last executing test programs: 1m33.307317638s ago: executing program 4 (id=5): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x3ff, 0x1, 0x1ff, 0x1, 0x6, 0x6}, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000002040)=0xff) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) madvise(&(0x7f00005dd000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80248000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe77}}], 0x1, 0xc0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x12048c1, &(0x7f0000000340)={[{@uni_xlate}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48a}}, {@utf8no}, {@uni_xlate}, {@shortname_lower}, {@utf8}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@flush}, {@shortname_winnt}, {@uni_xlate}]}, 0x0, 0x2bf, &(0x7f0000002bc0)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) read$FUSE(r5, &(0x7f0000003700)={0x2020}, 0x2020) 1m32.29391411s ago: executing program 4 (id=27): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) (async) listen(r1, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)}, 0x10040) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000040)=ANY=[@ANYBLOB="a7831f6c0728"]) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x18, 0x2, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14890}, 0x0) 1m31.692244368s ago: executing program 4 (id=32): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000200)) fcntl$notify(r0, 0x402, 0x8000000f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0xb49, 0x8ffff) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r5, r5, 0x0, 0xe3aa6ea) 1m31.680610745s ago: executing program 32 (id=32): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000200)) fcntl$notify(r0, 0x402, 0x8000000f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0xb49, 0x8ffff) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r5, r5, 0x0, 0xe3aa6ea) 1m29.548931709s ago: executing program 0 (id=56): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0xa, 0x15, 0x363d, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x8000012}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) write$binfmt_misc(r3, &(0x7f0000000dc0), 0x386) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, 0x0, 0x0}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 1m29.475905933s ago: executing program 0 (id=57): socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x101) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) (async) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r2 = gettid() (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x4, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) (async) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r4, 0x80286f4e, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) ioctl$FE_GET_EVENT(r4, 0x80286f4e, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000010000000000000000000000791209200000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000400)=@usbdevfs_disconnect={0x6}) (async) r7 = syz_open_dev$loop(&(0x7f0000000440), 0xf01c, 0x4000) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x8, 0x1d, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) (async) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c90012000e0005000d420a"], 0x17) (async) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0xaa00, 0x54, 0x20}, 0x18) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x1, 0x8, {r2}, {0x0}, 0x80, 0x3}) (async) r11 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r9, {r10, r11}}, './file1\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x4}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) 1m28.127944353s ago: executing program 0 (id=60): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) mlock(&(0x7f000021c000/0x4000)=nil, 0x4000) munlockall() listen(0xffffffffffffffff, 0x0) r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x800, 0x4, 0x19c}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000900)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x300}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r2, 0x0, 0x80, 0x5, 0x9, 0x0, {0xd, 0x1000, 0x101c, 0x9, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000200)={r6, 0x3, 0x1, 0x8, 0x3, [], [0x7, 0x1, 0x6, 0x200], [0x5, 0x9, 0x67, 0x3ff], [0x1, 0x1, 0xc, 0x8]}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], 0x1, r2, r6, 0x1, 0x4, 0x7, 0x2, {0xb, 0x9, 0xf6b3, 0x8, 0x3, 0xa32, 0x7f, 0x3, 0x0, 0xfff9, 0x0, 0x6, 0x7, 0x5, "6358b6fe8587842206a0faa640f3591a262cf0de5ec458782c0687887258ea72"}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000bf00)=@newtaction={0x14, 0x30, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x100, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000005000b000100000008000d000d000000080009000900000008000a"], 0x4c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x63d6, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 1m27.799932133s ago: executing program 0 (id=63): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x598, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd02, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2000000000000000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x92042, 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x402, 0x0) write$nci(r4, 0x0, 0x11) 1m27.506275267s ago: executing program 0 (id=69): r0 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$inet6(0xa, 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r2, &(0x7f0000000080)=""/237, 0xed, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10, 0x110, 0x2}], 0x10}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x9c}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cc, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_setscheduler(r6, 0x6, &(0x7f00000001c0)=0x7) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x50, 0x0, 0x2}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000ac0)={0x1, &(0x7f0000000000)=[{0x16, 0x0, 0x3, 0x1}]}, 0x10) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000740)}}], 0x2, 0x20000010) 1m26.737940782s ago: executing program 0 (id=81): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (async) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000001280), 0x6) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100030010651fbe347b2c"], 0x20}}, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r6, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r6, &(0x7f0000000100), 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r7}, &(0x7f0000001340), &(0x7f0000001380)=r0}, 0x20) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {0x4, 0x6}}, 0x24, 0x3) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xb, 0x4, 0x7fff0000}]}) (async) r8 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000800)='vers\x00', &(0x7f0000000900)='4.2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000a00)='xprtsec\x00', &(0x7f0000000b00)='tls\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x200) 1m26.616930413s ago: executing program 33 (id=81): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (async) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000001280), 0x6) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100030010651fbe347b2c"], 0x20}}, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r6, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r6, &(0x7f0000000100), 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r7}, &(0x7f0000001340), &(0x7f0000001380)=r0}, 0x20) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {0x4, 0x6}}, 0x24, 0x3) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xb, 0x4, 0x7fff0000}]}) (async) r8 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000800)='vers\x00', &(0x7f0000000900)='4.2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000a00)='xprtsec\x00', &(0x7f0000000b00)='tls\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x200) 1m26.039443866s ago: executing program 3 (id=95): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@delalloc}, {@errors_remount}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x8012) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x147042, 0x58) fallocate(r2, 0x40, 0x9, 0x1) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 1m25.949029072s ago: executing program 3 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010022bd7000fddbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="040028000c000a"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1003, 0x0, 0x0, 0x0, 0xb1ad}, [@generic={0x91, 0x1, 0x1, 0x65}]}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r4 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/fail_make_request/probability\x00', 0x1, 0x0) close(r4) openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/misc\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000140)=""/50, 0x32}], 0x1, 0xb, 0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000040)="ef79342205ca1042f8e99c463875", &(0x7f0000000080)=""/251}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r3, &(0x7f00000001c0)="ed456f6776339943c3d062d8a8ad8dfa0439b78abecbe6b255c57bf766ef02a24e789c19fe9d829eed490b558fcff631f1c08ea6b639cb10390d545e5e4e31c0efad3d9bf96c3dbb586a71641bc6ea7e1cf0a10f03ca26b9ae022b5fab51c8091f7874e7df9785a21a636ae2778b2ce51913ee1da0b024b7227d8918ace27f3651a3ab52221062239c756960789c39c16db610c7779eb1303c3f138cdd6b8f3759cfc88bb58765dbdbb9e7543ef0c85f60b6901207a0a0be1fa9ed86fb8904e589491526f98d59052150248a388207327a1d4f4dd4e202fbf590e9ca9c1c5bde5418e7550f30c3651f8124b77f4bda2b7a85a03485598e1f0a", &(0x7f00000003c0)=""/170, 0x4}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010022bd7000fddbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="040028000c000a"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1003, 0x0, 0x0, 0x0, 0xb1ad}, [@generic={0x91, 0x1, 0x1, 0x65}]}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) (async) openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/fail_make_request/probability\x00', 0x1, 0x0) (async) close(r4) (async) openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/misc\x00', 0x0, 0x0) (async) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000140)=""/50, 0x32}], 0x1, 0xb, 0x3) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000040)="ef79342205ca1042f8e99c463875", &(0x7f0000000080)=""/251}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r3, &(0x7f00000001c0)="ed456f6776339943c3d062d8a8ad8dfa0439b78abecbe6b255c57bf766ef02a24e789c19fe9d829eed490b558fcff631f1c08ea6b639cb10390d545e5e4e31c0efad3d9bf96c3dbb586a71641bc6ea7e1cf0a10f03ca26b9ae022b5fab51c8091f7874e7df9785a21a636ae2778b2ce51913ee1da0b024b7227d8918ace27f3651a3ab52221062239c756960789c39c16db610c7779eb1303c3f138cdd6b8f3759cfc88bb58765dbdbb9e7543ef0c85f60b6901207a0a0be1fa9ed86fb8904e589491526f98d59052150248a388207327a1d4f4dd4e202fbf590e9ca9c1c5bde5418e7550f30c3651f8124b77f4bda2b7a85a03485598e1f0a", &(0x7f00000003c0)=""/170, 0x4}, 0x20) (async) 1m25.763084951s ago: executing program 3 (id=99): r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000583000/0x1000)=nil, 0x1000, 0x66) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280060012004e24000006000f00110000002ba8b82d6543b3164d6d461d9a386fbc68fbab18a65bb2f809a597808e8ca762617aeb23092a0e468c273d2adc95528422d603872e1762acb040a522b9f69eaedb3f0f8850d7e8519abe0100000000000000b9f452f442593562c8fef3845db7c25ab7bacf5dd1b9a769c4c76e6eb4e0925b4cbd1839e0e555992adfe25c9b6b34cbd710635a9ff72e42a3160654b5458b08e1797fb9962ad49dff3b24e8"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 1m25.713278819s ago: executing program 3 (id=100): r0 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4eb, &(0x7f00000010c0)="$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") pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) splice(r0, &(0x7f0000000100)=0xb, r1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) 1m25.588085365s ago: executing program 3 (id=101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x1d, 0x7ff}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r6, 0x5, 0x70b529, 0x1fffe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x4, 0x6, 0x1}]}]}]}, 0x38}}, 0x4000004) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r1, 0x321, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 1m25.176023333s ago: executing program 3 (id=109): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffff31010000808500000028000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 