last executing test programs: 1m24.611193262s ago: executing program 0 (id=13): socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x4b26e94}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) sendmsg$tipc(r1, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r1, &(0x7f00000000c0)=@name, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) 1m23.688622451s ago: executing program 0 (id=19): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl(r1, 0x3b8e, &(0x7f0000000000)="10") read(0x4, &(0x7f0000003000)=""/256, 0x100) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001d00070f000000200300000007000000", @ANYRES32=r2, @ANYBLOB="5a006708060005"], 0x24}}, 0x0) 1m23.13166026s ago: executing program 0 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) syz_emit_ethernet(0x120, &(0x7f0000000240)={@multicast, @empty, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x6}}, {@ipv4={0x800, @generic={{0x3f, 0x4, 0x2, 0x35, 0x10a, 0x64, 0x0, 0x4, 0x32, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x54, 0xd4, 0x3, 0x3, [{@multicast1, 0x7}, {@remote, 0xa7b9}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x408}, {@loopback, 0xffffffff}, {@local, 0x5}, {@local, 0x1}, {@broadcast, 0x6}, {@broadcast, 0x3}, {@remote, 0x4}]}, @generic={0x44, 0x8, "b74fc09091e0"}, @ssrr={0x89, 0x23, 0xd3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @empty, @private=0xa010102, @remote, @empty, @private=0xa010101]}, @end, @timestamp_addr={0x44, 0x1c, 0x7c, 0x1, 0x5, [{@broadcast, 0x6}, {@remote, 0x1000}, {@multicast1}]}, @ssrr={0x89, 0x3, 0xd8}, @cipso={0x86, 0x45, 0x1, [{0x1, 0x2}, {0x1, 0x12, "f6f76c9f9d76e435d39586e47bfa67ec"}, {0x4, 0x4, "41ef"}, {0x6, 0xa, "0451fb5afc162562"}, {0x0, 0x2}, {0x7, 0x5, "77db43"}, {0x0, 0xc, "8c142d3d2f00f3d9f24f"}, {0x2, 0xa, "119666c982a2c697"}]}, @end]}}, "7cc3cf53a9eca3966751d426b6bb"}}}}, 0x0) 1m21.361946098s ago: executing program 0 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000400)=""/4096, 0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574680000000004000280080029000ced010008002800004d78"], 0x44}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000140), 0x1, 0x558, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x153042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000580)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x4d4, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x3503, 0x1, 0x2, 0x7, 0xff, 0x5, 0x1d}, {{@in=@local, 0x4d6, 0x3c}, 0xa, @in=@private=0xa010100, 0x3504, 0x4, 0x1, 0xf, 0x8}]}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000001a40)=ANY=[@ANYBLOB="0f539af21094aaaaaaaaaabb86dd601200b000303a0000000000000000000000000000000000ff02000000000000000000000000000104009078000000006000e1"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70006000006e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081228000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) close(r0) r7 = msgget$private(0x0, 0x40a) msgrcv(r7, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_RMID(r7, 0x0) 1m20.194269995s ago: executing program 0 (id=55): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x6, 0xd, 0x200, &(0x7f0000000180)="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"}) 1m19.336129571s ago: executing program 0 (id=64): socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socket$netlink(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x9d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x0, 0x111, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x2, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xffff, 0x5, 0x0, 0x0}}, 0x0) 1m19.105203706s ago: executing program 32 (id=64): socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socket$netlink(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x9d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x0, 0x111, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x2, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xffff, 0x5, 0x0, 0x0}}, 0x0) 44.983921234s ago: executing program 4 (id=501): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8d4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000e80)={0x5f8, r5, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x14c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x753}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x19b6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x734a}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x114b7664}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xda11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xccc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3780}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x2f8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "68615a5181c40f7726559a05af6fceb15b8243df7da850ea424ca71e37eb873183f099b5814032f7377e44717214ca0e7ef64a78f9bb039ad5f288d8a0b0aec2ba72c6769a7f70e584932f4b2ddc45d26a192c05e836f870883a0636c929a6e22ff7079141ec19a35f94152eefe9dc345d59792006fa9edd59d0e2cb315220b30ae2655008107f19a83d7cc8f2b31c13ac54c4e2faf8507e3e47ee1f70561d2880444068f2693ecc81a37bb5e1a2be7e033d4f349801b5bcbefe57b021492660a836f73d5745d7eacfd082c36d73a77708d4692e2f381b065b244ee44b0272c7722ccdd558fd66511b69"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "c925454ebf44c5a2498e06467bddc4f8af617a8d5db135f3a4048ad50c544570b26d9ad9"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "71537c4150a835285e4359707f0ac76158607c64460e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x20006}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "b4c49f0d72a4da70cfed13bbe09c37dbe0464d02c83f37e21d"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "67f81d01e5748aa18217706b2afb8d8ed5105a3a4b89"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffd}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "e7fccdd07c6e4ab2a0d3f2b373fd52f8922dcdf767e9310cd2"}}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "1a2f32c15e237ac8e3ee65a5ada81c31819135c4823ec9044407a31f51e027783a34bc5e8f1fe852026a05a972ce80fb498438394362829f0ee3a6b0dac64f2cc0e36150f471e3a6b2834930cb5eb1800015831093f4e25abd200df48bb72338232300dd056a714f67f2fae1fdd447d4743068cdbf2789b4d9229a56f1e910071aff35b9f7fb8be2daf79f92d4425412a639713e2bf66cf2"}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3cd5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2800000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000814) landlock_restrict_self(r4, 0xe) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000045c0)=0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 43.56027806s ago: executing program 4 (id=515): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x844, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xc, 0xffe0}, {0x0, 0x9}, {0xe, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x814, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_ACT={0x128, 0x9, 0x0, 0x1, [@m_simple={0x124, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x362f7f1e, 0x8, 0x3}}, @TCA_DEF_DATA={0x6, 0x3, '(\x00'}]}, {0xd6, 0x6, "daefb3679659b4d0b73e0d91bde8080ecc127fa0872eba4f6f2fd225a8934a47e6cc745b22e197d07d954b4de3465c03f2c5a5e997ca76281bcefb7894e94c57aa67f6b68f5102fcdb9f794d681a2e866841638900ab17c1c56eac39b24c2e9e64e8a00152b7a984ae7faa2f254c088972569d01c292a86de9ad53a7964f54a03a5d9dd8afe497fb22c1e668ba048966d02d08900b7c53007d15b9bf953a1772a17ceb9e395b59539741f97627b14058ed1b907965e06c757120109cff451f97b592423de1286774a9c5b04220ed0924778f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_EMATCHES={0x6b8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0x130, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x11c, 0x1, 0x0, 0x0, {{0x8000, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xeb, 0x5, "fffab40eb0b1dee5a9a4e780a8fbe2e4dce38f79ad2d770a10a84f2910f607086dbefb6a97ab5c629b943b43af0058b437e45c976b12a67080b9b371f5a472643f2727196e31be025506b1139501560efdbacb242bd58ef41011cac7b736096edcfd69b51141233fb0c0a78fd5b6ba258cdd7c69d31a0c22c4b24f8001100737ce95171304939a1412f4e6d627996618639c196fd3cdf1e45a6d6ccdbb5ae26547e87a9dcec9d916a9e131dc09bc480b2220fd5c2c68eab202e6c3a777c1478d994ac066e7ca6404165f85a30e209a6e09b71ee163fb7cdf1b82ea7634edfbd1e9727d92548ca9"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x7, 0x2, 0xfe01}, {0x2, 0x0, 0x3}}}]}, @TCA_EMATCH_TREE_LIST={0x348, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0x2}, {0x7fd, 0x9, 0x7ff, 0x3, 0xa, 0x0, 0x2}}}, @TCF_EM_META={0x90, 0x2, 0x0, 0x0, {{0x101, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x2}, {0xa, 0x4}}}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR="3f01", @TCF_META_TYPE_VAR="c1", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_VAR="3819", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="d4d0dc8ef7c04259"]}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_VAR="02eb1acbec", @TCF_META_TYPE_VAR="38dceaf9", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="0a879593", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="3e6f2c06a45c3b70", @TCF_META_TYPE_VAR="67a884292ecfa90e"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x3, 0x2}, {0x9, 0xc4, 0x2}}}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="f44baf847cab9fe5ad37", @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_IPT={0x1ec, 0x2, 0x0, 0x0, {{0x8000, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0x81, 0x5, "b9cdac192c950997cea7705117829a38c798c85061dc13a4d6f63758e90c648679750a21e34ff77c899f8b5055cdf5e593ba9e79a2543ef09f6438112e628a6639f793103b2f70429cae3d3471566abe156762554920d0a079a3f26eebb68e1f96cc16ef93b3ed3378a866940f4ad8dd0f82c785df72fc4ad49568baa9"}, @TCA_EM_IPT_MATCH_DATA={0xcb, 0x5, "0321f8ef499028b855737248958f187975c0ff7028d2f5b5a6f0cc5af15324bfc25e099a105c7b1dd4c3605396e992fb5d1ccb7af7c9e396754b47b80e71fc1f5ffc45dd7ce92462bfaad381910ecbb3bd9d6b873e3f258d6e5452a65d29fd9ca8f502b714f6b13320c495e837d472315e97b345bb1c72a5d7562c1c098a23e47d7a4bc0e0520a5ee427d42de0fae4d96d5e793ba2140f07fb82cf13a183f675541401c70ccd4a75fb2e1181f62d8124fa565ef46e9371f017bd8fe6eba2bc452aa086975f19ca"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xe4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x67, 0x5, "5a40d01c29511621ad0fd71282c09b9d28a695e5ccc8b4d0ee1255f315f8ccd381a8055e44a3d355923b4ed7b7221df17e029d6cd55f77e351920d92e3fc073c4dd120fd6e41311b1e0c962ee529071cbd76c746026990b2178bf41fb694c2b5c288b3"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CONTAINER={0x9c, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x5}, "ff4af4c42f464579dc3b0cd5fca71450667917933efc90bcfea10007a50aabbf3e31426b268167fc7777f9cf9be1429cd3d6abc545a3a4cc1efc5949a80cbc756d4fb980ac791b96cfa6f9d1c0a0acb9056ea69de9e39b705432cfcb6fb67c752508701b34d9a63087f6c8becfd7997aad8d20c8678e40ea7abe50666f33e7638dd4cb9cf9612be8ddc087a818"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x80}, {{0x2, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0xd}, {{0x2}, {0x3}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5800, 0x1, 0xd}, {0x0, 0x101, 0x4, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x1ec, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x952}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8000, 0x9, 0x2}, {0x401}}}]}}, @TCF_EM_META={0x68, 0x3, 0x0, 0x0, {{0x5, 0x4, 0xdc4}, [@TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="99ef543d237d50", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="c091"]}, @TCA_EM_META_RVALUE={0x2b, 0x3, [@TCF_META_TYPE_VAR="36d685758418", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="fcfa1446b28d68d8e3", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="ab11ee35fbbd5c7e"]}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="991420"]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x101}, {{0x0, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_IPT={0x140, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x96}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x21}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0xf8, 0x5, "13903cb9ee986eaa0dea1f574ed2970fdf0d9f3b9c6addc3aa51117e7ae83f1d1c734e56992811e57a3e87aff852c756694cb6b1544ea424ea7988d17eedeb2b2d6bd122ccc8463a435cdd058f1645785403667b76d126e65c9eec0e3a1dc52429da216c50abad56ab379a7556336f99c03b06b92b5a6b82d119a4a2a78d3cbdd0304141460d418afabb336f2aa25aeecc49b24d0439e5824639458591080d163dc5578e1a7c3eb6f067b9c1f3ecd6bd1fee55bca4a72b9339157da0461d3895116e6e3d0c624a40c59de68bba100257b2b54c8122bf274b8ffc039ed14a0a9483bbe203ac21408a91e9302f0eb8e4642c64538c"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7000, 0x7, 0x2}, {{0x3, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}]}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_MASK={0x8, 0x6, 0x7fffffff}]}}]}, 0x844}}, 0x2000a100) 43.434276344s ago: executing program 4 (id=517): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xfff8}]}}}]}, 0x48}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "00112233445566778899aabbccddeeff00112233"}}]}]}, 0x68}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 43.000363073s ago: executing program 4 (id=519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3ctvVNUfAPDvvX3S/n62EBPFhZAYA4nS0gKGGBPp3hB8/AOVFkIolLQ1sUDCkOjSuHFh4sqF+F8oiTvjwq0L94aEGMNCDJExd3qnTKcz0+c8mPl8kqH31Xu+t/Tbc+6Zc+4E0LOOZv+kEYcj4kYSMVaxrz/ynUfXjnv01+2L2SuJYvHDP5O4fScpVJ4ryb+O5t/871gkv6YRh/o2l7u8evPq7MLC/FK+Prly7cbk8urNE1euzV6evzx/ffqt6bNnTp85O3Vy79dX5btvniRT3/9+Polz8TSPLbuu6uOG9lRyVvbRKK55XLk9+7me3eO5O8XfY+Xfk2eS6g10rEt53g5ExEsxFn0V/5tj8fn7bQ0OaKpiEuU6Cug5SZ38/3mm0V+G4abFA7RKuR1QvrevdR+8WdrkVgnQCg9n1jqk1nJ/ICLK+d+f950Nl/oGRh4lG/p5kojYW8/cmqyMX346/1n2ijr9cEBzFO6We7mr6/+klJvjMVxaG3mUbsz/QrGY5i2BbPsHuyy/un9e/kPrFO5GxMt5/T8Y287/NM/dcv5/vMvy5T8AAAAAAADsn/szEfFmrfF/6fr4n8Ea439GI+LcPpS/9ft/6YN8Iak6dHAfioee9nAm4p2a43/Xx/iO9+Vr/y+NB7iVXLqyMH8yIl6IiOMxMJStT1Wdt3KE8IkvDn1dr/zK8X/ZKyu/PBYwP9OD/qqJuHOzK7N7vW4g4uHdiFdK43+P5Fs2jv/J6v+kRv2f5feNbZZx6PV7F+rt2zr/gWYpfhtxrGb9/6y5nTR+PsdkqT0wWW4VbPbqrS9/qFd+df434RKBOrL6f6Rx/g8llc/rWd7Z+bOb9FOr/cV6+3fb/h9MPuqLik6AT2dXVpamIgaT9zZvn95ZzNCt8nw4Enm+ZPl//LXG/X/r7f+KPDwQEYVtlDe8xX7tf2ifLP/nGtf/4xvr/50vTN8b/7Fe+Re2Vf+fLtXpx/Mt+v+g0ubncWw3QdsSLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA859KI+F8k6cT6cppOTESMRsSLMZIuLC6vvHFp8ZPrc9m+iPEYSMuf9Du2tp6UP/9/vGJ9umr9VEQcjIiv+g6U1icuLi7MtfviAQAAAAAAAAAAAAAAAAAAoEOMlub8F4eq5/9n/uhrd3RA0/XnX+U79J7+XX9ncWhfAwFabvf5DzzHsnv+HeT/QDNjAdqgfv4/flIsaWk4QAtp/0Pv2mX+e7sAuoD6H3rVNvv0hpsdB9AO6n8AAAAAAOgqB4/c/y2JiMLbB0qvzGC+z2B/6G5puwMA2sYYXuhd/YvtjgBoF/f4QLK+9E/Nyf71R/8nzQkIAAAAAAAAAAAAANjk2GHz/6FXNZ7/b2w/dLMG8/9rJb/HBUAXqf/RH+p+6Hbu8YGtanvz/wEAAAAAAAAAAACgAwzfvDq7sDC/tLz6/C282xlh7GyhMNsRYexgoXgnovExT5tT+kBEdMoPYWk5i6ZVZZUfwdHGS27z3yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDdfwEAAP//+sobJQ==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000400)=""/4096, 0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574680000000004000280080029000ced010008002800004d78"], 0x44}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000140), 0x1, 0x558, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x153042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000580)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x4d4, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x3503, 0x1, 0x2, 0x7, 0xff, 0x5, 0x1d}, {{@in=@local, 0x4d6, 0x3c}, 0xa, @in=@private=0xa010100, 0x3504, 0x4, 0x1, 0xf, 0x8}]}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000001a40)=ANY=[@ANYBLOB="0f539af21094aaaaaaaaaabb86dd601200b000303a0000000000000000000000000000000000ff02000000000000000000000000000104009078000000006000e1"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70006000006e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081228000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) close(r0) r7 = msgget$private(0x0, 0x40a) msgrcv(r7, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_RMID(r7, 0x0) 42.419011748s ago: executing program 4 (id=523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) syz_emit_ethernet(0x11c, &(0x7f0000000240)={@multicast, @empty, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x6}}, {@ipv4={0x800, @generic={{0x3e, 0x4, 0x2, 0x35, 0x106, 0x64, 0x0, 0x4, 0x32, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4c, 0xd4, 0x3, 0x3, [{@multicast1, 0x7}, {@remote, 0xa7b9}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x408}, {@loopback, 0xffffffff}, {@local, 0x5}, {@local, 0x1}, {@broadcast, 0x6}, {@remote, 0x4}]}, @generic={0x44, 0x8, "b74fc09091e0"}, @ssrr={0x89, 0x27, 0xd3, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @empty, @private=0xa010102, @remote, @empty, @private=0xa010101]}, @end, @timestamp_addr={0x44, 0x1c, 0x7c, 0x1, 0x5, [{@broadcast, 0x6}, {@remote, 0x1000}, {@multicast1}]}, @ssrr={0x89, 0x3, 0xd8}, @cipso={0x86, 0x45, 0x1, [{0x1, 0x2}, {0x1, 0x12, "f6f76c9f9d76e435d39586e47bfa67ec"}, {0x4, 0x4, "41ef"}, {0x6, 0xa, "0451fb5afc162562"}, {0x0, 0x2}, {0x7, 0x5, "77db43"}, {0x0, 0xc, "8c142d3d2f00f3d9f24f"}, {0x2, 0xa, "119666c982a2c697"}]}, @end]}}, "7cc3cf53a9eca3966751d426b6bb"}}}}, 0x0) 42.115111689s ago: executing program 4 (id=534): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8d4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, 0x0, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000e80)={0x5f8, r6, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x14c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x753}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x19b6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x734a}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x114b7664}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xda11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xccc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3780}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x2f8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "68615a5181c40f7726559a05af6fceb15b8243df7da850ea424ca71e37eb873183f099b5814032f7377e44717214ca0e7ef64a78f9bb039ad5f288d8a0b0aec2ba72c6769a7f70e584932f4b2ddc45d26a192c05e836f870883a0636c929a6e22ff7079141ec19a35f94152eefe9dc345d59792006fa9edd59d0e2cb315220b30ae2655008107f19a83d7cc8f2b31c13ac54c4e2faf8507e3e47ee1f70561d2880444068f2693ecc81a37bb5e1a2be7e033d4f349801b5bcbefe57b021492660a836f73d5745d7eacfd082c36d73a77708d4692e2f381b065b244ee44b0272c7722ccdd558fd66511b69"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "c925454ebf44c5a2498e06467bddc4f8af617a8d5db135f3a4048ad50c544570b26d9ad9"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "71537c4150a835285e4359707f0ac76158607c64460e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x20006}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "b4c49f0d72a4da70cfed13bbe09c37dbe0464d02c83f37e21d"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "67f81d01e5748aa18217706b2afb8d8ed5105a3a4b89"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffd}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "e7fccdd07c6e4ab2a0d3f2b373fd52f8922dcdf767e9310cd2"}}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "1a2f32c15e237ac8e3ee65a5ada81c31819135c4823ec9044407a31f51e027783a34bc5e8f1fe852026a05a972ce80fb498438394362829f0ee3a6b0dac64f2cc0e36150f471e3a6b2834930cb5eb1800015831093f4e25abd200df48bb72338232300dd056a714f67f2fae1fdd447d4743068cdbf2789b4d9229a56f1e910071aff35b9f7fb8be2daf79f92d4425412a639713e2bf66cf2"}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3cd5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2800000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000814) landlock_restrict_self(r5, 0xe) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000045c0)=0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 42.086462721s ago: executing program 33 (id=534): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8d4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, 0x0, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000e80)={0x5f8, r6, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x14c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x753}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x19b6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x734a}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x114b7664}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xda11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xccc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3780}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x2f8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "68615a5181c40f7726559a05af6fceb15b8243df7da850ea424ca71e37eb873183f099b5814032f7377e44717214ca0e7ef64a78f9bb039ad5f288d8a0b0aec2ba72c6769a7f70e584932f4b2ddc45d26a192c05e836f870883a0636c929a6e22ff7079141ec19a35f94152eefe9dc345d59792006fa9edd59d0e2cb315220b30ae2655008107f19a83d7cc8f2b31c13ac54c4e2faf8507e3e47ee1f70561d2880444068f2693ecc81a37bb5e1a2be7e033d4f349801b5bcbefe57b021492660a836f73d5745d7eacfd082c36d73a77708d4692e2f381b065b244ee44b0272c7722ccdd558fd66511b69"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "c925454ebf44c5a2498e06467bddc4f8af617a8d5db135f3a4048ad50c544570b26d9ad9"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "71537c4150a835285e4359707f0ac76158607c64460e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x20006}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "b4c49f0d72a4da70cfed13bbe09c37dbe0464d02c83f37e21d"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "67f81d01e5748aa18217706b2afb8d8ed5105a3a4b89"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffd}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "e7fccdd07c6e4ab2a0d3f2b373fd52f8922dcdf767e9310cd2"}}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "1a2f32c15e237ac8e3ee65a5ada81c31819135c4823ec9044407a31f51e027783a34bc5e8f1fe852026a05a972ce80fb498438394362829f0ee3a6b0dac64f2cc0e36150f471e3a6b2834930cb5eb1800015831093f4e25abd200df48bb72338232300dd056a714f67f2fae1fdd447d4743068cdbf2789b4d9229a56f1e910071aff35b9f7fb8be2daf79f92d4425412a639713e2bf66cf2"}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3cd5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2800000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000814) landlock_restrict_self(r5, 0xe) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000045c0)=0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 23.264859172s ago: executing program 3 (id=753): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2016}}}, 0x7) syz_open_procfs(0x0, 0x0) 23.231550204s ago: executing program 3 (id=755): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8d4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) landlock_restrict_self(r5, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 22.779633067s ago: executing program 3 (id=761): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000280)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r2, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/31, 0x1f}, 0x7}], 0x1, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES8=r4], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 