194.003724][ T9013] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 194.029889][ T9013] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 194.033586][ T9013] EXT4-fs (loop0): mount failed [ 194.334170][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.387972][ T9013] netlink: 80 bytes leftover after parsing attributes in process `syz.0.968'. [ 194.398033][ T9026] netlink: 'syz.6.971': attribute type 11 has an invalid length. [ 194.512034][ T9033] loop1: detected capacity change from 0 to 1024 [ 194.555230][ T9033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 194.585644][ T9040] loop0: detected capacity change from 0 to 4096 [ 194.588049][ T9040] EXT4-fs: inline encryption not supported [ 195.429209][ T9040] EXT4-fs (loop0): Test dummy encryption mode enabled [ 195.443369][ T9040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.635283][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 195.718123][ T4727] Bluetooth: hci0: Zero size dump init pkt [ 196.593181][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.640932][ T9068] loop6: detected capacity change from 0 to 4096 [ 196.641294][ T9068] EXT4-fs: inline encryption not supported [ 196.855985][ T9068] EXT4-fs (loop6): Test dummy encryption mode enabled [ 196.864095][ T9068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.528847][ T9075] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 197.536025][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.7.981'. [ 197.536071][ T9075] netlink: 27 bytes leftover after parsing attributes in process `syz.7.981'. [ 197.826494][ T7038] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.881889][ T9104] netlink: 'syz.7.985': attribute type 34 has an invalid length. [ 197.885172][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.7.985'. [ 197.885217][ T9104] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 198.023359][ T9109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.023386][ T9109] IPv6: NLM_F_CREATE should be set when creating new route [ 198.532765][ T9130] overlayfs: maximum fs stacking depth exceeded [ 198.534632][ T9130] overlayfs: maximum fs stacking depth exceeded [ 198.537351][ T9128] overlayfs: maximum fs stacking depth exceeded [ 198.540705][ T9130] overlayfs: maximum fs stacking depth exceeded [ 198.542604][ T9128] overlayfs: maximum fs stacking depth exceeded [ 198.544355][ T9128] overlayfs: maximum fs stacking depth exceeded [ 198.548064][ T9130] overlayfs: maximum fs stacking depth exceeded [ 198.550202][ T9128] overlayfs: maximum fs stacking depth exceeded [ 198.552040][ T9130] overlayfs: maximum fs stacking depth exceeded [ 198.553756][ T9128] overlayfs: maximum fs stacking depth exceeded [ 198.560897][ T9128] overlayfs: maximum fs stacking depth exceeded [ 198.561056][ T9130] overlayfs: maximum fs stacking depth exceeded [ 199.294481][ T9128] overlayfs: maximum fs stacking depth exceeded [ 199.306140][ T9130] overlayfs: maximum fs stacking depth exceeded [ 199.309023][ T9129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.311331][ T9129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.386331][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.411110][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.411437][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.411599][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.411878][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.412052][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.412306][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.412456][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.412731][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.412874][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.434483][ T9140] loop0: detected capacity change from 0 to 512 [ 199.435021][ T9140] Smack: duplicate mount options [ 200.082721][ T9180] loop1: detected capacity change from 0 to 128 [ 200.083102][ T9180] vfat: Unknown parameter '0177777777777777777777700000000000000000000ÿÿ' [ 200.118410][ T9183] netlink: 'syz.6.1000': attribute type 83 has an invalid length. [ 200.139640][ T9183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.325291][ T9188] loop6: detected capacity change from 0 to 4096 [ 200.326908][ T9188] EXT4-fs: inline encryption not supported [ 200.328989][ T9188] EXT4-fs (loop6): Test dummy encryption mode enabled [ 201.138259][ T9188] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.563712][ T4727] Bluetooth: hci0: Zero size dump init pkt [ 201.594564][ T9208] Bluetooth: MGMT ver 1.23 [ 201.697691][ T7038] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.747798][ T9220] binder: BINDER_SET_CONTEXT_MGR already set [ 201.749421][ T9220] binder: 9219:9220 ioctl 4018620d 20004a80 returned -16 [ 201.751701][ T9220] binder: 9219:9220 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 201.757021][ T9212] loop7: detected capacity change from 0 to 4096 [ 201.758740][ T9212] EXT4-fs: inline encryption not supported [ 201.761473][ T9212] EXT4-fs (loop7): Test dummy encryption mode enabled [ 201.765774][ T9220] binder: 9220 RLIMIT_NICE not set [ 201.779136][ T9212] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.802918][ T9228] binder: 9219:9228 got transaction to invalid handle, 3 [ 201.803001][ T9228] binder: 9219:9228 cannot find target node [ 201.803028][ T9228] binder: 9219:9228 transaction call to 0:0 failed 2/29201/-22, code 0 size 0-0 line 3252 [ 201.847609][ T9228] ip6erspan0: entered allmulticast mode [ 202.040017][ T5001] binder: undelivered TRANSACTION_ERROR: 29201 [ 202.057095][ T4727] Bluetooth: hci0: Zero size dump init pkt [ 202.130030][ T9249] loop1: detected capacity change from 0 to 512 [ 202.131760][ T9249] ext4: Unknown parameter 'noacl' [ 202.155338][ T9249] loop1: detected capacity change from 0 to 512 [ 202.162012][ T9249] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 202.162046][ T9249] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 202.162136][ T9249] EXT4-fs (loop1): orphan cleanup on readonly fs [ 202.165552][ T9249] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1012: bg 0: block 15: invalid block bitmap [ 202.165576][ T9249] loop1: lost filesystem error report for type 5 error -117 [ 202.165895][ T9249] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 202.165916][ T9249] loop1: lost filesystem error report for type 5 error -117 [ 202.166057][ T9249] EXT4-fs (loop1): 1 truncate cleaned up [ 202.166515][ T9249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 202.184774][ T9252] FAULT_INJECTION: forcing a failure. [ 202.184774][ T9252] name failslab, interval 1, probability 0, space 0, times 0 [ 202.184812][ T9252] CPU: 0 UID: 0 PID: 9252 Comm: syz.6.1013 Tainted: G L syzkaller #0 PREEMPT [ 202.184828][ T9252] Tainted: [L]=SOFTLOCKUP [ 202.184833][ T9252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 202.184839][ T9252] Call trace: [ 202.184842][ T9252] show_stack+0x2c/0x3c (C) [ 202.184863][ T9252] __dump_stack+0x30/0x40 [ 202.184877][ T9252] dump_stack_lvl+0xd8/0x12c [ 202.184890][ T9252] dump_stack+0x1c/0x28 [ 202.184901][ T9252] should_fail_ex+0x41c/0x590 [ 202.184911][ T9252] should_failslab+0xc4/0x120 [ 202.184920][ T9252] __kmalloc_noprof+0x108/0x6b8 [ 202.184931][ T9252] tnode_new+0xb8/0x32c [ 202.184941][ T9252] resize+0x388/0x2040 [ 202.184949][ T9252] fib_insert_alias+0x858/0xb08 [ 202.184957][ T9252] fib_table_insert+0x5dc/0x12bc [ 202.184966][ T9252] fib_magic+0x26c/0x344 [ 202.184977][ T9252] fib_add_ifaddr+0x114/0x500 [ 202.184991][ T9252] fib_inetaddr_event+0x114/0x1c0 [ 202.185003][ T9252] notifier_call_chain+0x1a4/0x624 [ 202.185015][ T9252] blocking_notifier_call_chain+0x70/0xa0 [ 202.185027][ T9252] __inet_insert_ifa+0x87c/0xa74 [ 202.185035][ T9252] inet_insert_ifa+0x6c/0xa4 [ 202.185043][ T9252] devinet_ioctl+0xfc4/0x1788 [ 202.185051][ T9252] inet_ioctl+0x304/0x42c [ 202.185060][ T9252] sock_do_ioctl+0x100/0x254 [ 202.185074][ T9252] sock_ioctl+0x55c/0x7ec [ 202.185085][ T9252] __arm64_sys_ioctl+0x154/0x1cc [ 202.185098][ T9252] invoke_syscall+0x98/0x244 [ 202.185111][ T9252] el0_svc_common+0xec/0x23c [ 202.185123][ T9252] do_el0_svc+0x4c/0x5c [ 202.185134][ T9252] el0_svc+0x64/0x260 [ 202.185146][ T9252] el0t_64_sync_handler+0x44/0x104 [ 202.185156][ T9252] el0t_64_sync+0x198/0x19c [ 202.229415][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.712116][ T9265] loop6: detected capacity change from 0 to 4096 [ 202.718801][ T9265] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 202.718829][ T9265] EXT4-fs (loop6): Test dummy encryption mode enabled [ 202.720456][ T9265] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c019, mo2=0003] [ 202.720525][ T9265] System zones: 0-5 [ 202.724704][ T9265] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.732695][ T8566] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.752232][ T7038] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.883158][ T9278] netlink: 'syz.0.1022': attribute type 13 has an invalid length. [ 202.959920][ T9284] loop7: detected capacity change from 0 to 1024 [ 203.031690][ T9284] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 203.063338][ T8566] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 203.361154][ T9298] FAULT_INJECTION: forcing a failure. [ 203.361154][ T9298] name failslab, interval 1, probability 0, space 0, times 0 [ 203.366969][ T9298] CPU: 1 UID: 0 PID: 9298 Comm: syz.7.1027 Tainted: G L syzkaller #0 PREEMPT [ 203.366990][ T9298] Tainted: [L]=SOFTLOCKUP [ 203.366995][ T9298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 203.367001][ T9298] Call trace: [ 203.367004][ T9298] show_stack+0x2c/0x3c (C) [ 203.367028][ T9298] __dump_stack+0x30/0x40 [ 203.367042][ T9298] dump_stack_lvl+0xd8/0x12c [ 203.367055][ T9298] dump_stack+0x1c/0x28 [ 203.367067][ T9298] should_fail_ex+0x41c/0x590 [ 203.367077][ T9298] should_failslab+0xc4/0x120 [ 203.367086][ T9298] __kmalloc_noprof+0x108/0x6b8 [ 203.367097][ T9298] tnode_new+0xb8/0x32c [ 203.367107][ T9298] resize+0x690/0x2040 [ 203.367114][ T9298] fib_insert_alias+0x858/0xb08 [ 203.367123][ T9298] fib_table_insert+0x5dc/0x12bc [ 203.367131][ T9298] fib_magic+0x26c/0x344 [ 203.367142][ T9298] fib_add_ifaddr+0x114/0x500 [ 203.367154][ T9298] fib_inetaddr_event+0x114/0x1c0 [ 203.367166][ T9298] notifier_call_chain+0x1a4/0x624 [ 203.367177][ T9298] blocking_notifier_call_chain+0x70/0xa0 [ 203.367189][ T9298] __inet_insert_ifa+0x87c/0xa74 [ 203.367198][ T9298] inet_insert_ifa+0x6c/0xa4 [ 203.367206][ T9298] devinet_ioctl+0xfc4/0x1788 [ 203.367213][ T9298] inet_ioctl+0x304/0x42c [ 203.367222][ T9298] sock_do_ioctl+0x100/0x254 [ 203.367236][ T9298] sock_ioctl+0x55c/0x7ec [ 203.367247][ T9298] __arm64_sys_ioctl+0x154/0x1cc [ 203.367260][ T9298] invoke_syscall+0x98/0x244 [ 203.367273][ T9298] el0_svc_common+0xec/0x23c [ 203.367285][ T9298] do_el0_svc+0x4c/0x5c [ 203.367296][ T9298] el0_svc+0x64/0x260 [ 203.367307][ T9298] el0t_64_sync_handler+0x44/0x104 [ 203.367317][ T9298] el0t_64_sync+0x198/0x19c [ 203.402212][ T9296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1029'. [ 203.912471][ T9319] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1034'. [ 203.912479][ T9321] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1034'. [ 204.077287][ T9337] loop0: detected capacity change from 0 to 512 [ 204.083073][ T9337] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 204.085473][ T9337] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.1040: corrupted in-inode xattr: e_value size too large [ 204.088492][ T9337] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.088996][ T9337] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1040: couldn't read orphan inode 15 (err -117) [ 204.093568][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 204.093582][ C1] EXT4-fs (loop0): initial error at time 204: ext4_iget_extra_inode:5180: inode 15 [ 204.093599][ C1] EXT4-fs (loop0): last error at time 204: ext4_iget_extra_inode:5180: inode 15 [ 204.099077][ T9337] loop0: lost filesystem error report for type 5 error -117 [ 204.099732][ T9337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.112692][ T9337] capability: warning: `syz.0.1040' uses 32-bit capabilities (legacy support in use) [ 204.146390][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.205257][ T9345] loop7: detected capacity change from 0 to 256 [ 204.305808][ T9355] FAULT_INJECTION: forcing a failure. [ 204.305808][ T9355] name fail_futex, interval 1, probability 0, space 0, times 0 [ 204.309115][ T9355] CPU: 1 UID: 0 PID: 9355 Comm: syz.7.1046 Tainted: G L syzkaller #0 PREEMPT [ 204.309139][ T9355] Tainted: [L]=SOFTLOCKUP [ 204.309143][ T9355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 204.309150][ T9355] Call trace: [ 204.309154][ T9355] show_stack+0x2c/0x3c (C) [ 204.309178][ T9355] __dump_stack+0x30/0x40 [ 204.309192][ T9355] dump_stack_lvl+0xd8/0x12c [ 204.309204][ T9355] dump_stack+0x1c/0x28 [ 204.309216][ T9355] should_fail_ex+0x41c/0x590 [ 204.309225][ T9355] should_fail+0x14/0x24 [ 204.309233][ T9355] get_futex_key+0x1ec/0x12b0 [ 204.309243][ T9355] futex_wake+0x10c/0x594 [ 204.309257][ T9355] do_futex+0x2c4/0x378 [ 204.309267][ T9355] __arm64_sys_futex+0x2e4/0x418 [ 204.309277][ T9355] invoke_syscall+0x98/0x244 [ 204.309289][ T9355] el0_svc_common+0xec/0x23c [ 204.309301][ T9355] do_el0_svc+0x4c/0x5c [ 204.309313][ T9355] el0_svc+0x64/0x260 [ 204.309323][ T9355] el0t_64_sync_handler+0x44/0x104 [ 204.309334][ T9355] el0t_64_sync+0x198/0x19c [ 204.347639][ T9357] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.0.1047: corrupted xattr block 95: invalid header [ 204.347680][ T9357] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 204.348073][ T9357] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1047: bg 0: block 7: invalid block bitmap [ 204.348088][ T9357] loop0: lost filesystem error report for type 5 error -117 [ 204.348260][ T9357] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 204.348270][ T9357] loop0: lost filesystem error report for type 5 error -117 [ 204.348388][ T9357] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #11: comm syz.0.1047: corrupted xattr block 95: invalid header [ 204.348401][ T9357] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 204.348520][ T9357] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 204.348553][ T9357] EXT4-fs (loop0): 1 orphan inode deleted [ 204.349067][ T9357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.395813][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.401142][ T9360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.401174][ T9360] IPv6: NLM_F_CREATE should be set when creating new route [ 204.435671][ T9362] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 204.435691][ T9362] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 204.440199][ T9362] vhci_hcd vhci_hcd.0: Device attached [ 204.453333][ T9360] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.453503][ T9360] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.455599][ T9363] vhci_hcd: connection closed [ 204.455944][ T5329] vhci_hcd vhci_hcd.7: stop threads [ 204.455960][ T5329] vhci_hcd vhci_hcd.7: release socket [ 204.455976][ T5329] vhci_hcd vhci_hcd.7: disconnect device [ 204.485221][ T9360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.488620][ T9360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.639375][ T9369] set_capacity_and_notify: 1 callbacks suppressed [ 204.639420][ T9369] loop0: detected capacity change from 0 to 128 [ 204.639774][ T9369] vfat: Unknown parameter '0177777777777777777777700000000000000000000ÿÿ' [ 204.787409][ T9372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.789653][ T9372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.831364][ T9374] loop0: detected capacity change from 0 to 512 [ 204.854948][ T9374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.858303][ T9374] EXT4-fs error (device loop0): ext4_get_verity_descriptor_location:337: inode #15: comm syz.0.1053: verity file corrupted; can't find descriptor [ 204.861473][ T9374] EXT4-fs (loop0): Remounting filesystem read-only [ 204.861498][ T9374] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size [ 204.875471][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.911937][ T5339] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.911974][ T5339] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.912001][ T5339] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.912020][ T5339] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.935827][ T9382] loop0: detected capacity change from 0 to 1024 [ 204.937589][ T9382] ext4: Unknown parameter '|³ѯŠ.MŠº:£I¯š«%ù®' [ 205.752986][ T9387] loop7: detected capacity change from 0 to 512 [ 205.758481][ T9387] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.7.1059: corrupted xattr block 95: invalid header [ 205.758512][ T9387] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 205.758727][ T9387] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1059: bg 0: block 7: invalid block bitmap [ 205.758747][ T9387] loop7: lost filesystem error report for type 5 error -117 [ 205.758903][ T9387] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 205.758920][ T9387] loop7: lost filesystem error report for type 5 error -117 [ 205.759041][ T9387] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2972: inode #11: comm syz.7.1059: corrupted xattr block 95: invalid header [ 205.759059][ T9387] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 205.759175][ T9387] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117) [ 205.759211][ T9387] EXT4-fs (loop7): 1 orphan inode deleted [ 205.759653][ T9387] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.856698][ T4717] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.859586][ T4717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.863850][ T4717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.865670][ T4717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.867702][ T4717] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.908257][ T8566] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.972609][ T9403] IPv6: Can't replace route, no match found [ 206.011588][ T9404] IPv6: Can't replace route, no match found [ 206.057469][ T9412] netlink: 'syz.7.1065': attribute type 83 has an invalid length. [ 206.088967][ T9416] ip_tables: iptables: counters copy to user failed while replacing table [ 206.159603][ T9421] loop3: detected capacity change from 0 to 128 [ 206.159959][ T9421] vfat: Unknown parameter '0177777777777777777777700000000000000000000ÿÿ' [ 206.338936][ T9427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.359491][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 206.371895][ T9427] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.372071][ T9427] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.403550][ T9427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.405739][ T9427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.621167][ T13] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.621217][ T13] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.621249][ T13] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.621270][ T13] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.652321][ T5327] bond1: left allmulticast mode [ 206.653641][ T5327] bond1: left promiscuous mode [ 206.653786][ T5327] bridge0: port 3(bond1) entered disabled state [ 206.655788][ T5327] bridge_slave_1: left allmulticast mode [ 206.655802][ T5327] bridge_slave_1: left promiscuous mode [ 206.655869][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.658212][ T5327] bridge_slave_0: left allmulticast mode [ 206.658225][ T5327] bridge_slave_0: left promiscuous mode [ 206.658301][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.767758][ T5327] team0: Port device bridge1 removed [ 206.773593][ T5327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.828553][ T9445] netlink: 'syz.6.1075': attribute type 83 has an invalid length. [ 206.833026][ T5327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.835255][ T5327] bond0 (unregistering): Released all slaves [ 206.850783][ T5327] bond1 (unregistering): Released all slaves [ 207.648092][ T9451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.648299][ T9451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.880420][ T4717] Bluetooth: hci0: command tx timeout [ 207.953193][ T9484] loop3: detected capacity change from 0 to 128 [ 207.955416][ T9484] vfat: Unknown parameter '0177777777777777777777700000000000000000000ÿÿ' [ 207.991650][ T4404] 8021q: adding VLAN 0 to HW filter on device eth12 [ 207.993645][ T9394] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.995566][ T9394] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.997299][ T9394] bridge_slave_0: entered allmulticast mode [ 208.002325][ T9394] bridge_slave_0: entered promiscuous mode [ 208.024381][ T9394] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.024493][ T9394] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.024597][ T9394] bridge_slave_1: entered allmulticast mode [ 208.025441][ T9394] bridge_slave_1: entered promiscuous mode [ 208.252080][ T5327] hsr_slave_0: left promiscuous mode [ 208.253356][ T5327] hsr_slave_1: left promiscuous mode [ 208.253909][ T5327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.254884][ T5327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.384397][ T5327] team0 (unregistering): Port device team_slave_1 removed [ 208.389645][ T5327] team0 (unregistering): Port device team_slave_0 removed [ 208.390511][ T5294] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 208.456631][ T9394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.459682][ T9394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.482722][ T9394] team0: Port device team_slave_0 added [ 208.483486][ T9394] team0: Port device team_slave_1 added [ 208.498115][ T9394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.503089][ T9394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.503123][ T9394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.503737][ T9394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.503751][ T9394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.503779][ T9394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.541610][ T5294] usb 1-1: Invalid ep0 maxpacket: 32 [ 208.548145][ T9394] hsr_slave_0: entered promiscuous mode [ 208.549708][ T9394] hsr_slave_1: entered promiscuous mode [ 208.622751][ T9394] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 208.629189][ T9394] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 208.633060][ T9394] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 208.637146][ T9394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 208.638066][ T9394] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 208.642594][ T9394] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 208.643048][ T9394] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 208.645219][ T9394] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 208.670194][ T5294] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 208.677016][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1085'. [ 208.687155][ T4404] 8021q: adding VLAN 0 to HW filter on device eth13 [ 208.705600][ T9394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.717522][ T9394] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.731331][ T5340] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.731374][ T5340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.744892][ T5340] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.744933][ T5340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.783197][ T9394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.822093][ T5294] usb 1-1: Invalid ep0 maxpacket: 32 [ 208.823200][ T5294] usb usb1-port1: attempt power cycle [ 208.899290][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1089'. [ 208.899333][ T9546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1089'. [ 208.910069][ T9394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.004818][ T4404] 8021q: adding VLAN 0 to HW filter on device eth15 [ 209.035432][ T9394] veth0_vlan: entered promiscuous mode [ 209.037546][ T9394] veth1_vlan: entered promiscuous mode [ 209.044699][ T9394] veth0_macvtap: entered promiscuous mode [ 209.285670][ T9394] veth1_macvtap: entered promiscuous mode [ 209.302366][ T9394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.306240][ T9394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.340563][ T5294] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 209.340972][ T39] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.345192][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.345281][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.354893][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.354925][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.360423][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.360818][ T5294] usb 1-1: Invalid ep0 maxpacket: 32 [ 209.360837][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.360980][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.429462][ T9572] loop8: detected capacity change from 0 to 8192 [ 209.476887][ T4404] 8021q: adding VLAN 0 to HW filter on device eth14 [ 209.490507][ T5294] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 209.513108][ T5294] usb 1-1: Invalid ep0 maxpacket: 32 [ 209.514536][ T5294] usb usb1-port1: unable to enumerate USB device [ 209.961346][ T4717] Bluetooth: hci0: command tx timeout [ 210.374277][ T9603] FAULT_INJECTION: forcing a failure. [ 210.374277][ T9603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.374319][ T9603] CPU: 0 UID: 0 PID: 9603 Comm: syz.8.1095 Tainted: G L syzkaller #0 PREEMPT [ 210.374335][ T9603] Tainted: [L]=SOFTLOCKUP [ 210.374339][ T9603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 210.374344][ T9603] Call trace: [ 210.374347][ T9603] show_stack+0x2c/0x3c (C) [ 210.374368][ T9603] __dump_stack+0x30/0x40 [ 210.374379][ T9603] dump_stack_lvl+0xd8/0x12c [ 210.374389][ T9603] dump_stack+0x1c/0x28 [ 210.374398][ T9603] should_fail_ex+0x41c/0x590 [ 210.374406][ T9603] should_fail+0x14/0x24 [ 210.374413][ T9603] should_fail_usercopy+0x20/0x30 [ 210.374420][ T9603] simple_read_from_buffer+0xc4/0x238 [ 210.374430][ T9603] proc_fail_nth_read+0x1a8/0x248 [ 210.374439][ T9603] vfs_read+0x230/0x8c8 [ 210.374446][ T9603] ksys_read+0x12c/0x228 [ 210.374453][ T9603] __arm64_sys_read+0x84/0x98 [ 210.374460][ T9603] invoke_syscall+0x98/0x244 [ 210.374470][ T9603] el0_svc_common+0xec/0x23c [ 210.374479][ T9603] do_el0_svc+0x4c/0x5c [ 210.374489][ T9603] el0_svc+0x64/0x260 [ 210.374498][ T9603] el0t_64_sync_handler+0x44/0x104 [ 210.374513][ T9603] el0t_64_sync+0x198/0x19c [ 210.824649][ T9617] loop3: detected capacity change from 0 to 1024 [ 210.861836][ T9619] loop3: detected capacity change from 0 to 1024 [ 210.941406][ T9624] loop3: detected capacity change from 0 to 4096 [ 210.942131][ T9624] EXT4-fs: inline encryption not supported [ 210.945024][ T9624] EXT4-fs (loop3): Test dummy encryption mode enabled [ 210.954165][ T9624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.063222][ T4717] Bluetooth: hci0: command tx timeout [ 212.646321][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.743847][ T9658] Illegal XDP return value 54 on prog (id 104) dev syz_tun, expect packet loss! [ 212.757259][ T9658] loop7: detected capacity change from 0 to 512 [ 212.757639][ T9658] EXT4-fs: Ignoring removed bh option [ 212.757664][ T9658] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.766377][ T9658] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 212.769778][ T9658] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.1114: bad orphan inode 131083 [ 212.769806][ T9658] loop7: lost filesystem error report for type 5 error -117 [ 212.770393][ T9658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.956476][ T9663] overlayfs: upper fs needs to support d_type. [ 213.085101][ T8566] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /48/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 213.104744][ T9669] block2mtd: error: cannot open device / [ 213.183001][ T9673] loop8: detected capacity change from 0 to 512 [ 213.186703][ T9673] EXT4-fs warning (device loop8): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 213.268386][ T9676] netlink: 'syz.6.1119': attribute type 2 has an invalid length. [ 213.268422][ T9676] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1119'. [ 213.296475][ T8566] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.419598][ T4727] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.422140][ T4727] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.424285][ T4727] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.429755][ T4727] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.432437][ T4727] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.227294][ T4717] Bluetooth: hci0: command tx timeout [ 214.495402][ T9704] loop6: detected capacity change from 0 to 512 [ 214.611814][ T9704] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.6.1126: corrupted xattr block 95: invalid header [ 214.611858][ T9704] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 214.615128][ T9704] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1126: bg 0: block 7: invalid block bitmap [ 214.615160][ T9704] loop6: lost filesystem error report for type 5 error -117 [ 214.615368][ T9704] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 214.615389][ T9704] loop6: lost filesystem error report for type 5 error -117 [ 214.615535][ T9704] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #11: comm syz.6.1126: corrupted xattr block 95: invalid header [ 214.615556][ T9704] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 214.615713][ T9704] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 214.615748][ T9704] EXT4-fs (loop6): 1 orphan inode deleted [ 214.621534][ T9704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.668401][ T7038] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.829258][ T39] bridge_slave_1: left allmulticast mode [ 214.831779][ T39] bridge_slave_1: left promiscuous mode [ 214.833085][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.847933][ T39] bridge_slave_0: left allmulticast mode [ 214.850376][ T39] bridge_slave_0: left promiscuous mode [ 214.851833][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.062582][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.068911][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.087244][ T39] bond0 (unregistering): Released all slaves [ 215.378314][ T9681] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.381788][ T9681] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.381878][ T9681] bridge_slave_0: entered allmulticast mode [ 215.388494][ T9681] bridge_slave_0: entered promiscuous mode [ 215.389574][ T9681] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.389604][ T9681] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.389663][ T9681] bridge_slave_1: entered allmulticast mode [ 215.392906][ T9681] bridge_slave_1: entered promiscuous mode [ 215.435726][ T9767] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1139'. [ 215.471093][ T9681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.473994][ T9681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.479432][ T4717] Bluetooth: hci3: command tx timeout [ 215.500740][ T9773] loop8: detected capacity change from 0 to 512 [ 215.511966][ T9773] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.8.1140: corrupted xattr block 95: invalid header [ 215.515196][ T9773] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 215.516541][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 215.516566][ C0] EXT4-fs (loop8): initial error at time 215: ext4_expand_extra_isize_ea:2810: inode 11 [ 215.516598][ C0] EXT4-fs (loop8): last error at time 215: ext4_expand_extra_isize_ea:2810: inode 11 [ 215.529324][ T9773] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1140: bg 0: block 7: invalid block bitmap [ 215.529343][ T9773] loop8: lost filesystem error report for type 5 error -117 [ 215.535561][ T9773] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 215.545878][ T9773] loop8: lost filesystem error report for type 5 error -117 [ 215.548314][ T9773] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #11: comm syz.8.1140: corrupted xattr block 95: invalid header [ 215.548358][ T9773] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 215.548549][ T9773] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 215.548589][ T9773] EXT4-fs (loop8): 1 orphan inode deleted [ 215.549041][ T9773] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.560850][ T9681] team0: Port device team_slave_0 added [ 215.598417][ T9681] team0: Port device team_slave_1 added [ 215.631589][ T9394] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.640886][ T39] hsr_slave_0: left promiscuous mode [ 215.644438][ T39] hsr_slave_1: left promiscuous mode [ 215.645810][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.648470][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.132522][ T39] team0 (unregistering): Port device team_slave_1 removed [ 216.148030][ T39] team0 (unregistering): Port device team_slave_0 removed [ 216.264565][ T9681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.266022][ T9681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.271745][ T9681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.274832][ T4404] 8021q: adding VLAN 0 to HW filter on device eth17 [ 216.276791][ T9681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.276816][ T9681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.276840][ T9681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.565412][ T9681] hsr_slave_0: entered promiscuous mode [ 216.567170][ T9681] hsr_slave_1: entered promiscuous mode [ 216.569237][ T9681] debugfs: 'hsr0' already exists in 'hsr' [ 216.572644][ T9681] Cannot create hsr debugfs directory [ 216.657937][ T9800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.657970][ T9800] IPv6: NLM_F_CREATE should be set when creating new route [ 216.788607][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.788787][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.104398][ T9800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.118858][ T9800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.273541][ T4404] 8021q: adding VLAN 0 to HW filter on device eth19 [ 217.276536][ T5327] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.276590][ T5327] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.276616][ T5327] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.276633][ T5327] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.331395][ T9828] loop0: detected capacity change from 0 to 256 [ 217.368725][ T9828] loop0: detected capacity change from 0 to 256 [ 217.376305][ T9833] loop8: detected capacity change from 0 to 512 [ 217.383786][ T9828] loop0: detected capacity change from 0 to 256 [ 217.395244][ T9828] loop0: detected capacity change from 0 to 256 [ 217.403730][ T9833] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.8.1152: corrupted xattr block 95: invalid header [ 217.407167][ T9833] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 217.407857][ T9833] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1152: bg 0: block 7: invalid block bitmap [ 217.407987][ T9833] loop8: lost filesystem error report for type 5 error -117 [ 217.413862][ T9833] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 217.413898][ T9833] loop8: lost filesystem error report for type 5 error -117 [ 217.417374][ C0] EXT4-fs (loop8): error count since last fsck: 3 [ 217.417390][ C0] EXT4-fs (loop8): initial error at time 217: ext4_expand_extra_isize_ea:2810: inode 11 [ 217.417407][ C0] EXT4-fs (loop8): last error at time 217: ext4_mb_clear_bb:6679 [ 217.426827][ T9833] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #11: comm syz.8.1152: corrupted xattr block 95: invalid header [ 217.426864][ T9833] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 217.429593][ T9833] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 217.429657][ T9833] EXT4-fs (loop8): 1 orphan inode deleted [ 217.452178][ T9833] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.484014][ T9828] loop0: detected capacity change from 0 to 256 [ 217.485124][ T9681] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 217.494783][ T9681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.495142][ T9681] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 217.501668][ T9828] loop0: detected capacity change from 0 to 256 [ 217.521837][ T9681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.525641][ T9681] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 217.527890][ T9681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.528209][ T9681] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 217.538020][ T9681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.538917][ T9394] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.579591][ T4717] Bluetooth: hci3: command tx timeout [ 217.962139][ T9681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.979252][ T9681] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.033901][ T5340] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.033943][ T5340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.041701][ T5340] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.041745][ T5340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.062608][ T4404] 8021q: adding VLAN 0 to HW filter on device eth18 [ 218.540231][ T9681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.336349][ T9898] tipc: Started in network mode [ 219.336391][ T9898] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 219.336637][ T9898] tipc: Enabling of bearer rejected, failed to enable media [ 219.441476][ T9904] configfs: Unknown parameter '(}]}))' [ 219.486912][ T4404] 8021q: adding VLAN 0 to HW filter on device eth16 [ 219.536250][ T9681] veth0_vlan: entered promiscuous mode [ 219.538000][ T9681] veth1_vlan: entered promiscuous mode [ 219.561296][ T9681] veth0_macvtap: entered promiscuous mode [ 219.569273][ T9681] veth1_macvtap: entered promiscuous mode [ 219.584998][ T9681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.586068][ T9681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.598913][ T9915] netlink: 'syz.0.1160': attribute type 39 has an invalid length. [ 219.604758][ T5342] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.605176][ T5342] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.605200][ T5342] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.605219][ T5342] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.634827][ T4717] Bluetooth: hci3: command tx timeout [ 219.691661][ T5342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.691692][ T5342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.741415][ T9921] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1162'. [ 219.753784][ T9921] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1162'. [ 219.770297][ T5344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.770327][ T5344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.849593][ T9931] loop8: detected capacity change from 0 to 512 [ 220.190111][ T9931] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.8.1164: corrupted xattr block 95: invalid header [ 220.190156][ T9931] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.194218][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 220.194244][ C1] EXT4-fs (loop8): initial error at time 220: ext4_expand_extra_isize_ea:2810: inode 11 [ 220.194288][ C1] EXT4-fs (loop8): last error at time 220: ext4_expand_extra_isize_ea:2810: inode 11 [ 220.201934][ T9931] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1164: bg 0: block 7: invalid block bitmap [ 220.201965][ T9931] loop8: lost filesystem error report for type 5 error -117 [ 220.205797][ T9931] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 220.205827][ T9931] loop8: lost filesystem error report for type 5 error -117 [ 220.209392][ T9931] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #11: comm syz.8.1164: corrupted xattr block 95: invalid header [ 220.209422][ T9931] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.214524][ T9931] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 