32) mount$nfs4(&(0x7f0000000040)='/', 0x0, 0x0, 0x197841, 0x0) (async, rerun: 32) r2 = syz_ublk_setup_io_uring(0x20ba, &(0x7f0000000340)={0x0, 0x24dc, 0x800, 0x0, 0x223}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r3 = syz_io_uring_setup(0x34b8, &(0x7f0000000240)={0x0, 0x4c3b3, 0x800, 0x2, 0x2082, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x846a}], 0x12) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000480)="cfeb154af0e8b097cededb6884eef896b8b00d33c7493ed27e7524fdedfe996068ceb9f9eeee4f88c3658b20db68056d8135c45c8874062832b52f90725c7a13d3a5bbb9e641cac2ba5cb97674239eac328c9bd2ae040bae88eac291f8bd054a4dfb2862fcb5ad0328c971227bb6613018d1f462d0aaeee9fc3b0f5b58278a2eee6439c366b7a65224d0c81e4c3676cea9051ee223118ee33961e4cff3b6a5b16169588d23e3e3f1eb340056bf83e39f319a7cf47b72cd949c3a6f82e12da340355aa96141fb68e57765f23aeb38c293ad357eaa29d83f", 0xd7}, {&(0x7f0000000580)="9e71b8d6809b7b1dad6cb38e7dfe102e8c330ac4db671590", 0x18}, {&(0x7f00000005c0)="95d61940eb686189dd31aa100e6ab3374ffc981f1e35a9a94801ca81564d1cbc74056c9bbb67c905f52f79dead8f0070960fb9b89dd5de8d6104b8e36973caab503d7a61b36ab18d508a593fe1f99f373134c3258c985b7d47f998a08a39be6b70ee4b27b87b3655dc7f020fb1e8d56318fb41b02112b4b46dbf7b75606075fae609255ebceb144b3df42fc90634959755c382a2bae690b6e1e498ba411db43f4a9274e04c3d635a25481706713be398961dc2b6e4b4c39af1343247a8b3382f6774cf1295527fb75bc56572f31a075114b433633283271699f2b0c4769e200c2952ed", 0xe3}, {&(0x7f00000006c0)="b3a7ea77e9c2900c0d0b40f4c374db0b7c33f8bea5a31a53f6a208e1e79f2597860cbaa365378f127e8435f9dfe83050d4579cd5e7", 0x35}, {&(0x7f0000000700)="e688a479be4b6640d0945bae2d3b1777ad41a99515a00fe943ae7937033c3c17d9381db9597b6f54d9a3041206c088e8a456a8dd3f63e6aa9317203300d2abc4124a6b1425a1da1d3382f71fc984b6d529a61b08bc2a0320ff244d7338b21de5b01ea2eb79b6d41effb34dcd274a2f594f64496fcc8be9ddc67d51aa75658d62bc099e7ef638d14a59ec30f5b73d75fa03f50a0d4dd09ac2b287f8d17aa4a144eae8a344a6ac7976ad81a03c812e6f0aafeedc6b9d99", 0xb6}, {&(0x7f00000007c0)="35198cde376755ebb240feb16f728ddb4fa1c8e015fe3905d7b27b76bd3b1281ea1eb921efe1732f1f9a242d2559abfe33d8aa200ffca877da86facd1ca07b5709f05ad400b3838df051c9961958b23201fbdd0b424bddf7e1f18af1243ea02c0857ef5b63b9c2a086803d302e3e81a21a2f15b220e9a8cb67b61cca8708a25e9d7f6c27964494cb392cc21d2acb47337149cb430e3d5efb6147033343d683c77c83c2a01fd2d3929eac88a47892cc26f553c651e6421e56462e5ba3168cb2ab61b706b190bdf9059fa2c4d080", 0xcd}, {&(0x7f00000008c0)="1707aaea575f2d9aee3d62a382d02cc7a0e6c9964276346574e45534054cd0178f07fae12c8c77a703e3e4f4c7be2e2a1a401cb2e18fe50596f702ca598499040b2a4855e46bfcec4076c3a06c550343bd3339832232b278506a265bc3fb9f6da63335c0932ac50bc53c5d", 0x6b}, {&(0x7f0000000940)="1c45f0670bf1c9c235d8df4f560c636e2033b3cf55cdc71abbd5a2a5852dc89c7fc9ccf4aca181e06be92034dffde559f147178041b2ec6fc6cee07a43b10b39bbb49bd9d5b9cd74e04bd3499ebcf01f8eaf1940e4a4b7a9c21800330bab4d7ba09fd046306dbfc423e7a0da064f9984a718232ab1fdb89680143b33c229b461d57b9f2c56038efd1c56730087d7136b6656b073bec63979614fae7ce127b62a8ab28b4a077c951b7177050263047da003afbfc0af4d4d17a0db817ca07f38264cf565023fadfe113d954aee5c9bc9e5bee178e86866e13bde", 0xd9}, {&(0x7f0000000a40)="c48eb4374b16", 0x6}], 0x9) 1m25.083395106s ago: executing program 34 (id=109): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$eJzs3U9sHFcZAPBvdx0ncd2mCY3UlIMDqUj/KLbblZwaDoQDHCjqpUioUjlYycYOXsfGdkVtLu6NE0UCBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHigBjGZ31t54Z51Ftndbz+8nbfbNm7G/93bzvd19b9YTQG6dTv4pRAxGxI2IOFbfvPWA0/W775RXp66XV6cKsbHx5N8KteOulVenGoc2fu6OiFiJiHsj4seXIy4eao27sLQ8PVGtVubT7ZHFmbmRhaXlc1dmJiYrk5Wr5fJj42Nj4+fHRv+P3hR23PuJuddP/GbqicmXhv791PmZb/y1EBdq/Y5t/dhLWS3qK0Rc2I9gPVBK+hMRAx0ef7Ly/Mv73CQ69KUTayPJc3dPRNxfy/9jUao9mxEffPHpfxyLD9xs97M31l78UzfbCgDsnY3E4Z13AwdTMZLP/oXicETUy8Xi8HD9M/w9MVCszi4sPnx59pmrl+pzBHfHoeLlK9XKaDpXcHccKiTbj9TKW9uPbtsuR8TxiPhc6Whte/jibPVSV0c6oGEw4rXvfvpi/x3b8v+PpXr+AwdXkv+/+sn3f5iU3yz1ujVANyX5/603Zx4P+Q+5c/v8P9L1NgHd4fUf8kv+Q3615v/O584CB4fXf8gv+Q/5Jf8hv+Q/5Jf8h/xqzn/pD/l0fOiVtUJErLz/aO2W6E/3ZfzZHuAA2bjTt/whr7z3h/zq2yoe7WU7gO7zGR+43dn/bb8NPLf3bQG6o9jrBgA9c/aU9T/IK/P/kF99vW4A0DPe4wPm/yF/zP9Dfg22uf7XnU3X7hqNiLsi4melQ4cb1/oC3rkGI1574cb3no4o/rmQvv9PxoKJ11/9UfNx/YV/1pYI+iPiMy88+ZVnJxYX5x9J6v++Wb/41bT+0V71BuhEI08beQzk18LS8vREtVqZV1DYVoh4WzRDYR8LjXHgWnl1qnHr1tjz/EMRb3yofhJCEvd6eqvv7UvnJo/U1igH1gu3nKtQ2IO1y8+fi1h5LiLuzep/Ib3eeX3lY2C91BL/Xel9cjuVzp8kx5zsMH7prt3Fv68p/lBT/Hd3GH/t4x0euE+Of7u38V/67eayV1/W49+3y6/EnrjN/se/uatfv2t/+H1v498/1Nv4X56NeCUZf0az8q+YpOXmymfz+PPFL9TnSvp3Gf+zZ7fGv+st419xc/wrtRn/TncY56dPVT6ZVV/6ecQbz0Xclxm/Ee9ILdbAerEl/pmm8eeBHeL/5WO/nM6qv/BqxMa1iLORHb851sjizNzIwtLyuSszE5OVycrVcvmx8bGx8fNjoyO1OeqRxkx1qydunvxwVv2Zr9f7P9AmfqP/7R7/jR363Gz5a58afE9G/S9O1eM/cCb7+T+Rxq8//n0t8d+b3if/T/6TnsubHPNWRBxO6x+MiB+8fPyhrHZ99GY9/qU2/S/eEr+1/w932P/43X+fyap+9iOd/gIAYC+1nxrodcsAAIC91o2Vxl73Ecg2sN4fzcvAhZWmdYWVrXWFpP6tdH2htBLxr3SNIal/MF0lS8qZCw3A287J5ff9utdtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMi7haXl6YlqtTK/0OuWAN32vwAAAP//mSj9Tw==") (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffff31010000808500000028000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 32) mount$nfs4(&(0x7f0000000040)='/', 0x0, 0x0, 0x197841, 0x0) (async, rerun: 32) r2 = syz_ublk_setup_io_uring(0x20ba, &(0x7f0000000340)={0x0, 0x24dc, 0x800, 0x0, 0x223}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r3 = syz_io_uring_setup(0x34b8, &(0x7f0000000240)={0x0, 0x4c3b3, 0x800, 0x2, 0x2082, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x846a}], 0x12) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000480)="cfeb154af0e8b097cededb6884eef896b8b00d33c7493ed27e7524fdedfe996068ceb9f9eeee4f88c3658b20db68056d8135c45c8874062832b52f90725c7a13d3a5bbb9e641cac2ba5cb97674239eac328c9bd2ae040bae88eac291f8bd054a4dfb2862fcb5ad0328c971227bb6613018d1f462d0aaeee9fc3b0f5b58278a2eee6439c366b7a65224d0c81e4c3676cea9051ee223118ee33961e4cff3b6a5b16169588d23e3e3f1eb340056bf83e39f319a7cf47b72cd949c3a6f82e12da340355aa96141fb68e57765f23aeb38c293ad357eaa29d83f", 0xd7}, {&(0x7f0000000580)="9e71b8d6809b7b1dad6cb38e7dfe102e8c330ac4db671590", 0x18}, {&(0x7f00000005c0)="95d61940eb686189dd31aa100e6ab3374ffc981f1e35a9a94801ca81564d1cbc74056c9bbb67c905f52f79dead8f0070960fb9b89dd5de8d6104b8e36973caab503d7a61b36ab18d508a593fe1f99f373134c3258c985b7d47f998a08a39be6b70ee4b27b87b3655dc7f020fb1e8d56318fb41b02112b4b46dbf7b75606075fae609255ebceb144b3df42fc90634959755c382a2bae690b6e1e498ba411db43f4a9274e04c3d635a25481706713be398961dc2b6e4b4c39af1343247a8b3382f6774cf1295527fb75bc56572f31a075114b433633283271699f2b0c4769e200c2952ed", 0xe3}, {&(0x7f00000006c0)="b3a7ea77e9c2900c0d0b40f4c374db0b7c33f8bea5a31a53f6a208e1e79f2597860cbaa365378f127e8435f9dfe83050d4579cd5e7", 0x35}, {&(0x7f0000000700)="e688a479be4b6640d0945bae2d3b1777ad41a99515a00fe943ae7937033c3c17d9381db9597b6f54d9a3041206c088e8a456a8dd3f63e6aa9317203300d2abc4124a6b1425a1da1d3382f71fc984b6d529a61b08bc2a0320ff244d7338b21de5b01ea2eb79b6d41effb34dcd274a2f594f64496fcc8be9ddc67d51aa75658d62bc099e7ef638d14a59ec30f5b73d75fa03f50a0d4dd09ac2b287f8d17aa4a144eae8a344a6ac7976ad81a03c812e6f0aafeedc6b9d99", 0xb6}, {&(0x7f00000007c0)="35198cde376755ebb240feb16f728ddb4fa1c8e015fe3905d7b27b76bd3b1281ea1eb921efe1732f1f9a242d2559abfe33d8aa200ffca877da86facd1ca07b5709f05ad400b3838df051c9961958b23201fbdd0b424bddf7e1f18af1243ea02c0857ef5b63b9c2a086803d302e3e81a21a2f15b220e9a8cb67b61cca8708a25e9d7f6c27964494cb392cc21d2acb47337149cb430e3d5efb6147033343d683c77c83c2a01fd2d3929eac88a47892cc26f553c651e6421e56462e5ba3168cb2ab61b706b190bdf9059fa2c4d080", 0xcd}, {&(0x7f00000008c0)="1707aaea575f2d9aee3d62a382d02cc7a0e6c9964276346574e45534054cd0178f07fae12c8c77a703e3e4f4c7be2e2a1a401cb2e18fe50596f702ca598499040b2a4855e46bfcec4076c3a06c550343bd3339832232b278506a265bc3fb9f6da63335c0932ac50bc53c5d", 0x6b}, {&(0x7f0000000940)="1c45f0670bf1c9c235d8df4f560c636e2033b3cf55cdc71abbd5a2a5852dc89c7fc9ccf4aca181e06be92034dffde559f147178041b2ec6fc6cee07a43b10b39bbb49bd9d5b9cd74e04bd3499ebcf01f8eaf1940e4a4b7a9c21800330bab4d7ba09fd046306dbfc423e7a0da064f9984a718232ab1fdb89680143b33c229b461d57b9f2c56038efd1c56730087d7136b6656b073bec63979614fae7ce127b62a8ab28b4a077c951b7177050263047da003afbfc0af4d4d17a0db817ca07f38264cf565023fadfe113d954aee5c9bc9e5bee178e86866e13bde", 0xd9}, {&(0x7f0000000a40)="c48eb4374b16", 0x6}], 0x9) 1m17.457301225s ago: executing program 7 (id=192): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x2}}) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x100000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000a, 0x11, r1, 0x0) r2 = syz_clone(0x8100411, 0x0, 0x34, 0x0, 0x0, 0x0) tkill(r2, 0x10810038) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001400)={0x3, {{0xa, 0x4e24, 0xc, @mcast1, 0x408}}, 0x1}, 0x90) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x9}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x1, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r6, 0x1f, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_ro(r6, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r6, &(0x7f0000000000)="ac34b8ee560c96c3a1a284e588e90a07ec53b41d92073033533b961305b3015a879055c89e198d56aa541ea893489a04c1f07be837408a2d599c5699f4583765077b56027038a238b8479a6e5bb317e38e72e83cdbee24f0b6429c239885a619fa31525991f216a58eb343ba11a8ffaeb6a94115f9c878e57dec9e2ea76e87866bc033a2e85c499e802916ce95861812a28333d30c89fa37008953e2a4056dd26e2e3136e609b14743186630dfb87715487b20270352d96d2919e7f9c454d13635d93cb7", &(0x7f0000000100)=""/35}, 0x20) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5, 0x1, "c80800000000"}]}}}}}}, 0x0) setpriority(0x1, r2, 0xffb) 1m16.555787069s ago: executing program 7 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000200)="05000000010000", 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xd2, 0x71}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x4, 0x1}, {0x1b}, {0x6c}, {0x3, 0x1}, {0x24}, {0x9, 0x1}, {0x1, 0x1}, {0x6}, {0x60, 0x1}, {0x4, 0x1}, {0x48, 0x1}, {0x30}, {0x9}, {0x30}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44041}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0), 0x9, 0x256001) write(r6, &(0x7f0000000540)="ce347dedfa4b236d0622787c42d95b4dfaad498c70aedb8fca33aa2da3cb923cd87c3391bd27f034f3ec248f028defdf444d651e874cb351ab81e678bd10c256e428f9040c00000000000000b9ee4c2688ce3dcfd68161e9eadcf35730bb782137a2a875b367f54c0e29015535624188fa92be326f902789d2", 0x79) write$binfmt_aout(r6, &(0x7f0000000400)={{0xcc, 0x5, 0x58, 0x35b, 0x3b5, 0xd, 0x1f7, 0x8}, "74b8e72f54df32452bd603da805f30fdce754547b418acd6f9b7cfdad6333b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x93f) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r7, 0x1) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64=r5, @ANYRES8=r4, @ANYRES16=r4], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m16.515714455s ago: executing program 7 (id=200): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') lseek(r0, 0x4, 0x2) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) r1 = io_uring_setup(0x63a6, &(0x7f0000000040)={0x0, 0x235b, 0x10, 0x2, 0x3e3}) mmap$IORING_OFF_SQ_RING(0x0, 0x80000001, 0x0, 0x11, r1, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) getdents64(r0, 0xffffffffffffffff, 0x43) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0xf12e760fcb8e6cb, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5fa74358}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m16.439950506s ago: executing program 7 (id=202): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x1, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") io_uring_setup(0x7c46, &(0x7f0000000140)={0x0, 0xd35a, 0x1, 0x0, 0x15c}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f00000009c0)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xcd89}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000380)=';', 0x1}], 0x1}}], 0x1, 0x4004851) setsockopt(r1, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) ioctl(r0, 0x8b32, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m16.127863101s ago: executing program 7 (id=207): syz_io_uring_setup(0x6aed, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x4, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) symlinkat(&(0x7f0000001040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2e, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000008c0)={0x15, 0x110, 0xfa00, {r2, 0x20c, 0x0, 0x0, 0x0, @ib={0x1b, 0x40, 0xc, {"6bd62733c18c49522fda34e1e34b0421"}, 