22.550377615s ago: executing program 3 (id=766): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x18008080) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0xe0, &(0x7f0000000300)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x2, 0x6, "11c371", 0xaa, 0x27, 0xfe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[@hopopts={0x33, 0x12, '\x00', [@enc_lim={0x4, 0x1, 0x47}, @generic={0x2, 0x61, "b208c1edd7f09f6f35380ce25f3e1dabe20c8a4b0d579794fe83d20785d8fb33db6ae4753fb4e191b134a9479848110fa6823d333e9e4345f71ae941c17b220e23c5741459f335de696fbe80c7340947f7f1b83030cc44137025045ab9af57bc0e"}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @loopback}, @pad1]}], "be6fc83647ac78399ac33f2d0ef14b77bf30"}}}}}, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_IFNAME={0x8, 0x3, 'vlan0\x00'}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e64300000001400028008000100000000000800020000000000"], 0x38}, 0x1, 0x0, 0x0, 0x86}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002f010000100001800a000200766c616e300000001400028008000100000000000800020000000000"], 0x38}, 0x1, 0x0, 0x0, 0x86}, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000045c0)=0x40) 22.003440621s ago: executing program 3 (id=768): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x30182db, &(0x7f0000000140)={[{@grpid}, {@auto_da_alloc}, {@stripe={'stripe', 0x3d, 0x6}}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@nojournal_checksum}]}, 0x0, 0x666, &(0x7f0000000cc0)="$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") r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f00000004000000080000000c00000001"], 0x50) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000001340)={{r0}, "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"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="05031600ffff140000004788031c09102c28a632590b0bf6ab6c26c1ed7a2254c30206e9b5ae", 0x26, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r2, 0x1, {0x1, 0xff}, 0x1}, 0x18) 20.551426261s ago: executing program 6 (id=779): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000045c0)=0x40000812) 20.53366557s ago: executing program 6 (id=780): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d8000000180081054e81f782db44b904021d005c06007c09e8fe81a10a0015404000142603600e1209000b0000000421a800080008000c400600000004000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace80e65faed22ee5a7cef4090000001fb791643a5ee4ce1b14d6d9fadfe1d9d322ff7c9f8775730d16a4683f5aeb4edbb57a5046ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9343370e9701aa98d65b", 0xd7}], 0x1, 0x0, 0xfffffd4c}, 0x0) 20.51434569s ago: executing program 3 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000000340)=""/160, 0xa0}], 0x1}, 0x0) 20.416137826s ago: executing program 34 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000000340)=""/160, 0xa0}], 0x1}, 0x0) 20.409004364s ago: executing program 6 (id=788): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x6, 0xd, 0x200, &(0x7f0000000180)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000020472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949e496f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff4175b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7963e43b7f9c03bebfb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 20.27137575s ago: executing program 6 (id=790): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x808c10, &(0x7f0000000000)=ANY=[], 0x3, 0x1c1, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x184c442, &(0x7f0000000000)=ANY=[], 0x13, 0x240, &(0x7f0000000880)="$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") write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x6}, 0x94) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000100)=ANY=[], 0x4a, 0x2f5, &(0x7f0000000dc0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000000000000000002000000000d00000000720007000000ee000000000000000d00000000002e305f2e2e2e"], 0x0, 0x44}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)="306663353a313232373a620afaf6379a248d1d6534518f10951005a3692c", 0x1e) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0x15df, 0x200000000, 0x1, 0x2000000000010}, 0x0, &(0x7f0000000200)={0x1f, 0xc, 0xfff, 0x8000000000000000, 0x0, 0x80000000000000, 0xffffffff, 0x20000}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000280)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) 20.017829993s ago: executing program 6 (id=792): pwritev2(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x2, 0x4) fallocate(0xffffffffffffffff, 0x8, 0x9, 0x8) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80, 0x24) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) r1 = accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000100)=0x8, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000140)={0x6, 'vlan0\x00', {0x7}, 0x3}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = io_uring_setup(0x5cec, &(0x7f0000000180)={0x0, 0xb5bc, 0x4000, 0x0, 0x2a7, 0x0, r0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000280)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000340)={r5, 0x1}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000380)={0x3, 'veth1_to_bridge\x00', {0x5}, 0x8}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000003c0)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000400)="b5967a9da73c59cd10e0c02ea52d43c0af48f8053a3db53c12ab3974496a3c2f85fb702cabed103a", 0x28, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000480)={r6}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) copy_file_range(r7, &(0x7f0000000500)=0x6, 0xffffffffffffffff, &(0x7f0000000540)=0xfffffffffffffff7, 0x6, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580), 0x404200, 0x0) connect$rds(r8, &(0x7f00000005c0)={0x2, 0x4e24, @loopback}, 0x10) syz_io_uring_setup(0x585e, &(0x7f0000000600)={0x0, 0xc3ba, 0x80, 0x1, 0x30e, 0x0, r7}, &(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) r10 = mmap$IORING_OFF_SQ_RING(0x0, 0x200, 0x1000002, 0x40010, r7, 0x0) r11 = mmap$IORING_OFF_SQES(0x0, 0xa, 0x2000003, 0x810, r7, 0x10000000) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000740)=@IORING_OP_CLOSE={0x13, 0x43, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xf}}) recvfrom$inet(r2, &(0x7f00000007c0)=""/155, 0x9b, 0x40000000, &(0x7f0000000880)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$DRM_IOCTL_ADD_BUFS(r8, 0xc0206416, &(0x7f0000000900)={0x7, 0x80000000, 0x2e2, 0x6, 0xb, 0xfffffffffffffe00}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000940)=0xc, 0x4) 19.731345886s ago: executing program 6 (id=793): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000030426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88801e80500180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x440088c4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0', 0x1) write(r2, &(0x7f0000000140)='1', 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "407327c360"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xfc, 0x2, 0x1, 0x3, 0x0, 0x0, {0x4, 0x0, 0x7}, [@CTA_LABELS_MASK={0x20, 0x17, [0x114, 0x6, 0x5, 0x3b, 0x0, 0x2642, 0x3e5e6620]}, @CTA_MARK_MASK={0x5, 0x15, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_ORIG={0x24}, @CTA_NAT_SRC={0x9c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V6_MAXIP={0x0, 0x5, @private1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x801}, 0x48084) 19.706130061s ago: executing program 35 (id=793): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000030426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88801e80500180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x440088c4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0', 0x1) write(r2, &(0x7f0000000140)='1', 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "407327c360"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xfc, 0x2, 0x1, 0x3, 0x0, 0x0, {0x4, 0x0, 0x7}, [@CTA_LABELS_MASK={0x20, 0x17, [0x114, 0x6, 0x5, 0x3b, 0x0, 0x2642, 0x3e5e6620]}, @CTA_MARK_MASK={0x5, 0x15, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_ORIG={0x24}, @CTA_NAT_SRC={0x9c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V6_MAXIP={0x0, 0x5, @private1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x801}, 0x48084) 3.867575161s ago: executing program 8 (id=962): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000000)=""/200) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0xfffffffffffffdaa, 0x1000026, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000000)=""/200) (async) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0xfffffffffffffdaa, 0x1000026, 0x0}) (async) 3.85888743s ago: executing program 8 (id=963): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xd) r2 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TIOCSETD(r4, 0x80811501, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0xde, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x80, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x58, &(0x7f0000000480)}, 0x10) openat(r4, &(0x7f0000000180)='./file0\x00', 0x80, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0xa, 0x5, 0xb3, 0x7f}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x3, r5, 0xffefffffff7f0000}, 0x38) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000005c0)=0x14) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001900010029bd7000fddbdf251c141007fd00ff01000800006b7562f670e0b9f551294f421d88b9cf980951aa0c54435ba7cdf8bbece9865007c4acf7bc04"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) 3.543834762s ago: executing program 1 (id=964): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x400, 0x3, 0x7ca2}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x8000000}, @hci={0x1f, 0x4, 0x4}, @rc={0x1f, @any, 0xe1}, 0x8, 0x0, 0x0, 0x0, 0xc, 0x0, 0xffffffff, 0x3, 0x3}) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$inet6(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x70}, 0x20000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x15) 3.477655847s ago: executing program 5 (id=965): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r2, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000340)="527302587e0a4e47ad", 0x9}], 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x34, r5, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x96c}]]}, 0x34}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa8000000060a030400000000000000000a0000050900010073797a31000000000900020073797a32000000007c000480140001800c0001006e6f747261636b000400028054000180090001006c61737400000000440002800c00024000000000000000040c00024000000000000000030c00020400000000000000090800014000000008080001400000a7"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r8 = request_key(&(0x7f00000008c0)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000004c0)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\xdet|\xd7\x14\xe7\xe7%6\xc5\xf9\xe5\x1cx\xdf\x85\xbe7\x9e*U\x8d \xa8\'\xff\x0fl7-8Jn\x0e\x86:v\xcc9K\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(\r$\x1aP\xaf\x8a\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\\xd3\x03\xfc\xba[b~f\xf3\x88', 0x0) request_key(&(0x7f00000005c0)='user\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, r8) r9 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='#!\x00', 0xfffffffffffffffa) r10 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r10, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8) ioctl$TUNSETOWNER(r6, 0x400454cc, r11) keyctl$link(0x8, r9, r10) keyctl$dh_compute(0x17, &(0x7f0000000040)={r8, r9}, &(0x7f0000000240)=""/161, 0xa1, &(0x7f0000002040)={&(0x7f0000000300)={'xcbc(aes)\x00'}, &(0x7f0000001040)="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", 0x1000}) 3.05131907s ago: executing program 5 (id=966): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8d4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000e80)={0x5f8, r5, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x14c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x753}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x19b6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x734a}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x114b7664}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xda11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xccc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3780}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x2f8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "68615a5181c40f7726559a05af6fceb15b8243df7da850ea424ca71e37eb873183f099b5814032f7377e44717214ca0e7ef64a78f9bb039ad5f288d8a0b0aec2ba72c6769a7f70e584932f4b2ddc45d26a192c05e836f870883a0636c929a6e22ff7079141ec19a35f94152eefe9dc345d59792006fa9edd59d0e2cb315220b30ae2655008107f19a83d7cc8f2b31c13ac54c4e2faf8507e3e47ee1f70561d2880444068f2693ecc81a37bb5e1a2be7e033d4f349801b5bcbefe57b021492660a836f73d5745d7eacfd082c36d73a77708d4692e2f381b065b244ee44b0272c7722ccdd558fd66511b69"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "c925454ebf44c5a2498e06467bddc4f8af617a8d5db135f3a4048ad50c544570b26d9ad9"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "71537c4150a835285e4359707f0ac76158607c64460e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x20006}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "b4c49f0d72a4da70cfed13bbe09c37dbe0464d02c83f37e21d"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "67f81d01e5748aa18217706b2afb8d8ed5105a3a4b89"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffd}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "e7fccdd07c6e4ab2a0d3f2b373fd52f8922dcdf767e9310cd2"}}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "1a2f32c15e237ac8e3ee65a5ada81c31819135c4823ec9044407a31f51e027783a34bc5e8f1fe852026a05a972ce80fb498438394362829f0ee3a6b0dac64f2cc0e36150f471e3a6b2834930cb5eb1800015831093f4e25abd200df48bb72338232300dd056a714f67f2fae1fdd447d4743068cdbf2789b4d9229a56f1e910071aff35b9f7fb8be2daf79f92d4425412a639713e2bf66cf2"}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3cd5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2800000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000814) landlock_restrict_self(r4, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 3.001425765s ago: executing program 7 (id=967): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x7ff, 0x0, 0xffffffc0, 0x80000e, 0x3, "03e7ffffffffffffff04ddd0ff936d7fcb180e", 0x2000006, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xb) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000740)=0x80) (async) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) (async) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES16=r2, @ANYRESDEC=r2, @ANYRES8=r2, @ANYRES8=r2, @ANYRES8=r2, @ANYRES16=r2, @ANYRES64=r2], 0x0) 2.935481979s ago: executing program 7 (id=968): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1510c2, 0x1e8) r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x50000, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000045c0)=0x40) 2.87629809s ago: executing program 7 (id=969): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0x20, &(0x7f00000012c0)={&(0x7f0000001100)=""/217, 0xd9, 0x0, &(0x7f0000001200)=""/146, 0x92}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001340)=ANY=[@ANYRES16=r0, @ANYRESDEC=0x0, @ANYRES32=r0], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140)={[{@errors_remount}, {@stripe={'stripe', 0x3d, 0xf7b2}}, {@grpquota}]}, 0x1, 0x51f, &(0x7f0000000f80)="$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") capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x80000001, 0x6}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x41) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$inet_sctp(0x2, 0x1, 0x84) close(r7) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001380), 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000014c0)=@newtfilter={0x404, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xe}, {0x300, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x3d4, 0x2, [@TCA_BASIC_ACT={0xb0, 0x3, [@m_simple={0xac, 0x3, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x8f, 0xffffffffffffffff, 0xffffffff, 0x6}}, @TCA_DEF_DATA={0xa, 0x3, '\xff\xff\xff\xff\xff\xff'}]}, {0x4c, 0x6, "adf1ebd1b774bbe7ffbe52b8411d79ecb8e52817c698b32bec6ab0890cfd753711db2b3b15cd0aa065b9a9b8db026dd0c08736d9550dd306a0bf25e7af131782cae133a4ef67f3e5"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BASIC_EMATCHES={0x320, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x314, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xa, 0x3, 0x7}, {0x7, 0x80000000, 0xfffffffa, 0x9}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x101, 0x4, 0x8000}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7}, {0x6, 0x82, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x8, 0x1}, {0x7, 0x8, 0x1}}}]}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x8, 0x0, 0xfff}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xff01, 0x3, 0x7}, {0x3, 0x4, 0x2, 0x5}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xd, 0x7, 0x54a}, {{0x2, 0x1, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7fff}, {0x8, 0x2, 0x8, 0x7ff}}}, @TCF_EM_CONTAINER={0xa0, 0x1, 0x0, 0x0, {{0x8000}, "00b8ae49903169a4cd7643ab56b9fe9e9129cf00a908df6ed0a94a8fb8fbe423029a8b5a379d8c16224a1f79596a488c0ae6799ba653f9ad57e1c197be153133c9a782d6e51870d218eac5bb0d41880515c4f8f0de1769187650187d46fd98eca90f52b1f36a96334a2733e82faffce6a5c6d1b56bc8e6cc625b10ded0f69db978090e599d9b43c80265a6410c5681c020"}}, @TCF_EM_META={0x60, 0x1, 0x0, 0x0, {{0xfffd, 0x4, 0x401}, [@TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='58l', @TCF_META_TYPE_VAR="ebdd", @TCF_META_TYPE_VAR="de6fa33c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x10, 0xf, 0x1}, {0x0, 0x5}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xb}, {0x400, 0x9, 0x1}}}, @TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="9be9"]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="b7ad5447a9", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="c2d216492f04", @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xdd6, 0x2, 0xfffc}, {0x4, 0x4, 0x1, "14b857fd"}}}, @TCF_EM_IPT={0x18, 0x3, 0x0, 0x0, {{0x0, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0x130, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x4000}, [@TCA_EM_IPT_MATCH_DATA={0xe7, 0x5, "1f1a6cf6d184c46cd0bb4ff147216dc7f8662d2f4878e2e56861d9582ba22e495e6e21a1696a9e3b3ffefb73c37e123ffba38606ca940e79370f9d7f1e9f384f6f3315f52571207d4daaa9b7298bcdb38a1a50a333c2b51a83626b7111537e5d2f894a02b3af5c2614d7017ef9072f9075c1de216f6ff3cd726ebba0b315540b14e2b24ca0ccb73a1c7afee31a392bef5b8a0cbfb9149a1cc0b00d6de6c8ff2d9c7e388558cd0733dec1b19a88a7b45522ed1678cb1e90af5a9bdd0b8ae34b55e4149f4e075853d82e924ae2922d0e24954a8c6f58a634845b012b5278cfc529d723e7"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x61}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x16}, @TCA_EM_IPT_MATCH_DATA={0x2a, 0x5, "05559d11a021a2936c00cd45c9caec7dc806b055bb0a893359ffa1be080ac06992d589843867"}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x4}, {0x0, 0x12c, 0x56, 0xffffffff}}}]}]}]}}]}, 0x404}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf250100000005000600af0000000800030006000000050005005d"], 0x34}, 0x1, 0x0, 0x0, 0xc5}, 0x24000806) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCMGET(r10, 0x541e, &(0x7f0000000240)) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0x20) 2.649649155s ago: executing program 8 (id=970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}], 0x1}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x408100, 0x0) write$rfkill(r3, &(0x7f00000000c0)={0x2, 0x2, 0x2, 0x0, 0x1}, 0x8) 2.647695142s ago: executing program 5 (id=971): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x18c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xc, 0xffe0}, {0x0, 0x9}, {0xe, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x15c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_ACT={0x128, 0x9, 0x0, 0x1, [@m_simple={0x124, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x362f7f1e, 0x8, 0x3}}, @TCA_DEF_DATA={0x6, 0x3, '(\x00'}]}, {0xd6, 0x6, "daefb3679659b4d0b73e0d91bde8080ecc127fa0872eba4f6f2fd225a8934a47e6cc745b22e197d07d954b4de3465c03f2c5a5e997ca76281bcefb7894e94c57aa67f6b68f5102fcdb9f794d681a2e866841638900ab17c1c56eac39b24c2e9e64e8a00152b7a984ae7faa2f254c088972569d01c292a86de9ad53a7964f54a03a5d9dd8afe497fb22c1e668ba048966d02d08900b7c53007d15b9bf953a1772a17ceb9e395b59539741f97627b14058ed1b907965e06c757120109cff451f97b592423de1286774a9c5b04220ed0924778f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_MASK={0x8, 0x6, 0x7fffffff}]}}]}, 0x18c}}, 0x2000a100) 2.546786568s ago: executing program 1 (id=973): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2016}}}, 0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) syz_open_procfs(r0, 0x0) 2.502432067s ago: executing program 1 (id=974): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES32], 0x10, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x10c6b) truncate(&(0x7f0000000000)='./file1\x00', 0xffffffffffffffff) 2.501921233s ago: executing program 7 (id=975): clock_adjtime(0xffffffd3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) r5 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x40001) ioctl$ECCGETSTATS(r5, 0x80104d12, &(0x7f0000000080)) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.215322785s ago: executing program 5 (id=976): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@nodelalloc}]}, 0xfe, 0x278, &(0x7f0000000840)="$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") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0xa4) r0 = open$dir(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100c2, 0x92) symlinkat(&(0x7f0000000ac0)='./file1\x00', r0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 2.03553182s ago: executing program 1 (id=977): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x1e1d, 0x5799, 0x70, &(0x7f00000002c0)={[0x4]}, 0x8) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r1, 0x11a, 0x3, &(0x7f0000000100), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) 1.821694629s ago: executing program 5 (id=978): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000900)={0x5, 0x10, 0xfa00, {&(0x7f0000000700), r1}}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/mpls/conf/lo/input\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1', 0x1) r3 = fanotify_init(0x8, 0x40000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010011a801000f4800400058008000900000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6"], 0x270}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000100000001000000ffe6ffff008c0000", @ANYRES32, @ANYBLOB="980100"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0500000003000000000000000000000400000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fanotify_mark(r3, 0x1, 0x8100011, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x58042, 0x14) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r9, r9, 