220.214580][ T9931] EXT4-fs (loop8): 1 orphan inode deleted [ 220.220359][ T9931] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.325810][ T9394] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.377217][ T9993] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1168'. [ 220.579993][ T9997] FAULT_INJECTION: forcing a failure. [ 220.579993][ T9997] name failslab, interval 1, probability 0, space 0, times 0 [ 220.580032][ T9997] CPU: 1 UID: 0 PID: 9997 Comm: syz.8.1170 Tainted: G L syzkaller #0 PREEMPT [ 220.580049][ T9997] Tainted: [L]=SOFTLOCKUP [ 220.580055][ T9997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 220.580063][ T9997] Call trace: [ 220.580066][ T9997] show_stack+0x2c/0x3c (C) [ 220.580088][ T9997] __dump_stack+0x30/0x40 [ 220.580100][ T9997] dump_stack_lvl+0xd8/0x12c [ 220.580110][ T9997] dump_stack+0x1c/0x28 [ 220.580120][ T9997] should_fail_ex+0x41c/0x590 [ 220.580128][ T9997] should_failslab+0xc4/0x120 [ 220.580137][ T9997] __kmalloc_cache_noprof+0x94/0x5ec [ 220.580147][ T9997] sctp_add_bind_addr+0x9c/0x2e8 [ 220.580158][ T9997] sctp_copy_local_addr_list+0x2f8/0x4a4 [ 220.580169][ T9997] sctp_copy_one_addr+0xb0/0x1e0 [ 220.580178][ T9997] sctp_bind_addr_copy+0xa8/0x284 [ 220.580187][ T9997] sctp_assoc_set_bind_addr_from_ep+0x128/0x184 [ 220.580194][ T9997] sctp_connect_new_asoc+0x28c/0x5ec [ 220.580204][ T9997] sctp_sendmsg+0xdd8/0x17bc [ 220.580214][ T9997] inet_sendmsg+0xb4/0xd8 [ 220.580223][ T9997] __sock_sendmsg+0xc8/0x17c [ 220.580232][ T9997] __sys_sendto+0x250/0x328 [ 220.580241][ T9997] __arm64_sys_sendto+0xec/0x10c [ 220.580250][ T9997] invoke_syscall+0x98/0x244 [ 220.580260][ T9997] el0_svc_common+0xec/0x23c [ 220.580270][ T9997] do_el0_svc+0x4c/0x5c [ 220.580279][ T9997] el0_svc+0x64/0x260 [ 220.580288][ T9997] el0t_64_sync_handler+0x44/0x104 [ 220.580296][ T9997] el0t_64_sync+0x198/0x19c [ 221.405723][T10003] nvme nvme1: rdma_resolve_addr failed (-19). [ 221.502024][T10009] loop8: detected capacity change from 0 to 512 [ 221.537477][T10009] EXT4-fs: Ignoring removed nobh option [ 221.546099][ T9998] lo speed is unknown, defaulting to 1000 [ 221.547099][ T9998] lo speed is unknown, defaulting to 1000 [ 221.557112][T10009] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #3: comm syz.8.1173: corrupted inode contents [ 221.557141][T10009] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 221.563531][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 221.563572][ C1] EXT4-fs (loop8): initial error at time 221: ext4_do_update_inode:5742: inode 3 [ 221.563611][ C1] EXT4-fs (loop8): last error at time 221: ext4_do_update_inode:5742: inode 3 [ 221.573405][T10009] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #3: comm syz.8.1173: mark_inode_dirty error [ 221.573448][T10009] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 221.585619][T10009] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #3: comm syz.8.1173: corrupted inode contents [ 221.588103][T10009] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 221.590212][T10009] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #3: comm syz.8.1173: mark_inode_dirty error [ 221.590255][T10009] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 221.594679][T10009] Quota error (device loop8): write_blk: dquota write failed [ 221.594737][T10009] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 221.594758][T10009] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.1173: Failed to acquire dquot type 0 [ 221.594769][T10009] loop8: lost filesystem error report for type 5 error -117 [ 221.604397][T10009] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.1173: corrupted inode contents [ 221.604431][T10009] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 221.604646][T10009] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #16: comm syz.8.1173: mark_inode_dirty error [ 221.604658][T10009] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 221.604776][T10009] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.1173: corrupted inode contents [ 221.604790][T10009] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 221.604899][T10009] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.1173: mark_inode_dirty error [ 221.604910][T10009] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 221.605030][T10009] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.1173: corrupted inode contents [ 221.605138][T10009] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 221.605147][T10009] loop8: lost filesystem error report for type 5 error -117 [ 221.605252][T10009] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.1173: corrupted inode contents [ 221.605356][T10009] EXT4-fs error (device loop8): ext4_truncate:4691: inode #16: comm syz.8.1173: mark_inode_dirty error [ 221.605459][T10009] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 221.605468][T10009] loop8: lost filesystem error report for type 5 error -117 [ 221.605886][T10009] EXT4-fs (loop8): 1 truncate cleaned up [ 221.628139][T10009] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.630957][ T5220] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 221.635924][T10009] EXT4-fs (loop8): shut down requested (1) [ 221.638191][ T5220] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 221.658734][T10012] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1174'. [ 221.661537][ T9998] lo speed is unknown, defaulting to 1000 [ 221.675817][ T9394] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.713926][ T4717] Bluetooth: hci3: command tx timeout [ 222.594605][T10038] netlink: 'syz.8.1177': attribute type 12 has an invalid length. [ 222.594642][T10038] netlink: 232 bytes leftover after parsing attributes in process `syz.8.1177'. [ 222.658282][ T1094] lo speed is unknown, defaulting to 1000 [ 222.665211][ T9998] infiniband syz0: set active [ 222.666558][ T9998] infiniband syz0: added lo [ 222.733067][ T9998] RDS/IB: syz0: added [ 222.733206][ T9998] smc: adding ib device syz0 with port count 1 [ 222.733255][ T9998] smc: ib device syz0 port 1 has no pnetid [ 222.734223][ T1094] lo speed is unknown, defaulting to 1000 [ 222.739421][ T9998] lo speed is unknown, defaulting to 1000 [ 222.873176][T10050] loop6: detected capacity change from 0 to 4096 [ 222.875634][T10050] EXT4-fs (loop6): Test dummy encryption mode enabled [ 222.906522][T10050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.927850][T10050] debugfs: Bad value for 'mode' [ 222.992709][ T7038] EXT4-fs error (device loop6): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /107/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 222.998830][ T7038] EXT4-fs error (device loop6): ext4_empty_dir:3101: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 223.005685][ T7038] EXT4-fs warning (device loop6): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 223.005863][ T7038] EXT4-fs error (device loop6): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /107/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 223.025125][ T7038] EXT4-fs error (device loop6): ext4_empty_dir:3101: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 223.025412][ T7038] EXT4-fs warning (device loop6): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 223.025573][ T7038] EXT4-fs error (device loop6): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /107/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 223.025802][ T7038] EXT4-fs error (device loop6): ext4_empty_dir:3101: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 223.032147][ T7038] EXT4-fs warning (device loop6): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 223.032332][ T7038] EXT4-fs error (device loop6): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /107/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 223.032598][ T7038] EXT4-fs error (device loop6): ext4_empty_dir:3101: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 223.032749][ T7038] EXT4-fs warning (device loop6): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 223.032930][ T7038] EXT4-fs error (device loop6): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /107/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 223.033956][ T7038] EXT4-fs error (device loop6): ext4_empty_dir:3101: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 223.034133][ T7038] EXT4-fs warning (device loop6): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 223.042570][ T7038] EXT4-fs warning (device loop6): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 223.043366][ T7038] EXT4-fs warning (device loop6): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 223.044291][ T7038] EXT4-fs warning (device loop6): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 223.044808][ T7038] EXT4-fs warning (device loop6): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 223.045172][ T7038] EXT4-fs warning (device loop6): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 223.069809][ T30] audit: type=1326 audit(223.107:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10056 comm="syz.0.1181" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a5792a8 code=0x7ffc0000 [ 223.069851][ T30] audit: type=1326 audit(223.107:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10056 comm="syz.0.1181" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a5792a8 code=0x7ffc0000 [ 223.069872][ T30] audit: type=1326 audit(223.107:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10056 comm="syz.0.1181" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff9a5792a8 code=0x7ffc0000 [ 223.069889][ T30] audit: type=1326 audit(223.107:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10056 comm="syz.0.1181" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff9a5792a8 code=0x7ffc0000 [ 223.091989][ T9998] lo speed is unknown, defaulting to 1000 [ 223.119477][T10072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1184'. [ 223.180329][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1184'. [ 223.237033][T10090] loop8: detected capacity change from 0 to 128 [ 223.258772][T10090] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.420363][ T9998] lo speed is unknown, defaulting to 1000 [ 223.470926][ T7038] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.874915][ T9998] lo speed is unknown, defaulting to 1000 [ 223.986079][ T4727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.989011][ T4727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.991191][ T4727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.993908][ T4727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.995970][ T4727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.034992][ T9998] lo speed is unknown, defaulting to 1000 [ 224.140859][ T9949] bridge_slave_1: left allmulticast mode [ 224.140900][ T9949] bridge_slave_1: left promiscuous mode [ 224.140989][ T9949] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.148226][ T9949] bridge_slave_0: left allmulticast mode [ 224.148259][ T9949] bridge_slave_0: left promiscuous mode [ 224.148344][ T9949] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.293027][ T9394] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.358548][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1194'. [ 224.360697][T10138] netlink: 332 bytes leftover after parsing attributes in process `syz.8.1192'. [ 224.387439][ T9949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.407132][ T9949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.432961][ T9949] bond0 (unregistering): Released all slaves [ 224.474388][T10137] macvtap1: entered allmulticast mode [ 224.474428][T10137] dummy0: entered allmulticast mode [ 224.474524][T10137] dummy0: entered promiscuous mode [ 224.484877][T10137] dummy0: left allmulticast mode [ 224.508227][ T5220] dummy0: left promiscuous mode [ 224.508357][ T9949] tipc: Left network mode [ 224.600403][T10120] lo speed is unknown, defaulting to 1000 [ 224.716936][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 224.716970][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 225.010782][T10161] loop0: detected capacity change from 0 to 4096 [ 225.016191][T10161] EXT4-fs (loop0): Test dummy encryption mode enabled [ 225.037359][T10161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.109003][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.338235][T10186] loop8: detected capacity change from 0 to 8192 [ 225.430133][ T9949] hsr_slave_0: left promiscuous mode [ 225.431529][ T9949] hsr_slave_1: left promiscuous mode [ 225.433714][ T9949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.437576][ T9949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.779209][T10211] loop9: detected capacity change from 0 to 128 [ 225.779620][T10211] vfat: Unknown parameter '0177777777777777777777700000000000000000000ÿÿ' [ 225.857498][ T9949] team0 (unregistering): Port device team_slave_1 removed [ 225.879803][ T9949] team0 (unregistering): Port device team_slave_0 removed [ 226.023303][ T9949] team0 (unregistering): Port device dummy0 removed [ 226.041410][ T4717] Bluetooth: hci1: command tx timeout [ 226.079174][ T4404] 8021q: adding VLAN 0 to HW filter on device eth20 [ 226.079362][T10194] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1200'. [ 226.079437][T10194] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1200'. [ 226.083766][T10120] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.083791][T10120] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.083947][T10120] bridge_slave_0: entered allmulticast mode [ 226.084768][T10120] bridge_slave_0: entered promiscuous mode [ 226.088035][T10120] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.088488][T10120] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.088563][T10120] bridge_slave_1: entered allmulticast mode [ 226.090282][T10120] bridge_slave_1: entered promiscuous mode [ 226.124715][T10120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.130772][T10120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.159551][T10120] team0: Port device team_slave_0 added [ 226.160329][T10120] team0: Port device team_slave_1 added [ 226.270646][T10120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.270675][T10120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.270705][T10120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.282424][T10120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.282451][T10120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.282478][T10120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.332137][T10120] hsr_slave_0: entered promiscuous mode [ 226.332493][T10120] hsr_slave_1: entered promiscuous mode [ 226.332704][T10120] debugfs: 'hsr0' already exists in 'hsr' [ 226.332715][T10120] Cannot create hsr debugfs directory [ 226.838709][ T4404] 8021q: adding VLAN 0 to HW filter on device eth21 [ 227.175487][T10254] loop9: detected capacity change from 0 to 512 [ 227.186783][ T4404] 8021q: adding VLAN 0 to HW filter on device eth22 [ 227.188480][T10254] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.9.1206: corrupted xattr block 95: invalid header [ 227.188516][T10254] fserror_report: 3 callbacks suppressed [ 227.188537][T10254] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 227.191341][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 227.191355][ C1] EXT4-fs (loop9): initial error at time 227: ext4_expand_extra_isize_ea:2810: inode 11 [ 227.191371][ C1] EXT4-fs (loop9): last error at time 227: ext4_expand_extra_isize_ea:2810: inode 11 [ 227.199681][T10254] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.1206: bg 0: block 7: invalid block bitmap [ 227.199714][T10254] loop9: lost filesystem error report for type 5 error -117 [ 227.202555][T10254] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 227.202583][T10254] loop9: lost filesystem error report for type 5 error -117 [ 227.205705][T10254] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2972: inode #11: comm syz.9.1206: corrupted xattr block 95: invalid header [ 227.205742][T10254] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 227.209785][T10254] EXT4-fs warning (device loop9): ext4_evict_inode:287: xattr delete (err -117) [ 227.209851][T10254] EXT4-fs (loop9): 1 orphan inode deleted [ 227.286175][T10254] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.391857][T10120] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 227.412149][ T9681] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.416810][T10120] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 227.417144][T10120] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 227.426888][T10120] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.427242][T10120] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 227.435386][T10120] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 227.435966][T10120] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 227.445545][T10120] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.482132][T10265] loop9: detected capacity change from 0 to 512 [ 227.527997][T10265] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 227.555467][T10265] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 227.555534][T10265] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 227.555547][T10265] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.1208: Failed to acquire dquot type 0 [ 227.564425][T10120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.572600][T10120] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.616378][ T9949] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.616423][ T9949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.620367][ T9949] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.620403][ T9949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.639037][ T9681] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 227.654311][T10120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.747298][ T4404] 8021q: adding VLAN 0 to HW filter on device eth23 [ 227.885165][T10120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.925270][T10120] veth0_vlan: entered promiscuous mode [ 227.934243][T10120] veth1_vlan: entered promiscuous mode [ 227.957370][T10120] veth0_macvtap: entered promiscuous mode [ 227.962126][T10120] veth1_macvtap: entered promiscuous mode [ 227.967860][T10120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.974274][T10120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.010513][ T9949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.012904][ T9949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.012948][ T9949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.012967][ T9949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.046543][ T9952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.046578][ T9952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.068583][ T9975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.068612][ T9975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.115379][ T4717] Bluetooth: hci1: command tx timeout [ 229.028464][T10334] __nla_validate_parse: 63 callbacks suppressed [ 229.030001][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1211'. [ 229.039591][T10334] loop8: detected capacity change from 0 to 512 [ 229.052023][T10334] ext4: Unknown parameter 'fowner' [ 229.142546][T10337] lo speed is unknown, defaulting to 1000 [ 229.148845][ T4727] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.158775][ T4727] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.161164][ T4727] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.163356][ T4727] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.166552][ T4727] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.171293][T10344] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1213'. [ 229.200128][T10343] openvswitch: netlink: Actions may not be safe on all matching packets [ 229.331043][T10350] loop0: detected capacity change from 0 to 512 [ 229.359583][T10350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.375902][T10350] EXT4-fs warning (device loop0): ext4_begin_enable_verity:135: inode #15: comm syz.0.1216: verity is only allowed on extent-based files [ 229.403882][T10354] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 229.453717][T10366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1216'. [ 229.672170][T10340] lo speed is unknown, defaulting to 1000 [ 230.117183][ T4717] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.120242][ T4717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.122930][ T4717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.132614][ T4717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.136577][ T4717] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.200438][ T4727] Bluetooth: hci1: command tx timeout [ 230.237190][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.462801][T10403] lo speed is unknown, defaulting to 1000 [ 230.596019][T10340] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.597906][T10340] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.599662][T10340] bridge_slave_0: entered allmulticast mode [ 230.601534][T10340] bridge_slave_0: entered promiscuous mode [ 230.605150][T10340] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.606754][T10340] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.608456][T10340] bridge_slave_1: entered allmulticast mode [ 230.626717][T10340] bridge_slave_1: entered promiscuous mode [ 230.706199][T10340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.735549][T10340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.238761][ T4727] Bluetooth: hci5: command tx timeout [ 231.505377][T10340] team0: Port device team_slave_0 added [ 231.514316][T10340] team0: Port device team_slave_1 added [ 231.551160][T10340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.560235][T10340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.560292][T10340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.561044][T10340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.561060][T10340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.561077][T10340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.615173][T10340] hsr_slave_0: entered promiscuous mode [ 231.616802][T10340] hsr_slave_1: entered promiscuous mode [ 231.618390][T10340] debugfs: 'hsr0' already exists in 'hsr' [ 231.620203][T10340] Cannot create hsr debugfs directory [ 231.692139][T10461] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1225'. [ 231.762494][ T9975] bridge_slave_1: left allmulticast mode [ 231.762528][ T9975] bridge_slave_1: left promiscuous mode [ 231.762610][ T9975] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.768880][ T9975] bridge_slave_0: left allmulticast mode [ 231.768903][ T9975] bridge_slave_0: left promiscuous mode [ 231.768977][ T9975] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.840510][T10469] loop2: detected capacity change from 0 to 512 [ 231.841605][T10469] EXT4-fs (loop2): Test dummy encryption mode enabled [ 231.846327][T10469] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 231.846365][T10469] System zones: 1-2, 4-12, 8-8 [ 231.850237][T10469] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1227: iget: bad i_size value: 38620345925642 [ 231.850271][T10469] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 231.850516][T10469] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1227: couldn't read orphan inode 15 (err -117) [ 231.850534][T10469] loop2: lost filesystem error report for type 5 error -117 [ 231.865396][T10469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.905787][T10120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.943520][T10482] loop2: detected capacity change from 0 to 1024 [ 231.947671][ T9975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.962060][ T9975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.965332][ T9975] bond0 (unregistering): Released all slaves [ 231.989710][T10482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1229'. [ 231.998091][T10483] netlink: 'syz.0.1230': attribute type 2 has an invalid length. [ 232.188614][ T4727] Bluetooth: hci0: command tx timeout [ 232.280090][T10403] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.280171][ T4727] Bluetooth: hci1: command tx timeout [ 232.283451][T10403] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.285145][T10403] bridge_slave_0: entered allmulticast mode [ 232.286969][T10403] bridge_slave_0: entered promiscuous mode [ 232.289371][T10403] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.290906][T10403] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.292380][T10403] bridge_slave_1: entered allmulticast mode [ 232.294282][T10403] bridge_slave_1: entered promiscuous mode [ 232.317255][T10403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.330590][T10403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.775311][T10403] team0: Port device team_slave_0 added [ 232.969665][T10403] team0: Port device team_slave_1 added [ 233.016228][T10403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.016266][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.016284][T10403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.021678][T10403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.021690][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.021705][T10403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.095799][T10403] hsr_slave_0: entered promiscuous mode [ 233.099531][T10403] hsr_slave_1: entered promiscuous mode [ 233.101195][T10403] debugfs: 'hsr0' already exists in 'hsr' [ 233.103176][T10403] Cannot create hsr debugfs directory [ 233.427698][ T4727] Bluetooth: hci5: command tx timeout [ 233.902536][T10535] loop0: detected capacity change from 0 to 2048 [ 233.932864][T10535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.950807][T10535] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.068250][ T9975] hsr_slave_0: left promiscuous mode [ 234.088641][ T9975] hsr_slave_1: left promiscuous mode [ 234.088952][ T9975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.103278][ T9975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.323208][ T4727] Bluetooth: hci0: command tx timeout [ 235.087162][T10555] loop9: detected capacity change from 0 to 128 [ 235.087630][T10555] vfat: Unknown parameter '0177777777777777777777700000000000000000000ÿÿ' [ 235.145929][ T9975] team0 (unregistering): Port device team_slave_1 removed [ 235.153407][T10560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 235.153441][T10560] IPv6: NLM_F_CREATE should be set when creating new route [ 235.156491][ T9975] team0 (unregistering): Port device team_slave_0 removed [ 235.250295][T10562] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 235.250317][T10562] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 235.253858][T10562] vhci_hcd vhci_hcd.0: Device attached [ 235.466642][ T4727] Bluetooth: hci5: command tx timeout [ 