0x0, 0x0, 0x8}, @in6={0xa, 0x4e24, 0x4, @loopback, 0x6}}}, 0x118) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x20}}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1004008, &(0x7f0000001bc0)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c636865636b3d7374726963742c696f636861727365743d63703836332c757466383d312c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d63703836322c00aec32344b49657f479a9d27810b6ed147f3968e2ef982d220e12cda920ec3c801f9d3d0911aa4ac750a9df31bfe23a0299a12dfad31254f0c7e3e132ca20e24852b94a2b226ea11d93c57466208f97777b6b17aeefc51f74f4a2b4477473d67acb4d9e0cfd00"/319], 0x3, 0x27b, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = inotify_init1(0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0xffffffff) 1m15.703467295s ago: executing program 7 (id=214): pipe2(0x0, 0x80000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$key(0xf, 0x3, 0x2) r4 = dup3(r2, r1, 0x80000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002a40)={0x0, 0xfffffff7, 0x8}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000cb485c8200000093d36a0d2dd7bb46f107e77c5befb499000000000000000000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002b80)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002c80)=0xe8) r14 = getgid() ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000003f40)={0x2, 0x1, {r10}, {r13}, 0x8}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003f80)={0x0, 0x0, 0x0}, &(0x7f0000003fc0)=0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000045c0)=0x0) r19 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) io_uring_enter(r19, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) r20 = openat$uhid(0xffffffffffffff9c, &(0x7f0000004600), 0x802, 0x0) sendmmsg$unix(r2, &(0x7f00000047c0)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000280)="fafee025fc8173afde6ba0734f947733df4e99cddd2b710d9178257b963b7add846da513541f288f0c4c24cd6b6b8e050214f672a1b16c431932552330177fa5495e3482a72052c6fd4f70e3633fc1e7265993b7e77e42abff66d2ecaef5764a59edca01d29e55ab2d3d04ff0446217d31f8a668c5951f79d4ef68c090fa320c699a4795bd5f8bccf00639234e43e9279cacb6e89398b7b1e4e36c6bb54ec6e74dd9f1c40ae5a7f8a1f3333052296fa77743bb86c2c57bb5", 0xb8}, {&(0x7f0000000340)="d14681d3900b82493eba0a3135734108a31b9442cd8643041e617a5aa1017bacdd79bb289d42da5a200870c5fe7c511eac39a0ebf0ff0fcbe6db9ad744cd491aa9539b4a247396631d5760eb83b3b802129ebcc1491261f44f8d32e2b723019a306af74df5bc561befbf6dc9327e68330ae1460b70c199a7bc4b4101829125e2cc5d8c07225fff9ca8ac25db25d21b9fd45d4211d3e2ad4b90c22278456a", 0x9e}, {&(0x7f0000000400)="629dbad861a417b21dfedff0332507b7ff13201adb9000b884ed102515f5f841bfda287a440dd10230aa53b39cd49a20ecd5ed2fb3df973ab438c97405b6fe4d3700c4da5f1db2f1d3f582ff8a36a148c0f8c82922db3bad27b5e15d79b7db09067ee38142c53b2d75b483898d9bf0106af8f014a6225b29092ad4a9e54ca9d4acc8a134873e371419d09f470eec4983a56d41eeb667806afbc74e17eff4774887bdb6d4ad4377efd4b107cee8e7b980f4dd179ff56a2c", 0xb7}], 0x3, &(0x7f00000025c0)=[@rights={{0x28, 0x1, 0x1, [r3, r2, r1, r4, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, r6, r9}}}], 0x48}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002640)="1135d156b10b763c4cd9d19927fb72f5dd8e0c706859a09ef37af1a58880a455d8ac7d1d723ac363ac4de02b8e3a8072b49dee6de6f1f8ca376c7b378de7623e5b06ffc6c4759962", 0x48}, {&(0x7f00000026c0)="eb34f2d59a6f15a182665d234f3d36422117eddc0e4b7c600e9b7eb6df5027fc157ae92d00c3942d5779f55b800b9c055aafeeb8188994f6c4b01e6ff81896f03ee03e27cbacd082842a7b57ffd16c548ec8a82c8a4fa2c0ef0a2325c972f7642e1868ca39b44f678e7586b90001c86d22213fa9e659ec70abb92e71f81a5bb6b24b6bc9165fa6805102d9c5618ef3b6c2ea16bcf11471e1a0c1a6bfc7e8a6a45ca0da6cd1f327207967120d35d7dc474a4fe225e084a587383f53c89e98999f0c6ec5125f7bf3edf5574c3be03499cf8def42ea3262a6c18ad89c6381e4feeab23f303cef97d9", 0xe7}, {&(0x7f00000027c0)="540620f0b4703f2a2be32c9890c2c08985c6560d483f5de4d9772561d34c69c9b12dfcff46d148904ca4f2984f05d4a76d1422635e511db118a560fb5ca2760493bf75", 0x43}, {&(0x7f0000002840)="40224bec5eaa1647ca2c13154855f8cbb83a46286d515209fb7bae6ca7f8dd70505b932ffac02fd00dbbcbc318f79995776a0356533f31ff39a7e52d2c485678a7f353953fed38d9f429659723f9f2dc14447c68b3102e9655f863031dc0bb8f3df0827fe2e7ffed8f3d4c5c6bcfcfe26c2a6a80b7b86288d19539ef46849e7b51a017c94083faf6096021930213ee7b3cb57c31e01bbd1dad051cd8e187c3a106b7", 0xa2}, {&(0x7f0000002900)="3fca7a19dd401e07f9b4a98b29d8e696158616499c66e41e36418ffa3835898dcb42f8277425909843c76def47b34f9d301c16147688629eac07551021b722885b3329fe753fee79d6d1e0f84302418280a4bf6e2d480b079d5403d99e56", 0x5e}, {&(0x7f0000002980)="797a14b0c7f76cc399a3307ba2", 0xd}], 0x6, &(0x7f0000002a80)=[@rights={{0x30, 0x1, 0x1, [r4, r3, r4, r4, r4, r11, r12, r1]}}], 0x30, 0x280000c0}}, {{&(0x7f0000002ac0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002b40), 0x0, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {r10, r13, r9}}}], 0x20, 0x40010}}, {{&(0x7f0000002d00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000002d80)="fa287989b54c90a9707b31e1fec380644f2a7d588b13e94ee9f4d6ff0fe957b33a18af351b4af8c15225d7d53d0812a160b375c2d67fb7819843512aea0c557e56b88b5807813787ed565b28a548ce32a46f20d700f813152a9887b5a1543e3fefd0b71bb3462450379524dc5190c2d2bee0c1b25e65a2782e1a591800ba763ac14db479acc4af716db42d18b822d423abc303d3a251d40373e0352f806da0555d0a4f40636bc6ebcb6500e49703da2e79941815402ea1672ac52c1590ca44f425cc3bfa8bf4ee608b727424de922d6ba61e0dd88580d31ad07d", 0xda}, {&(0x7f0000002e80)="e62df13ae679a33f32fb3e04b4fe0b98b8c91da0bbf80f0c4f259d94b70b0cdb403e8aaa51e2abbeb2db1d654c1bfba77d74d00dcb9410d0871f48a61b848a0f79c258319e5af3ec81", 0x49}, {&(0x7f0000002f00)="1f290cf64377fda17460933e6d3773aa693ebcb66a385241a69fefa9eedf4602af0b39cfa163d685ef2566e142e0e1511a060bacf4abd50fb57b211d1aed7b50880ecf60f9b04c5d4ada1c6bd7e5f8e960cd55566ae7d1176a422ab5329a7151df222265a8fcfa1e54ac4ea6b2e7977e1654c3c869da9dc20e57e2f3ce2c02274f99c65eb58dc8f92e1c3fb10b89d98da06b4525d52a6685aec5a17ca3ca763fa09ddc7781f0ee1d1a74e770f8eccf97bbe98fd638117611a41395cf0074668f3f4b6b2e9c623804c2b6b0040056e8a3d54302ff1bb21fd509ec9908d083d788a54bdcd43799f5706a1dec0514d9d4bcb7e789f2812a6cc759814e36dc0e2281ff77c040ad2b98534164431a08d6a95327d057e8d428b72a260bf6a4cf8dd92ceffcae2f860dd8bcd1e4213ea49292bede1e9f483d7c5dfffe78dbb272eb515c83fc05ce2d58faff8c0d07340669d67027881eb8b8adea650c7ff5666398371ec0350a5e690c48848d2c18a96db333b4a3090c2ebb2752b2a9adb3cfde39d5eeda3ffa0c969b7e0de2e558da06e4569aae053a1b9cf47c98b149d086d65bc16fb17dbcd6e8a8e946476123071f1cf89098b89d97eebbb23bd19320ab206a5a84c4d4a1b2ab5bbc391478b6e6a304e847c56fccd9cef1bf425302191bcaeb214da4b9db06da492bb3ee1e2cc7aa37ae9db4bbdba6192cbfc2ac64a8e0f475654630dbc51b1fedd18bd53207ce09f6de9fbdf1c1a66d9f657ecce4a3751646db5d5133690fb2f2c87222351746ca6d219038fcd7ef6d11b82a9f7ca3d419c1f7dfd9d9c51dbc0e8929930f4863d1ba926ce10d0b7e91858a995980fa89fd835df699337e622fb54f5fc5a0be639ed743a15c7deb7497bc4eee247dd50788b3b5e2c0dcd9ae9191ac42d80f8ff6b0c08beff4e5ebeeb76cab3389030373c88135dfa97e6533cbe952c772cdb4a86cce45213c07d327bdb9bf5388711656a1916dd7b3ba1d4693e8d906e81f3ad292b8e871d9889c0a8c491dcb90f66b8513a62c38e08ccd826796ebed5f93b324a5a478c1b8eadeb03040cfda78909bd09120764f3a90325c960849d93793d5a0cdc30c202fc0b2fd2d96fe769f6a0108436f861deb281f5d09a6a328357de8a4ccfeeab0a1543384c2d1c8d25ebb3ee8caa2f5c7dc14d00f88638222478b82b7aded7eafc763cc474729d6e3abe1452571f33c92e4a14eb9aa29d8cbfd9c9a0260a6d785c7f01c538ae7df756abc458ef07803329d0aac72826f791fd345bb79991b7294015f25172aef91abbbb3c201e1011c0eebfab41847b26b384190370adc9ff15c67c8371de0b64f5f4768341841a4ed055646653d34053d4d7fa11a830ad44611e1c0e9d96de69b83b49cef190c68a6c3b0d39432a60b5600b0e9d172696a40db3d1aa76977e42f9c372f1a8a8066142a3e75c0c6581a87163b9c97bbec89b10f07d828201849431a6d573ef50b2747d1f4d1725d59e9cf12ee5551a50d2bb64c8cb702ee4ec8e8f72a4e98b38fed4b8e697d5b0dceed85b6f18b83e81f793fa983b7bae93b48262f87ef6c762d1333af8a8c7fec3419b4ab15b2af4e1b5093f983a548bb5810a8a5b0a112b0493b0429b83000ce45535a02ab82030ffb12083c2e75f91a843b99189c7619d43b90fb4c6ec77ce225b41824ba041693bc736efe1cf679459ed24bc5b83c19358d39958b8fe62a67d3301514ff05ccd3ef8445498242bbfdf982f462ca55a8a337c0b706edba6e7b6b1a2873924392a0d997579ba89cc24c9f513edf03b45c9af49e49ea59a24e7353c9aca26aecd78658c6885032129c7d7f186d0f8752f3384c5a6164ca251ebb08f14f2c3aa72ad1adf499205a90dbfea676b460095ada654b396396d9593969843ab6488ade733e5808af0478482d8c4e9dc7fe468d5b150896c87a3ab51451f285215dc35c90393a3a33636f3c8aac823290531617bbf3bda26e7f22a3025162fc38dd229945deae34eba57debb4c2a00d25b9bee96acdb1f1dae450ff84827d065ee0a41e2ec7c1b93fc2af3b0ec40bfc98c305ff298887f80653a06ab0236f779e4962533f7adb64be5c7bab39b54eb3a580d14494bc4bf3b6e2542fb43e6c73a2c7a785cf41bfa954b96612d1996afcc6e327544473a2f6a543955cb50afe0b8a80703bbe3839e5fbb1b290c02f29a228f30b9f04182a46ccde979850d083bd66ecb0a2d5fd0d926b4224b3fe8ca1a47503c82ac1363a54b749f4efc38209fd766549dbcc44cf8c15a1b081c3b04eb4d7ee78a469f4a56c33ee79380e86a6d5b4039add48489fb9a6cf5262d62c9a35a08eb501529b61810c2834e29ae39651457fa968bcc81e74effa362591511a4bf3632cbb4dd4ccfac25522d9f983af25c3174441d18a46f09a5d9c0be8c0caa436e5d010955bdaf569ca4f2e2742dec0a8ad76b54e45d81bf289f8e8260934171c4eeb750388b5df8d778c7b7a7e08a8b55003d4538fcf542fe5574e493879068c3e3ec15a0ad2baf5c380e3f5f74d832081e73ee800e710f4c23a0ea253dd4ad042bc8a704c72cf708a97ddf8935f3eb727f9d772f49c6f904f2053954953781f304259450cbdc59958fd932e69a7ca1707475aca9acd91ef60e5b73b62d448dc7a1aa675c0e319766e44fef5177afa5741da4f2bc2ba2dbd650116b68e9e13e43b558e1694a2001e70f5701edf1eea62da36dfd30090faa266b910e0415a4bb24fd983cd0802820ac954708f168bd0937d429ff9a5dd7bff3b9d5065472077240aa4a057d9210e6ad512b15dda46ec02f942604acf960e58d807d9dbaa756e13bec531a80be8469a152cfb3988056cf43ee83053b2bca0850b62413e1b8c2e6173396ea20580a9387fe4dcd1c73fd7e7305d6c881cc4127da5fe8ea700f4e546268110c670f9ed64942cea3211ca7b943395fb044cb1312bec36d092464704bf896c8d94bde75352e47ed59102bdf540c7b6119a05b6127eff6bce2c99666dad3f5c8bce6c9173d584bc9ac23a6e5ec94db5d8dfafa6decb29ff042d1ebaa2ed62e1df685508870c55fe51e63a4c040095dd2b8b24260d434224f4fdbf8393ee2a05f8150d54484397567d92ea3fd1b0fb2aa6c79d941723bb4b1821ddca62bf0b22ab949e12106a7873acd60b1cd47bbee7ece9f693c7debc38e9def710e67bb7fb94fcab51a2378cbba2bd71fcbaeebd2681fac77fd741d13abd4c53d3f9cf21f935051fad7ff6a8e45bc4ee414f45a5b50af8e9f51b06d58bcd9d9c6b75bcb741f2c863112ddcccd426d086c09c93bddccf569f8bec775c7d52f36629e7ca7fa89984b92b3fa8b868b14f9aeefc55c25ec01d64111638aa33c80d0a0849347e88111b6dbfacd5fee260c67a1c86ee957d458cb57d86350f935eee9f853ea186d72625517e17696306f7988c5d71cae73a53d305c598d62da9949b3ab26c3542ee233849e9bf6640d6525ea4899b9b3584cf92e39f43a8294f91e067331b4bcba2a066abb70b8667b940309bd821a4995b4d6d4fcbd0766b8e2a3a751f0110d04dfe808bf7b138d42d56c8fce273c0b296ce958ca5f408f09c9be317bcae0ac740f48afc498aa19641c9d3d724667612c0f3dbe29bacba93f84aa3e565655aea460de41af760f11987e8a8e3886d6eff178bc15e716906e3a5afd146f5d45b58ee85db3ee62601a357b6daf8d31e25b2affb4c415ab14b0af9a6cddbc94f708e3100c59d0d4a961c87048f4de2ef7992eb112de07f3c52d48c8a61ba5f63ad70a644b686a3e11b62f9c670b81a19723682db72d683aa03a034983edf911cfb3774cf11bb59187d54023a96582ff233ec538928ef5b67bfd20f03ecc41137daf8c1533c245774c865c312cc4ec5fd6901a481500d898235866ce75eea3ec6848579c4a376d6d72575bc7564877a1f97eefcd822a7983bf45cc92a164b90d09dc6aaacdcead5e98b5e6e2f8622e86daa356e08911e146d45ecaf63a79e3ae37299bd5591edf305242e3fcf55bfbae12441d62f0377e1d61d290265e0b9c904256a9413371201a9f5c1856321cd01e39181dae94c5b1628f73c61a40aaef2a33f1fe8b51bf9c050592f66be940e2b0ef5269929e9bbb9142022e924a1fbc29fa6bb84b4743e0e5b0926fb5d102257f3208a3ffce442721a3e98b4ec2d99a0e5981ad006949e162b626c5183332cdce6df59f7913323d291c2b01c10459fa16471bbfd6ff6e89b3165a132d67d084b00cc583e4d08baaa8d835cc4b1b1518d66834027c9d3ce24f2e53b7e0474bb5c08adbed94cca680eac05ce0957af17f3af62851234210b66ff7ccaaf27cea0e62c0622953c907c2e7d12dbf04e96ba3e34384cd5d4b3482a9bd5ff2ddffe7fc0de7dcee62ba45dbd6a70b3597a4474c1cab2714056bbfb2819ab4b7fca62c22c8ab6bb3929a0dc060a99925d697add7c0babd27664e596e5b7be3906357c2e1569b5ff13c397b7a57be3527a09a3fa7385f83c337e44e11caa2da70a91082a69319ebe474613e6a7153faed6cca306f7b24c0f0f1a3aca6874be964f8fe500b7c69748161c48ee4f61365c121e5ffc7c4d751059bd2f416e68ae49b5ac5d278f1bf65dcd2a507525ed05f22c9491dd6bf970739df4d3ac9bc5ef7d22346acc6aff9d051b9aa05679289219d4bce406d8573f228deb0723808b010709a0afdf09269cb50f3b237c7325d18ccd9bece0d7c124c775d260e8f0f6e2d6edbc9c5bb7a735dcce25e23cca5f2141e78bc93c454463f69289a17a35e3df2d29bd01bf9458b9ae4962fe54361d7574759616f292c9506068151375c5926908c2e48c634b264019da0783fa032ba46e9cadd4b61287027355a5b08bbccaaa2321cfc95ddc97c7cf6c37f525b83ad3300cea4ad12e8e9b32d17e5914909dd7c512f79aa5e9893326f85c7650f260b0203a593dd8a4f6e57ffd3215083ea9919c1aa72d8b0b72740f3a4379e8558f8a976e56a71fc735d67b1142685ed12e14004f3db7e8d08b83b06f813646c7da5da46a50ce0bb1031a6d0caf39b682dc94e49d08e9c1ecb7b037b4c00fd9b5433b1d174e3f51437be299250523bfadd9c704624ba338e1a41962157e8c0a767453a7889f0e29c23be85da6a2f4072fb09ba0465b472545f2023d435cf2af273ab1e984d9d4f56ff6decbe36b6e6453b3e7249c4436fd1e99ece69cf89142f3d86e5956589fcb97847316ee8e50ad95d92ad14e9b2c94949055e99ef9026ef52d7e039e66448a288e08082627321e3f638553fb6eac765ce449d45c725a601e2a30352e8cd516b0945baa8bddf25c08b19ab656b688524159f6f94295e9bb8422fb0ba6bda2a01004aea78d7e259693833695297680105165f41dc12429107410ddeacdf343ae9a1c9a92cbaa4c9eba8570ac33505185d1494c308a549e8818b838a703fc05660e62c80af5e3017d42638df0ca7476ce6c3ad8afc4757b49adb3cbf498f4280f325217b657e82a28cf66f175dbf26c7929604003f747f96e2fc2ca705d2a611f7d85158f284b80733b2842bb8934b8de1b0baced0607e8e18a243fb5c088250ebe436061b8fde18238d6ae5c16f3b45773cc61413cd0cb1b0db71a125c17d772d8f887e87340743851d55aa7c0a026d8e3e13d526a247b693bb5d7fbe912613f40ad44b2ea70e820f38732f219bbf0213df1ad36b10fd8f687ac2036632a6d9bd943cd4b9ef320a6852e461ddb701b7e37d8d31adf83a4ddd066b4437f7448ae9eed98c69b1b38b9ae4bd6ef", 