0x0, 0xe3aa6ea) read$FUSE(r8, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/144, 0x90) close_range(r3, r7, 0x0) 1.814391287s ago: executing program 8 (id=979): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x2b2, &(0x7f0000002c80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x13481, 0x0) bind(r0, 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f00000000c0)={0x4000000, 0x0, 0x0, 0x1, 0x200004}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000045c0)=0x40) 1.71939334s ago: executing program 1 (id=980): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xdc}}, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x78}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000340)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xaf, 0xe754}, @mptcp=@remove_addr={0x1e, 0x37, 0x3, 0x0, "932a7c7294a678a201e327e466d17c0eb58504fc2eb23a8242c03477ed652d1e7a1a7bd182a0b6c3ad73cab02c23a1f6efe802ef"}]}}}}}}}, 0x0) 1.716620056s ago: executing program 8 (id=981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x2a37, &(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x19, 0x20000000, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x7a52, @local, 0x4}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0xfff9, 0x1, 0xc}, {0xda, 0x63, 0x6, 0xb}]}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setscheduler(0x0, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={r4, 0x1001, 0x30}, 0xc) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r7, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000340)=""/200, 0xffffffffffffff7b, 0x0, 0x1, 0x2}}, 0x48) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 1.651920608s ago: executing program 1 (id=982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) syz_emit_ethernet(0x11c, &(0x7f0000000240)={@multicast, @empty, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x6}}, {@ipv4={0x800, @generic={{0x3e, 0x4, 0x2, 0x35, 0x106, 0x64, 0x0, 0x4, 0x32, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4c, 0xd4, 0x3, 0x3, [{@multicast1, 0x7}, {@remote, 0xa7b9}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x408}, {@local, 0x5}, {@local, 0x1}, {@broadcast, 0x6}, {@broadcast, 0x3}, {@remote, 0x4}]}, @generic={0x44, 0x8, "b74fc09091e0"}, @ssrr={0x89, 0x27, 0xd3, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @empty, @private=0xa010102, @remote, @empty, @private=0xa010101]}, @end, @timestamp_addr={0x44, 0x1c, 0x7c, 0x1, 0x5, [{@broadcast, 0x6}, {@remote, 0x1000}, {@multicast1}]}, @ssrr={0x89, 0x3, 0xd8}, @cipso={0x86, 0x45, 0x1, [{0x1, 0x2}, {0x1, 0x12, "f6f76c9f9d76e435d39586e47bfa67ec"}, {0x4, 0x4, "41ef"}, {0x6, 0xa, "0451fb5afc162562"}, {0x0, 0x2}, {0x7, 0x5, "77db43"}, {0x0, 0xc, "8c142d3d2f00f3d9f24f"}, {0x2, 0xa, "119666c982a2c697"}]}, @end]}}, "7cc3cf53a9eca3966751d426b6bb"}}}}, 0x0) 1.604928977s ago: executing program 2 (id=983): setns(0xc9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xc, 0xffe0}, {0x0, 0x9}, {0xe, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x24, 0x6}]}}]}, 0x44}}, 0x2000a100) 1.570243146s ago: executing program 2 (id=984): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4040, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'bridge0\x00', @broadcast}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_dev$video(&(0x7f0000002180), 0x9, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$netlink(0x10, 0x3, 0x7e82a34ce5695cdf) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendto(r6, &(0x7f00000021c0)="c3db635271cd3d562d11e68291eafe7929fa35298040244bb191f8dc2ba64ea425", 0x21, 0x4000001, &(0x7f0000002200)=@llc={0x1a, 0x30d, 0x6, 0xd6, 0x2, 0x9, @local}, 0x80) r7 = socket$netlink(0x10, 0x3, 0x13) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002280)={0x0, "6556e39919a55ad80ea50362d6c2c552"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000003280)={r8, 0x4, 0x0, [0x9, 0xff, 0x7, 0x100000000, 0x200000], [0xf, 0x2911, 0x8, 0x5, 0x0, 0x10, 0x1, 0x4, 0xfffffffffffffffd, 0x8000000000000001, 0x6, 0x7, 0x8000000000000001, 0x6, 0xc64a, 0x8ee2, 0x56c4, 0x3696, 0xfbb, 0xffff, 0x9af5, 0x4f0, 0xe00000000, 0x3, 0xce5f, 0x9, 0x4, 0x6, 0xfffffffffffffffa, 0xa4c, 0xe, 0x7, 0x3, 0x3, 0x9, 0xfffffffffffffff8, 0x8, 0x10000, 0x1, 0x174c, 0x9b41, 0x7, 0x4, 0x9, 0x57, 0x6, 0xffffffffffffff9f, 0x40, 0x355, 0x4, 0x8, 0x8000, 0xd, 0xfffffffffffffffc, 0x2, 0x3, 0x3ff, 0x0, 0x0, 0x5, 0x3, 0x5, 0x1ff, 0xe00, 0x7, 0x4, 0x3ef2, 0x100, 0x1000, 0x81, 0x9, 0x1, 0x800, 0x0, 0x9c3, 0x7fff, 0x10000, 0x100, 0x0, 0x80000000, 0x6, 0x4, 0x44b27059, 0x80000001, 0xd, 0x5, 0x3b, 0x3848, 0x8001, 0x0, 0x9, 0x7, 0x0, 0xec, 0x80000001, 0xfffffffffffffb3e, 0x3, 0x1, 0x100, 0x6, 0x4, 0xffffffff, 0x200, 0x0, 0x7, 0xf, 0x1, 0x3, 0x8, 0x1ff, 0x3, 0x8d2, 0x7fffffffffffffff, 0x10000000000, 0x80, 0xc, 0x5, 0x8, 0x2, 0x6, 0x8]}) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f00000036c0), 0x200000, 0x0) read$fb(r9, &(0x7f0000003700)=""/123, 0x7b) r10 = io_uring_setup(0x2c11, &(0x7f0000003780)={0x0, 0xf49c, 0x40, 0x3, 0x1b6}) syz_io_uring_setup(0x4745, &(0x7f0000003800)={0x0, 0x8840, 0x10000, 0x1, 0x33b, 0x0, r10}, &(0x7f0000003880), &(0x7f00000038c0), &(0x7f0000003900)) r11 = accept4$tipc(0xffffffffffffffff, &(0x7f0000003940), &(0x7f0000003980)=0x10, 0x80c00) setsockopt$TIPC_MCAST_BROADCAST(r11, 0x10f, 0x85) kcmp(r3, r3, 0x0, r4, r6) read(r2, &(0x7f00000039c0)=""/20, 0x14) ioctl$BTRFS_IOC_QUOTA_RESCAN(r10, 0x4040942c, &(0x7f0000003a00)={0x0, 0x1, [0x950a, 0x38, 0x101, 0x81, 0x5, 0x2]}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000003a40)=r3) fcntl$setlease(r5, 0x400, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r9, 0x4058587a, &(0x7f0000003c80)={{r6, &(0x7f0000003ac0)='/dev/fuse\x00', 0x36d100, &(0x7f0000003b00)={@align=0x200, {0x0, 0x400, 0x1, 0x5}}, 0xffffff80, &(0x7f0000003b40)={@_ha_fsid}, &(0x7f0000003b80)=0x7}, {[0x1b8d, 0x7b6, 0xa, 0x40b]}, 0x9, 0xb8, &(0x7f0000003bc0)=""/184}) syz_genetlink_get_family_id$fou(&(0x7f0000003a80), r12) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000003d00)={0x2, {0x2, 0x8e59, 0x4, 0xfff, 0x7, 0x10}}) r13 = openat$userio(0xffffffffffffff9c, &(0x7f0000003d40), 0x400, 0x0) fcntl$setstatus(r13, 0x4, 0x10800) 1.475459238s ago: executing program 2 (id=985): add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)="e5a887cc18ac856f47196f0ed1a902ccbbd3583a581557c6bbde9dceb37dc72cbbe9216d1316209fc5e153b825ad8128026c8a10c44cd7d581fb2d29ced549fcaa66f2dae05f4d06773946e8dd96b63dad7c7ab3598b26391de0c2fd4da87cdc4aa454879989d46ecb974603a512dc1a27c4a05bed51f33d99a36236a1f52c26073c8b8b15e7181bdc343503c661eb2470cc0fca66e90138abe36b0943fe125c9cbb05d708617adba16ffe561d0d4d24f33c34f320ea4822d45560c017d531e4a4a49fa2a38d820f353dd3042b85d3591a0ff77e6859ca8b0b85a8bffab14917570f39b4763512b4e45bdbc8f3ab21f660cf", 0xf2}, {&(0x7f0000000740)="ec41b28dde9d2aeda87fdcd6440a987cd509433cea381a9380641d80d10e02e498fcd28840c6e5a5aea56fec59d9f7210cd94362901b925336b6afa5c08710ec89dbf6e7bc0d24b082b78aa42698e82fca73e399d87f3e85a2dd12f155920c3f27396003d51246322e99a065aa3bbd7d13cf4b36840d45a6feb947596a456a1ff038294f97d2f6fb38b0b6b56d9af0f425f83330596955b03914265be1012c71c272b3e006ec65a31fa1b3d66de437022d17e5abfd840324bedb46cc3d77a9aad2de9d4ad241ee69f5f009152a653f3c901c", 0xd2}, {&(0x7f0000000880)="c5aa18b53d9f9b5a23", 0x9}, {&(0x7f00000008c0)="82922829e730151b0ce589d6", 0xc}, {&(0x7f0000000900)="3962c281c5bbe5f2a23d2ac56753d3f714c919dea7a852cbdfbe5e677fe233b3ded19205b4751cde4262252903d91317cd3069746ee0cbaa0324054901777862408830336a4ddf060b835775103fb6ab899e674631f9e53a598aac8cb2d2c9e750a2868fb170471237999c59e540192fc55f145b666c94c2ba7821abb9c597817973e4e4f035fa5473bee593d3d5d98b29d453c0c26d2b75307ad759803f8ffd0ba250f8a47c60b223", 0xa9}], 0x5}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000b00)="a7153327e22f7567132036ecf4cd460813b17e51c70507083f92aadae559c082e104c8b685e94955a13595fa423ae5bafba36ea3cc0284e8e8482be4b36537164437cdab23f39a0664665af253ef46099a6b7e78f38456c6edcc7437314c1d574132192fef84561afd79a7dbca8a1494c97b0643b5971fc14058899296a4e7ad4db507a0ac193c1b4467a7f6781cd035b88bc3e25c3577ba18c7017a5c0605d9bc28ac29b0ae9452ae9c08da07", 0xad}, {&(0x7f0000000bc0)="1f5afb09c51fccbfff6d21f895fac2fa6b0e9e", 0x13}, {&(0x7f0000000c00)="9db9d3b3a1d165e8f490308ce4016ca890410788d01fb1fdc48468a67a778863fe0fa62961cdd75c4794566d3b78f5261f38f9a72a782bc9e20ec663d97989be42fc12a791c45c1ee5bf2551bf05067f7a47a801892bdcfde3706d52ee0e6e617882fb", 0x63}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000814) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000000)={0x2, 0x3, 0x815, 0xa, 0x15e, 0x0}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x40001) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) getpid() getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800) read$FUSE(r6, 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x40004, &(0x7f0000000340)=[{0x3a, '\x00', @buffer={"2b9053c646adec80cb505c0537a87849ba764eb0a00b12e3f51b0f01a90c001c", 0x20}, 0x5}, {0x31, '\x00', @buffer={"1a1ce1ba1b497d3514e4b5a28dbee2907a2252a194c4c5d8630dd694a849230c", 0x20}, 0x6448}, {0x18, '\x00', @buffer={"7fd5b0696a4b0b9f7831b08a6840564caa0777fc9dbf165f44a334aa38b2e117", 0x20}, 0x9b10}, {0x44, '\x00', @data, 0x2}]}) 443.573968ms ago: executing program 8 (id=986): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@jqfmt_vfsv0}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x1810090, 0x0, 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x1810090, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) r1 = open$dir(&(0x7f0000000200)='./file0/file1\x00', 0x141400, 0x8) renameat(r1, &(0x7f0000000240)='./file0/file1\x00', r0, &(0x7f0000000280)='./file1\x00') (async) renameat(r1, &(0x7f0000000240)='./file0/file1\x00', r0, &(0x7f0000000280)='./file1\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x9) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) (async) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x0, r2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r5, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r5, &(0x7f0000006540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/19, 0x13}, 0x10}], 0x1, 0x10022, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000009c0), 0x400, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0xc4c03d12, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="301c00af", @ANYRES16=r8, @ANYBLOB="010026bd7000ffdbdf253500000008000300", @ANYRES32=r9, @ANYBLOB="0600fd00020000000a0034000202020202020000"], 0x30}, 0x1, 0x0, 0x0, 0x24044044}, 0x90) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="301c00af", @ANYRES16=r8, @ANYBLOB="010026bd7000ffdbdf253500000008000300", @ANYRES32=r9, @ANYBLOB="0600fd00020000000a0034000202020202020000"], 0x30}, 0x1, 0x0, 0x0, 0x24044044}, 0x90) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000940)=""/4096, 0x79c5}], 0x1) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) timer_settime(r11, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r11, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r12 = socket$can_j1939(0x1d, 0x2, 0x7) readv(r12, &(0x7f0000000140)=[{&(0x7f0000000440)=""/4106, 0x100a}], 0x1) 369.684119ms ago: executing program 36 (id=986): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@jqfmt_vfsv0}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x1810090, 0x0, 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x1810090, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) r1 = open$dir(&(0x7f0000000200)='./file0/file1\x00', 0x141400, 0x8) renameat(r1, &(0x7f0000000240)='./file0/file1\x00', r0, &(0x7f0000000280)='./file1\x00') (async) renameat(r1, &(0x7f0000000240)='./file0/file1\x00', r0, &(0x7f0000000280)='./file1\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x9) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) (async) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x0, r2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r5, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r5, &(0x7f0000006540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/19, 0x13}, 0x10}], 0x1, 0x10022, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000009c0), 0x400, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0xc4c03d12, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="301c00af", @ANYRES16=r8, @ANYBLOB="010026bd7000ffdbdf253500000008000300", @ANYRES32=r9, @ANYBLOB="0600fd00020000000a0034000202020202020000"], 0x30}, 0x1, 0x0, 0x0, 0x24044044}, 0x90) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="301c00af", @ANYRES16=r8, @ANYBLOB="010026bd7000ffdbdf253500000008000300", @ANYRES32=r9, @ANYBLOB="0600fd00020000000a0034000202020202020000"], 0x30}, 0x1, 0x0, 0x0, 0x24044044}, 0x90) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000940)=""/4096, 0x79c5}], 0x1) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) timer_settime(r11, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r11, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r12 = socket$can_j1939(0x1d, 0x2, 0x7) readv(r12, &(0x7f0000000140)=[{&(0x7f0000000440)=""/4106, 0x100a}], 0x1) 367.610698ms ago: executing program 5 (id=987): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040), &(0x7f0000000380), &(0x7f0000000180)) (async) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x5}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0xe, 0x6}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r0, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 365.249393ms ago: executing program 2 (id=988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x30}}}}, [@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44040}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e05085a0c"], 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 271.563008ms ago: executing program 2 (id=989): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00fd0000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 271.174969ms ago: executing program 7 (id=990): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xffe0}, {0x0, 0x9}, {0xe, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}]}, 0x44}, 0x1, 0x2000000}, 0x2000a100) 211.316912ms ago: executing program 2 (id=991): r0 = add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)="d9135000498bae9d12b0638bf2a29616c465df08c2559a235ead20cc5021f0ea0855d497ed81e93dd50eb7f4a12dfc69779acda7fc52f061a5b9b1caf5304339d83985bcac97cf091006c955be89ba45f154410d6cdb7ad500ff52459a95942baae310758c847621294cd0eaf166243de2ae168bae87eb8b5f061f2274d38b80e566f24e4c96592a59af484dc112958829d003f4835a29beaf2a0560e63e3d3a9651868cb6f90993a6ecfcd10d36a3b69a9152cf8f5b47c96fb21fdf76602f4d5a094ab4c3ff3353cd55680f1115a793e7d07da325331d3b93d0fd8b65b36c7cfe7d3b821cfdb77e61068b2198", 0xed, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x1}, &(0x7f00000004c0)="3c2afaf20dbe91cbedd4c0fdd1bf6990d849097244cecd9061ab4b4e671a1cc2d1c8d04afe6e586c25d655a6bfca251e4744ef5fdda7afb96fe852505ebeedfef4b1ff1a2ac035e3268eeab37ebab177a32f44848fd983d7729268c76daff1456690930fb0b45012b45089aee764771f6cbd76666883e7f08e176becd6eb33455163467c7df728875a0194485770085e9a51b56e223b3671a2f01b43f9dcc87689f4d03eb9b1ffb1a566ae432879c9a076439e52232912d1fc7e48a4bb5b20de2cd7590ee10e77f26c58eda372dadf513c", 0xd1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000280)='cifs.idmap\x00', &(0x7f0000000600)=@chain={'key_or_keyring:', r1}) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x751, &(0x7f0000001040)="$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") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0xe9, 0x2, 0x1, 0xa7, 0xcb, 0x0, 0x96, 0xfc, 0x84, 0x5, 0x1, 0x2, 0x27, 0x7}, 0xe) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r3 = syz_io_uring_setup(0xefd, &(0x7f0000000140)={0x0, 0xaa32, 0x10000, 0x1, 0x59}, &(0x7f0000000440)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) syz_open_procfs$pagemap(r7, &(0x7f00000000c0)) sendmmsg$unix(r9, &(0x7f0000000440), 0x52, 0x8d040) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000b80), 0x7fff, 0x90002) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f00000000c0)='asymmetric\x00', 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80, 0x1}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000b40)={&(0x7f0000001000), 0x0, 0x1, 0x2}, 0x1) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x40f1, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c) close(0x3) 0s ago: executing program 7 (id=992): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x5, 0x81, 0x2969, "207d3d00000055c51b08700c1e0adb4f000000001200070000000900"}) kernel console output (not intermixed with test programs): 6991] Memory failure: 0x122fc0: recovery action for dirty LRU page: Recovered [ 75.343606][ T6991] Injecting memory failure for pfn 0x122fc1 at process virtual address 0x2001b000 [ 75.343628][ T6991] Memory failure: 0x122fc1: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.343642][ T6991] Memory failure: 0x122fc1: recovery action for dirty LRU page: Recovered [ 75.343649][ T6991] Injecting memory failure for pfn 0x122fc2 at process virtual address 0x2001c000 [ 75.343671][ T6991] Memory failure: 0x122fc2: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.343685][ T6991] Memory failure: 0x122fc2: recovery action for dirty LRU page: Recovered [ 75.343692][ T6991] Injecting memory failure for pfn 0x122fc3 at process virtual address 0x2001d000 [ 75.343715][ T6991] Memory failure: 0x122fc3: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.343729][ T6991] Memory failure: 0x122fc3: recovery action for dirty LRU page: Recovered [ 75.343737][ T6991] Injecting memory failure for pfn 0x122fc4 at process virtual address 0x2001e000 [ 75.343758][ T6991] Memory failure: 0x122fc4: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.343772][ T6991] Memory failure: 0x122fc4: recovery action for dirty LRU page: Recovered [ 75.343779][ T6991] Injecting memory failure for pfn 0x122fc5 at process virtual address 0x2001f000 [ 75.343801][ T6991] Memory failure: 0x122fc5: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.343815][ T6991] Memory failure: 0x122fc5: recovery action for dirty LRU page: Recovered [ 75.343822][ T6991] Injecting memory failure for pfn 0x122fc6 at process virtual address 0x20020000 [ 75.343844][ T6991] Memory failure: 0x122fc6: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.343858][ T6991] Memory failure: 0x122fc6: recovery action for dirty LRU page: Recovered [ 75.343865][ T6991] Injecting memory failure for pfn 0x122fc7 at process virtual address 0x20021000 [ 75.343887][ T6991] Memory failure: 0x122fc7: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.343901][ T6991] Memory failure: 0x122fc7: recovery action for dirty LRU page: Recovered [ 75.343909][ T6991] Injecting memory failure for pfn 0x122fc8 at process virtual address 0x20022000 [ 75.343931][ T6991] Memory failure: 0x122fc8: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.343945][ T6991] Memory failure: 0x122fc8: recovery action for dirty LRU page: Recovered [ 75.343952][ T6991] Injecting memory failure for pfn 0x122fc9 at process virtual address 0x20023000 [ 75.343973][ T6991] Memory failure: 0x122fc9: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.343988][ T6991] Memory failure: 0x122fc9: recovery action for dirty LRU page: Recovered [ 75.343995][ T6991] Injecting memory failure for pfn 0x122fca at process virtual address 0x20024000 [ 75.344017][ T6991] Memory failure: 0x122fca: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344031][ T6991] Memory failure: 0x122fca: recovery action for dirty LRU page: Recovered [ 75.344038][ T6991] Injecting memory failure for pfn 0x122fcb at process virtual address 0x20025000 [ 75.344060][ T6991] Memory failure: 0x122fcb: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344074][ T6991] Memory failure: 0x122fcb: recovery action for dirty LRU page: Recovered [ 75.344082][ T6991] Injecting memory failure for pfn 0x122fcc at process virtual address 0x20026000 [ 75.344103][ T6991] Memory failure: 0x122fcc: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344117][ T6991] Memory failure: 0x122fcc: recovery action for dirty LRU page: Recovered [ 75.344124][ T6991] Injecting memory failure for pfn 0x122fcd at process virtual address 0x20027000 [ 75.344147][ T6991] Memory failure: 0x122fcd: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344161][ T6991] Memory failure: 0x122fcd: recovery action for dirty LRU page: Recovered [ 75.344168][ T6991] Injecting memory failure for pfn 0x122fce at process virtual address 0x20028000 [ 75.344190][ T6991] Memory failure: 0x122fce: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344204][ T6991] Memory failure: 0x122fce: recovery action for dirty LRU page: Recovered [ 75.344212][ T6991] Injecting memory failure for pfn 0x122fcf at process virtual address 0x20029000 [ 75.344235][ T6991] Memory failure: 0x122fcf: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344250][ T6991] Memory failure: 0x122fcf: recovery action for dirty LRU page: Recovered [ 75.344257][ T6991] Injecting memory failure for pfn 0x11da30 at process virtual address 0x2002a000 [ 75.344279][ T6991] Memory failure: 0x11da30: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344293][ T6991] Memory failure: 0x11da30: recovery action for dirty LRU page: Recovered [ 75.344300][ T6991] Injecting memory failure for pfn 0x11da31 at process virtual address 0x2002b000 [ 75.344324][ T6991] Memory failure: 0x11da31: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344338][ T6991] Memory failure: 0x11da31: recovery action for dirty LRU page: Recovered [ 75.344345][ T6991] Injecting memory failure for pfn 0x11da32 at process virtual address 0x2002c000 [ 75.344367][ T6991] Memory failure: 0x11da32: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344381][ T6991] Memory failure: 0x11da32: recovery action for dirty LRU page: Recovered [ 75.344388][ T6991] Injecting memory failure for pfn 0x11da33 at process virtual address 0x2002d000 [ 75.344410][ T6991] Memory failure: 0x11da33: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344427][ T6991] Memory failure: 0x11da33: recovery action for dirty LRU page: Recovered [ 75.344434][ T6991] Injecting memory failure for pfn 0x11da34 at process virtual address 0x2002e000 [ 75.344458][ T6991] Memory failure: 0x11da34: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344472][ T6991] Memory failure: 0x11da34: recovery action for dirty LRU page: Recovered [ 75.344480][ T6991] Injecting memory failure for pfn 0x11da35 at process virtual address 0x2002f000 [ 75.344503][ T6991] Memory failure: 0x11da35: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344517][ T6991] Memory failure: 0x11da35: recovery action for dirty LRU page: Recovered [ 75.344525][ T6991] Injecting memory failure for pfn 0x11da36 at process virtual address 0x20030000 [ 75.344546][ T6991] Memory failure: 0x11da36: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344560][ T6991] Memory failure: 