235.472101][T10560] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.472269][T10560] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.507186][T10560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.511245][T10560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.519101][ T5294] usb 3-1: SetAddress Request (2) to port 0 [ 235.519449][ T5294] usb 3-1: new SuperSpeed USB device number 2 using vhci_hcd [ 235.591012][T10563] vhci_hcd: connection closed [ 235.591210][ T9929] vhci_hcd vhci_hcd.0: stop threads [ 235.591240][ T9929] vhci_hcd vhci_hcd.0: release socket [ 235.591288][ T9929] vhci_hcd vhci_hcd.0: disconnect device [ 235.704992][ T9] lo speed is unknown, defaulting to 1000 [ 235.705080][ T9] s: Port: 1 Link DOWN [ 235.731937][ T9] lo speed is unknown, defaulting to 1000 [ 235.736627][ T9945] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.736703][ T9945] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.736721][ T9945] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.736739][ T9945] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.019469][T10340] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 236.028543][T10340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 236.028894][T10340] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 236.032800][T10340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.035400][T10340] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 236.053986][T10340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 236.054317][T10340] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 236.059509][T10340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.148297][T10340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.161538][T10340] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.165191][ T9945] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.165241][ T9945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.170937][ T9945] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.170982][ T9945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.203389][T10340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.321210][T10608] No control pipe specified [ 236.346386][ T4727] Bluetooth: hci0: command tx timeout [ 236.635468][T10625] trusted_key: encrypted_key: key user:syz not found [ 236.652845][T10403] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 236.661621][T10403] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 236.663746][T10403] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 236.667788][T10403] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.670791][T10403] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 236.674672][T10403] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 236.679515][T10403] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 236.682215][T10403] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.718692][T10340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.761202][T10403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.776374][T10403] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.785529][ T9953] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.785587][ T9953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.786155][ T9953] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.786175][ T9953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.818643][T10403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.924433][T10340] veth0_vlan: entered promiscuous mode [ 236.931510][T10340] veth1_vlan: entered promiscuous mode [ 236.964859][T10340] veth0_macvtap: entered promiscuous mode [ 236.974847][T10340] veth1_macvtap: entered promiscuous mode [ 236.992113][T10340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.993199][T10340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.007516][ T9929] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.007720][ T9929] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.007842][ T9929] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.007942][ T9929] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.072914][ T9954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.072950][ T9954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.107101][ T9954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.107135][ T9954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.178855][T10403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.416047][T10690] loop4: detected capacity change from 0 to 8 [ 237.507806][T10690] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 237.508178][T10690] unable to read xattr id index table [ 237.513484][T10690] SQUASHFS error: zlib decompression failed, data probably corrupt [ 237.513863][T10690] SQUASHFS error: Failed to read block 0x9b: -5 [ 237.513902][T10690] SQUASHFS error: Unable to read metadata cache entry [99] [ 237.513942][T10690] SQUASHFS error: Unable to read inode 0x127 [ 237.575623][ T4727] Bluetooth: hci5: command tx timeout [ 237.604757][T10403] veth0_vlan: entered promiscuous mode [ 237.614157][T10403] veth1_vlan: entered promiscuous mode [ 237.643116][T10403] veth0_macvtap: entered promiscuous mode [ 237.649521][T10403] veth1_macvtap: entered promiscuous mode [ 237.660822][T10403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.686691][T10403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.714560][T10693] overlayfs: failed to resolve '/ÿ ': -2 [ 237.716767][ T9975] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.716905][ T9975] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.717013][ T9975] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.723510][T10696] loop2: detected capacity change from 0 to 128 [ 237.727523][ T9947] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.782877][ T9947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.782911][ T9947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.806837][ T9929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.806863][ T9929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.943929][T10702] FAULT_INJECTION: forcing a failure. [ 237.943929][T10702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.947308][T10702] CPU: 0 UID: 0 PID: 10702 Comm: syz.9.1247 Tainted: G L syzkaller #0 PREEMPT [ 237.947336][T10702] Tainted: [L]=SOFTLOCKUP [ 237.947340][T10702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 237.947345][T10702] Call trace: [ 237.947348][T10702] show_stack+0x2c/0x3c (C) [ 237.947369][T10702] __dump_stack+0x30/0x40 [ 237.947380][T10702] dump_stack_lvl+0xd8/0x12c [ 237.947390][T10702] dump_stack+0x1c/0x28 [ 237.947399][T10702] should_fail_ex+0x41c/0x590 [ 237.947407][T10702] should_fail+0x14/0x24 [ 237.947414][T10702] should_fail_usercopy+0x20/0x30 [ 237.947421][T10702] _inline_copy_from_user+0x3c/0x174 [ 237.947432][T10702] copy_msghdr_from_user+0xb8/0x194 [ 237.947442][T10702] ___sys_sendmsg+0x14c/0x224 [ 237.947452][T10702] __sys_sendmsg+0x158/0x204 [ 237.947461][T10702] __arm64_sys_sendmsg+0x88/0x9c [ 237.947470][T10702] invoke_syscall+0x98/0x244 [ 237.947480][T10702] el0_svc_common+0xec/0x23c [ 237.947490][T10702] do_el0_svc+0x4c/0x5c [ 237.947504][T10702] el0_svc+0x64/0x260 [ 237.947514][T10702] el0t_64_sync_handler+0x44/0x104 [ 237.947523][T10702] el0t_64_sync+0x198/0x19c [ 238.174999][T10714] IPVS: set_ctl: invalid protocol: 60 172.30.0.10:20004 [ 238.230669][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1251'. [ 238.230702][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1251'. [ 238.264792][T10723] loop9: detected capacity change from 0 to 4096 [ 238.273423][T10723] EXT4-fs (loop9): Test dummy encryption mode enabled [ 238.275968][T10723] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.314527][ T9681] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.425335][ T4727] Bluetooth: hci0: command tx timeout [ 238.844637][T10759] loop2: detected capacity change from 0 to 512 [ 238.848938][T10759] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.1254: corrupted xattr block 95: invalid header [ 238.853050][T10759] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 238.855547][T10759] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1254: bg 0: block 7: invalid block bitmap [ 238.860463][T10759] loop2: lost filesystem error report for type 5 error -117 [ 238.861739][T10759] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 238.861771][T10759] loop2: lost filesystem error report for type 5 error -117 [ 238.865344][ C0] EXT4-fs (loop2): error count since last fsck: 3 [ 238.865360][ C0] EXT4-fs (loop2): initial error at time 238: ext4_expand_extra_isize_ea:2810: inode 11 [ 238.865384][ C0] EXT4-fs (loop2): last error at time 238: ext4_mb_clear_bb:6679 [ 238.867321][T10759] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.1254: corrupted xattr block 95: invalid header [ 238.867341][T10759] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 238.877864][T10759] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 238.880602][T10759] EXT4-fs (loop2): 1 orphan inode deleted [ 238.881052][T10759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.887084][T10767] netlink: 'syz.0.1255': attribute type 83 has an invalid length. [ 238.891686][T10768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.891715][T10768] IPv6: NLM_F_CREATE should be set when creating new route [ 238.898417][T10768] lo: entered promiscuous mode [ 238.911835][T10768] tunl0: entered promiscuous mode [ 238.912866][T10768] gre0: entered promiscuous mode [ 238.925734][T10768] gretap0: entered promiscuous mode [ 238.930398][T10768] erspan0: entered promiscuous mode [ 238.934097][T10768] ip_vti0: entered promiscuous mode [ 238.940365][T10768] ip6_vti0: entered promiscuous mode [ 238.941719][T10120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.944679][T10768] sit0: entered promiscuous mode [ 238.956465][T10768] ip6tnl0: entered promiscuous mode [ 238.958671][T10768] ip6gre0: entered promiscuous mode [ 238.963327][T10768] syz_tun: entered promiscuous mode [ 238.970499][T10768] ip6gretap0: entered promiscuous mode [ 238.976963][T10768] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.977172][T10768] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.978006][T10768] bridge0: entered promiscuous mode [ 238.981559][T10768] vcan0: entered promiscuous mode [ 238.990981][T10768] bond0: entered promiscuous mode [ 238.991009][T10768] bond_slave_0: entered promiscuous mode [ 238.991094][T10768] bond_slave_1: entered promiscuous mode [ 238.992534][T10768] team0: entered promiscuous mode [ 238.992545][T10768] team_slave_0: entered promiscuous mode [ 238.992605][T10768] team_slave_1: entered promiscuous mode [ 238.994533][T10768] dummy0: entered promiscuous mode [ 239.000813][T10768] nlmon0: entered promiscuous mode [ 239.002603][T10768] batadv0: entered promiscuous mode [ 239.007501][T10768] vxcan0: entered promiscuous mode [ 239.008940][T10768] vxcan1: entered promiscuous mode [ 239.012277][T10768] veth0: entered promiscuous mode [ 239.017543][T10768] veth1: entered promiscuous mode [ 239.023322][T10768] wg0: entered promiscuous mode [ 239.026476][T10768] wg1: entered promiscuous mode [ 239.031731][T10768] wg2: entered promiscuous mode [ 239.033508][T10768] veth0_to_bridge: entered promiscuous mode [ 239.043645][T10768] veth1_to_bridge: entered promiscuous mode [ 239.050767][T10768] veth0_to_bond: entered promiscuous mode [ 239.054311][T10768] veth1_to_bond: entered promiscuous mode [ 239.057900][T10768] veth0_to_team: entered promiscuous mode [ 239.060951][T10768] veth1_to_team: entered promiscuous mode [ 239.064012][T10768] veth0_to_batadv: entered promiscuous mode [ 239.066106][T10768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.066172][T10768] batadv_slave_0: entered promiscuous mode [ 239.067699][T10768] veth1_to_batadv: entered promiscuous mode [ 239.068772][T10768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.068811][T10768] batadv_slave_1: entered promiscuous mode [ 239.069927][T10768] xfrm0: entered promiscuous mode [ 239.070930][T10768] veth0_to_hsr: entered promiscuous mode [ 239.072842][T10768] veth1_to_hsr: entered promiscuous mode [ 239.076106][T10768] hsr0: entered promiscuous mode [ 239.078608][T10768] veth1_virt_wifi: entered promiscuous mode [ 239.080770][T10768] veth0_virt_wifi: entered promiscuous mode [ 239.082826][T10768] virt_wifi0: entered promiscuous mode [ 239.086205][T10768] vlan0: entered promiscuous mode [ 239.088898][T10780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.091097][T10780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.094606][T10768] vlan1: entered promiscuous mode [ 239.151441][T10781] loop0: detected capacity change from 0 to 128 [ 239.151803][T10781] vfat: Unknown parameter '0177777777777777777777700000000000000000000ÿÿ' [ 239.165459][T10768] macvlan0: entered promiscuous mode [ 239.255573][T10768] macvlan1: entered promiscuous mode [ 239.257629][T10768] ipvlan0: entered promiscuous mode [ 239.257706][T10768] ipvlan1: entered promiscuous mode [ 239.276347][T10768] macvtap0: entered promiscuous mode [ 239.278233][T10768] macsec0: entered promiscuous mode [ 239.281131][T10768] geneve0: entered promiscuous mode [ 239.283680][T10768] geneve1: entered promiscuous mode [ 239.287078][T10768] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 239.299077][T10768] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 239.303948][T10768] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 239.314214][T10768] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 