0x1000}], 0x3, &(0x7f0000004000)=ANY=[@ANYBLOB="300000000000000001000000b56210fb", @ANYRES32, @ANYRES32=r12, @ANYRES32=r3, @ANYRES32=r12, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r13, @ANYRES32=r9, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r14, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r13, @ANYRES32=r17, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3], 0xe0, 0x4000}}, {{&(0x7f0000004100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004540)=[{&(0x7f0000004180)="fc628ec2694f73b00bdf4c5be1002eb5fb11f1d19814872aff8173055fdb436325", 0x21}, {&(0x7f00000041c0)="e6a3f861770d1b3e485e55ac810f74fe76153548ce31852ce97773d93eac172fcf67c97458a052b91633826baa647dacfab1a037b2ac52b56899436710ce8096f23632ad69476f7374498746c1962872f35aca8ffd5e0b6dd8bee8015929689e46d7d25f214fdd9f07bd9518b48bcfc4baa2796a5e16c6d92bc4b5be47143973b0", 0x81}, {&(0x7f0000004280)="b327a6bb14f35cd89afd662dcec3398e4cdf8cffebb2a7bef87bff10fa5407f1436c901dca24eac4da86aa0296fab218a0acbad9b4eb2eabf285aaf8dd244a934b1dbd7bdd991951a3c1136c2b52d69aad6520176fde15d19ac06cd9bb3a6fca2ade49d825ae11d08426cf2a9cad1cbf4eff00f3e110464b906b2c700971e8a209822551d6c68f87e299bb7620d33bbefd9246d4ec9334448ee9a8a1354559c837102bc42c531d1fe0aed40dab86", 0xae}, {&(0x7f0000004340)="f8fd2febc088d6bbdbec8e857d23a2862179aac235943faf8263be9a36eb1b9f961bbceb35fea2771172210da95d51c78b8dfc7005c945c80227861b8aa51f12524d58e9cb64fd91fb771e9ce85f43ba963bfb90a20b0fc80f9a36cdae454da1deee3c76661cfed9febe6de0a66aaf6e91e7e4f6772fdeba1d9876a2567e0fd574448ae8737b4a327ec3c76770307d5d069d564db7a90e2c871a3fc79ed16a5124a78c9800738d92c3d1944558e5b8452918fc10d1c09d1c5347f37f6b410b8f2b9bb6a7d72c7fa215e4d155cbda8804ef6216c7e5412b", 0xd7}, {&(0x7f0000004440)="6f7e4952e1e41b2309932c803e3a0f846008089631f7f40f9db8cb1439c14767f163c9bd283919ad2eb5c5741a816f713e5c1f373cf32454df2f197583e7adac85a20ca82224f927d9850698bab176044a6293976329bad4641a41e27fb2ec0fe93743f12b82", 0x66}, {&(0x7f00000044c0)="74e4df07f1df32f6ede4fefebf650b638b6c370f610ea871d03c2012f00d4ba395d40a1cde49a68d6cff5caf9410526386fdaddd940170b2c7aa36670d79ffc0a2df78880722bbde4e75b59f5eb2144b477e8b30d602437e6ae1db8e9323dfc81b0376f02266fbcbe0424d8492f7dfbb7ff4d90e8af8f1", 0x77}], 0x6, &(0x7f00000046c0)=[@cred={{0x1c, 0x1, 0x2, {r18, r6, r9}}}, @rights={{0x18, 0x1, 0x1, [r19, r20]}}, @cred={{0x1c, 0x1, 0x2, {r10, r13, r7}}}, @cred={{0x1c, 0x1, 0x2, {r15, r13, r9}}}, @cred={{0x1c, 0x1, 0x2, {r5, r16, r14}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r15, r13}}}, @rights={{0x14, 0x1, 0x1, [r11]}}], 0xe8, 0x80}}], 0x5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x3000, 0x400, &(0x7f000053b000/0x3000)=nil) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7c65, 0xa334, 0x7ffffffe, 0x0, 0x0) 1m15.583578744s ago: executing program 35 (id=214): pipe2(0x0, 0x80000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$key(0xf, 0x3, 0x2) r4 = dup3(r2, r1, 0x80000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002a40)={0x0, 0xfffffff7, 0x8}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000cb485c8200000093d36a0d2dd7bb46f107e77c5befb499000000000000000000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002b80)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002c80)=0xe8) r14 = getgid() ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000003f40)={0x2, 0x1, {r10}, {r13}, 0x8}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003f80)={0x0, 0x0, 0x0}, &(0x7f0000003fc0)=0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000045c0)=0x0) r19 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) io_uring_enter(r19, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) r20 = openat$uhid(0xffffffffffffff9c, &(0x7f0000004600), 0x802, 0x0) sendmmsg$unix(r2, &(0x7f00000047c0)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000280)="fafee025fc8173afde6ba0734f947733df4e99cddd2b710d9178257b963b7add846da513541f288f0c4c24cd6b6b8e050214f672a1b16c431932552330177fa5495e3482a72052c6fd4f70e3633fc1e7265993b7e77e42abff66d2ecaef5764a59edca01d29e55ab2d3d04ff0446217d31f8a668c5951f79d4ef68c090fa320c699a4795bd5f8bccf00639234e43e9279cacb6e89398b7b1e4e36c6bb54ec6e74dd9f1c40ae5a7f8a1f3333052296fa77743bb86c2c57bb5", 0xb8}, {&(0x7f0000000340)="d14681d3900b82493eba0a3135734108a31b9442cd8643041e617a5aa1017bacdd79bb289d42da5a200870c5fe7c511eac39a0ebf0ff0fcbe6db9ad744cd491aa9539b4a247396631d5760eb83b3b802129ebcc1491261f44f8d32e2b723019a306af74df5bc561befbf6dc9327e68330ae1460b70c199a7bc4b4101829125e2cc5d8c07225fff9ca8ac25db25d21b9fd45d4211d3e2ad4b90c22278456a", 0x9e}, {&(0x7f0000000400)="629dbad861a417b21dfedff0332507b7ff13201adb9000b884ed102515f5f841bfda287a440dd10230aa53b39cd49a20ecd5ed2fb3df973ab438c97405b6fe4d3700c4da5f1db2f1d3f582ff8a36a148c0f8c82922db3bad27b5e15d79b7db09067ee38142c53b2d75b483898d9bf0106af8f014a6225b29092ad4a9e54ca9d4acc8a134873e371419d09f470eec4983a56d41eeb667806afbc74e17eff4774887bdb6d4ad4377efd4b107cee8e7b980f4dd179ff56a2c", 0xb7}], 0x3, &(0x7f00000025c0)=[@rights={{0x28, 0x1, 0x1, [r3, r2, r1, r4, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, r6, r9}}}], 0x48}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002640)="1135d156b10b763c4cd9d19927fb72f5dd8e0c706859a09ef37af1a58880a455d8ac7d1d723ac363ac4de02b8e3a8072b49dee6de6f1f8ca376c7b378de7623e5b06ffc6c4759962", 0x48}, {&(0x7f00000026c0)="eb34f2d59a6f15a182665d234f3d36422117eddc0e4b7c600e9b7eb6df5027fc157ae92d00c3942d5779f55b800b9c055aafeeb8188994f6c4b01e6ff81896f03ee03e27cbacd082842a7b57ffd16c548ec8a82c8a4fa2c0ef0a2325c972f7642e1868ca39b44f678e7586b90001c86d22213fa9e659ec70abb92e71f81a5bb6b24b6bc9165fa6805102d9c5618ef3b6c2ea16bcf11471e1a0c1a6bfc7e8a6a45ca0da6cd1f327207967120d35d7dc474a4fe225e084a587383f53c89e98999f0c6ec5125f7bf3edf5574c3be03499cf8def42ea3262a6c18ad89c6381e4feeab23f303cef97d9", 0xe7}, {&(0x7f00000027c0)="540620f0b4703f2a2be32c9890c2c08985c6560d483f5de4d9772561d34c69c9b12dfcff46d148904ca4f2984f05d4a76d1422635e511db118a560fb5ca2760493bf75", 0x43}, {&(0x7f0000002840)="40224bec5eaa1647ca2c13154855f8cbb83a46286d515209fb7bae6ca7f8dd70505b932ffac02fd00dbbcbc318f79995776a0356533f31ff39a7e52d2c485678a7f353953fed38d9f429659723f9f2dc14447c68b3102e9655f863031dc0bb8f3df0827fe2e7ffed8f3d4c5c6bcfcfe26c2a6a80b7b86288d19539ef46849e7b51a017c94083faf6096021930213ee7b3cb57c31e01bbd1dad051cd8e187c3a106b7", 0xa2}, {&(0x7f0000002900)="3fca7a19dd401e07f9b4a98b29d8e696158616499c66e41e36418ffa3835898dcb42f8277425909843c76def47b34f9d301c16147688629eac07551021b722885b3329fe753fee79d6d1e0f84302418280a4bf6e2d480b079d5403d99e56", 0x5e}, {&(0x7f0000002980)="797a14b0c7f76cc399a3307ba2", 0xd}], 0x6, &(0x7f0000002a80)=[@rights={{0x30, 0x1, 0x1, [r4, r3, r4, r4, r4, r11, r12, r1]}}], 0x30, 0x280000c0}}, {{&(0x7f0000002ac0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002b40), 0x0, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {r10, r13, r9}}}], 0x20, 0x40010}}, {{&(0x7f0000002d00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000002d80)="fa287989b54c90a9707b31e1fec380644f2a7d588b13e94ee9f4d6ff0fe957b33a18af351b4af8c15225d7d53d0812a160b375c2d67fb7819843512aea0c557e56b88b5807813787ed565b28a548ce32a46f20d700f813152a9887b5a1543e3fefd0b71bb3462450379524dc5190c2d2bee0c1b25e65a2782e1a591800ba763ac14db479acc4af716db42d18b822d423abc303d3a251d40373e0352f806da0555d0a4f40636bc6ebcb6500e49703da2e79941815402ea1672ac52c1590ca44f425cc3bfa8bf4ee608b727424de922d6ba61e0dd88580d31ad07d", 0xda}, {&(0x7f0000002e80)="e62df13ae679a33f32fb3e04b4fe0b98b8c91da0bbf80f0c4f259d94b70b0cdb403e8aaa51e2abbeb2db1d654c1bfba77d74d00dcb9410d0871f48a61b848a0f79c258319e5af3ec81", 0x49}, {&(0x7f0000002f00)="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", 0x1000}], 0x3, &(0x7f0000004000)=ANY=[@ANYBLOB="300000000000000001000000b56210fb", @ANYRES32, @ANYRES32=r12, @ANYRES32=r3, @ANYRES32=r12, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r13, @ANYRES32=r9, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r14, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r13, @ANYRES32=r17, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3], 0xe0, 0x4000}}, {{&(0x7f0000004100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004540)=[{&(0x7f0000004180)="fc628ec2694f73b00bdf4c5be1002eb5fb11f1d19814872aff8173055fdb436325", 0x21}, {&(0x7f00000041c0)="e6a3f861770d1b3e485e55ac810f74fe76153548ce31852ce97773d93eac172fcf67c97458a052b91633826baa647dacfab1a037b2ac52b56899436710ce8096f23632ad69476f7374498746c1962872f35aca8ffd5e0b6dd8bee8015929689e46d7d25f214fdd9f07bd9518b48bcfc4baa2796a5e16c6d92bc4b5be47143973b0", 0x81}, {&(0x7f0000004280)="b327a6bb14f35cd89afd662dcec3398e4cdf8cffebb2a7bef87bff10fa5407f1436c901dca24eac4da86aa0296fab218a0acbad9b4eb2eabf285aaf8dd244a934b1dbd7bdd991951a3c1136c2b52d69aad6520176fde15d19ac06cd9bb3a6fca2ade49d825ae11d08426cf2a9cad1cbf4eff00f3e110464b906b2c700971e8a209822551d6c68f87e299bb7620d33bbefd9246d4ec9334448ee9a8a1354559c837102bc42c531d1fe0aed40dab86", 0xae}, {&(0x7f0000004340)="f8fd2febc088d6bbdbec8e857d23a2862179aac235943faf8263be9a36eb1b9f961bbceb35fea2771172210da95d51c78b8dfc7005c945c80227861b8aa51f12524d58e9cb64fd91fb771e9ce85f43ba963bfb90a20b0fc80f9a36cdae454da1deee3c76661cfed9febe6de0a66aaf6e91e7e4f6772fdeba1d9876a2567e0fd574448ae8737b4a327ec3c76770307d5d069d564db7a90e2c871a3fc79ed16a5124a78c9800738d92c3d1944558e5b8452918fc10d1c09d1c5347f37f6b410b8f2b9bb6a7d72c7fa215e4d155cbda8804ef6216c7e5412b", 0xd7}, {&(0x7f0000004440)="6f7e4952e1e41b2309932c803e3a0f846008089631f7f40f9db8cb1439c14767f163c9bd283919ad2eb5c5741a816f713e5c1f373cf32454df2f197583e7adac85a20ca82224f927d9850698bab176044a6293976329bad4641a41e27fb2ec0fe93743f12b82", 0x66}, {&(0x7f00000044c0)="74e4df07f1df32f6ede4fefebf650b638b6c370f610ea871d03c2012f00d4ba395d40a1cde49a68d6cff5caf9410526386fdaddd940170b2c7aa36670d79ffc0a2df78880722bbde4e75b59f5eb2144b477e8b30d602437e6ae1db8e9323dfc81b0376f02266fbcbe0424d8492f7dfbb7ff4d90e8af8f1", 0x77}], 0x6, &(0x7f00000046c0)=[@cred={{0x1c, 0x1, 0x2, {r18, r6, r9}}}, @rights={{0x18, 0x1, 0x1, [r19, r20]}}, @cred={{0x1c, 0x1, 0x2, {r10, r13, r7}}}, @cred={{0x1c, 0x1, 0x2, {r15, r13, r9}}}, @cred={{0x1c, 0x1, 0x2, {r5, r16, r14}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r15, r13}}}, @rights={{0x14, 0x1, 0x1, [r11]}}], 0xe8, 0x80}}], 0x5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x3000, 0x400, &(0x7f000053b000/0x3000)=nil) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7c65, 0xa334, 0x7ffffffe, 0x0, 0x0) 5.752058755s ago: executing program 5 (id=294): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@remote, r3}, 0x14) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x2019}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68100000100001002bbd7000fbdbdf2500000000d12bb725dd4831fa1cd14ab84eebc49c0d3ae8af72f285caaefadaaf64c90abc9b5f14e73cec67933efa4f0aa2e8d1f5d0e7e5d03ce3592841af1c21f050d623f25051a6b242e09e", @ANYRES32=0x0, @ANYBLOB="080000000a000200140003006e657464657673696d300000000000002c001680280001800c000700e5ffffff090000000c00090001000000000000000c000500a802000080e100000500110007000000"], 