0x11da36: recovery action for dirty LRU page: Recovered [ 75.344568][ T6991] Injecting memory failure for pfn 0x11da37 at process virtual address 0x20031000 [ 75.344750][ T6991] Memory failure: 0x11da37: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344767][ T6991] Memory failure: 0x11da37: recovery action for dirty LRU page: Recovered [ 75.344774][ T6991] Injecting memory failure for pfn 0x11da38 at process virtual address 0x20032000 [ 75.344799][ T6991] Memory failure: 0x11da38: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344813][ T6991] Memory failure: 0x11da38: recovery action for dirty LRU page: Recovered [ 75.344820][ T6991] Injecting memory failure for pfn 0x11da39 at process virtual address 0x20033000 [ 75.344843][ T6991] Memory failure: 0x11da39: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344857][ T6991] Memory failure: 0x11da39: recovery action for dirty LRU page: Recovered [ 75.344865][ T6991] Injecting memory failure for pfn 0x11da3a at process virtual address 0x20034000 [ 75.344886][ T6991] Memory failure: 0x11da3a: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344900][ T6991] Memory failure: 0x11da3a: recovery action for dirty LRU page: Recovered [ 75.344908][ T6991] Injecting memory failure for pfn 0x11da3b at process virtual address 0x20035000 [ 75.344929][ T6991] Memory failure: 0x11da3b: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344943][ T6991] Memory failure: 0x11da3b: recovery action for dirty LRU page: Recovered [ 75.344951][ T6991] Injecting memory failure for pfn 0x11da3c at process virtual address 0x20036000 [ 75.344973][ T6991] Memory failure: 0x11da3c: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.344987][ T6991] Memory failure: 0x11da3c: recovery action for dirty LRU page: Recovered [ 75.344994][ T6991] Injecting memory failure for pfn 0x11da3d at process virtual address 0x20037000 [ 75.345015][ T6991] Memory failure: 0x11da3d: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345030][ T6991] Memory failure: 0x11da3d: recovery action for dirty LRU page: Recovered [ 75.345037][ T6991] Injecting memory failure for pfn 0x11da3e at process virtual address 0x20038000 [ 75.345059][ T6991] Memory failure: 0x11da3e: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345073][ T6991] Memory failure: 0x11da3e: recovery action for dirty LRU page: Recovered [ 75.345080][ T6991] Injecting memory failure for pfn 0x11da3f at process virtual address 0x20039000 [ 75.345102][ T6991] Memory failure: 0x11da3f: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345117][ T6991] Memory failure: 0x11da3f: recovery action for dirty LRU page: Recovered [ 75.345124][ T6991] Injecting memory failure for pfn 0x1395a0 at process virtual address 0x2003a000 [ 75.345146][ T6991] Memory failure: 0x1395a0: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345160][ T6991] Memory failure: 0x1395a0: recovery action for dirty LRU page: Recovered [ 75.345167][ T6991] Injecting memory failure for pfn 0x1395a1 at process virtual address 0x2003b000 [ 75.345189][ T6991] Memory failure: 0x1395a1: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345203][ T6991] Memory failure: 0x1395a1: recovery action for dirty LRU page: Recovered [ 75.345210][ T6991] Injecting memory failure for pfn 0x1395a2 at process virtual address 0x2003c000 [ 75.345232][ T6991] Memory failure: 0x1395a2: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345247][ T6991] Memory failure: 0x1395a2: recovery action for dirty LRU page: Recovered [ 75.345254][ T6991] Injecting memory failure for pfn 0x1395a3 at process virtual address 0x2003d000 [ 75.345276][ T6991] Memory failure: 0x1395a3: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345290][ T6991] Memory failure: 0x1395a3: recovery action for dirty LRU page: Recovered [ 75.345297][ T6991] Injecting memory failure for pfn 0x1395a4 at process virtual address 0x2003e000 [ 75.345319][ T6991] Memory failure: 0x1395a4: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345333][ T6991] Memory failure: 0x1395a4: recovery action for dirty LRU page: Recovered [ 75.345340][ T6991] Injecting memory failure for pfn 0x1395a5 at process virtual address 0x2003f000 [ 75.345362][ T6991] Memory failure: 0x1395a5: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345376][ T6991] Memory failure: 0x1395a5: recovery action for dirty LRU page: Recovered [ 75.345383][ T6991] Injecting memory failure for pfn 0x1395a6 at process virtual address 0x20040000 [ 75.345405][ T6991] Memory failure: 0x1395a6: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345422][ T6991] Memory failure: 0x1395a6: recovery action for dirty LRU page: Recovered [ 75.345430][ T6991] Injecting memory failure for pfn 0x1395a7 at process virtual address 0x20041000 [ 75.345453][ T6991] Memory failure: 0x1395a7: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345467][ T6991] Memory failure: 0x1395a7: recovery action for dirty LRU page: Recovered [ 75.345474][ T6991] Injecting memory failure for pfn 0x1395a8 at process virtual address 0x20042000 [ 75.345535][ T6991] Memory failure: 0x1395a8: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345549][ T6991] Memory failure: 0x1395a8: recovery action for dirty LRU page: Recovered [ 75.345557][ T6991] Injecting memory failure for pfn 0x1395a9 at process virtual address 0x20043000 [ 75.345584][ T6991] Memory failure: 0x1395a9: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345597][ T6991] Memory failure: 0x1395a9: recovery action for dirty LRU page: Recovered [ 75.345605][ T6991] Injecting memory failure for pfn 0x1395aa at process virtual address 0x20044000 [ 75.345627][ T6991] Memory failure: 0x1395aa: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345641][ T6991] Memory failure: 0x1395aa: recovery action for dirty LRU page: Recovered [ 75.345648][ T6991] Injecting memory failure for pfn 0x1395ab at process virtual address 0x20045000 [ 75.345670][ T6991] Memory failure: 0x1395ab: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345684][ T6991] Memory failure: 0x1395ab: recovery action for dirty LRU page: Recovered [ 75.345691][ T6991] Injecting memory failure for pfn 0x1395ac at process virtual address 0x20046000 [ 75.345713][ T6991] Memory failure: 0x1395ac: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345727][ T6991] Memory failure: 0x1395ac: recovery action for dirty LRU page: Recovered [ 75.345734][ T6991] Injecting memory failure for pfn 0x1395ad at process virtual address 0x20047000 [ 75.345757][ T6991] Memory failure: 0x1395ad: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345771][ T6991] Memory failure: 0x1395ad: recovery action for dirty LRU page: Recovered [ 75.345778][ T6991] Injecting memory failure for pfn 0x1395ae at process virtual address 0x20048000 [ 75.345800][ T6991] Memory failure: 0x1395ae: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345814][ T6991] Memory failure: 0x1395ae: recovery action for dirty LRU page: Recovered [ 75.345821][ T6991] Injecting memory failure for pfn 0x1395af at process virtual address 0x20049000 [ 75.345844][ T6991] Memory failure: 0x1395af: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345858][ T6991] Memory failure: 0x1395af: recovery action for dirty LRU page: Recovered [ 75.345865][ T6991] Injecting memory failure for pfn 0x134000 at process virtual address 0x2004a000 [ 75.345887][ T6991] Memory failure: 0x134000: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345901][ T6991] Memory failure: 0x134000: recovery action for dirty LRU page: Recovered [ 75.345908][ T6991] Injecting memory failure for pfn 0x134001 at process virtual address 0x2004b000 [ 75.345930][ T6991] Memory failure: 0x134001: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345944][ T6991] Memory failure: 0x134001: recovery action for dirty LRU page: Recovered [ 75.345951][ T6991] Injecting memory failure for pfn 0x134002 at process virtual address 0x2004c000 [ 75.345973][ T6991] Memory failure: 0x134002: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.345987][ T6991] Memory failure: 0x134002: recovery action for dirty LRU page: Recovered [ 75.345994][ T6991] Injecting memory failure for pfn 0x134003 at process virtual address 0x2004d000 [ 75.346016][ T6991] Memory failure: 0x134003: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346030][ T6991] Memory failure: 0x134003: recovery action for dirty LRU page: Recovered [ 75.346037][ T6991] Injecting memory failure for pfn 0x134004 at process virtual address 0x2004e000 [ 75.346059][ T6991] Memory failure: 0x134004: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346073][ T6991] Memory failure: 0x134004: recovery action for dirty LRU page: Recovered [ 75.346080][ T6991] Injecting memory failure for pfn 0x134005 at process virtual address 0x2004f000 [ 75.346102][ T6991] Memory failure: 0x134005: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346117][ T6991] Memory failure: 0x134005: recovery action for dirty LRU page: Recovered [ 75.346124][ T6991] Injecting memory failure for pfn 0x134006 at process virtual address 0x20050000 [ 75.346145][ T6991] Memory failure: 0x134006: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346159][ T6991] Memory failure: 0x134006: recovery action for dirty LRU page: Recovered [ 75.346166][ T6991] Injecting memory failure for pfn 0x134007 at process virtual address 0x20051000 [ 75.346188][ T6991] Memory failure: 0x134007: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346202][ T6991] Memory failure: 0x134007: recovery action for dirty LRU page: Recovered [ 75.346209][ T6991] Injecting memory failure for pfn 0x134008 at process virtual address 0x20052000 [ 75.346231][ T6991] Memory failure: 0x134008: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346245][ T6991] Memory failure: 0x134008: recovery action for dirty LRU page: Recovered [ 75.346252][ T6991] Injecting memory failure for pfn 0x134009 at process virtual address 0x20053000 [ 75.346274][ T6991] Memory failure: 0x134009: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346288][ T6991] Memory failure: 0x134009: recovery action for dirty LRU page: Recovered [ 75.346295][ T6991] Injecting memory failure for pfn 0x13400a at process virtual address 0x20054000 [ 75.346317][ T6991] Memory failure: 0x13400a: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346331][ T6991] Memory failure: 0x13400a: recovery action for dirty LRU page: Recovered [ 75.346338][ T6991] Injecting memory failure for pfn 0x13400b at process virtual address 0x20055000 [ 75.346360][ T6991] Memory failure: 0x13400b: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346374][ T6991] Memory failure: 0x13400b: recovery action for dirty LRU page: Recovered [ 75.346381][ T6991] Injecting memory failure for pfn 0x13400c at process virtual address 0x20056000 [ 75.346403][ T6991] Memory failure: 0x13400c: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346417][ T6991] Memory failure: 0x13400c: recovery action for dirty LRU page: Recovered [ 75.346428][ T6991] Injecting memory failure for pfn 0x13400d at process virtual address 0x20057000 [ 75.346453][ T6991] Memory failure: 0x13400d: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346467][ T6991] Memory failure: 0x13400d: recovery action for dirty LRU page: Recovered [ 75.346474][ T6991] Injecting memory failure for pfn 0x13400e at process virtual address 0x20058000 [ 75.346496][ T6991] Memory failure: 0x13400e: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346510][ T6991] Memory failure: 0x13400e: recovery action for dirty LRU page: Recovered [ 75.346517][ T6991] Injecting memory failure for pfn 0x13400f at process virtual address 0x20059000 [ 75.346539][ T6991] Memory failure: 0x13400f: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346553][ T6991] Memory failure: 0x13400f: recovery action for dirty LRU page: Recovered [ 75.346560][ T6991] Injecting memory failure for pfn 0x122ff0 at process virtual address 0x2005a000 [ 75.346584][ T6991] Memory failure: 0x122ff0: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346598][ T6991] Memory failure: 0x122ff0: recovery action for dirty LRU page: Recovered [ 75.346605][ T6991] Injecting memory failure for pfn 0x122ff1 at process virtual address 0x2005b000 [ 75.346627][ T6991] Memory failure: 0x122ff1: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346641][ T6991] Memory failure: 0x122ff1: recovery action for dirty LRU page: Recovered [ 75.346648][ T6991] Injecting memory failure for pfn 0x122ff2 at process virtual address 0x2005c000 [ 75.346669][ T6991] Memory failure: 0x122ff2: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346683][ T6991] Memory failure: 0x122ff2: recovery action for dirty LRU page: Recovered [ 75.346690][ T6991] Injecting memory failure for pfn 0x122ff3 at process virtual address 0x2005d000 [ 75.346712][ T6991] Memory failure: 0x122ff3: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346726][ T6991] Memory failure: 0x122ff3: recovery action for dirty LRU page: Recovered [ 75.346733][ T6991] Injecting memory failure for pfn 0x122ff4 at process virtual address 0x2005e000 [ 75.346755][ T6991] Memory failure: 0x122ff4: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346769][ T6991] Memory failure: 0x122ff4: recovery action for dirty LRU page: Recovered [ 75.346776][ T6991] Injecting memory failure for pfn 0x122ff5 at process virtual address 0x2005f000 [ 75.346798][ T6991] Memory failure: 0x122ff5: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346812][ T6991] Memory failure: 0x122ff5: recovery action for dirty LRU page: Recovered [ 75.346819][ T6991] Injecting memory failure for pfn 0x122ff6 at process virtual address 0x20060000 [ 75.346840][ T6991] Memory failure: 0x122ff6: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346855][ T6991] Memory failure: 0x122ff6: recovery action for dirty LRU page: Recovered [ 75.346862][ T6991] Injecting memory failure for pfn 0x122ff7 at process virtual address 0x20061000 [ 75.346884][ T6991] Memory failure: 0x122ff7: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346898][ T6991] Memory failure: 0x122ff7: recovery action for dirty LRU page: Recovered [ 75.346905][ T6991] Injecting memory failure for pfn 0x122ff8 at process virtual address 0x20062000 [ 75.346927][ T6991] Memory failure: 0x122ff8: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346942][ T6991] Memory failure: 0x122ff8: recovery action for dirty LRU page: Recovered [ 75.346949][ T6991] Injecting memory failure for pfn 0x122ff9 at process virtual address 0x20063000 [ 75.346971][ T6991] Memory failure: 0x122ff9: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.346985][ T6991] Memory failure: 0x122ff9: recovery action for dirty LRU page: Recovered [ 75.346992][ T6991] Injecting memory failure for pfn 0x122ffa at process virtual address 0x20064000 [ 75.347013][ T6991] Memory failure: 0x122ffa: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347027][ T6991] Memory failure: 0x122ffa: recovery action for dirty LRU page: Recovered [ 75.347034][ T6991] Injecting memory failure for pfn 0x122ffb at process virtual address 0x20065000 [ 75.347056][ T6991] Memory failure: 0x122ffb: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347070][ T6991] Memory failure: 0x122ffb: recovery action for dirty LRU page: Recovered [ 75.347077][ T6991] Injecting memory failure for pfn 0x122ffc at process virtual address 0x20066000 [ 75.347099][ T6991] Memory failure: 0x122ffc: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347113][ T6991] Memory failure: 0x122ffc: recovery action for dirty LRU page: Recovered [ 75.347120][ T6991] Injecting memory failure for pfn 0x122ffd at process virtual address 0x20067000 [ 75.347142][ T6991] Memory failure: 0x122ffd: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347156][ T6991] Memory failure: 0x122ffd: recovery action for dirty LRU page: Recovered [ 75.347163][ T6991] Injecting memory failure for pfn 0x122ffe at process virtual address 0x20068000 [ 75.347185][ T6991] Memory failure: 0x122ffe: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347199][ T6991] Memory failure: 0x122ffe: recovery action for dirty LRU page: Recovered [ 75.347206][ T6991] Injecting memory failure for pfn 0x122fff at process virtual address 0x20069000 [ 75.347228][ T6991] Memory failure: 0x122fff: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347242][ T6991] Memory failure: 0x122fff: recovery action for dirty LRU page: Recovered [ 75.347249][ T6991] Injecting memory failure for pfn 0x13dc60 at process virtual address 0x2006a000 [ 75.347271][ T6991] Memory failure: 0x13dc60: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347285][ T6991] Memory failure: 0x13dc60: recovery action for dirty LRU page: Recovered [ 75.347292][ T6991] Injecting memory failure for pfn 0x13dc61 at process virtual address 0x2006b000 [ 75.347314][ T6991] Memory failure: 0x13dc61: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347328][ T6991] Memory failure: 0x13dc61: recovery action for dirty LRU page: Recovered [ 75.347335][ T6991] Injecting memory failure for pfn 0x13dc62 at process virtual address 0x2006c000 [ 75.347357][ T6991] Memory failure: 0x13dc62: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347371][ T6991] Memory failure: 0x13dc62: recovery action for dirty LRU page: Recovered [ 75.347378][ T6991] Injecting memory failure for pfn 0x13dc63 at process virtual address 0x2006d000 [ 75.347405][ T6991] Memory failure: 0x13dc63: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347423][ T6991] Memory failure: 0x13dc63: recovery action for dirty LRU page: Recovered [ 75.347430][ T6991] Injecting memory failure for pfn 0x13dc64 at process virtual address 0x2006e000 [ 75.347453][ T6991] Memory failure: 0x13dc64: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347467][ T6991] Memory failure: 0x13dc64: recovery action for dirty LRU page: Recovered [ 75.347474][ T6991] Injecting memory failure for pfn 0x13dc65 at process virtual address 0x2006f000 [ 75.347496][ T6991] Memory failure: 0x13dc65: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347511][ T6991] Memory failure: 0x13dc65: recovery action for dirty LRU page: Recovered [ 75.347518][ T6991] Injecting memory failure for pfn 0x13dc66 at process virtual address 0x20070000 [ 75.347539][ T6991] Memory failure: 0x13dc66: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347553][ T6991] Memory failure: 0x13dc66: recovery action for dirty LRU page: Recovered [ 75.347560][ T6991] Injecting memory failure for pfn 0x13dc67 at process virtual address 0x20071000 [ 75.347582][ T6991] Memory failure: 0x13dc67: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347596][ T6991] Memory failure: 0x13dc67: recovery action for dirty LRU page: Recovered [ 75.347603][ T6991] Injecting memory failure for pfn 0x13dc68 at process virtual address 0x20072000 [ 75.347625][ T6991] Memory failure: 0x13dc68: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347639][ T6991] Memory failure: 0x13dc68: recovery action for dirty LRU page: Recovered [ 75.347646][ T6991] Injecting memory failure for pfn 0x13dc69 at process virtual address 0x20073000 [ 75.347668][ T6991] Memory failure: 0x13dc69: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347682][ T6991] Memory failure: 0x13dc69: recovery action for dirty LRU page: Recovered [ 75.347689][ T6991] Injecting memory failure for pfn 0x13dc6a at process virtual address 0x20074000 [ 75.347711][ T6991] Memory failure: 0x13dc6a: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347725][ T6991] Memory failure: 0x13dc6a: recovery action for dirty LRU page: Recovered [ 75.347732][ T6991] Injecting memory failure for pfn 0x13dc6b at process virtual address 0x20075000 [ 75.347754][ T6991] Memory failure: 0x13dc6b: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347768][ T6991] Memory failure: 0x13dc6b: recovery action for dirty LRU page: Recovered [ 75.347775][ T6991] Injecting memory failure for pfn 0x13dc6c at process virtual address 0x20076000 [ 75.347797][ T6991] Memory failure: 0x13dc6c: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347811][ T6991] Memory failure: 0x13dc6c: recovery action for dirty LRU page: Recovered [ 75.347818][ T6991] Injecting memory failure for pfn 0x13dc6d at process virtual address 0x20077000 [ 75.347840][ T6991] Memory failure: 0x13dc6d: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347854][ T6991] Memory failure: 0x13dc6d: recovery action for dirty LRU page: Recovered [ 75.347861][ T6991] Injecting memory failure for pfn 0x13dc6e at process virtual address 0x20078000 [ 75.347883][ T6991] Memory failure: 0x13dc6e: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347897][ T6991] Memory failure: 0x13dc6e: recovery action for dirty LRU page: Recovered [ 75.347904][ T6991] Injecting memory failure for pfn 0x13dc6f at process virtual address 0x20079000 [ 75.347926][ T6991] Memory failure: 0x13dc6f: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347940][ T6991] Memory failure: 0x13dc6f: recovery action for dirty LRU page: Recovered [ 75.347947][ T6991] Injecting memory failure for pfn 0x13dd20 at process virtual address 0x2007a000 [ 75.347969][ T6991] Memory failure: 0x13dd20: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.347983][ T6991] Memory failure: 0x13dd20: recovery action for dirty LRU page: Recovered [ 75.347990][ T6991] Injecting memory failure for pfn 0x13dd21 at process virtual address 0x2007b000 [ 75.348012][ T6991] Memory failure: 0x13dd21: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.348026][ T6991] Memory failure: 0x13dd21: recovery action for dirty LRU page: Recovered [ 75.348033][ T6991] Injecting memory failure for pfn 0x13dd22 at process virtual address 0x2007c000 [ 75.348055][ T6991] Memory failure: 0x13dd22: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.348069][ T6991] Memory failure: 0x13dd22: recovery action for dirty LRU page: Recovered [ 75.348076][ T6991] Injecting memory failure for pfn 0x13dd23 at process virtual address 0x2007d000 [ 75.348098][ T6991] Memory failure: 0x13dd23: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.348114][ T6991] Memory failure: 0x13dd23: recovery action for dirty LRU page: Recovered [ 75.348121][ T6991] Injecting memory failure for pfn 0x13dd24 at process virtual address 0x2007e000 [ 75.348143][ T6991] Memory failure: 0x13dd24: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.348157][ T6991] Memory failure: 0x13dd24: recovery action for dirty LRU page: Recovered [ 75.348164][ T6991] Injecting memory failure for pfn 0x13dd25 at process virtual address 0x2007f000 [ 75.348186][ T6991] Memory failure: 0x13dd25: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.348200][ T6991] Memory failure: 0x13dd25: recovery action for dirty LRU page: Recovered [ 75.348207][ T6991] Injecting memory failure for pfn 0x13dd26 at process virtual address 0x20080000 [ 75.348229][ T6991] Memory