239.331101][T10789] overlayfs: overlapping lowerdir path [ 239.356046][T10768] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 239.379755][T10768] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode [ 239.391022][T10780] 8021q: VLANs not supported on sit0 [ 239.454776][ T9965] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.454820][ T9965] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.454839][ T9965] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.454856][ T9965] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.580906][T10820] loop9: detected capacity change from 0 to 512 [ 239.598078][T10820] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.9.1268: corrupted xattr block 95: invalid header [ 239.598119][T10820] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 239.601235][T10820] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.1268: bg 0: block 7: invalid block bitmap [ 239.601263][T10820] loop9: lost filesystem error report for type 5 error -117 [ 239.606053][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 239.606071][ C0] EXT4-fs (loop9): initial error at time 239: ext4_expand_extra_isize_ea:2810: inode 11 [ 239.606087][ C0] EXT4-fs (loop9): last error at time 239: ext4_validate_block_bitmap:432 [ 239.617396][T10820] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 239.617436][T10820] loop9: lost filesystem error report for type 5 error -117 [ 239.619457][T10820] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2972: inode #11: comm syz.9.1268: corrupted xattr block 95: invalid header [ 239.619487][T10820] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 239.623928][T10820] EXT4-fs warning (device loop9): ext4_evict_inode:287: xattr delete (err -117) [ 239.623994][T10820] EXT4-fs (loop9): 1 orphan inode deleted [ 239.631078][T10820] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.673664][ T9681] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.942635][T10855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1270'. [ 240.020116][T10858] loop2: detected capacity change from 0 to 4096 [ 240.022954][T10858] EXT4-fs: inline encryption not supported [ 240.027101][T10858] EXT4-fs (loop2): Test dummy encryption mode enabled [ 240.032611][T10858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.313947][T10892] FAULT_INJECTION: forcing a failure. [ 240.313947][T10892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.313989][T10892] CPU: 1 UID: 0 PID: 10892 Comm: syz.0.1272 Tainted: G L syzkaller #0 PREEMPT [ 240.314006][T10892] Tainted: [L]=SOFTLOCKUP [ 240.314010][T10892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 240.314016][T10892] Call trace: [ 240.314020][T10892] show_stack+0x2c/0x3c (C) [ 240.314042][T10892] __dump_stack+0x30/0x40 [ 240.314053][T10892] dump_stack_lvl+0xd8/0x12c [ 240.314063][T10892] dump_stack+0x1c/0x28 [ 240.314073][T10892] should_fail_ex+0x41c/0x590 [ 240.314082][T10892] should_fail+0x14/0x24 [ 240.314088][T10892] should_fail_usercopy+0x20/0x30 [ 240.314095][T10892] _copy_from_iter+0x188/0x1064 [ 240.314104][T10892] netlink_sendmsg+0x570/0x948 [ 240.314117][T10892] __sock_sendmsg+0xc8/0x17c [ 240.314128][T10892] ____sys_sendmsg+0x3d0/0x6c8 [ 240.314138][T10892] ___sys_sendmsg+0x198/0x224 [ 240.314147][T10892] __sys_sendmsg+0x158/0x204 [ 240.314156][T10892] __arm64_sys_sendmsg+0x88/0x9c [ 240.314166][T10892] invoke_syscall+0x98/0x244 [ 240.314176][T10892] el0_svc_common+0xec/0x23c [ 240.314186][T10892] do_el0_svc+0x4c/0x5c [ 240.314195][T10892] el0_svc+0x64/0x260 [ 240.314204][T10892] el0t_64_sync_handler+0x44/0x104 [ 240.314213][T10892] el0t_64_sync+0x198/0x19c [ 240.485644][T10915] loop4: detected capacity change from 0 to 512 [ 240.489011][T10915] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.4.1279: corrupted xattr block 95: invalid header [ 240.489055][T10915] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 240.489700][T10915] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1279: bg 0: block 7: invalid block bitmap [ 240.489716][T10915] loop4: lost filesystem error report for type 5 error -117 [ 240.489888][T10915] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 240.489898][T10915] loop4: lost filesystem error report for type 5 error -117 [ 240.490086][T10915] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.1279: corrupted xattr block 95: invalid header [ 240.490100][T10915] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 240.490219][T10915] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 240.490249][T10915] EXT4-fs (loop4): 1 orphan inode deleted [ 240.490835][T10915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.515587][T10340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.522603][T10918] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 240.584114][ T5294] usb 3-1: device descriptor read/8, error -110 [ 240.678398][T10937] netlink: 'syz.9.1282': attribute type 83 has an invalid length. [ 240.853233][T10120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.983241][ T5294] usb usb3-port1: attempt power cycle [ 241.020533][T10969] FAULT_INJECTION: forcing a failure. [ 241.020533][T10969] name failslab, interval 1, probability 0, space 0, times 0 [ 241.020573][T10969] CPU: 1 UID: 0 PID: 10969 Comm: syz.9.1287 Tainted: G L syzkaller #0 PREEMPT [ 241.020591][T10969] Tainted: [L]=SOFTLOCKUP [ 241.020596][T10969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 241.020602][T10969] Call trace: [ 241.020606][T10969] show_stack+0x2c/0x3c (C) [ 241.020627][T10969] __dump_stack+0x30/0x40 [ 241.020638][T10969] dump_stack_lvl+0xd8/0x12c [ 241.020648][T10969] dump_stack+0x1c/0x28 [ 241.020657][T10969] should_fail_ex+0x41c/0x590 [ 241.020666][T10969] should_failslab+0xc4/0x120 [ 241.020674][T10969] kmem_cache_alloc_noprof+0x94/0x5d8 [ 241.020683][T10969] radix_tree_node_alloc+0xa0/0x348 [ 241.020693][T10969] idr_get_free+0x1f4/0x830 [ 241.020702][T10969] idr_alloc_u32+0x134/0x2a4 [ 241.020711][T10969] tcf_idr_check_alloc+0x574/0x738 [ 241.020721][T10969] tcf_mirred_init+0x194/0xae8 [ 241.020730][T10969] tcf_action_init_1+0x398/0x594 [ 241.020739][T10969] tcf_action_init+0x2d0/0x70c [ 241.020747][T10969] tc_ctl_action+0x354/0x778 [ 241.020756][T10969] rtnetlink_rcv_msg+0x630/0x9bc [ 241.020765][T10969] netlink_rcv_skb+0x238/0x414 [ 241.020774][T10969] rtnetlink_rcv+0x28/0x38 [ 241.020782][T10969] netlink_unicast+0x600/0x7f8 [ 241.020791][T10969] netlink_sendmsg+0x648/0x948 [ 241.020799][T10969] __sock_sendmsg+0xc8/0x17c [ 241.020808][T10969] ____sys_sendmsg+0x3d0/0x6c8 [ 241.020817][T10969] ___sys_sendmsg+0x198/0x224 [ 241.020826][T10969] __sys_sendmsg+0x158/0x204 [ 241.020835][T10969] __arm64_sys_sendmsg+0x88/0x9c [ 241.020845][T10969] invoke_syscall+0x98/0x244 [ 241.020855][T10969] el0_svc_common+0xec/0x23c [ 241.020865][T10969] do_el0_svc+0x4c/0x5c [ 241.020874][T10969] el0_svc+0x64/0x260 [ 241.020883][T10969] el0t_64_sync_handler+0x44/0x104 [ 241.020891][T10969] el0t_64_sync+0x198/0x19c [ 241.684069][ T5294] usb usb3-port1: unable to enumerate USB device [ 241.696796][T11012] netlink: 'syz.5.1295': attribute type 83 has an invalid length. [ 241.757412][T11015] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1296'. [ 241.805017][T11015] FAULT_INJECTION: forcing a failure. [ 241.805017][T11015] name failslab, interval 1, probability 0, space 0, times 0 [ 241.805054][T11015] CPU: 0 UID: 0 PID: 11015 Comm: syz.4.1296 Tainted: G L syzkaller #0 PREEMPT [ 241.805074][T11015] Tainted: [L]=SOFTLOCKUP [ 241.805078][T11015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 241.805084][T11015] Call trace: [ 241.805088][T11015] show_stack+0x2c/0x3c (C) [ 241.805107][T11015] __dump_stack+0x30/0x40 [ 241.805121][T11015] dump_stack_lvl+0xd8/0x12c [ 241.805133][T11015] dump_stack+0x1c/0x28 [ 241.805144][T11015] should_fail_ex+0x41c/0x590 [ 241.805154][T11015] should_failslab+0xc4/0x120 [ 241.805163][T11015] kmem_cache_alloc_lru_noprof+0x98/0x5dc [ 241.805176][T11015] __d_alloc+0x50/0x690 [ 241.805187][T11015] d_alloc_pseudo+0x2c/0xd8 [ 241.805196][T11015] alloc_path_pseudo+0xe8/0x1d4 [ 241.805206][T11015] alloc_file_pseudo+0xb0/0x198 [ 241.805215][T11015] sock_alloc_file+0xb4/0x1ac [ 241.805227][T11015] __sys_socket+0x90/0xec [ 241.805238][T11015] __arm64_sys_socket+0x84/0x9c [ 241.805248][T11015] invoke_syscall+0x98/0x244 [ 241.805262][T11015] el0_svc_common+0x19c/0x23c [ 241.805274][T11015] do_el0_svc+0x4c/0x5c [ 241.805286][T11015] el0_svc+0x64/0x260 [ 241.805297][T11015] el0t_64_sync_handler+0x44/0x104 [ 241.805307][T11015] el0t_64_sync+0x198/0x19c [ 241.891819][T11022] loop2: detected capacity change from 0 to 4096 [ 241.894874][T11022] EXT4-fs: inline encryption not supported [ 241.901988][T11022] EXT4-fs (loop2): Test dummy encryption mode enabled [ 241.908647][T11022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.704416][T11058] loop4: detected capacity change from 0 to 4096 [ 242.706483][T11058] EXT4-fs: inline encryption not supported [ 242.755143][T11058] EXT4-fs (loop4): Test dummy encryption mode enabled [ 242.756842][T11058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.767175][T10120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.366435][T11089] netlink: 'syz.5.1310': attribute type 83 has an invalid length. [ 243.586248][T11099] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1312'. [ 243.697816][T11101] loop9: detected capacity change from 0 to 1024 [ 243.808646][T11101] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 243.810726][T11101] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 243.815558][T11101] EXT4-fs (loop9): orphan cleanup on readonly fs [ 243.817221][T11101] EXT4-fs error (device loop9): ext4_quota_enable:7232: comm syz.9.1312: inode #17152: comm syz.9.1312: iget: illegal inode # [ 243.817263][T11101] loop9: lost filesystem error report for type 5 error -117 [ 243.820165][T11101] EXT4-fs (loop9): Remounting filesystem read-only [ 243.820190][T11101] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=17152). Please run e2fsck to fix. [ 243.820289][T11101] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 243.820775][T11101] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.849712][T10340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.890977][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'. [ 243.891013][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'. [ 243.891643][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'. [ 243.935230][T11108] loop4: detected capacity change from 0 to 4096 [ 243.939066][T11111] loop5: detected capacity change from 0 to 4096 [ 243.940506][T11108] EXT4-fs (loop4): Test dummy encryption mode enabled [ 243.944268][T11111] EXT4-fs: inline encryption not supported [ 243.946258][T11111] EXT4-fs (loop5): Test dummy encryption mode enabled [ 243.950726][T11108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.953471][T11111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.025706][T10340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.398418][ T9681] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.627702][T11136] loop9: detected capacity change from 0 to 512 [ 244.630977][T11136] ext4: Unknown parameter 'fsuuid' [ 244.841304][T10403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.004978][ T4404] 8021q: adding VLAN 0 to HW filter on device eth1 [ 246.115015][ T4404] 8021q: adding VLAN 0 to HW filter on device eth2 [ 246.223309][ T4404] 8021q: adding VLAN 0 to HW filter on device eth3 [ 246.340761][ T4404] 8021q: adding VLAN 0 to HW filter on device eth0 [ 248.740674][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.740720][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.105971][ T9944] bridge_slave_1: left allmulticast mode [ 249.106008][ T9944] bridge_slave_1: left promiscuous mode [ 249.106217][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.112355][ T9944] bridge_slave_0: left allmulticast mode [ 249.112390][ T9944] bridge_slave_0: left promiscuous mode [ 249.112471][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.162629][ T9944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.190555][ T9944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.200309][ T9944] bond0 (unregistering): Released all slaves [ 249.265374][ T9944] tipc: Left network mode [ 249.344435][ T4404] 8021q: adding VLAN 0 to HW filter on device eth4 [ 249.483261][ T9944] hsr_slave_0: left promiscuous mode [ 249.484483][ T9944] hsr_slave_1: left promiscuous mode [ 249.484777][ T9944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.485853][ T9944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.556442][ T9944] team0 (unregistering): Port device team_slave_1 removed [ 249.563744][ T9944] team0 (unregistering): Port device team_slave_0 removed [ 249.609671][ T4404] 8021q: adding VLAN 0 to HW filter on device eth6 [ 249.758442][ T4404] 8021q: adding VLAN 0 to HW filter on device eth5 [ 249.877766][ T4404] 8021q: adding VLAN 0 to HW filter on device eth7 [ 254.657784][ T9951] [ 254.658215][ T9951] ====================================================== [ 254.659499][ T9951] WARNING: possible circular locking dependency detected [ 254.660678][ T9951] syzkaller #0 Tainted: G L [ 254.661638][ T9951] ------------------------------------------------------ [ 254.662803][ T9951] kworker/u8:45/9951 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 254.663891][ T9951] ffff0000d161c938 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x174/0x228 [ 254.665583][ T9951] [ 