0x68}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x1, 0x0) pwrite64(r7, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x97, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_NAME={0x18, 0x7, './tracing/set_event\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xf}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x75521fc4caed34d}, 0x20004004) 5.751699294s ago: executing program 5 (id=295): syz_io_uring_setup(0x6aed, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x4, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) symlinkat(&(0x7f0000001040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2e, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000008c0)={0x15, 0x110, 0xfa00, {r2, 0x20c, 0x0, 0x0, 0x0, @ib={0x1b, 0x40, 0xc, {"6bd62733c18c49522fda34e1e34b0421"}, 0x0, 0x0, 0x8}, @in6={0xa, 0x4e24, 0x4, @loopback, 0x6}}}, 0x118) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = inotify_init1(0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0xffffffff) 5.732377668s ago: executing program 5 (id=296): timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0x8}, {0x6, 0x1, 0x0, 0xa}]}) timer_create(0xfffffffffffffffd, 0x0, 0x0) timer_delete(r0) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1dba02, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="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", 0x200}, {0x0, 0x20000}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ftruncate(0xffffffffffffffff, 0x2000008) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff004) 4.867626989s ago: executing program 5 (id=310): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a10300000005000500ffa1000005000c0007000000050007000000000005000a00ffa100000500080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0xccf, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6", 0x148}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002240)="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", 0x744}], 0x1}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@nobarrier}, {@nobarrier}, {@noinit_itable}]}, 0xec, 0x574, &(0x7f0000001980)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare(0x4000400) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) signalfd4(r3, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@datasec={0x1, 0x4, 0x0, 0xf, 0x3, [{0x800004, 0x6}, {0x3, 0x7, 0x2}, {0x3, 0xfff, 0x401}, {0x1, 0xff, 0x2}], 'M6U'}, @datasec={0x10, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}}, &(0x7f0000001b00)=""/3, 0x66, 0x3, 0x1, 0x4}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143442, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e002800028024000500a3c9be97be0d6c453b8607ce43a03bf26e6fd78ac162b914c202ccb29c00b320", 0x60) r7 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f00000001c0)={0x40, 0x56544943, 0x3, @stepwise={0x2, 0x4, 0x3, 0x3ff, 0x81, 0x5}}) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) 4.727480211s ago: executing program 5 (id=311): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100003500000007010000f8ffffffb702000008000000b70300000000000085000000bb00000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.014779761s ago: executing program 5 (id=325): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x282056, 0x0, 0x19, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x800000, 0x0, 0x1, 0x0, 0x0) (async) r0 = fanotify_init(0x200, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000000), 0x220000c, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3.967662254s ago: executing program 36 (id=325): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x282056, 0x0, 0x19, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x800000, 0x0, 0x1, 0x0, 0x0) (async) r0 = fanotify_init(0x200, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000000), 0x220000c, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.129617236s ago: executing program 8 (id=356): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)=""/1}) syz_clone(0x84800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="24002d8005000400000000f407000200000004000500010009000000080003000800000008000300", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000040)) 1.826378483s ago: executing program 8 (id=363): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, &(0x7f0000000040)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650cab, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) setns(0xc9, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/cgroup\x00') setns(r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000002c0)=0x10001, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x40, r1, 0x801, 0x0, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_TYPE={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8900}, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x77, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r5, 0x500, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44001}, 0x20000040) 1.752115124s ago: executing program 8 (id=365): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) clock_gettime(0x0, &(0x7f00000025c0)) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$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") r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9ad, @local, 0x5}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00ef8173e7be8fcf938ad9d40000000000000000b34a5abd0000000000000000000000ae22ccbbe1dba5bd2c8477fa545761a0322cb0b9deeb7931fc8c0965c3ced94ac08a40ad20cdf38cc71072e2c55da3697da3c68ce79b249b1f735ab94b30c19a805c18e1ed7487c8b36b1d8791a0201b8980759777be9c0c3e62b3a701", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 574.486392ms ago: executing program 8 (id=368): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0201000000800600f0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800ffd018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0xa}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x4000) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x4000) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x9) (async) landlock_restrict_self(r3, 0x9) fcntl$setlease(r2, 0x400, 0x0) (async) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) (async) fcntl$setlease(r2, 0x400, 0x2) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000040)='./bus\x00') syz_mount_image$vfat(&(0x7f0000006600), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000cc0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x181400, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) (async) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file2\x00', 0x0, 0x12040, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file2\x00', 0x0, 0x12040, 0x0) 570.648948ms ago: executing program 8 (id=372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) syncfs(r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x20, r1, 0x321, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x20, r3, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x8, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 569.867653ms ago: executing program 9 (id=326): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000300)=ANY=[], 0x13c) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) copy_file_range(r0, &(0x7f0000000080)=0x100000000, r0, &(0x7f00000000c0)=0x1, 0x7fffffff, 0x0) write$UHID_INPUT(r0, &(0x7f0000000900)={0x8, {"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", 0x1000}}, 0x1006) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e1d, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x1010, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000003c0)) (async) r6 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x20, r5, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=ANY=[], 0x11d0}, 0x7, 0x3ed763469f8f58cc}) (async) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x20, r5, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=ANY=[], 0x11d0}, 0x7, 0x3ed763469f8f58cc}) io_uring_enter(r6, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) (async) io_uring_enter(r6, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 569.083135ms ago: executing program 2 (id=375): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x18, 0x2d, 0x1, 0x20000000, 0x25dfdbf8, "", [@typed={0x8, 0x11a, 0x0, 0x0, @fd}]}, 0x18}], 0x1, 0x0, 0x0, 0x24801}, 0x4000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x30, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x2004c090}, 0xc000) accept$alg(r2, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x40, 0x8000, 0xa6d, 0xd0, {{0x19, 0x4, 0x0, 0x37, 0x64, 0x64, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0xe9, 0x0, 0x7, [0xa, 0x5, 0x10000, 0x3, 0x8, 0x7c, 0xb]}, @rr={0x7, 0x7, 0x2d, [@private=0xa010100]}, @timestamp_addr={0x44, 0x14, 0x2a, 0x1, 0x0, [{@local, 0x8}, {@broadcast, 0xbb7}]}, @ssrr={0x89, 0x13, 0x50, [@broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x25, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ldst={0x0, 0x2, 0x2, 0x8, 0xb, 0x2}, @call={0x85, 0x0, 0x0, 0x21}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa4}, @jmp={0x5, 0x1, 0x1, 0x9, 0x7, 0x8, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit]}, &(0x7f0000000240)='GPL\x00', 0x7f, 0x60, &(0x7f0000000280)=""/96, 0xd711463ce57190ec, 0x0, '\x00', r4, 0x25, r3, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x7, 0xfa}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) 568.33914ms ago: executing program 1 (id=377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2000a, 0x0, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) 567.882462ms ago: executing program 2 (id=378): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0902000004400900"/20, @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$inet_sctp(0x2, 0x5013fb6a3aa5e3a1, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='27', 0x2) mknodat$loop(r2, 0x0, 0x80, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/devices/0000:00:01.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x11, r4, 0x1000) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r9, 0x1c, &(0x7f0000000740)={{0xa, 0x4e26, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d21fd02b692e62671d7319db46697d33ef6f04abba67f3e71079e4579a"], 0x48) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000100000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e000000000100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000014000100000000ecba9b4ae14418cb0200000000000093308e4c00006601010200000000000000000000000000000002000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r11], 0xb8}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e20, @local}], 0x10) r13 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) 567.172889ms ago: executing program 8 (id=379): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x12, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40086315}], 0x0, 0x0, 0x0}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x1ee, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1b8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x2f, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x86, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43"}, @calipso={0x7, 0x30, {0x3, 0xa, 0xe, 0x9, [0xf, 0x7, 0x4a, 0x9, 0x1b76]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}]}]}}}}}}}, 0x0) accept4$nfc_llcp(r7, 0x0, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r8, &(0x7f0000000340)={0x2, 0x4620, @empty}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@local, @multicast2, 0x0, 0xff000000, 0x10, 0x4, {@mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0xde35, 0x5, 0xd88, 0x9, 0x9, 'veth0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x242}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="16e4ec77bff1", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x50) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000180)={0xfb}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0xe, &(0x7f00000021c0)=ANY=[@ANYRES16=r0], &(0x7f0000000b80)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000040)={0x100000}, 0x10}, 0x94) 541.519215ms ago: executing program 2 (id=380): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xc, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x8}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x2, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0xfffffffb, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0xf2b7, 