failure: 0x13dd26: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.348243][ T6991] Memory failure: 0x13dd26: recovery action for dirty LRU page: Recovered [ 75.348250][ T6991] Injecting memory failure for pfn 0x13dd27 at process virtual address 0x20081000 [ 75.368032][ T6995] loop5: AHDI p1 p2 p3 [ 75.368125][ T6995] loop5: p1 size 16383 extends beyond EOD, truncated [ 75.369632][ T6991] Memory failure: 0x13dd27: Sending SIGBUS to syz.1.507:6991 due to hardware memory corruption [ 75.369668][ T6991] Memory failure: 0x13dd27: recovery action for dirty LRU page: Recovered [ 75.369683][ T6991] Injecting memory failure for pfn 0x13dd28 at process virtual address 0x20082000 [ 75.396651][ T6986] bridge2: entered promiscuous mode [ 75.397129][ T6991] Memory failure: 0x13dd28: recovery action for already truncated LRU page: Ignored [ 75.586298][ T7002] loop2: detected capacity change from 0 to 512 [ 75.591231][ T7002] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.610000][ T7002] EXT4-fs error (device loop2): __ext4_iget:5533: inode #11: block 2: comm syz.2.510: invalid block [ 75.610019][ T7002] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 75.610250][ T7002] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.510: couldn't read orphan inode 11 (err -117) [ 75.610264][ T7002] loop2: lost filesystem error report for type 5 error -117 [ 75.616084][ T7002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.767189][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.967424][ T7021] tipc: Started in network mode [ 75.967439][ T7021] tipc: Node identity 1, cluster identity 4711 [ 75.967448][ T7021] tipc: Node number set to 1 [ 76.023406][ T7021] tipc: New replicast peer: 127.0.0.1 [ 76.023621][ T7021] tipc: Enabled bearer , priority 10 [ 76.115574][ T7021] tipc: Disabling bearer [ 76.368459][ T7011] Soft offlining pfn 0x134a27 at process virtual address 0x20d7b000 [ 76.372552][ T7011] Soft offline: 0x134a27: page migration failed 1, type 0x5ffc00000020008(uptodate|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 76.389358][ T50] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 76.398890][ T4731] udevd[4731]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 76.422410][ T7031] loop4: detected capacity change from 0 to 1024 [ 76.425643][ T7031] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 76.425735][ T7031] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 76.425790][ T7031] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 76.425994][ T7031] EXT4-fs error (device loop4): ext4_get_journal_inode:5900: inode #32: comm syz.4.519: iget: special inode unallocated [ 76.426008][ T7031] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 76.427151][ T7031] EXT4-fs (loop4): no journal found [ 76.427163][ T7031] EXT4-fs (loop4): can't get journal size [ 76.428857][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 76.428870][ C0] EXT4-fs (loop4): initial error at time 524364: ext4_get_journal_inode:5900: inode 32 [ 76.428886][ C0] EXT4-fs (loop4): last error at time 524364: ext4_get_journal_inode:5900: inode 32 [ 76.431575][ T7031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.451226][ T7031] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 76.456729][ T7031] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1332: inode #12: block 16: comm syz.4.519: path /: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 76.525662][ T7040] EXT4-fs error (device loop4): __ext4_iget:5533: inode #15: block 1803188595: comm syz.4.519: invalid block [ 76.743453][ T4734] Bluetooth: hci3: command 0x040f tx timeout [ 76.743557][ T4734] Bluetooth: hci1: command 0x040f tx timeout [ 76.744632][ T50] Bluetooth: hci4: command 0x041b tx timeout [ 76.875647][ T7017] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.880088][ T7017] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.881238][ T7017] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.881297][ T7017] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.881328][ T7017] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.883225][ T7017] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 76.883244][ T7017] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 76.919969][ T4711] EXT4-fs error (device loop4): __ext4_iget:5533: inode #15: block 1803188595: comm syz-executor: invalid block [ 76.926161][ T4711] EXT4-fs error (device loop4): __ext4_iget:5533: inode #15: block 1803188595: comm syz-executor: invalid block [ 76.944910][ T7049] loop5: detected capacity change from 0 to 512 [ 76.958701][ T7049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.021877][ T5169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.055756][ T7064] loop2: detected capacity change from 0 to 512 [ 77.092663][ T7069] Injecting memory failure for pfn 0x14e7fe at process virtual address 0x20ffe000 [ 77.104238][ T7069] Memory failure: 0x14e7fe: unhandlable page. [ 77.105641][ T7069] Memory failure: 0x14e7fe: recovery action for get hwpoison page: Ignored [ 77.188030][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.223542][ T50] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 77.242341][ T1869] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.293261][ T4715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.296449][ T4715] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.299930][ T4715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.307650][ T4715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.308151][ T4715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.375489][ T1869] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.504790][ T1869] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.631294][ T1869] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.776522][ T7090] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.776567][ T7090] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.776636][ T7090] bridge_slave_0: entered allmulticast mode [ 77.777125][ T7090] bridge_slave_0: entered promiscuous mode [ 77.778851][ T7090] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.778908][ T7090] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.778971][ T7090] bridge_slave_1: entered allmulticast mode [ 77.779425][ T7090] bridge_slave_1: entered promiscuous mode [ 78.037286][ T7090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.044367][ T7090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.072358][ T7090] team0: Port device team_slave_0 added [ 78.075105][ T1869] bridge_slave_1: left allmulticast mode [ 78.075135][ T1869] bridge_slave_1: left promiscuous mode [ 78.075397][ T1869] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.078007][ T1869] bridge_slave_0: left allmulticast mode [ 78.078023][ T1869] bridge_slave_0: left promiscuous mode [ 78.078389][ T1869] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.133507][ T1869] erspan0 (unregistering): left allmulticast mode [ 78.167770][ T1869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.205835][ T1869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.243455][ T1869] bond0 (unregistering): Released all slaves [ 78.247184][ T7090] team0: Port device team_slave_1 added [ 78.261484][ T7090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.262944][ T7090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.268252][ T7090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.270997][ T7090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.271012][ T7090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.271031][ T7090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.285938][ T7090] hsr_slave_0: entered promiscuous mode [ 78.287444][ T7090] hsr_slave_1: entered promiscuous mode [ 78.288840][ T7090] debugfs: 'hsr0' already exists in 'hsr' [ 78.295180][ T7090] Cannot create hsr debugfs directory [ 78.308329][ T1869] tipc: Left network mode [ 78.391862][ T7149] netlink: 44 bytes leftover after parsing attributes in process `syz.5.554'. [ 78.725361][ T7166] loop5: detected capacity change from 0 to 512 [ 78.729467][ T7166] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 78.742127][ T7166] EXT4-fs (loop5): 1 truncate cleaned up [ 78.742615][ T7166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.756466][ T7090] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 78.759573][ T7090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.761342][ T7090] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 78.763586][ T7090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.770454][ T7090] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 78.773737][ T5169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.779035][ T7090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.807525][ T7090] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 78.810357][ T7090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.813053][ T4400] 8021q: adding VLAN 0 to HW filter on device eth4 [ 78.845383][ T7090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.851449][ T7090] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.854863][ T3879] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.854910][ T3879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.859608][ T1457] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.859655][ T1457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.896903][ T4715] Bluetooth: hci2: command 0x040f tx timeout [ 78.896950][ T4715] Bluetooth: hci1: command 0x040f tx timeout [ 78.897004][ T50] Bluetooth: hci4: command 0x041b tx timeout [ 78.928619][ T7184] bond2: option arp_validate: invalid value (18446744073709551615) [ 78.931561][ T7184] bond2 (unregistering): Released all slaves [ 78.946039][ T7090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.946067][ T7090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.952361][ T1869] hsr_slave_0: left promiscuous mode [ 78.953974][ T1869] hsr_slave_1: left promiscuous mode [ 78.954291][ T1869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.954304][ T1869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.955651][ T1869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.955663][ T1869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.967413][ T1869] veth1_macvtap: left promiscuous mode [ 78.967459][ T1869] veth0_macvtap: left promiscuous mode [ 78.967506][ T1869] veth1_vlan: left promiscuous mode [ 78.967539][ T1869] veth0_vlan: left promiscuous mode [ 79.128974][ T1869] team0 (unregistering): Port device team_slave_1 removed [ 79.147064][ T1869] team0 (unregistering): Port device team_slave_0 removed [ 79.195359][ T4400] 8021q: adding VLAN 0 to HW filter on device eth5 [ 79.366470][ T50] Bluetooth: hci0: command tx timeout [ 79.438461][ T7090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.460244][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'. [ 79.519979][ T7260] xfrm0: entered allmulticast mode [ 79.847846][ T4400] 8021q: adding VLAN 0 to HW filter on device eth6 [ 79.849888][ T7273] loop2: detected capacity change from 0 to 512 [ 79.854598][ T7273] EXT4-fs: Ignoring removed nobh option [ 79.878975][ T7273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.888187][ T7277] 0: reclassify loop, rule prio 0, protocol 03 [ 79.889232][ T7282] xt_hashlimit: max too large, truncated to 1048576 [ 79.889279][ T7282] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 79.891306][ T7282] netlink: 92 bytes leftover after parsing attributes in process `syz.5.577'. [ 79.914940][ T7090] veth0_vlan: entered promiscuous mode [ 79.918189][ T7090] veth1_vlan: entered promiscuous mode [ 79.967323][ T7090] veth0_macvtap: entered promiscuous mode [ 79.968653][ T7090] veth1_macvtap: entered promiscuous mode [ 79.972265][ T7291] loop1: detected capacity change from 0 to 512 [ 79.973227][ T7291] EXT4-fs: inline encryption not supported [ 79.973287][ T7291] EXT4-fs: Ignoring removed i_version option [ 79.976796][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.986512][ T7090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.996146][ T7291] EXT4-fs (loop1): 1 orphan inode deleted [ 79.997934][ T7090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.003667][ T1183] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.003778][ T1183] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.003803][ T1183] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.003820][ T1183] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.012538][ T7291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.059700][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.059725][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.068778][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.080421][ T1869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.082567][ T1869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.162875][ T7305] pim6reg9: entered allmulticast mode [ 80.200481][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.585'. [ 80.200514][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.6.585'. [ 80.220742][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.585'. [ 80.220780][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.6.585'. [ 80.221186][ T4002] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.221216][ T4002] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.221232][ T4002] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.221248][ T4002] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.235524][ T4400] 8021q: adding VLAN 0 to HW filter on device eth7 [ 80.690623][ T7346] FAULT_INJECTION: forcing a failure. [ 80.690623][ T7346] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.695203][ T7346] CPU: 1 UID: 0 PID: 7346 Comm: syz.3.591 Not tainted syzkaller #0 PREEMPT [ 80.695223][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 80.695229][ T7346] Call trace: [ 80.695234][ T7346] show_stack+0x2c/0x3c (C) [ 80.695257][ T7346] __dump_stack+0x30/0x40 [ 80.695272][ T7346] dump_stack_lvl+0xd8/0x12c [ 80.695283][ T7346] dump_stack+0x1c/0x28 [ 80.695293][ T7346] should_fail_ex+0x41c/0x590 [ 80.695306][ T7346] should_fail+0x14/0x24 [ 80.695316][ T7346] should_fail_usercopy+0x20/0x30 [ 80.695326][ T7346] simple_read_from_buffer+0xc4/0x238 [ 80.695339][ T7346] proc_fail_nth_read+0x1a8/0x248 [ 80.695347][ T7346] vfs_read+0x230/0x8c8 [ 80.695358][ T7346] ksys_read+0x12c/0x228 [ 80.695365][ T7346] __arm64_sys_read+0x84/0x98 [ 80.695372][ T7346] invoke_syscall+0x98/0x244 [ 80.695382][ T7346] el0_svc_common+0xec/0x23c [ 80.695392][ T7346] do_el0_svc+0x4c/0x5c [ 80.695401][ T7346] el0_svc+0x64/0x260 [ 80.695412][ T7346] el0t_64_sync_handler+0x48/0x148 [ 80.695422][ T7346] el0t_64_sync+0x198/0x19c [ 80.970036][ T4734] Bluetooth: hci2: command 0x040f tx timeout [ 80.971522][ T50] Bluetooth: hci4: command 0x041b tx timeout [ 81.472078][ T50] Bluetooth: hci0: command tx timeout [ 81.921552][ T7409] netlink: 36 bytes leftover after parsing attributes in process `syz.3.601'. [ 81.991691][ T7419] 0: reclassify loop, rule prio 0, protocol 03 [ 82.551558][ T50] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 83.212748][ T50] Bluetooth: hci2: command 0x040f tx timeout [ 83.625449][ T50] Bluetooth: hci0: command tx timeout [ 84.037827][ T7475] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 84.038812][ T7475] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.039314][ T7475] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 84.039466][ T7475] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 84.039526][ T7475] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 84.043214][ T7475] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.043282][ T7475] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.045759][ T7475] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.153080][ T7489] 0: reclassify loop, rule prio 0, protocol 03 [ 84.250712][ T7498] FAULT_INJECTION: forcing a failure. [ 84.250712][ T7498] name failslab, interval 1, probability 0, space 0, times 0 [ 84.253537][ T7498] CPU: 1 UID: 0 PID: 7498 Comm: syz.1.628 Not tainted syzkaller #0 PREEMPT [ 84.253564][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 84.253576][ T7498] Call trace: [ 84.253582][ T7498] show_stack+0x2c/0x3c (C) [ 84.253602][ T7498] __dump_stack+0x30/0x40 [ 84.253614][ T7498] dump_stack_lvl+0xd8/0x12c [ 84.253624][ T7498] dump_stack+0x1c/0x28 [ 84.253634][ T7498] should_fail_ex+0x41c/0x590 [ 84.253645][ T7498] should_failslab+0xc4/0x120 [ 84.253654][ T7498] __kmalloc_noprof+0x108/0x6b8 [ 84.253663][ T7498] tomoyo_encode2+0x10c/0x330 [ 84.253672][ T7498] tomoyo_encode+0x34/0x50 [ 84.253680][ T7498] tomoyo_realpath_from_path+0x488/0x4dc [ 84.253688][ T7498] tomoyo_path_number_perm+0x1f0/0x500 [ 84.253696][ T7498] tomoyo_file_ioctl+0x2c/0x3c [ 84.253705][ T7498] security_file_ioctl+0xdc/0x2b0 [ 84.253712][ T7498] __arm64_sys_ioctl+0xb0/0x1cc [ 84.253723][ T7498] invoke_syscall+0x98/0x244 [ 84.253733][ T7498] el0_svc_common+0xec/0x23c [ 84.253743][ T7498] do_el0_svc+0x4c/0x5c [ 84.253753][ T7498] el0_svc+0x64/0x260 [ 84.253763][ T7498] el0t_64_sync_handler+0x48/0x148 [ 84.253773][ T7498] el0t_64_sync+0x198/0x19c [ 84.272176][ T7498] ERROR: Out of memory at tomoyo_realpath_from_path. [ 84.412984][ T7513] loop2: detected capacity change from 0 to 1024 [ 84.414594][ T7513] EXT4-fs: inline encryption not supported [ 84.479601][ T7513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.672306][ T7521] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.632: lblock 0 mapped to illegal pblock 0 (length 6) [ 84.676394][ T7521] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 84.676477][ T7521] EXT4-fs (loop2): This should not happen!! Data will be lost [ 84.676477][ T7521] [ 84.680944][ T7521] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.632: lblock 0 mapped to illegal pblock 0 (length 6) [ 84.792684][ T7523] loop3: detected capacity change from 0 to 256 [ 85.027857][ T7523] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 85.027902][ T7523] FAT-fs (loop3): Filesystem has been set read-only [ 85.027966][ T7523] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 85.027993][ T7523] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 85.030038][ T7523] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 85.030053][ T7523] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 85.030075][ T7523] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 85.030086][ T7523] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 85.030106][ T7523] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 85.030117][ T7523] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 85.030136][ T7523] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 85.165981][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.645'. [ 85.353350][ T40] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 1) [ 85.359607][ T40] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117 [ 85.359652][ T40] EXT4-fs (loop2): This should not happen!! Data will be lost [ 85.359652][ T40] [ 85.367514][ T4719] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 85.375259][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.596597][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.645'. [ 85.679600][ T7528] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.679657][ T7528] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.771905][ T7528] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.772011][ T7528] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.772275][ T7528] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.787644][ T7528] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 85.787712][ T7528] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.847097][ T7552] FAULT_INJECTION: forcing a failure. [ 85.847097][ T7552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.847136][ T7552] CPU: 1 UID: 0 PID: 7552 Comm: syz.3.641 Not tainted syzkaller #0 PREEMPT [ 85.847151][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 85.847158][ T7552] Call trace: [ 85.847162][ T7552] show_stack+0x2c/0x3c (C) [ 85.847181][ T7552] __dump_stack+0x30/0x40 [ 85.847193][ T7552] dump_stack_lvl+0xd8/0x12c [ 85.847203][ T7552] dump_stack+0x1c/0x28 [ 85.847213][ T7552] should_fail_ex+0x41c/0x590 [ 85.847224][ T7552] should_fail+0x14/0x24 [ 85.847234][ T7552] should_fail_usercopy+0x20/0x30 [ 85.847244][ T7552] simple_read_from_buffer+0xc4/0x238 [ 85.847254][ T7552] proc_fail_nth_read+0x1a8/0x248 [ 85.847263][ T7552] vfs_read+0x230/0x8c8 [ 85.847273][ T7552] ksys_read+0x12c/0x228 [ 85.847279][ T7552] __arm64_sys_read+0x84/0x98 [ 85.847286][ T7552] invoke_syscall+0x98/0x244 [ 85.847297][ T7552] el0_svc_common+0xec/0x23c [ 85.847307][ T7552] do_el0_svc+0x4c/0x5c [ 85.847316][ T7552] el0_svc+0x64/0x260 [ 85.847327][ T7552] el0t_64_sync_handler+0x48/0x148 [ 85.847337][ T7552] el0t_64_sync+0x198/0x19c [ 85.990854][ T7544] loop6: detected capacity change from 0 to 8192 [ 86.372311][ T7544] loop6: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 86.378662][ T7544] loop6: p2 size 524297 extends beyond EOD, truncated [ 86.424400][ T7544] loop6: p4 size 393216 extends beyond EOD, truncated [ 86.424816][ T7544] loop6: p5 size 524297 extends beyond EOD, truncated [ 86.427475][ T7544] loop6: p6 size 393216 extends beyond EOD, truncated [ 86.430277][ T7544] loop6: p7 size 524297 extends beyond EOD, truncated [ 86.434614][ T7544] loop6: p8 size 393216 extends beyond EOD, truncated [ 86.437697][ T7544] loop6: p9 size 524297 extends beyond EOD, truncated [ 86.440743][ T7544] loop6: p10 size 393216 extends beyond EOD, truncated [ 86.441153][ T7544] loop6: p11 size 524297 extends beyond EOD, truncated [ 86.441692][ T7544] loop6: p12 size 393216 extends beyond EOD, truncated [ 86.442055][ T7544] loop6: p13 size 524297 extends beyond EOD, truncated [ 86.444757][ T7544] loop6: p14 size 393216 extends beyond EOD, truncated [ 86.445113][ T7544] loop6: p15 size 524297 extends beyond EOD, truncated [ 86.448710][ T7544] loop6: p16 size 393216 extends beyond EOD, truncated [ 86.449193][ T7544] loop6: p17 size 524297 extends beyond EOD, truncated [ 86.449838][ T7544] loop6: p18 size 393216 extends beyond EOD, truncated [ 86.450531][ T7544] loop6: p19 size 524297 extends beyond EOD, truncated [ 86.452324][ T7544] loop6: p20 size 393216 extends beyond EOD, truncated [ 86.454086][ T7544] loop6: p21 size 524297 extends beyond EOD, truncated [ 86.454590][ T7544] loop6: p22 size 393216 extends beyond EOD, truncated [ 86.455062][ T7544] loop6: p23 size 524297 extends beyond EOD, truncated [ 86.456040][ T7544] loop6: p24 size 393216 extends beyond EOD, truncated [ 86.517534][ T7544] loop6: p25 size 524297 extends beyond EOD, truncated [ 86.518179][ T7544] loop6: p26 size 393216 extends beyond EOD, truncated [ 86.519859][ T7544] loop6: p27 size 524297 extends beyond EOD, truncated [ 86.520213][ T7544] loop6: p28 size 393216 extends beyond EOD, truncated [ 86.520891][ T7544] loop6: p29 size 524297 extends beyond EOD, truncated [ 86.521246][ T7544] loop6: p30 size 393216 extends beyond EOD, truncated [ 86.521596][ T7544] loop6: p31 size 524297 extends beyond EOD, truncated [ 86.521924][ T7544] loop6: p32 size 393216 extends beyond EOD, truncated [ 86.526612][ T7544] loop6: p33 size 524297 extends beyond EOD, truncated [ 86.528334][ T7544] loop6: p34 size 393216 extends beyond EOD, truncated [ 86.529882][ T7544] loop6: p35 size 524297 extends beyond EOD, truncated [ 86.530230][ T7544] loop6: p36 size 393216 extends beyond EOD, truncated [ 86.531033][ T7544] loop6: p37 size 524297 extends beyond EOD, truncated [ 86.532270][ T7544] loop6: p38 size 393216 extends beyond EOD, truncated [ 86.532635][ T7544] loop6: p39 size 524297 extends beyond EOD, truncated [ 86.534483][ T7544] loop6: p40 size 393216 extends beyond EOD, truncated [ 86.535251][ T7544] loop6: p41 size 524297 extends beyond EOD, truncated [ 86.535619][ T7544] loop6: p42 size 393216 extends beyond EOD, truncated [ 86.536318][ T7544] loop6: p43 size 524297 extends beyond EOD, truncated [ 86.536694][ T7544] loop6: p44 size 393216 extends beyond EOD, truncated [ 86.537194][ T7544] loop6: p45 size 524297 extends beyond EOD, truncated [ 86.537902][ T7544] loop6: p46 size 393216 extends beyond EOD, truncated [ 86.538409][ T7544] loop6: p47 size 524297 extends beyond EOD, truncated [ 86.538944][ T7544] loop6: p48 size 393216 extends beyond EOD, truncated [ 86.539563][ T7544] loop6: p49 size 524297 extends beyond EOD, truncated [ 86.540088][ T7544] loop6: p50 size 393216 extends beyond EOD, truncated [ 86.540592][ T7544] loop6: p51 size 524297 extends beyond EOD, truncated [ 86.541127][ T7544] loop6: p52 size 393216 extends beyond EOD, truncated [ 86.541601][ T7544] loop6: p53 size 524297 extends beyond EOD, truncated [ 86.542261][ T7544] loop6: p54 size 393216 extends beyond EOD, truncated [ 86.542617][ T7544] loop6: p55 size 524297 extends beyond EOD, truncated [ 86.543301][ T7544] loop6: p56 size 393216 extends beyond EOD, truncated [ 86.544186][ T7544] loop6: p57 size 524297 extends beyond EOD, truncated [ 86.546181][ T7544] loop6: p58 size 393216 extends beyond EOD, truncated [ 86.546771][ T7544] loop6: p59 size 524297 extends beyond EOD, truncated [ 86.547293][ T7544] loop6: p60 size 393216 extends beyond EOD, truncated [ 86.547920][ T7544] loop6: p61 size 524297 extends beyond EOD, truncated [ 86.548615][ T7544] loop6: p62 size 393216 extends beyond EOD, truncated [ 86.549160][ T7544] loop6: p63 size 524297 extends beyond EOD, truncated [ 86.549722][ T7544] loop6: p64 size 393216 extends beyond EOD, truncated [ 86.552271][ T7544] loop6: p65 size 524297 extends beyond EOD, truncated [ 86.552731][ T7544] loop6: p66 size 393216 extends beyond EOD, truncated [ 86.553063][ T7544] loop6: p67 size 524297 extends beyond EOD, truncated [ 86.553362][ T7544] loop6: p68 size 393216 extends beyond EOD, truncated [ 86.553773][ T7544] loop6: p69 size 524297 extends beyond EOD, truncated [ 86.554126][ T7544] loop6: p70 size 393216 extends beyond EOD, truncated [ 86.556416][ T7544] loop6: p71 size 524297 extends beyond EOD, truncated [ 86.559422][ T7544] loop6: p72 size 393216 extends beyond EOD, truncated [ 86.559789][ T7544] loop6: p73 size 524297 extends beyond EOD, truncated [ 86.560138][ T7544] loop6: p74 size 393216 extends beyond EOD, truncated [ 86.560480][ T7544] loop6: p75 size 524297 extends beyond EOD, truncated [ 86.560883][ T7544] loop6: p76 size 393216 extends beyond EOD, truncated [ 86.561212][ T7544] loop6: p77 size 524297 extends beyond EOD, truncated [ 86.561544][ T7544] loop6: p78 size 393216 extends beyond EOD, truncated [ 86.561838][ T7544] loop6: p79 size 524297 extends beyond EOD, truncated [ 86.562128][ T7544] loop6: p80 size 393216 extends beyond EOD, truncated [ 86.562425][ T7544] loop6: p81 size 524297 extends beyond EOD, truncated [ 86.563754][ T7544] loop6: p82 size 393216 extends beyond EOD, truncated [ 86.565267][ T7544] loop6: p83 size 524297 extends beyond EOD, truncated [ 86.565623][ T7544] loop6: p84 size 393216 extends beyond EOD, truncated [ 86.568228][ T7544] loop6: p85 size 524297 extends beyond EOD, truncated [ 86.573711][ T7544] loop6: p86 size 393216 extends beyond EOD, truncated [ 86.814858][ T7544] loop6: p87 size 524297 extends beyond EOD, truncated [ 86.815235][ T7544] loop6: p88 size 393216 extends beyond EOD, truncated [ 86.817059][ T7544] loop6: p89 size 524297 extends beyond EOD, truncated [ 86.819308][ T7544] loop6: p90 size 393216 extends beyond EOD, truncated [ 86.823523][ T7544] loop6: p91 size 524297 extends beyond EOD, truncated [ 86.824112][ T7544] loop6: p92 size 393216 extends beyond EOD, truncated [ 86.824884][ T7544] loop6: p93 size 524297 extends beyond EOD, truncated [ 86.826288][ T7544] loop6: p94 size 393216 extends beyond EOD, truncated [ 86.829307][ T7544] loop6: p95 size 524297 extends beyond EOD, truncated [ 86.829669][ T7544] loop6: p96 size 393216 extends beyond EOD, truncated [ 86.830399][ T7544] loop6: p97 size 524297 extends beyond EOD, truncated [ 86.831531][ T7544] loop6: p98 size 393216 extends beyond EOD, truncated [ 86.833755][ T7544] loop6: p99 size 524297 extends beyond EOD, truncated [ 86.836817][ T7544] loop6: p100 size 393216 extends beyond EOD, truncated [ 86.837276][ T7544] loop6: p101 size 524297 extends beyond EOD, truncated [ 86.838185][ T7544] loop6: p102 size 393216 extends beyond EOD, truncated [ 86.839280][ T7544] loop6: p103 size 524297 extends beyond EOD, truncated [ 86.842134][ T7544] loop6: p104 size 393216 extends beyond EOD, truncated [ 86.842603][ T7544] loop6: p105 size 524297 extends beyond EOD, truncated [ 86.843127][ T7544] loop6: p106 size 393216 extends beyond EOD, truncated [ 86.844882][ T7544] loop6: p107 size 524297 extends beyond EOD, truncated [ 86.845501][ T7544] loop6: p108 size 393216 extends beyond EOD, truncated [ 86.846235][ T7544] loop6: p109 size 524297 extends beyond EOD, truncated [ 86.847294][ T7544] loop6: p110 size 393216 extends beyond EOD, truncated [ 86.847756][ T7544] loop6: p111 size 524297 extends beyond EOD, truncated [ 86.848542][ T7544] loop6: p112 size 393216 extends beyond EOD, truncated [ 86.848910][ T7544] loop6: p113 size 524297 extends beyond EOD, truncated [ 86.849690][ T7544] loop6: p114 size 393216 extends beyond EOD, truncated [ 86.850053][ T7544] loop6: p115 size 524297 extends beyond EOD, truncated [ 86.850747][ T7544] loop6: p116 size 393216 extends beyond EOD, truncated [ 86.851343][ T7544] loop6: p117 size 524297 extends beyond EOD, truncated [ 86.853052][ T7544] loop6: p118 size 393216 extends beyond EOD, truncated [ 86.855041][ T7544] loop6: p119 size 524297 extends beyond EOD, truncated [ 86.856003][ T7544] loop6: p120 size 393216 extends beyond EOD, truncated [ 86.857604][ T7544] loop6: p121 size 524297 extends beyond EOD, truncated [ 86.858543][ T7544] loop6: p122 size 393216 extends beyond EOD, truncated [ 86.858905][ T7544] loop6: p123 size 524297 extends beyond EOD, truncated [ 86.859512][ T7544] loop6: p124 size 393216 extends beyond EOD, truncated [ 86.860149][ T7544] loop6: p125 size 524297 extends beyond EOD, truncated [ 86.860806][ T7544] loop6: p126 size 393216 extends beyond EOD, truncated [ 86.868267][ T7544] loop6: p127 size 524297 extends beyond EOD, truncated [ 86.870663][ T7544] loop6: p128 size 393216 extends beyond EOD, truncated [ 86.871019][ T7544] loop6: p129 size 524297 extends beyond EOD, truncated [ 86.871381][ T7544] loop6: p130 size 393216 extends beyond EOD, truncated [ 86.872698][ T7544] loop6: p131 size 524297 extends beyond EOD, truncated [ 86.874063][ T7544] loop6: p132 size 393216 extends beyond EOD, truncated [ 86.876897][ T7544] loop6: p133 size 524297 extends beyond EOD, truncated [ 86.878156][ T7544] loop6: p134 size 393216 extends beyond EOD, truncated [ 86.879126][ T7544] loop6: p135 size 524297 extends beyond EOD, truncated [ 86.880401][ T7544] loop6: p136 size 393216 extends beyond EOD, truncated [ 86.881336][ T7544] loop6: p137 size 524297 extends beyond EOD, truncated [ 86.883904][ T7544] loop6: p138 size 393216 extends beyond EOD, truncated [ 86.884253][ T7544] loop6: p139 size 524297 extends beyond EOD, truncated [ 86.885706][ T7544] loop6: p140 size 393216 extends beyond EOD, truncated [ 86.886882][ T7544] loop6: p141 size 524297 extends beyond EOD, truncated [ 86.887977][ T7544] loop6: p142 size 393216 extends beyond EOD, truncated [ 86.889349][ T7544] loop6: p143 size 524297 extends beyond EOD, truncated [ 86.890313][ T7544] loop6: p144 size 393216 extends beyond EOD, truncated [ 86.890691][ T7544] loop6: p145 size 524297 extends beyond EOD, truncated [ 86.894712][ T7544] loop6: p146 size 393216 extends beyond EOD, truncated [ 86.896036][ T7544] loop6: p147 size 524297 extends beyond EOD, truncated [ 86.899273][ T7544] loop6: p148 size 393216 extends beyond EOD, truncated [ 86.900324][ T7544] loop6: p149 size 524297 extends beyond EOD, truncated [ 86.903734][ T7544] loop6: p150 size 393216 extends beyond EOD, truncated [ 86.905014][ T7544] loop6: p151 size 524297 extends beyond EOD, truncated [ 86.906855][ T7544] loop6: p152 size 393216 extends beyond EOD, truncated [ 86.913057][ T7544] loop6: p153 size 524297 extends beyond EOD, truncated [ 86.913741][ T7544] loop6: p154 size 393216 extends beyond EOD, truncated [ 86.915341][ T7544] loop6: p155 size 524297 extends beyond EOD, truncated [ 86.917677][ T7544] loop6: p156 size 393216 extends beyond EOD, truncated [ 86.921227][ T7544] loop6: p157 size 524297 extends beyond EOD, truncated [ 86.921600][ T7544] loop6: p158 size 393216 extends beyond EOD, truncated [ 86.923412][ T7544] loop6: p159 size 524297 extends beyond EOD, truncated [ 86.924353][ T7544] loop6: p160 size 393216 extends beyond EOD, truncated [ 86.925649][ T7544] loop6: p161 size 524297 extends beyond EOD, truncated [ 86.933132][ T7544] loop6: p162 size 393216 extends beyond EOD, truncated [ 86.936790][ T7544] loop6: p163 size 524297 extends beyond EOD, truncated [ 86.939933][ T7544] loop6: p164 size 393216 extends beyond EOD, truncated [ 86.944627][ T7544] loop6: p165 size 524297 extends beyond EOD, truncated [ 86.945010][ T7544] loop6: p166 size 393216 extends beyond EOD, truncated [ 86.945351][ T7544] loop6: p167 size 524297 extends beyond EOD, truncated [ 86.946466][ T7544] loop6: p168 size 393216 extends beyond EOD, truncated [ 86.948014][ T7544] loop6: p169 size 524297 extends beyond EOD, truncated [ 86.954065][ T7544] loop6: p170 size 393216 extends beyond EOD, truncated [ 86.955824][ T7544] loop6: p171 size 524297 extends beyond EOD, truncated [ 86.956210][ T7544] loop6: p172 size 393216 extends beyond EOD, truncated [ 86.958345][ T7544] loop6: p173 size 524297 extends beyond EOD, truncated [ 86.958749][ T7544] loop6: p174 size 393216 extends beyond EOD, truncated [ 86.959870][ T7544] loop6: p175 size 524297 extends beyond EOD, truncated [ 86.961017][ T7544] loop6: p176 size 393216 extends beyond EOD, truncated [ 86.962234][ T7544] loop6: p177 size 524297 extends beyond EOD, truncated [ 86.963837][ T7544] loop6: p178 size 393216 extends beyond EOD, truncated [ 86.965482][ T7544] loop6: p179 size 524297 extends beyond EOD, truncated [ 86.966635][ T7544] loop6: p180 size 393216 extends beyond EOD, truncated [ 86.967379][ T7544] loop6: p181 size 524297 extends beyond EOD, truncated [ 86.969740][ T7544] loop6: p182 size 393216 extends beyond EOD, truncated [ 86.970544][ T7544] loop6: p183 size 524297 extends beyond EOD, truncated [ 86.974424][ T7544] loop6: p184 size 393216 extends beyond EOD, truncated [ 86.975390][ T7544] loop6: p185 size 524297 extends beyond EOD, truncated [ 86.976210][ T7544] loop6: p186 size 393216 extends beyond EOD, truncated [ 86.978475][ T7544] loop6: p187 size 524297 extends beyond EOD, truncated [ 86.978833][ T7544] loop6: p188 size 393216 extends beyond EOD, truncated [ 86.979393][ T7544] loop6: p189 size 524297 extends beyond EOD, truncated [ 86.981250][ T7544] loop6: p190 size 393216 extends beyond EOD, truncated [ 86.982224][ T7544] loop6: p191 size 524297 extends beyond EOD, truncated [ 86.984564][ T7544] loop6: p192 size 393216 extends beyond EOD, truncated [ 86.984915][ T7544] loop6: p193 size 524297 extends beyond EOD, truncated [ 86.986274][ T7544] loop6: p194 size 393216 extends beyond EOD, truncated [ 86.986931][ T7544] loop6: p195 size 524297 extends beyond EOD, truncated [ 86.988918][ T7544] loop6: p196 size 393216 extends beyond EOD, truncated [ 86.989569][ T7544] loop6: p197 size 524297 extends beyond EOD, truncated [ 86.990091][ T7544] loop6: p198 size 393216 extends beyond EOD, truncated [ 86.992039][ T7544] loop6: p199 size 524297 extends beyond EOD, truncated [ 86.993554][ T7544] loop6: p200 size 393216 extends beyond EOD, truncated [ 86.994705][ T7544] loop6: p201 size 524297 extends beyond EOD, truncated [ 86.995843][ T7544] loop6: p202 size 393216 extends beyond EOD, truncated [ 86.996682][ T7544] loop6: p203 size 524297 extends beyond EOD, truncated [ 86.999199][ T7544] loop6: p204 size 393216 extends beyond EOD, truncated [ 87.000268][ T7544] loop6: p205 size 524297 extends beyond EOD, truncated [ 87.002227][ T7544] loop6: p206 size 393216 extends beyond EOD, truncated [ 87.003282][ T7544] loop6: p207 size 524297 extends beyond EOD, truncated [ 87.005045][ T7544] loop6: p208 size 393216 extends beyond EOD, truncated [ 87.006709][ T7544] loop6: p209 size 524297 extends beyond EOD, truncated [ 87.007070][ T7544] loop6: p210 size 393216 extends beyond EOD, truncated [ 87.010042][ T7544] loop6: p211 size 524297 extends beyond EOD, truncated [ 87.011447][ T7544] loop6: p212 size 393216 extends beyond EOD, truncated [ 87.012290][ T7544] loop6: p213 size 524297 extends beyond EOD, truncated [ 87.013337][ T7544] loop6: p214 size 393216 extends beyond EOD, truncated [ 87.015603][ T7544] loop6: p215 size 524297 extends beyond EOD, truncated [ 87.019097][ T7544] loop6: p216 size 393216 extends beyond EOD, truncated [ 87.019571][ T7544] loop6: p217 size 524297 extends beyond EOD, truncated [ 87.021356][ T7544] loop6: p218 size 393216 extends beyond EOD, truncated [ 87.022410][ T7544] loop6: p219 size 524297 extends beyond EOD, truncated [ 87.023529][ T7544] loop6: p220 size 393216 extends beyond EOD, truncated [ 87.023952][ T7544] loop6: p221 size 524297 extends beyond EOD, truncated [ 87.026940][ T7544] loop6: p222 size 393216 extends beyond EOD, truncated [ 87.027694][ T7544] loop6: p223 size 524297 extends beyond EOD, truncated [ 87.029630][ T7544] loop6: p224 size 393216 extends beyond EOD, truncated [ 87.031724][ T7544] loop6: p225 size 524297 extends beyond EOD, truncated [ 87.032773][ T7544] loop6: p226 size 393216 extends beyond EOD, truncated [ 87.033797][ T7544] loop6: p227 size 524297 extends beyond EOD, truncated [ 87.034806][ T7544] loop6: p228 size 393216 extends beyond EOD, truncated [ 87.038761][ T7544] loop6: p229 size 524297 extends beyond EOD, truncated [ 87.040315][ T7544] loop6: p230 size 393216 extends beyond EOD, truncated [ 87.041973][ T7544] loop6: p231 size 524297 extends beyond EOD, truncated [ 87.042537][ T7544] loop6: p232 size 393216 extends beyond EOD, truncated [ 87.043070][ T7544] loop6: p233 size 524297 extends beyond EOD, truncated [ 87.044325][ T7544] loop6: p234 size 393216 extends beyond EOD, truncated [ 87.044870][ T7544] loop6: p235 size 524297 extends beyond EOD, truncated [ 87.045663][ T7544] loop6: p236 size 393216 extends beyond EOD, truncated [ 87.046812][ T7544] loop6: p237 size 524297 extends beyond EOD, truncated [ 87.047960][ T7544] loop6: p238 size 393216 extends beyond EOD, truncated [ 87.048609][ T7544] loop6: p239 size 524297 extends beyond EOD, truncated [ 87.049730][ T7544] loop6: p240 size 393216 extends beyond EOD, truncated [ 87.050165][ T7544] loop6: p241 size 524297 extends beyond EOD, truncated [ 87.050914][ T7544] loop6: p242 size 393216 extends beyond EOD, truncated [ 87.051470][ T7544] loop6: p243 size 524297 extends beyond EOD, truncated [ 87.052635][ T7544] loop6: p244 size 393216 extends beyond EOD, truncated [ 87.053759][ T7544] loop6: p245 size 524297 extends beyond EOD, truncated [ 87.054767][ T7544] loop6: p246 size 393216 extends beyond EOD, truncated [ 87.055306][ T7544] loop6: p247 size 524297 extends beyond EOD, truncated [ 87.058997][ T7544] loop6: p248 size 393216 extends beyond EOD, truncated [ 87.062503][ T7544] loop6: p249 size 524297 extends beyond EOD, truncated [ 87.062972][ T7544] loop6: p250 size 393216 extends beyond EOD, truncated [ 87.063397][ T7544] loop6: p251 size 524297 extends beyond EOD, truncated [ 87.064160][ T7544] loop6: p252 size 393216 extends beyond EOD, truncated [ 87.067273][ T7544] loop6: p253 size 524297 extends beyond EOD, truncated [ 87.069731][ T7544] loop6: p254 size 393216 extends beyond EOD, truncated [ 87.071930][ T7544] loop6: p255 size 524297 extends beyond EOD, truncated [ 87.162829][ T7591] syzkaller0: entered promiscuous mode [ 87.162867][ T7591] syzkaller0: entered allmulticast mode [ 87.177705][ T4734] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 87.194667][ T7595] binder: 7594:7595 ioctl c0046209 0 returned -22 [ 87.246530][ T7599] loop3: detected capacity change from 0 to 256 [ 87.389816][ T7606] loop2: detected capacity change from 0 to 128 [ 87.403734][ T7606] FAT-fs (loop2): bogus number of reserved sectors [ 87.403767][ T7606] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 87.403783][ T7606] FAT-fs (loop2): Can't find a valid FAT filesystem [ 87.699916][ T7601] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 87.726426][ T7601] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 87.726466][ T7601] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 87.735138][ T7616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.661'. [ 87.746629][ T7601] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.748222][ T7601] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 87.749792][ T7601] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 87.849729][ T7627] loop3: detected capacity change from 0 to 512 [ 87.850383][ T7627] EXT4-fs: Ignoring removed nobh option [ 87.852711][ T7627] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.853367][ T7627] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.666: ea_inode file size=1535 entry size=6 [ 87.853456][ T7627] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 87.853552][ T7627] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.666: corrupted inode contents [ 87.853565][ T7627] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.855017][ T7627] EXT4-fs (loop3): Remounting filesystem read-only [ 87.855032][ T7627] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -30) [ 87.855098][ T7627] EXT4-fs (loop3): 1 orphan inode deleted [ 87.855562][ T7627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 87.878061][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.913077][ T7634] syz_tun: entered allmulticast mode [ 87.922788][ T7631] syz_tun: left allmulticast mode [ 87.934574][ T4734] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 88.521030][ T7544] loop6: detected capacity change from 0 to 512 [ 88.528182][ T7544] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.530820][ T7544] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 88.530933][ T7544] EXT4-fs (loop6): orphan cleanup on readonly fs [ 88.536745][ T7544] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.639: Allocating blocks 41-42 which overlap fs metadata [ 88.536783][ T7544] loop6: lost filesystem error report for type 5 error -117 [ 88.537138][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 88.537167][ C0] EXT4-fs (loop6): initial error at time 524376: ext4_mb_mark_diskspace_used:4222 [ 88.537190][ C0] EXT4-fs (loop6): last error at time 524376: ext4_mb_mark_diskspace_used:4222 [ 88.542137][ T7544] EXT4-fs (loop6): Remounting filesystem read-only [ 88.542191][ T7544] Quota error (device loop6): write_blk: dquota write failed [ 88.542221][ T7544] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 88.542278][ T7544] EXT4-fs (loop6): 1 truncate cleaned up [ 88.543129][ T7544] EXT4-fs (loop6): pa 0000000003485ebb: logic 1, phys. 41, len 23 [ 88.543734][ T7544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.573255][ T4734] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 88.576473][ T7637] ieee802154 phy1 wpan1: encryption failed: -90 [ 88.584939][ T7090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.607814][ T4731] udevd[4731]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 88.635896][ T4972] udevd[4972]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 88.636206][ T5111] udevd[5111]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 88.641003][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop6p9, 10) failed: No such file or directory [ 88.644314][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop6p10, 10) failed: No such file or directory [ 88.646274][ T5117] udevd[5117]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 88.649264][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop6p8, 10) failed: No such file or directory [ 88.653694][ T4731] udevd[4731]: inotify_add_watch(7, /dev/loop6p14, 10) failed: No such file or directory [ 88.658890][ T4731] udevd[4731]: inotify_add_watch(7, /dev/loop6p15, 10) failed: No such file or directory [ 88.662161][ T5106] udevd[5106]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 88.676653][ T7666] netlink: 20 bytes leftover after parsing attributes in process `syz.6.678'. [ 88.827813][ T7671] loop1: detected capacity change from 0 to 512 [ 88.879935][ T7677] loop6: detected capacity change from 0 to 128 [ 88.926730][ T7671] vlan2: entered promiscuous mode [ 88.928114][ T7671] bridge0: entered promiscuous mode [ 88.929331][ T7671] vlan2: entered allmulticast mode [ 88.930655][ T7671] bridge0: entered allmulticast mode [ 88.946469][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 88.947072][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 89.284264][ T7688] netlink: 'syz.1.686': attribute type 36 has an invalid length. [ 89.290896][ T7689] 0: reclassify loop, rule prio 0, protocol 03 [ 89.721981][ T4734] Bluetooth: hci1: command 0x040f tx timeout [ 89.899011][ T4734] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 89.948269][ T4734] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.948325][ T4734] Bluetooth: hci3: command 0x040f tx timeout [ 90.362245][ T7731] loop6: detected capacity change from 0 to 512 [ 90.362571][ T7731] EXT4-fs: inline encryption not supported [ 90.365870][ T7731] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 90.400774][ T7731] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 90.400835][ T7731] EXT4-fs (loop6): 1 truncate cleaned up [ 90.401268][ T7731] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.436218][ T7090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.483289][ T7739] netlink: 'syz.6.702': attribute type 2 has an invalid length. [ 90.483326][ T7739] netlink: 'syz.6.702': attribute type 1 has an invalid length. [ 90.484007][ T7739] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 90.521765][ T7741] xt_hashlimit: size too large, truncated to 1048576 [ 91.279332][ T50] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 91.425813][ T7766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.709'. [ 91.985669][ T50] Bluetooth: hci1: command 0x040f tx timeout [ 92.150320][ T7801] capability: warning: `syz.2.718' uses 32-bit capabilities (legacy support in use) [ 92.190593][ T50] Bluetooth: hci3: command 0x040f tx timeout [ 92.190616][ T4734] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.198889][ T7792] netlink: 'syz.6.717': attribute type 4 has an invalid length. [ 92.695917][ T7836] loop2: detected capacity change from 0 to 128 [ 92.708325][ T7836] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.714985][ T7836] EXT4-fs (loop2): shut down requested (1) [ 92.715188][ T7836] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 92.794585][ T4719] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.848547][ T7848] netlink: 'syz.2.729': attribute type 5 has an invalid length. [ 92.857548][ T7848] 0: reclassify loop, rule prio 0, protocol 03 [ 94.438700][ T4734] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.440153][ T4734] Bluetooth: hci3: command 0x040f tx timeout [ 94.956702][ T7920] syzkaller0: left promiscuous mode [ 94.961096][ T7920] syzkaller0: left allmulticast mode [ 94.982337][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.741'. [ 95.579592][ T4734] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 95.735699][ T7956] loop5: detected capacity change from 0 to 512 [ 95.739427][ T7956] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 95.739665][ T7956] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 96.062858][ T7932] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 96.062968][ T7932] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.063042][ T7932] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.063069][ T7932] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.063604][ T7932] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 96.063660][ T7932] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.091255][ T4734] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 96.470653][ T7969] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 96.470766][ T7969] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.470810][ T7969] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.487662][ T7969] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.488815][ T7983] netlink: 'syz.2.757': attribute type 2 has an invalid length. [ 96.491011][ T7969] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 96.492838][ T7983] loop2: detected capacity change from 0 to 256 [ 96.494204][ T7983] overlayfs: failed lookup in lower (newroot/143, name='bus', err=-40): overlapping layers [ 96.494305][ T7983] overlayfs: failed lookup in lower (newroot/143, name='bus', err=-40): overlapping layers [ 96.499778][ T7969] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.534415][ T7986] loop1: detected capacity change from 0 to 8 [ 96.534726][ T7986] squashfs: Unknown parameter '' [ 96.597265][ T7988] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 96.600399][ T50] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 96.632115][ T7994] FAULT_INJECTION: forcing a failure. [ 96.632115][ T7994] name failslab, interval 1, probability 0, space 0, times 0 [ 96.634675][ T7994] CPU: 0 UID: 0 PID: 7994 Comm: syz.2.763 Tainted: G L syzkaller #0 PREEMPT [ 96.634691][ T7994] Tainted: [L]=SOFTLOCKUP [ 96.634696][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 96.634702][ T7994] Call trace: [ 96.634707][ T7994] show_stack+0x2c/0x3c (C) [ 96.634727][ T7994] __dump_stack+0x30/0x40 [ 96.634739][ T7994] dump_stack_lvl+0xd8/0x12c [ 96.634749][ T7994] dump_stack+0x1c/0x28 [ 96.634759][ T7994] should_fail_ex+0x41c/0x590 [ 96.634770][ T7994] should_failslab+0xc4/0x120 [ 96.634779][ T7994] __kmalloc_noprof+0x108/0x6b8 [ 96.634787][ T7994] tomoyo_realpath_from_path+0xbc/0x4dc [ 96.634797][ T7994] tomoyo_path_number_perm+0x1f0/0x500 [ 96.634804][ T7994] tomoyo_file_ioctl+0x2c/0x3c [ 96.634813][ T7994] security_file_ioctl+0xdc/0x2b0 [ 96.634820][ T7994] __arm64_sys_ioctl+0xb0/0x1cc [ 96.634831][ T7994] invoke_syscall+0x98/0x244 [ 96.634841][ T7994] el0_svc_common+0xec/0x23c [ 96.634851][ T7994] do_el0_svc+0x4c/0x5c [ 96.634861][ T7994] el0_svc+0x64/0x260 [ 96.634871][ T7994] el0t_64_sync_handler+0x48/0x148 [ 96.634881][ T7994] el0t_64_sync+0x198/0x19c [ 96.672069][ T7994] ERROR: Out of memory at tomoyo_realpath_from_path. [ 96.760370][ T7992] loop1: detected capacity change from 0 to 1024 [ 96.777557][ T7992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.809802][ T8007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.766'. [ 97.353050][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.442492][ T50] Bluetooth: hci1: command 0x040f tx timeout [ 98.460552][ T8024] loop2: detected capacity change from 0 to 3 [ 98.596399][ T4734] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 98.676143][ T8021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.676250][ T8021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.676309][ T8021] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 98.676333][ T8021] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 98.788003][ T8021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.862284][ T8058] loop2: detected capacity change from 0 to 1024 [ 98.880966][ T8058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.881001][ T8058] EXT4-fs: inline encryption not supported [ 98.881016][ T8058] ext4: Unknown parameter 'nouser_xattr' [ 98.890348][ T4002] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.982056][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.789'. [ 99.009391][ T4734] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 99.013260][ T4734] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.013984][ T4734] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.019305][ T4734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.022922][ T4734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.024468][ T4734] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.037213][ T8077] loop6: detected capacity change from 0 to 8 [ 99.038678][ T8077] squashfs image failed sanity check [ 99.050810][ T8077] loop6: detected capacity change from 0 to 256 [ 99.057879][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 99.060942][ T8073] macvlan2: entered promiscuous mode [ 99.060967][ T8073] macvlan2: entered allmulticast mode [ 99.189877][ T4734] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 99.293465][ T4002] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.321495][ T7090] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 99.321530][ T7090] FAT-fs (loop6): Filesystem has been set read-only [ 99.321770][ T7090] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 99.414453][ T4002] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.520769][ T4002] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.534391][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.534528][ T8069] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.534691][ T8069] bridge_slave_0: entered allmulticast mode [ 99.535138][ T8069] bridge_slave_0: entered promiscuous mode [ 99.536911][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.536962][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.537023][ T8069] bridge_slave_1: entered allmulticast mode [ 99.537592][ T8069] bridge_slave_1: entered promiscuous mode [ 99.545618][ T8069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.548180][ T8069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.563219][ T8069] team0: Port device team_slave_0 added [ 99.567788][ T8069] team0: Port device team_slave_1 added [ 99.575409][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.575603][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.575623][ T8069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.576411][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.576419][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.576439][ T8069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.589398][ T8069] hsr_slave_0: entered promiscuous mode [ 99.590448][ T8069] hsr_slave_1: entered promiscuous mode [ 99.688541][ T8069] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 99.693965][ T8069] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.694759][ T8069] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 99.696650][ T8069] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.697040][ T8069] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 99.699441][ T8069] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.699809][ T8069] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 99.701988][ T8069] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.705979][ T4002] bridge_slave_1: left allmulticast mode [ 99.706600][ T4002] bridge_slave_1: left promiscuous mode [ 99.706714][ T4002] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.711194][ T4002] bridge_slave_0: left allmulticast mode [ 99.711220][ T4002] bridge_slave_0: left promiscuous mode [ 99.711303][ T4002] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.715573][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.718002][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.719462][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.722349][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.722647][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.815056][ T4002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.893307][ T4002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.915650][ T4002] bond0 (unregistering): Released all slaves [ 99.919726][ T4002] bond1 (unregistering): (slave veth3): Releasing backup interface [ 99.921991][ T4002] bond1 (unregistering): Released all slaves [ 99.934447][ T8107] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 99.939027][ T8108] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 99.956927][ T8107] loop5: detected capacity change from 0 to 256 [ 99.994017][ T8069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.998856][ T8069] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.010651][ T8069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.012887][ T8069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.022152][ T4002] tipc: Left network mode [ 100.034805][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.034853][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.036160][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.036182][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.161239][ T8110] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.161361][ T8110] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.185891][ T8110] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.185964][ T8110] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 100.186021][ T8110] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.186044][ T8110] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.193982][ T8110] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.198095][ T8110] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.198138][ T8110] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.202664][ T8110] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.208392][ T30] audit: type=1326 audit(524387.151:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.5.797" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb61781a8 code=0x0 [ 100.566241][ T4400] 8021q: adding VLAN 0 to HW filter on device eth8 [ 100.576348][ T4002] hsr_slave_0: left promiscuous mode [ 100.577678][ T4002] hsr_slave_1: left promiscuous mode [ 100.577962][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.577981][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.581974][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.581997][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.588042][ T4002] veth1_macvtap: left promiscuous mode [ 100.589253][ T4002] veth0_macvtap: left promiscuous mode [ 100.590443][ T4002] veth1_vlan: left promiscuous mode [ 100.591412][ T4002] veth0_vlan: left promiscuous mode [ 100.953325][ T4002] team0 (unregistering): Port device team_slave_1 removed [ 100.969115][ T4002] team0 (unregistering): Port device team_slave_0 removed [ 101.031334][ T8069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.237053][ T8179] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.238454][ T8179] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.238502][ T8179] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 101.241454][ T8179] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 101.241519][ T8179] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.241578][ T8179] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.275025][ T8102] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.277869][ T8102] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.280523][ T8102] bridge_slave_0: entered allmulticast mode [ 101.283055][ T8102] bridge_slave_0: entered promiscuous mode [ 101.292472][ T8102] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.295074][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.296942][ T8102] bridge_slave_1: entered allmulticast mode [ 101.298716][ T8102] bridge_slave_1: entered promiscuous mode [ 101.346727][ T8102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.349002][ T8102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.372754][ T8102] team0: Port device team_slave_0 added [ 101.375978][ T8102] team0: Port device team_slave_1 added [ 101.446946][ T8069] veth0_vlan: entered promiscuous mode [ 101.453798][ T8102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.453827][ T8102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.453850][ T8102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.458863][ T8102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.458878][ T8102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.458897][ T8102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.482281][ T8069] veth1_vlan: entered promiscuous mode [ 101.500930][ T8102] hsr_slave_0: entered promiscuous mode [ 101.507263][ T8102] hsr_slave_1: entered promiscuous mode [ 101.507492][ T8102] debugfs: 'hsr0' already exists in 'hsr' [ 101.507503][ T8102] Cannot create hsr debugfs directory [ 101.559628][ T4002] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.564487][ T4002] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.600522][ T4400] 8021q: adding VLAN 0 to HW filter on device eth9 [ 101.624486][ T8069] veth0_macvtap: entered promiscuous mode [ 101.632476][ T8069] veth1_macvtap: entered promiscuous mode [ 101.637404][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.698902][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.719857][ T4002] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.720498][ T8233] loop5: detected capacity change from 0 to 2048 [ 101.722449][ T4002] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.728465][ T1869] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.728521][ T1869] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.728541][ T1869] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.728559][ T1869] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.728577][ T1869] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.001905][ T8233] loop5: p1 < > p4 < > [ 102.001944][ T8233] loop5: partition table partially beyond EOD, truncated [ 102.006854][ T8233] loop5: p4 start 42180 is beyond EOD, truncated [ 102.092217][ T8248] FAULT_INJECTION: forcing a failure. [ 102.092217][ T8248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.092255][ T8248] CPU: 0 UID: 0 PID: 8248 Comm: syz.5.817 Tainted: G L syzkaller #0 PREEMPT [ 102.092270][ T8248] Tainted: [L]=SOFTLOCKUP [ 102.092275][ T8248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 102.092282][ T8248] Call trace: [ 102.092286][ T8248] show_stack+0x2c/0x3c (C) [ 102.092306][ T8248] __dump_stack+0x30/0x40 [ 102.092318][ T8248] dump_stack_lvl+0xd8/0x12c [ 102.092328][ T8248] dump_stack+0x1c/0x28 [ 102.092338][ T8248] should_fail_ex+0x41c/0x590 [ 102.092349][ T8248] should_fail+0x14/0x24 [ 102.092359][ T8248] should_fail_usercopy+0x20/0x30 [ 102.092369][ T8248] strncpy_from_user+0x48/0x388 [ 102.092378][ T8248] do_getname+0x84/0x234 [ 102.092386][ T8248] getname_uflags+0x30/0x40 [ 102.092393][ T8248] __arm64_sys_name_to_handle_at+0x20c/0x95c [ 102.092403][ T8248] invoke_syscall+0x98/0x244 [ 102.092413][ T8248] el0_svc_common+0xec/0x23c [ 102.092429][ T8248] do_el0_svc+0x4c/0x5c [ 102.092442][ T8248] el0_svc+0x64/0x260 [ 102.092455][ T8248] el0t_64_sync_handler+0x48/0x148 [ 102.092466][ T8248] el0t_64_sync+0x198/0x19c [ 102.103688][ T4731] udevd[4731]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 102.123102][ T4002] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.126067][ T4002] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.215608][ T4002] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.217838][ T4002] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.224483][ T8102] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 102.227351][ T8102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.229309][ T8102] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 102.231300][ T1869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.231337][ T1869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.237504][ T8102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.239493][ T8102] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 102.241847][ T8102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.411678][ T8246] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.411780][ T8246] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.411809][ T8246] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.417633][ T8246] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 102.419107][ T8246] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.420961][ T8246] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.422503][ T8102] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 102.432466][ T8102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.455077][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.456656][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.474321][ T4400] 8021q: adding VLAN 0 to HW filter on device eth10 [ 102.485521][ T8272] loop2: detected capacity change from 0 to 2 [ 102.504627][ T8272] Dev loop2: unable to read RDB block 2 [ 102.505920][ T8272] loop2: unable to read partition table [ 102.507446][ T8272] loop2: partition table beyond EOD, truncated [ 102.508853][ T8272] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 102.605352][ T8102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.625929][ T4002] bridge_slave_1: left allmulticast mode [ 102.627027][ T4002] bridge_slave_1: left promiscuous mode [ 102.628130][ T4002] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.631018][ T4002] bridge_slave_0: left allmulticast mode [ 102.634559][ T4002] bridge_slave_0: left promiscuous mode [ 102.636057][ T4002] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.636729][ T8289] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 102.708342][ T8272] ftl_cs: FTL header not found. [ 102.763995][ T8272] block2mtd: mtd1: [/dev/loop0] erase_size = 0KiB [128] [ 102.809963][ T4002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.853276][ T4002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.938367][ T4002] bond0 (unregistering): Released all slaves [ 102.955693][ T4400] 8021q: adding VLAN 0 to HW filter on device eth11 [ 102.970039][ T8102] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.978026][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.978093][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.248522][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.248585][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.362063][ T8102] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.364314][ T8102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.727136][ T8330] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.727230][ T8330] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.727305][ T8330] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 103.727332][ T8330] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 103.744057][ T8330] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.744131][ T8330] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.852760][ T8344] loop7: detected capacity change from 0 to 512 [ 103.890756][ T8344] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.908790][ T4002] hsr_slave_0: left promiscuous mode [ 103.914313][ T4002] hsr_slave_1: left promiscuous mode [ 103.914899][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.914913][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.917295][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.917307][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.925316][ T8069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.946806][ T4002] veth1_macvtap: left promiscuous mode [ 103.946864][ T4002] veth0_macvtap: left promiscuous mode [ 103.946916][ T4002] veth1_vlan: left promiscuous mode [ 103.946951][ T4002] veth0_vlan: left promiscuous mode [ 103.953473][ T8353] netlink: 112 bytes leftover after parsing attributes in process `syz.5.833'. [ 104.060805][ T4002] team0 (unregistering): Port device team_slave_1 removed [ 104.066510][ T4002] team0 (unregistering): Port device team_slave_0 removed [ 104.151599][ T8355] can0: slcan on ttyS3. [ 104.227311][ T8360] can0 (unregistered): slcan off ttyS3. [ 104.244439][ T8102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.337953][ T8388] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 104.352594][ T50] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 104.360599][ T8386] netlink: 596 bytes leftover after parsing attributes in process `syz.1.838'. [ 104.378764][ T8397] loop2: detected capacity change from 0 to 128 [ 104.384788][ T8397] FAT-fs (loop2): Directory bread(block 1048) failed [ 104.384819][ T8397] FAT-fs (loop2): Directory bread(block 1049) failed [ 104.384834][ T8397] FAT-fs (loop2): Directory bread(block 1050) failed [ 104.384845][ T8397] FAT-fs (loop2): Directory bread(block 1051) failed [ 104.384857][ T8397] FAT-fs (loop2): Directory bread(block 1052) failed [ 104.384867][ T8397] FAT-fs (loop2): Directory bread(block 1053) failed [ 104.384878][ T8397] FAT-fs (loop2): Directory bread(block 1054) failed [ 104.384888][ T8397] FAT-fs (loop2): Directory