254.665583][ T9951] but task is already holding lock: [ 254.666809][ T9951] ffff0000d161ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 254.668713][ T9951] [ 254.668713][ T9951] which lock already depends on the new lock. [ 254.668713][ T9951] [ 254.670774][ T9951] [ 254.670774][ T9951] the existing dependency chain (in reverse order) is: [ 254.672532][ T9951] [ 254.672532][ T9951] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 254.674068][ T9951] percpu_down_read_internal+0x5c/0x294 [ 254.675195][ T9951] ext4_writepages+0x170/0x2dc [ 254.676155][ T9951] do_writepages+0x284/0x47c [ 254.677099][ T9951] __writeback_single_inode+0x140/0x1880 [ 254.678215][ T9951] writeback_single_inode+0x400/0xb20 [ 254.679345][ T9951] write_inode_now+0x170/0x208 [ 254.680313][ T9951] iput+0x7cc/0xc2c [ 254.681120][ T9951] ext4_xattr_block_set+0x1b1c/0x21e8 [ 254.682189][ T9951] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 254.683374][ T9951] __ext4_expand_extra_isize+0x2a4/0x378 [ 254.684558][ T9951] __ext4_mark_inode_dirty+0x394/0x828 [ 254.685693][ T9951] ext4_evict_inode+0x798/0xfb8 [ 254.686719][ T9951] evict+0x4c0/0x74c [ 254.687545][ T9951] iput+0x8f0/0xc2c [ 254.688323][ T9951] ext4_process_orphan+0x24c/0x2c0 [ 254.689351][ T9951] ext4_orphan_cleanup+0x7d4/0xd20 [ 254.690370][ T9951] ext4_fill_super+0x4628/0x4e14 [ 254.691384][ T9951] get_tree_bdev_flags+0x388/0x43c [ 254.692514][ T9951] get_tree_bdev+0x2c/0x3c [ 254.693480][ T9951] ext4_get_tree+0x28/0x38 [ 254.694471][ T9951] vfs_get_tree+0x90/0x28c [ 254.695457][ T9951] fc_mount+0x24/0xac [ 254.696302][ T9951] do_new_mount+0x2a4/0x538 [ 254.697268][ T9951] path_mount+0x5f0/0xa88 [ 254.698175][ T9951] do_mount+0xe8/0x148 [ 254.699056][ T9951] __arm64_sys_mount+0x33c/0x388 [ 254.700104][ T9951] invoke_syscall+0x98/0x244 [ 254.701049][ T9951] el0_svc_common+0xec/0x23c [ 254.701983][ T9951] do_el0_svc+0x4c/0x5c [ 254.702864][ T9951] el0_svc+0x64/0x260 [ 254.703684][ T9951] el0t_64_sync_handler+0x44/0x104 [ 254.704744][ T9951] el0t_64_sync+0x198/0x19c [ 254.705699][ T9951] [ 254.705699][ T9951] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 254.707248][ T9951] down_write+0x50/0xc0 [ 254.708177][ T9951] ext4_xattr_set_handle+0x134/0xde4 [ 254.709329][ T9951] ext4_initxattrs+0xa8/0x11c [ 254.710335][ T9951] security_inode_init_security+0x244/0x370 [ 254.711582][ T9951] ext4_init_security+0x44/0x58 [ 254.712592][ T9951] __ext4_new_inode+0x286c/0x3308 [ 254.713641][ T9951] ext4_create+0x1f4/0x408 [ 254.714558][ T9951] path_openat+0x11f8/0x2a60 [ 254.715513][ T9951] do_file_open+0x1c8/0x2e8 [ 254.716445][ T9951] do_sys_openat2+0x114/0x1e8 [ 254.717461][ T9951] do_sys_open+0xb0/0xe0 [ 254.718337][ T9951] __arm64_sys_openat+0xa8/0xc4 [ 254.719340][ T9951] invoke_syscall+0x98/0x244 [ 254.720299][ T9951] el0_svc_common+0xec/0x23c [ 254.721257][ T9951] do_el0_svc+0x4c/0x5c [ 254.722116][ T9951] el0_svc+0x64/0x260 [ 254.722953][ T9951] el0t_64_sync_handler+0x44/0x104 [ 254.724011][ T9951] el0t_64_sync+0x198/0x19c [ 254.724954][ T9951] [ 254.724954][ T9951] -> #0 (jbd2_handle){++++}-{0:0}: [ 254.726350][ T9951] __lock_acquire+0x17c0/0x2ebc [ 254.727338][ T9951] lock_acquire+0x140/0x364 [ 254.728269][ T9951] wait_transaction_locked+0x17c/0x228 [ 254.729370][ T9951] start_this_handle+0x57c/0x1bcc [ 254.730375][ T9951] jbd2__journal_start+0x260/0x534 [ 254.731411][ T9951] __ext4_journal_start_sb+0x228/0x948 [ 254.732481][ T9951] ext4_do_writepages+0xabc/0x3bc0 [ 254.733487][ T9951] ext4_writepages+0x198/0x2dc [ 254.734439][ T9951] do_writepages+0x284/0x47c [ 254.735394][ T9951] __writeback_single_inode+0x140/0x1880 [ 254.736506][ T9951] writeback_sb_inodes+0x798/0x1720 [ 254.737526][ T9951] __writeback_inodes_wb+0xec/0x210 [ 254.738569][ T9951] wb_writeback+0x3d0/0x10cc [ 254.739516][ T9951] wb_workfn+0xa78/0xda8 [ 254.740392][ T9951] process_scheduled_works+0x788/0x10b8 [ 254.741503][ T9951] worker_thread+0x798/0xbd0 [ 254.742416][ T9951] kthread+0x304/0x3d4 [ 254.743237][ T9951] ret_from_fork+0x10/0x20 [ 254.744165][ T9951] [ 254.744165][ T9951] other info that might help us debug this: [ 254.744165][ T9951] [ 254.746045][ T9951] Chain exists of: [ 254.746045][ T9951] jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem [ 254.746045][ T9951] [ 254.748527][ T9951] Possible unsafe locking scenario: [ 254.748527][ T9951] [ 254.749882][ T9951] CPU0 CPU1 [ 254.750811][ T9951] ---- ---- [ 254.751768][ T9951] rlock(&sbi->s_writepages_rwsem); [ 254.752714][ T9951] lock(&ei->xattr_sem); [ 254.753964][ T9951] lock(&sbi->s_writepages_rwsem); [ 254.755354][ T9951] lock(jbd2_handle); [ 254.756105][ T9951] [ 254.756105][ T9951] *** DEADLOCK *** [ 254.756105][ T9951] [ 254.757595][ T9951] 4 locks held by kworker/u8:45/9951: [ 254.758586][ T9951] #0: ffff0000c1fe7940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 254.760724][ T9951] #1: ffff800092467c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 254.763124][ T9951] #2: ffff0000d17d00d8 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 254.765180][ T9951] #3: ffff0000d161ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 254.767264][ T9951] [ 254.767264][ T9951] stack backtrace: [ 254.768385][ T9951] CPU: 0 UID: 0 PID: 9951 Comm: kworker/u8:45 Tainted: G L syzkaller #0 PREEMPT [ 254.770370][ T9951] Tainted: [L]=SOFTLOCKUP [ 254.771148][ T9951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 254.773145][ T9951] Workqueue: writeback wb_workfn (flush-259:0) [ 254.774293][ T9951] Call trace: [ 254.774911][ T9951] show_stack+0x2c/0x3c (C) [ 254.775780][ T9951] __dump_stack+0x30/0x40 [ 254.776598][ T9951] dump_stack_lvl+0xd8/0x12c [ 254.777445][ T9951] dump_stack+0x1c/0x28 [ 254.778233][ T9951] print_circular_bug+0x328/0x330 [ 254.779220][ T9951] check_noncircular+0x158/0x174 [ 254.780174][ T9951] __lock_acquire+0x17c0/0x2ebc [ 254.781109][ T9951] lock_acquire+0x140/0x364 [ 254.781941][ T9951] wait_transaction_locked+0x17c/0x228 [ 254.782960][ T9951] start_this_handle+0x57c/0x1bcc [ 254.783899][ T9951] jbd2__journal_start+0x260/0x534 [ 254.784863][ T9951] __ext4_journal_start_sb+0x228/0x948 [ 254.785849][ T9951] ext4_do_writepages+0xabc/0x3bc0 [ 254.786794][ T9951] ext4_writepages+0x198/0x2dc [ 254.787693][ T9951] do_writepages+0x284/0x47c [ 254.788546][ T9951] __writeback_single_inode+0x140/0x1880 [ 254.789594][ T9951] writeback_sb_inodes+0x798/0x1720 [ 254.790594][ T9951] __writeback_inodes_wb+0xec/0x210 [ 254.791540][ T9951] wb_writeback+0x3d0/0x10cc [ 254.792336][ T9951] wb_workfn+0xa78/0xda8 [ 254.793085][ T9951] process_scheduled_works+0x788/0x10b8 [ 254.794089][ T9951] worker_thread+0x798/0xbd0 [ 254.794932][ T9951] kthread+0x304/0x3d4 [ 254.795702][ T9951] ret_from_fork+0x10/0x20 [ 254.948062][ T9338] syz_tun (unregistering): left allmulticast mode [ 255.523750][ T9954] bond0 (unregistering): Released all slaves [ 255.576915][ T9954] tipc: Disabling bearer [ 255.576989][ T9954] tipc: Left network mode [ 255.616683][ T4404] 8021q: adding VLAN 0 to HW filter on device eth8 [ 255.712698][ T4404] 8021q: adding VLAN 0 to HW filter on device eth9 [ 255.806334][ T9954] hsr_slave_0: left promiscuous mode [ 255.808086][ T9954] hsr_slave_1: left promiscuous mode [ 255.911211][ T4404] 8021q: adding VLAN 0 to HW filter on device eth10 [ 256.013728][ T4404] 8021q: adding VLAN 0 to HW filter on device eth11 [ 256.117932][ T9954] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.220589][ T9954] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.268317][ T9954] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.337958][ T9954] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.552266][ T4404] 8021q: adding VLAN 0 to HW filter on device eth25 [ 256.658484][ T4404] 8021q: adding VLAN 0 to HW filter on device eth24 [ 257.014190][ T4404] 8021q: adding VLAN 0 to HW filter on device eth26 [ 257.106685][ T4404] 8021q: adding VLAN 0 to HW filter on device eth27 [ 257.117730][ T9954] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.167926][ T9954] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.199326][ T4404] 8021q: adding VLAN 0 to HW filter on device eth28 [ 257.207458][ T9954] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.249460][ T9954] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.294296][ T4404] 8021q: adding VLAN 0 to HW filter on device eth30 [ 257.326219][ T9954] bridge_slave_1: left allmulticast mode [ 257.326253][ T9954] bridge_slave_1: left promiscuous mode [ 257.326328][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.331745][ T9954] bridge_slave_0: left allmulticast mode [ 257.331774][ T9954] bridge_slave_0: left promiscuous mode [ 257.331829][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.342602][ T9954] bridge_slave_1: left allmulticast mode [ 257.342680][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.347281][ T9954] bridge_slave_0: left allmulticast mode [ 257.347351][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.355279][ T9954] bridge_slave_1: left allmulticast mode [ 257.355303][ T9954] bridge_slave_1: left promiscuous mode [ 257.355363][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.357863][ T9954] bridge_slave_0: left allmulticast mode [ 257.357875][ T9954] bridge_slave_0: left promiscuous mode [ 257.357940][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.379334][ T9954] bridge_slave_1: left allmulticast mode [ 257.379364][ T9954] bridge_slave_1: left promiscuous mode [ 257.379426][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.383330][ T9954] bridge_slave_0: left allmulticast mode [ 257.383353][ T9954] bridge_slave_0: left promiscuous mode [ 257.383418][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.432662][ T9954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.457446][ T9954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.476321][ T9954] bond0 (unregistering): Released all slaves [ 257.503960][ T9954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.546164][ T9954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.556192][ T9954] bond0 (unregistering): Released all slaves [ 257.585740][ T9954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.606173][ T9954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.645795][ T9954] bond0 (unregistering): Released all slaves [ 257.663052][ T9954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.686494][ T9954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.696532][ T9954] bond0 (unregistering): Released all slaves [ 258.190050][ T4404] 8021q: adding VLAN 0 to HW filter on device eth31 [ 258.292571][ T4404] 8021q: adding VLAN 0 to HW filter on device eth29 [ 258.436068][ T4404] 8021q: adding VLAN 0 to HW filter on device eth32 [ 258.631609][ T9954] hsr_slave_0: left promiscuous mode [ 258.632764][ T9954] hsr_slave_1: left promiscuous mode [ 258.632955][ T9954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.632965][ T9954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.637168][ T9954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.637191][ T9954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.646369][ T9954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.647913][ T9954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.650520][ T9954] hsr_slave_0: left promiscuous mode [ 258.651562][ T9954] hsr_slave_1: left promiscuous mode [ 258.651747][ T9954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.652758][ T9954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.656455][ T9954] hsr_slave_0: left promiscuous mode [ 258.657504][ T9954] hsr_slave_1: left promiscuous mode [ 258.657705][ T9954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.657715][ T9954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.658776][ T9954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.658787][ T9954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.675316][ T9954] veth1_macvtap: left promiscuous mode [ 258.675350][ T9954] veth0_macvtap: left promiscuous mode [ 258.675410][ T9954] veth1_vlan: left promiscuous mode [ 258.675445][ T9954] veth0_vlan: left promiscuous mode [ 258.680403][ T9954] veth1_macvtap: left promiscuous mode [ 258.681499][ T9954] veth0_macvtap: left promiscuous mode [ 258.682839][ T9954] veth1_vlan: left promiscuous mode [ 258.683970][ T9954] veth0_vlan: left promiscuous mode [ 258.768099][ T9954] team0 (unregistering): Port device team_slave_1 removed [ 258.770867][ T9954] team0 (unregistering): Port device team_slave_0 removed [ 258.839476][ T9954] team0 (unregistering): Port device team_slave_1 removed [ 258.841812][ T9954] team0 (unregistering): Port device team_slave_0 removed [ 258.911827][ T9954] team0 (unregistering): Port device team_slave_1 removed [ 258.914109][ T9954] team0 (unregistering): Port device team_slave_0 removed [ 258.952046][ T9937] smc: removing ib device s [ 259.059310][ T9954] team0 (unregistering): Port device team_slave_1 removed [ 259.063271][ T9954] team0 (unregistering): Port device team_slave_0 removed [ 259.103447][ T4404] 8021q: adding VLAN 0 to HW filter on device eth33 [ 259.291410][ T4404] 8021q: adding VLAN 0 to HW filter on device eth35 [ 259.393510][ T4404] 8021q: adding VLAN 0 to HW filter on device eth34 [ 259.507342][ T4404] 8021q: adding VLAN 0 to HW filter on device eth36 [ 259.610330][ T4404] 8021q: adding VLAN 0 to HW filter on device eth37 [ 259.717575][ T4404] 8021q: adding VLAN 0 to HW filter on device eth39 [ 259.808894][ T4404] 8021q: adding VLAN 0 to HW filter on device eth38