0x2, 0x55, 0x4000000, 0x69b1d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x1, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x7f, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0xf7a599937e2d1fa6, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x4}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x7, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x5, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000030000008500000011000000180100002020782500000000002020b77b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000b000000850000009b00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0d438ac100a19110cbd38b9547e", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 514.29254ms ago: executing program 6 (id=381): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000100)={[{@nobarrier}, {@oldalloc}, {@orlov}, {@dioread_lock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd02, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x92042, 0x20) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x1, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x5, 0x15, 0xffff2d37, 0xff7fff01, 0x9, 0x20002, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x20003, 0x8, 0x4c71, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x4, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x0, 0x454f, 0x6, 0x80000000, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5302, 0xfffffff3, 0x129432f9, 0xc9, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x3, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0xd9ef, 0xfffff57d, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x400000a, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x24, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa6, 0x4, 0xa9, 0xff, 0x0, 0xac8, 0xbf, 0x2000002, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x4, 0x2, 0x120000, 0x807ff, 0x2, 0x80a2ed, 0x1, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x0, 0x3, 0x2, 0x40, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x10000, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x961e, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x70d0, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x8, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x201, 0x62, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) write$nci(r1, 0x0, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) sendfile(r2, r2, 0x0, 0x1000000000007) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) syz_open_dev$video4linux(&(0x7f00000019c0), 0x401, 0x721102) 472.003587ms ago: executing program 9 (id=382): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 468.194391ms ago: executing program 6 (id=383): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2d, 0x0, {0x2, 0x10, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000240)='b', &(0x7f0000000000)=""/1, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f00000000c0), &(0x7f0000000540)}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) clock_adjtime(0x3, &(0x7f0000000280)={0x9, 0x30, 0x6, 0x1, 0x71b, 0x4, 0x40, 0x1, 0x7fffffff, 0x1, 0x9, 0x7, 0xfcc, 0x6, 0x8, 0x5, 0xfff, 0x8000, 0x0, 0x8000000000000001, 0x2, 0x0, 0x3, 0x9, 0xffffffffffffffff}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r3, &(0x7f0000000000)='3', 0x4e) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x71a07}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 431.875109ms ago: executing program 1 (id=384): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4a801, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x8, r1, 0x0, 0x3, 0x17, &(0x7f0000000080)="b95e451e60bd6e03fafc6b4569a76f7303a9fe96985e0d", 0x5}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f00000001c0)={0x28, 0x7, r2, r3, 0x5, 0xae3, 0xdad}) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f0000000200)="a4f11a16a1a8fc43df814eb0438851dc40537e7452851da5fc0a11a1203eda8b5c9b4d7e42a27bcb5794cfa7ac63387c1972f9edec5096481de63cd4641ac1be4c2a4daef847d6754b0613dc4ab3529e17f1f82fe5bdc89ba39844f5c99505c22210b349948dd731c61dae6ada417d3404dedcb74b93a5b2338ce0fda0ae7f93c518270d7632f4d8b46680a80684c85de1b3eb39d50dbaffd06be571ae7e8a961f55436168c640aca184b85010c574fa3a467f26d559436d", 0xb8}, {&(0x7f00000002c0)="685291b9d92b4496acca16c3c6a41dbe4c22bbd4e1da115770de5a0bbb21542fbef28af9d697fb839c1954c0c16bc25c316ce27ae002fa", 0x37}], 0x2, 0x8) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000003c0)={0x28, 0x4, r4, r5, 0x2cc5aa, 0x10, 0x6, 0x151394}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000480)={r6}) pread64(r7, &(0x7f00000004c0)=""/53, 0x35, 0x4) read$FUSE(r1, &(0x7f0000000500)={0x2020}, 0x2020) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000002540)) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002580), 0x10002, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r8, 0x3b84, &(0x7f0000002640)={0x20, r5, 0x8, 0x0, &(0x7f00000025c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000002680)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000026c0), 0x80000, 0x0) ioctl$IOMMU_IOAS_UNMAP(r10, 0x3b86, &(0x7f0000002700)={0x18, r2, 0x4, 0xcad}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x40010, r0, 0x21c4c000) getpeername$netlink(r1, &(0x7f0000002740), &(0x7f0000002780)=0xc) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f00000037c0)={0x20, 0x3, &(0x7f00000027c0)="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", 0x71fa, 0x6}) setsockopt$bt_BT_VOICE(r9, 0x112, 0xb, &(0x7f0000003800)=0x63, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000003840), 0x4400, 0x0) setsockopt(r9, 0x9, 0x2, &(0x7f0000003880)="a27b3df19cf978ab18f3aae1160d65011284ee4db493c9748c7bdc9f92cd7fab878f1e113472b84476bd4148df0d809f22f9b92eaf3cad15a8752c5ad4ceb18dc31c62ea85ecce88f02b9e0666135e4d732083b1b6ef7872d6f0f97c576bc2302b41bbbe1796fa2aa1c7698afabec6ba0297c686e1bd28260df7a0d9db681077f5a75ce518be0aaa71dabe0748553bd9219ca1381f1bc484ce8f09c8e27f66c905def1c6897fb28da8b9d3c9410681b074a9f9996a20a68692112d1c3772a0807e2471eb5457a5e6c5fb00c3a8b06272caba4452d32bb9a3db1471793624d64a9c28bc82463acaa032ebffe4", 0xec) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000003980)=0x14110, 0x4) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r9, 0x3b87, &(0x7f00000039c0)={0x18, 0x1, 0x1, 0x0, r4, 0x8}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000003a00)={0x48, 0x7, r1, 0x0, 0x1, 0x0, 0x7, 0x7}) 364.041502ms ago: executing program 1 (id=385): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r1, 0xffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x20}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000540)={0x1, @in={{0x2, 0x4e22, @multicast2}}, 0xffffffff, 0x1fb9, 0x5, 0x868, 0x81, 0x200, 0xe9}, 0x9c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) fcntl$addseals(r1, 0x409, 0x7) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="7c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00010000014000005c0012800b00010067726574617000004c0002800800040008000000060003008100000008000700ffffffff05000900c800000005000800fc000000060002"], 0x7c}}, 0x0) r5 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r0, 0xffffffff, 0x0, 0x100000000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086203, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) (async) ftruncate(r1, 0xffff) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x20}, 0x94) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000540)={0x1, @in={{0x2, 0x4e22, @multicast2}}, 0xffffffff, 0x1fb9, 0x5, 0x868, 0x81, 0x200, 0xe9}, 0x9c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) fcntl$addseals(r1, 0x409, 0x7) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="7c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00010000014000005c0012800b00010067726574617000004c0002800800040008000000060003008100000008000700ffffffff05000900c800000005000800fc000000060002"], 0x7c}}, 0x0) (async) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r0, 0xffffffff, 0x0, 0x100000000}) (async) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086203, 0x0) (async) 256.257138ms ago: executing program 6 (id=386): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0x8}, {0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x8, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000ff"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000020500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 255.687138ms ago: executing program 2 (id=387): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/igmp\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private, @dev, 0x0}, &(0x7f0000000200)=0xc) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000380)={@xdp={0x2c, 0x8, r2, 0xc}, {&(0x7f0000000240)=""/193, 0xc1}, &(0x7f0000000340), 0x5}, 0xa0) syz_emit_ethernet(0x9a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x64, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x4, "914f"}, @exp_fastopen={0xfe, 0xe, 0xf989, "60f28f1d3aafafb8ab3e"}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x1a, [0x1, 0xfffffffe, 0x3, 0x6, 0x1, 0x10001]}]}}}}}}}}, 0x0) 242.8795ms ago: executing program 1 (id=388): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20010800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x50, r3, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x1c}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x24004040) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r7, &(0x7f0000001f80)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0xff, 0x8, 0x0, 0x7, 0x7ff, 0x3, 0x0, 0x8, 0x1}, &(0x7f0000000340)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x0, 0x6}, 0x8) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x54, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r13, r12, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x54, r9, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) 176.153703ms ago: executing program 2 (id=389): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000080)='sysfs\x00', 0x202018, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="306663353a313232373a620afaf66567", 0x10) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 173.555145ms ago: executing program 9 (id=390): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@bsdgroups}, {@nobarrier}, {@noinit_itable}]}, 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003240)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x3, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x54) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143442, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) read$FUSE(r1, &(0x7f0000003f00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x2d, 0x3, 0xffffffff80000001, 0x2, 0x6, 0x8, 0x1ff, 0x0, 0x0, 0x4, 0x98e}}, 0x50) 165.195336ms ago: executing program 6 (id=391): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa10000000c000007010000f8ffffffb702000008000000b70300000000000085000000bb00000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 137.614361ms ago: executing program 2 (id=392): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ebd70000000000014000000180001801400dfff6d657464657673696d30000000000000050019000100000008001500f1ffffff05001800010000000dd21bd8eb3b7e35d9f983df10cf9d95"], 0x44}}, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) (rerun: 64) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05072bbd700002dc0eff1c4b000418000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f00000006c0)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0xed}}, {@lazytime}, {@noload}, {@stripe={'stripe', 0x3d, 0x7}}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") (async, rerun: 32) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x4a4500, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5], 0x34}}, 0x6a515b12f04e6622) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="660a00000200000061114c0000000000850000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x91050}], 0x1, 0x0, 0x300}, 0x1f00) (async) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) prlimit64(0x0, 0xa, 0x0, 0x0) (async) unshare(0x38040680) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e1d, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x800000}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f00000016c0)={r12, 