bread(block 1055) failed [ 104.391926][ T8396] random: crng reseeded on system resumption [ 104.427092][ T8397] FAT-fs (loop2): FAT read failed (blocknr 128) [ 104.437026][ T8102] veth0_vlan: entered promiscuous mode [ 104.439807][ T8102] veth1_vlan: entered promiscuous mode [ 104.448975][ T8102] veth0_macvtap: entered promiscuous mode [ 104.451784][ T8102] veth1_macvtap: entered promiscuous mode [ 104.456413][ T8102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.459507][ T8102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.467958][ T8404] loop7: detected capacity change from 0 to 512 [ 104.484189][ T39] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.484248][ T39] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.484276][ T39] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.484298][ T39] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.508595][ T8408] loop7: detected capacity change from 0 to 2 [ 104.596952][ T8408] Dev loop7: unable to read RDB block 2 [ 104.598465][ T8408] loop7: unable to read partition table [ 104.599932][ T8408] loop7: partition table beyond EOD, truncated [ 104.610622][ T4400] 8021q: adding VLAN 0 to HW filter on device eth12 [ 104.636405][ T8408] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 104.647908][ T8408] block2mtd: error: cannot open device /dev/loop0 [ 105.327957][ T4400] 8021q: adding VLAN 0 to HW filter on device eth13 [ 105.352158][ T8401] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.352255][ T8401] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.352312][ T8401] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 105.352335][ T8401] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 105.352979][ T8401] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.353035][ T8401] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.402830][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.402858][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.418527][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.418558][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.770491][ T8469] FAULT_INJECTION: forcing a failure. [ 105.770491][ T8469] name failslab, interval 1, probability 0, space 0, times 0 [ 105.770534][ T8469] CPU: 0 UID: 0 PID: 8469 Comm: syz.8.850 Tainted: G L syzkaller #0 PREEMPT [ 105.770547][ T8469] Tainted: [L]=SOFTLOCKUP [ 105.770550][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 105.770555][ T8469] Call trace: [ 105.770558][ T8469] show_stack+0x2c/0x3c (C) [ 105.770579][ T8469] __dump_stack+0x30/0x40 [ 105.770592][ T8469] dump_stack_lvl+0xd8/0x12c [ 105.770602][ T8469] dump_stack+0x1c/0x28 [ 105.770612][ T8469] should_fail_ex+0x41c/0x590 [ 105.770623][ T8469] should_failslab+0xc4/0x120 [ 105.770632][ T8469] __kmalloc_noprof+0x108/0x6b8 [ 105.770641][ T8469] __arm64_sys_name_to_handle_at+0x3fc/0x95c [ 105.770651][ T8469] invoke_syscall+0x98/0x244 [ 105.770661][ T8469] el0_svc_common+0xec/0x23c [ 105.770671][ T8469] do_el0_svc+0x4c/0x5c [ 105.770681][ T8469] el0_svc+0x64/0x260 [ 105.770691][ T8469] el0t_64_sync_handler+0x48/0x148 [ 105.770701][ T8469] el0t_64_sync+0x198/0x19c [ 105.825133][ T4400] 8021q: adding VLAN 0 to HW filter on device eth14 [ 105.854707][ T50] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 106.116985][ T4400] 8021q: adding VLAN 0 to HW filter on device eth15 [ 106.247154][ T8523] netlink: 'syz.7.858': attribute type 8 has an invalid length. [ 106.886200][ T8543] netlink: 'syz.5.861': attribute type 10 has an invalid length. [ 106.893355][ T8543] team0: Device nlmon0 is of different type [ 107.028527][ T8552] FAULT_INJECTION: forcing a failure. [ 107.028527][ T8552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.028568][ T8552] CPU: 0 UID: 0 PID: 8552 Comm: syz.7.863 Tainted: G L syzkaller #0 PREEMPT [ 107.028587][ T8552] Tainted: [L]=SOFTLOCKUP [ 107.028592][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 107.028599][ T8552] Call trace: [ 107.028603][ T8552] show_stack+0x2c/0x3c (C) [ 107.028626][ T8552] __dump_stack+0x30/0x40 [ 107.028637][ T8552] dump_stack_lvl+0xd8/0x12c [ 107.028648][ T8552] dump_stack+0x1c/0x28 [ 107.028658][ T8552] should_fail_ex+0x41c/0x590 [ 107.028669][ T8552] should_fail+0x14/0x24 [ 107.028679][ T8552] should_fail_usercopy+0x20/0x30 [ 107.028689][ T8552] simple_read_from_buffer+0xc4/0x238 [ 107.028700][ T8552] proc_fail_nth_read+0x1a8/0x248 [ 107.028711][ T8552] vfs_read+0x230/0x8c8 [ 107.028722][ T8552] ksys_read+0x12c/0x228 [ 107.028729][ T8552] __arm64_sys_read+0x84/0x98 [ 107.028736][ T8552] invoke_syscall+0x98/0x244 [ 107.028747][ T8552] el0_svc_common+0xec/0x23c [ 107.028756][ T8552] do_el0_svc+0x4c/0x5c [ 107.028766][ T8552] el0_svc+0x64/0x260 [ 107.028777][ T8552] el0t_64_sync_handler+0x48/0x148 [ 107.028787][ T8552] el0t_64_sync+0x198/0x19c [ 107.071146][ T8556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.386178][ T8530] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.387236][ T8530] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 107.390523][ T8530] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.390631][ T8530] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 107.390708][ T8530] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.390789][ T8530] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.540522][ T8565] loop5: detected capacity change from 0 to 4096 [ 107.786211][ T8565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.461093][ T8585] loop2: detected capacity change from 0 to 8192 [ 108.478816][ T5169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.500594][ T8585] loop2: p1 p2 p3 [ 108.500677][ T8585] loop2: partition table partially beyond EOD, truncated [ 108.501417][ T8585] loop2: p1 start 51379968 is beyond EOD, truncated [ 108.511066][ T8585] loop2: p3 size 100663552 extends beyond EOD, truncated [ 108.624948][ T50] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 108.631205][ T50] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 108.827164][ T8617] bridge0: port 4(ipvlan4) entered blocking state [ 108.827354][ T8617] bridge0: port 4(ipvlan4) entered disabled state [ 108.827954][ T8617] ipvlan4: entered allmulticast mode [ 108.827993][ T8617] bridge0: entered allmulticast mode [ 108.836106][ T8617] ipvlan4: left allmulticast mode [ 108.836149][ T8617] bridge0: left allmulticast mode [ 108.914077][ T50] Bluetooth: hci1: command 0x040f tx timeout [ 108.962743][ T4731] udevd[4731]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 108.966544][ T4972] udevd[4972]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 109.607882][ T50] Bluetooth: hci0: command 0x041b tx timeout [ 109.607928][ T4717] Bluetooth: hci4: command 0x041b tx timeout [ 109.611293][ T4734] Bluetooth: hci2: command 0x041b tx timeout [ 109.953236][ T8632] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.954506][ T8632] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.956499][ T8632] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.957873][ T8632] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 109.959174][ T8632] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.960372][ T8632] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.232653][ T8445] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 110.241768][ T8445] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.449442][ T8690] overlay: Unknown parameter 'fowner>00000000000000000000' [ 110.824845][ T8748] loop7: detected capacity change from 0 to 512 [ 110.827139][ T8748] EXT4-fs: quotafile must be on filesystem root [ 110.830357][ T8753] trusted_key: syz.2.897 sent an empty control message without MSG_MORE. [ 110.832015][ T50] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 111.121641][ T8745] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.123060][ T8745] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.126836][ T8745] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.126924][ T8745] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 111.126986][ T8745] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.127046][ T8745] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.920303][ T8821] sctp: [Deprecated]: syz.8.910 (pid 8821) Use of int in max_burst socket option deprecated. [ 111.920303][ T8821] Use struct sctp_assoc_value instead [ 111.930426][ T8821] xt_HMARK: spi-set and port-set can't be combined [ 111.931176][ T8821] bpf setsockopt: ignoring program buffer with optlen=4912 (max_optlen=4096) [ 111.931664][ T8821] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 111.977990][ T8825] netlink: 'syz.8.911': attribute type 1 has an invalid length. [ 112.158670][ T8815] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.158827][ T8815] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.159047][ T8815] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 112.159110][ T8815] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 112.166570][ T8815] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.166698][ T8815] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.314016][ T8842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.914'. [ 112.352363][ T8877] netlink: 'syz.5.916': attribute type 1 has an invalid length. [ 112.355741][ T8879] loop8: detected capacity change from 0 to 128 [ 112.384918][ T8879] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.390934][ T8877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.393620][ T50] Bluetooth: hci0: unexpected event for opcode 0x2016 [ 112.674481][ T8102] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.704428][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.916'. [ 112.704557][ T8877] 8021q: VLANs not supported on ip6_vti0 [ 113.031471][ T4827] IPVS: starting estimator thread 0... [ 113.156697][ T8966] IPVS: using max 64 ests per chain, 153600 per kthread [ 113.386861][ T8974] netlink: 'syz.1.929': attribute type 21 has an invalid length. [ 113.390358][ T4734] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 113.407436][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.518106][ T8963] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.518219][ T8963] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.518259][ T8963] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 113.539981][ T8963] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 113.541579][ T8963] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.543055][ T8963] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.547538][ T8962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.554108][ T8962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.608383][ T4734] Bluetooth: hci4: unknown advertising packet type: 0x65 [ 113.608433][ T4734] Bluetooth: hci4: unknown advertising packet type: 0x20 [ 113.685255][ T9010] netlink: 'syz.7.934': attribute type 5 has an invalid length. [ 113.697730][ T9010] ip6erspan0: entered promiscuous mode [ 113.741844][ T9027] fuse: Unknown parameter 'dd' [ 113.747443][ T9027] loop2: detected capacity change from 0 to 512 [ 113.747845][ T9027] EXT4-fs: Ignoring removed i_version option [ 113.747874][ T9027] journal_path: Non-blockdev passed as './file0' [ 113.747886][ T9027] EXT4-fs: error: could not find journal device path [ 113.821123][ T9038] loop1: detected capacity change from 0 to 8 [ 114.194575][ T9057] loop8: detected capacity change from 0 to 4096 [ 114.198336][ T9057] EXT4-fs: inline encryption not supported [ 114.199574][ T9057] EXT4-fs (loop8): Test dummy encryption mode enabled [ 114.202469][ T9057] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 114.202518][ T9057] System zones: 0-5 [ 114.203794][ T9057] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.434838][ T9057] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.943: corrupted xattr block 256: invalid header [ 114.445488][ T9057] EXT4-fs (loop8): Remounting filesystem read-only [ 114.473668][ T8102] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.583753][ T9093] netlink: 'syz.5.949': attribute type 8 has an invalid length. [ 114.611890][ T9095] loop5: detected capacity change from 0 to 1024 [ 114.648977][ T9095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 114.682387][ T5169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 114.772430][ T9078] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.773808][ T9078] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.775532][ T9078] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 114.777861][ T9078] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.779610][ T9078] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.782922][ T9078] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.905044][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.7.955'. [ 114.941498][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.7.955'. [ 114.985016][ T9130] netlink: 'syz.1.957': attribute type 1 has an invalid length. [ 115.000506][ T9130] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.018902][ T9130] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.019136][ T9130] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 115.019599][ T9130] bond3: (slave gre1): Error -95 calling set_mac_address [ 115.308161][ T9171] netlink: 32 bytes leftover after parsing attributes in process `syz.7.958'. [ 115.312242][ T50] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 115.340712][ T9174] gretap1: entered promiscuous mode [ 115.344085][ T9174] bond3: (slave gretap1): making interface the new active one [ 115.346165][ T9174] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 115.359132][ T9174] macvlan2: entered promiscuous mode [ 115.364786][ T9174] macvlan2: entered allmulticast mode [ 115.365128][ T9174] bond3: entered promiscuous mode [ 115.366072][ T9174] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 115.392664][ T9174] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 115.446552][ T9174] bond3: left promiscuous mode [ 115.458200][ T9193] usb usb8: usbfs: process 9193 (syz.8.962) did not claim interface 0 before use [ 115.878410][ T9220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.965'. [ 116.543109][ T9231] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.543221][ T9231] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.543295][ T9231] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 116.543322][ T9231] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 116.575683][ T9231] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.575756][ T9231] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 116.582414][ T9255] loop7: detected capacity change from 0 to 512 [ 116.621368][ T9255] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.789554][ T4734] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 116.848537][ T8069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.872376][ T9289] loop1: detected capacity change from 0 to 8192 [ 116.875389][ T9289] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.214510][ T9306] loop5: detected capacity change from 0 to 128 [ 117.220730][ T9306] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.531913][ T5169] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.568507][ T9326] loop8: detected capacity change from 0 to 128 [ 117.586751][ T9334] loop5: detected capacity change from 0 to 512 [ 117.608945][ T9334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.629401][ T8102] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 117.632213][ T8102] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 118.865840][ T4717] Bluetooth: hci3: command 0x040f tx timeout [ 118.866090][ T50] Bluetooth: hci4: command 0x041b tx timeout [ 118.868469][ T4734] Bluetooth: hci2: command 0x041b tx timeout [ 118.966667][ T5169] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 118.976436][ T5169] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 118.977046][ T5169] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 118.978601][ T5169] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 118.979378][ T5169] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 118.979625][ T5169] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 118.979836][ T5169] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 118.980043][ T5169] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 118.980237][ T5169] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 118.980443][ T5169] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 119.013414][ T4734] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 119.036357][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.038981][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.040921][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.042677][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.044259][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.110250][ T5719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.126734][ T9416] loop2: detected capacity change from 0 to 2048 [ 119.126730][ T1457] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.154174][ T9416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.197087][ T5719] bridge0: port 3(syz_tun) entered disabled state [ 119.204586][ T5719] syz_tun (unregistering): left allmulticast mode [ 119.204621][ T5719] syz_tun (unregistering): left promiscuous mode [ 119.204662][ T5719] bridge0: port 3(syz_tun) entered disabled state [ 119.320444][ T1457] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.371170][ T5719] ================================================================== [ 119.371187][ T5719] BUG: KASAN: null-ptr-deref in l2cap_chan_hold_unless_zero+0x98/0x264 [ 119.371208][ T5719] Read of size 4 at addr 0000000000000008 by task syz.5.187/5719 [ 119.371216][ T5719] [ 119.371222][ T5719] CPU: 0 UID: 0 PID: 5719 Comm: syz.5.187 Tainted: G L syzkaller #0 PREEMPT [ 119.371233][ T5719] Tainted: [L]=SOFTLOCKUP [ 119.371236][ T5719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 119.371241][ T5719] Call trace: [ 119.371244][ T5719] show_stack+0x2c/0x3c (C) [ 119.371257][ T5719] __dump_stack+0x30/0x40 [ 119.371267][ T5719] dump_stack_lvl+0xd8/0x12c [ 119.371277][ T5719] print_report+0x58/0x84 [ 119.371285][ T5719] kasan_report+0x8c/0xc4 [ 119.371295][ T5719] kasan_check_range+0x17c/0x1ac [ 119.371304][ T5719] __kasan_check_read+0x20/0x30 [ 119.371313][ T5719] l2cap_chan_hold_unless_zero+0x98/0x264 [ 119.371323][ T5719] l2cap_sock_cleanup_listen+0x94/0x508 [ 119.371330][ T5719] l2cap_sock_release+0x68/0x208 [ 119.371337][ T5719] __sock_release+0xa0/0x1d4 [ 119.371346][ T5719] sock_close+0x24/0x38 [ 119.371355][ T5719] __fput+0x338/0x74c [ 119.371363][ T5719] ____fput+0x20/0x30 [ 119.371370][ T5719] task_work_run+0x1cc/0x25c [ 119.371380][ T5719] do_exit+0x58c/0x1a74 [ 119.371390][ T5719] do_group_exit+0x198/0x238 [ 119.371401][ T5719] get_signal+0xfb0/0x1094 [ 119.371408][ T5719] arch_do_signal_or_restart+0x288/0x444c [ 119.371423][ T5719] exit_to_user_mode_loop+0x70/0x17c [ 119.371434][ T5719] el0_svc+0x18c/0x260 [ 119.371446][ T5719] el0t_64_sync_handler+0x48/0x148 [ 119.371456][ T5719] el0t_64_sync+0x198/0x19c [ 119.371465][ T5719] ================================================================== [ 119.405637][ T5719] Disabling lock debugging due to kernel taint [ 119.408948][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.415946][ T5719] Unable to handle kernel paging request at virtual address dfff800000000001 [ 119.415993][ T5719] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 119.416011][ T5719] Mem abort info: [ 119.416022][ T5719] ESR = 0x0000000096000005 [ 119.416032][ T5719] EC = 0x25: DABT (current EL), IL = 32 bits [ 119.416042][ T5719] SET = 0, FnV = 0 [ 119.416051][ T5719] EA = 0, S1PTW = 0 [ 119.416060][ T5719] FSC = 0x05: level 1 translation fault [ 119.416069][ T5719] Data abort info: [ 119.416076][ T5719] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 119.416084][ T5719] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 119.416092][ T5719] GCS = 0, Overlay = 0, DirtyBit = 0 [ 119.416100][ T5719] [dfff800000000001] address between user and kernel address ranges [ 119.416109][ T5719] Internal error: Oops: 0000000096000005 [#1] SMP [ 119.430166][ T5719] Modules linked in: [ 119.430869][ T5719] CPU: 0 UID: 0 PID: 5719 Comm: syz.5.187 Tainted: G B L syzkaller #0 PREEMPT [ 119.432719][ T5719] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 119.433712][ T5719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 119.435470][ T5719] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 119.436825][ T5719] pc : l2cap_chan_hold_unless_zero+0x9c/0x264 [ 119.437878][ T5719] lr : l2cap_chan_hold_unless_zero+0x98/0x264 [ 119.438929][ T5719] sp : ffff80009a5d75c0 [ 119.439657][ T5719] x29: ffff80009a5d7620 x28: dfff800000000000 x27: 000000000c2e0003 [ 119.441035][ T5719] x26: ffff0000c1e1c690 x25: ffff0000d58b8000 x24: ffff8000879f8d60 [ 119.442393][ T5719] x23: 0000000000000008 x22: ffff80009a5d75c0 x21: ffff7000134baeb8 [ 119.443760][ T5719] x20: dfff800000000000 x19: 0000000000000000 x18: 1fffe00035bc5428 [ 119.445139][ T5719] x17: 0000000000000003 x16: ffff800088b07000 x15: ffff800088bbd0a0 [ 119.446505][ T5719] x14: ffff0001ade2a14c x13: 0000000000000001 x12: 0000000000000000 [ 119.447879][ T5719] x11: 0000000000000000 x10: ffff70001145ed21 x9 : 0000000000000000 [ 119.449268][ T5719] x8 : 0000000000000001 x7 : 0000000000000000 x6 : ffff8000803b8a6c [ 119.450623][ T5719] x5 : 0000000000000000 x4 : 0000000000000008 x3 : ffff8000802f7b34 [ 119.452025][ T5719] x2 : 0000000000000000 x1 : ffff0000d0b68000 x0 : 0000000000000000 [ 119.453416][ T5719] Call trace: [ 119.453979][ T5719] l2cap_chan_hold_unless_zero+0x9c/0x264 (P) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 119.455045][ T5719] l2cap_sock_cleanup_listen+0x94/0x508 [ 119.455974][ T5719] l2cap_sock_release+0x68/0x208 [ 119.456798][ T5719] __sock_release+0xa0/0x1d4 [ 119.457592][ T5719] sock_close+0x24/0x38 [ 119.458312][ T5719] __fput+0x338/0x74c [ 119.459017][ T5719] ____fput+0x20/0x30 [ 119.459711][ T5719] task_work_run+0x1cc/0x25c [ 119.460491][ T5719] do_exit+0x58c/0x1a74 [ 119.461200][ T5719] do_group_exit+0x198/0x238 [ 119.461983][ T5719] get_signal+0xfb0/0x1094 [ 119.462715][ T5719] arch_do_signal_or_restart+0x288/0x444c [ 119.463687][ T5719] exit_to_user_mode_loop+0x70/0x17c [ 119.464536][ T5719] el0_svc+0x18c/0x260 [ 119.465241][ T5719] el0t_64_sync_handler+0x48/0x148 [ 119.466107][ T5719] el0t_64_sync+0x198/0x19c [ 119.466856][ T5719] Code: 91002277 390012a8 96bffd7c d343fee8 (38f46908) [ 119.468012][ T5719] ---[ end trace 0000000000000000 ]--- [ 119.805130][ T5719] Kernel panic - not syncing: Oops: Fatal exception [ 119.806137][ T5719] SMP: stopping secondary CPUs [ 119.806951][ T5719] Kernel Offset: disabled [ 119.807660][ T5719] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 119.808769][ T5719] Memory Limit: none [ 120.130583][ T5719] Rebooting in 86400 seconds..