0x1}, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000008000000000afc8000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140058ae0f8e81e63f9a04f01d3b4e68750000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000050000000bf91000000000000b7020000010000008500000084000000b7000000000000009500400000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r13}, 0xc) 116.797157ms ago: executing program 1 (id=393): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x10, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x210006, &(0x7f00000000c0)={[], [{@obj_type={'obj_type', 0x3d, 'ext4\x00'}}]}, 0x1, 0x56e, &(0x7f0000000e40)="$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") setsockopt$packet_int(r1, 0x107, 0x10, &(0x7f0000000040)=0xee9, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="b79151d41ebbdc84d176f8fd98c9cbc11f114d00566e64e29d2effa21522581d1314a1f005ecd4b4aa7698d86220f797abe812a62a1d7ed0f3366d3a35be4ea4b173b581b21525be9246c11d337fc05668a0035416d1b5aec4606ab9067792288bc94769358892e95c2c0d4ada86fb7d921ff64163036bbfbef1ad8bcf9158ce304fa802cb77e8373d9c546e591322cfa0326f9b", 0x94}], 0x1}, 0x20000000) 66.208771ms ago: executing program 6 (id=394): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2000a, 0x0, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) 65.65255ms ago: executing program 9 (id=395): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x400be, 0x28, 0x1, 0x200, &(0x7f0000000080)="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"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffff5, 0x5, 0xd000, 0xe, "0062ba7d8200000016001b001e00f705096604"}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="f000000010000100feffffbf00010000fe8000000000000000000000000000aaff010000000000000000000000000001000100044e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000df0000000000f4ff0000000000000000fcffffffffffffffffffffffffffffff1f00000000000000ff010000000000000a"], 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xfff1, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffff}, {0x1, 0xffff}, {0x300, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0xb307}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$tun(r5, &(0x7f0000000440)=ANY=[], 0xfdef) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xa0, 0x29, 0x1, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x0, 0x5, 0x0, 0x2, 0xa, 0x0, 0x0, 0xff}, 0x6e6bbf}, [@migrate={0x50, 0x11, [{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x4}, 0x32, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xa0}}, 0x0) r9 = syz_open_pts(r0, 0xa0200) r10 = dup3(r9, r0, 0x0) r11 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x0, 0x40055, 0x0, r10}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r11, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000001) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_setup(0x7, &(0x7f00000000c0)) 29.563709ms ago: executing program 1 (id=396): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd2c, 0x25dfdbf9, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xe}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa08004927002c00670000fc0b000000000000ac1e0001830739ac38c9018307efac1414bb0000150490780a010101"], 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB="08002700020001000800a0"], 0x34}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x9, 0x80, 0xa, 0x2}]}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 0s ago: executing program 6 (id=397): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@delchain={0x44, 0x65, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x7, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0xe719}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x101}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8014) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/devices/system/cpu/cpu1/online\x00', 0x0, 0x0) pread64(r2, &(0x7f00000009c0)=""/15, 0xf, 0x101) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r3, 0x89f2, &(0x7f0000000100)={0xfffffff9, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100c1c4cbf1fb5a37819d5dc77338e443be97dad4f78ee6fdc2d3f202a8059ba6d7169fea2c7e578fb8d14bd55d8c7862f54f5a765716f8246cccc75bce5eecae5c157eaa40b6187e4ff09044", @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x8001}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x4000011) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x8}, {0xcdbf0d3388237035}, {0xfff3, 0x5}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}]}}]}, 0x3c}}, 0x20004015) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x2, 0x40) write$P9_RREADDIR(r5, &(0x7f0000000140)={0x44, 0x29, 0x1, {0xd43, [{{0x8, 0x0, 0x2}, 0x4, 0x0, 0x6, './proc'}, {{0x0, 0x3, 0x4}, 0x81d1, 0x0, 0x5, './sys'}]}}, 0x46) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4008840) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f00000006c0)=ANY=[], 0xc48041) socket$netlink(0x10, 0x3, 0x14) write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYRES32=r6, @ANYRESHEX], 0xef) kernel console output (not intermixed with test programs): d promiscuous mode [ 31.215153][ T4705] veth0_macvtap: entered promiscuous mode [ 31.216720][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.221245][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.225852][ T4705] veth1_macvtap: entered promiscuous mode [ 31.243485][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.262557][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.288776][ T4722] Bluetooth: hci3: command tx timeout [ 31.288929][ T4722] Bluetooth: hci2: command tx timeout [ 31.288990][ T4722] Bluetooth: hci0: command tx timeout [ 31.289047][ T4722] Bluetooth: hci1: command tx timeout [ 31.298675][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.298691][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.310259][ T228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.310748][ T228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.312010][ T228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.312136][ T228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.312220][ T228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.312276][ T228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.312332][ T228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.312389][ T228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.332026][ T4895] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 31.332047][ T4895] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 31.378381][ T4713] Bluetooth: hci4: command tx timeout [ 31.552440][ T4895] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 31.552459][ T4895] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 31.713398][ T4902] loop3: detected capacity change from 0 to 1024 [ 31.718106][ T4902] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.735690][ T4902] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 31.735730][ T4902] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 31.735739][ T4902] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.6: Failed to acquire dquot type 0 [ 31.735769][ T4902] loop3: lost filesystem error report for type 5 error -5 [ 31.737529][ T4902] EXT4-fs (loop3): 1 truncate cleaned up [ 31.747894][ T4902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.760361][ T4902] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 31.760425][ T4902] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 31.760435][ T4902] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.6: Failed to acquire dquot type 0 [ 31.792007][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.859539][ T4895] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 31.859557][ T4895] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 32.199519][ T4917] netlink: 'syz.2.11': attribute type 1 has an invalid length. [ 32.216059][ T4915] loop3: detected capacity change from 0 to 8192 [ 32.222707][ T4895] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 32.222737][ T4895] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 32.223854][ T4915] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.320026][ T4895] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 32.320042][ T4895] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 32.323083][ T4920] Zero length message leads to an empty skb [ 32.324033][ T4920] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11'. [ 32.484074][ T4918] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11'. [ 32.497142][ T4854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.497159][ T4854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.516222][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.516238][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.543324][ T4924] vhci_hcd vhci_hcd.2: invalid port number 255 [ 32.543352][ T4924] vhci_hcd vhci_hcd.2: invalid port number 255 [ 32.545580][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.545594][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.656394][ T4929] loop1: detected capacity change from 0 to 256 [ 32.720498][ T4935] loop2: detected capacity change from 0 to 512 [ 32.730740][ T4935] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.730763][ T4935] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 32.746834][ T4935] EXT4-fs (loop2): 1 truncate cleaned up [ 32.757698][ T4935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.819621][ T4935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14'. [ 33.005029][ T4933] loop4: detected capacity change from 0 to 128 [ 33.005363][ T4933] ======================================================= [ 33.005363][ T4933] WARNING: The mand mount option has been deprecated and [ 33.005363][ T4933] and is ignored by this kernel. Remove the mand [ 33.005363][ T4933] option from the mount to silence this warning. [ 33.005363][ T4933] ======================================================= [ 33.048594][ T4933] geneve2: entered promiscuous mode [ 33.048613][ T4933] geneve2: entered allmulticast mode [ 33.195077][ T4960] netlink: 132 bytes leftover after parsing attributes in process `syz.1.20'. [ 33.206771][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.262538][ T4963] loop2: detected capacity change from 0 to 1024 [ 33.263231][ T4963] EXT4-fs: Ignoring removed bh option [ 33.281225][ T4963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.296850][ T4963] process 'syz.2.22' launched '/dev/fd/8/./file1' with NULL argv: empty string added [ 33.305929][ T4966] loop0: detected capacity change from 0 to 128 [ 33.317027][ T4966] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 33.317078][ T4966] System zones: 1-3, 19-19, 35-36 [ 33.322072][ T4966] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 33.331978][ T4972] FAULT_INJECTION: forcing a failure. [ 33.331978][ T4972] name failslab, interval 1, probability 0, space 0, times 1 [ 33.332001][ T4972] CPU: 0 UID: 0 PID: 4972 Comm: syz.3.21 Tainted: G L syzkaller #0 PREEMPT [ 33.332014][ T4972] Tainted: [L]=SOFTLOCKUP [ 33.332018][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 33.332023][ T4972] Call trace: [ 33.332026][ T4972] show_stack+0x2c/0x3c (C) [ 33.332045][ T4972] __dump_stack+0x30/0x40 [ 33.332057][ T4972] dump_stack_lvl+0xd8/0x12c [ 33.332069][ T4972] dump_stack+0x1c/0x28 [ 33.332080][ T4972] should_fail_ex+0x418/0x58c [ 33.332093][ T4972] should_failslab+0xc4/0x120 [ 33.332106][ T4972] kmem_cache_alloc_node_noprof+0x98/0x604 [ 33.332115][ T4972] __alloc_skb+0x1f0/0x610 [ 33.332126][ T4972] __ip_append_data+0x2754/0x36ac [ 33.332141][ T4972] ip_make_skb+0x208/0x254 [ 33.332152][ T4972] udp_sendmsg+0x12e0/0x1ab4 [ 33.332162][ T4972] udpv6_sendmsg+0xa00/0x1eec [ 33.332173][ T4972] inet6_sendmsg+0xb4/0xd8 [ 33.332182][ T4972] __sock_sendmsg+0xc8/0x17c [ 33.332192][ T4972] sock_write_iter+0x220/0x310 [ 33.332203][ T4972] vfs_write+0x51c/0xa0c [ 33.332215][ T4972] ksys_write+0x12c/0x228 [ 33.332227][ T4972] __arm64_sys_write+0x84/0x98 [ 33.332239][ T4972] invoke_syscall+0x98/0x244 [ 33.332251][ T4972] el0_svc_common+0xec/0x23c [ 33.332262][ T4972] do_el0_svc+0x4c/0x5c [ 33.332273][ T4972] el0_svc+0x60/0x1d8 [ 33.332286][ T4972] el0t_64_sync_handler+0x44/0x104 [ 33.332297][ T4972] el0t_64_sync+0x198/0x19c [ 33.349496][ T4975] xt_CT: You must specify a L4 protocol and not use inversions on it [ 33.437903][ T4977] netlink: 48 bytes leftover after parsing attributes in process `syz.3.24'. [ 33.494842][ T30] audit: type=1326 audit(33.480:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4978 comm="syz.3.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff798a8 code=0x7ffc0000 [ 33.496307][ T30] audit: type=1326 audit(33.480:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4978 comm="syz.3.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9ff798a8 code=0x7ffc0000 [ 33.496376][ T30] audit: type=1326 audit(33.480:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4978 comm="syz.3.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff798a8 code=0x7ffc0000 [ 33.496399][ T30] audit: type=1326 audit(33.480:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4978 comm="syz.3.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff798a8 code=0x7ffc0000 [ 33.501153][ T30] audit: type=1326 audit(33.490:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4978 comm="syz.3.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9ff798a8 code=0x7ffc0000 [ 33.501171][ T30] audit: type=1326 audit(33.490:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4978 comm="syz.3.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff798a8 code=0x7ffc0000 [ 33.502147][ T4979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 33.548681][ T1166] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.548724][ T1166] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.548739][ T1166] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.548754][ T1166] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.659033][ T4981] loop3: detected capacity change from 0 to 256 [ 33.670569][ T4705] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 33.670736][ T4705] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 34.162116][ T4706] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.240852][ T4854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.334115][ T49] IPVS: starting estimator thread 0... [ 34.343280][ T4995] loop0: detected capacity change from 0 to 128 [ 34.353896][ T4854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.371171][ T4995] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.377285][ T4722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.382482][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.386469][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.386855][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.387197][ T4722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.403284][ T4706] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.429248][ T5001] IPVS: using max 61 ests per chain, 146400 per kthread [ 34.455055][ T4854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.456951][ T4716] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.473856][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.530872][ T4854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.591785][ T5020] syz.0.38 uses obsolete (PF_INET,SOCK_PACKET) [ 34.592080][ T5020] FAULT_INJECTION: forcing a failure. [ 34.592080][ T5020] name fail_futex, interval 1, probability 0, space 0, times 1 [ 34.592096][ T5020] CPU: 0 UID: 0 PID: 5020 Comm: syz.0.38 Tainted: G L syzkaller #0 PREEMPT [ 34.592109][ T5020] Tainted: [L]=SOFTLOCKUP [ 34.592112][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.592117][ T5020] Call trace: [ 34.592120][ T5020] show_stack+0x2c/0x3c (C) [ 34.592137][ T5020] __dump_stack+0x30/0x40 [ 34.592148][ T5020] dump_stack_lvl+0xd8/0x12c [ 34.592158][ T5020] dump_stack+0x1c/0x28 [ 34.592167][ T5020] should_fail_ex+0x418/0x58c [ 34.592179][ T5020] should_fail+0x14/0x24 [ 34.592188][ T5020] get_futex_key+0x1ec/0x12b0 [ 34.592199][ T5020] futex_wake+0x10c/0x594 [ 34.592208][ T5020] do_futex+0x2c4/0x378 [ 34.592216][ T5020] __arm64_sys_futex+0x2e4/0x418 [ 34.592225][ T5020] invoke_syscall+0x98/0x244 [ 34.592235][ T5020] el0_svc_common+0xec/0x23c [ 34.592244][ T5020] do_el0_svc+0x4c/0x5c [ 34.592253][ T5020] el0_svc+0x60/0x1d8 [ 34.592264][ T5020] el0t_64_sync_handler+0x44/0x104 [ 34.592273][ T5020] el0t_64_sync+0x198/0x19c [ 34.792441][ T4854] bridge_slave_1: left allmulticast mode [ 34.792467][ T4854] bridge_slave_1: left promiscuous mode [ 34.792851][ T4854] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.816813][ T4854] bridge_slave_0: left allmulticast mode [ 34.816836][ T4854] bridge_slave_0: left promiscuous mode [ 34.816941][ T4854] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.847290][ T5045] x_tables: duplicate underflow at hook 2 [ 34.849946][ T5041] x_tables: duplicate underflow at hook 2 [ 34.920543][ T4854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.950959][ T4854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.972468][ T4854] bond0 (unregistering): Released all slaves [ 34.994797][ T5002] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.994915][ T5002] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.994970][ T5002] bridge_slave_0: entered allmulticast mode [ 34.995443][ T5002] bridge_slave_0: entered promiscuous mode [ 35.017897][ T5002] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.017951][ T5002] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.018012][ T5002] bridge_slave_1: entered allmulticast mode [ 35.019311][ T5002] bridge_slave_1: entered promiscuous mode [ 35.024870][ T4396] 8021q: adding VLAN 0 to HW filter on device eth0 [ 35.046136][ T5002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.046989][ T5002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.060436][ T5002] team0: Port device team_slave_0 added [ 35.061289][ T5002] team0: Port device team_slave_1 added [ 35.073930][ T5065] loop3: detected capacity change from 0 to 512 [ 35.088610][ T5065] EXT4-fs: Ignoring removed oldalloc option [ 35.093334][ T5065] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 35.093449][ T5065] EXT4-fs error (device loop3): ext4_init_orphan_info:583: comm syz.3.45: inode #0: comm syz.3.45: iget: illegal inode # [ 35.093465][ T5065] loop3: lost filesystem error report for type 5 error -117 [ 35.093560][ T5065] EXT4-fs (loop3): get orphan inode failed [ 35.093773][ T5065] EXT4-fs (loop3): mount failed [ 35.124862][ T49] IPVS: starting estimator thread 0... [ 35.142886][ T5002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.142901][ T5002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.142919][ T5002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.143568][ T5002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.143575][ T5002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.143587][ T5002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.179392][ T5002] hsr_slave_0: entered promiscuous mode [ 35.179685][ T5002] hsr_slave_1: entered promiscuous mode [ 35.179862][ T5002] debugfs: 'hsr0' already exists in 'hsr' [ 35.179874][ T5002] Cannot create hsr debugfs directory [ 35.222994][ T5082] gadgetfs: bound to dummy_udc driver [ 35.238272][ T5072] IPVS: using max 59 ests per chain, 141600 per kthread [ 35.254647][ T5082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 35.492035][ T5082] Invalid source name [ 35.492049][ T5082] UBIFS error (pid: 5082): cannot open "/dev/loop0", error -22 [ 35.561539][ T5070] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 35.584710][ T5093] infiniband syz0: set active [ 35.584727][ T5093] infiniband syz0: added veth1_to_bridge [ 35.607899][ T5093] RDS/IB: syz0: added [ 35.607998][ T5093] smc: adding ib device syz0 with port count 1 [ 35.608026][ T5093] smc: ib device syz0 port 1 has no pnetid [ 35.679768][ T4396] 8021q: adding VLAN 0 to HW filter on device eth1 [ 36.137927][ T4854] hsr_slave_0: left promiscuous mode [ 36.139912][ T4854] hsr_slave_1: left promiscuous mode [ 36.140269][ T4854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.140285][ T4854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.140934][ T4854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.140945][ T4854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.144128][ T5113] netlink: 36 bytes leftover after parsing attributes in process `syz.3.51'. [ 36.146571][ T4854] veth1_macvtap: left promiscuous mode [ 36.146610][ T4854] veth0_macvtap: left promiscuous mode [ 36.146666][ T4854] veth1_vlan: left promiscuous mode [ 36.146709][ T4854] veth0_vlan: left promiscuous mode [ 36.251635][ T4854] team0 (unregistering): Port device team_slave_1 removed [ 36.255370][ T4854] team0 (unregistering): Port device team_slave_0 removed [ 36.339723][ T5123] EXT4-fs (loop3): Test dummy encryption mode enabled [ 36.341414][ T5123] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.54: inode has both inline data and extents flags [ 36.341488][ T5123] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 36.341799][ T5123] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.54: couldn't read orphan inode 15 (err -117) [ 36.341812][ T5123] loop3: lost filesystem error report for type 5 error -117 [ 36.342852][ T5123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.345435][ T5123] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 36.396493][ T5126] capability: warning: `syz.0.55' uses 32-bit capabilities (legacy support in use) [ 36.408826][ T4722] Bluetooth: hci0: command tx timeout [ 36.416297][ T5131] fscrypt: AES-256-XTS using blk-crypto-fallback [ 36.423019][ T5134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 36.426424][ T5134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 36.439069][ T14] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.439102][ T14] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.439118][ T14] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.439132][ T14] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.466728][ T5137] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 36.547852][ T5137] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.090063][ T5069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 38.091776][ T5002] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 38.095311][ T5002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.095641][ T5002] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 38.119681][ T5002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.121588][ T5002] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 38.126086][ T5002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.126460][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.127248][ T5002] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 38.142139][ T5002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.165779][ T5158] set_capacity_and_notify: 3 callbacks suppressed [ 38.165793][ T5158] loop0: detected capacity change from 0 to 1024 [ 38.167265][ T5163] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 38.216661][ T5173] loop3: detected capacity change from 0 to 256 [ 38.224809][ T5002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.234758][ T5002] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.235014][ T5158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.237598][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.237625][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.243121][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.243148][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.249268][ T5158] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.63: bg 0: block 112: padding at end of block bitmap is not set [ 38.387448][ T5158] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 38.387473][ T5158] EXT4-fs (loop0): This should not happen!! Data will be lost [ 38.387473][ T5158] [ 38.387482][ T5158] EXT4-fs (loop0): Total free blocks count 0 [ 38.387489][ T5158] EXT4-fs (loop0): Free/Dirty block details [ 38.387501][ T5158] EXT4-fs (loop0): free_blocks=0 [ 38.387512][ T5158] EXT4-fs (loop0): dirty_blocks=48 [ 38.387519][ T5158] EXT4-fs (loop0): Block reservation details [ 38.387525][ T5158] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 38.413323][ T4396] 8021q: adding VLAN 0 to HW filter on device eth2 [ 38.434909][ T4706] EXT4-fs error (device loop0): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /18/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 38.444356][ T5201] loop2: detected capacity change from 0 to 512 [ 38.454339][ T5201] EXT4-fs (loop2): Test dummy encryption mode enabled [ 38.455542][ T4706] EXT4-fs error (device loop0): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /18/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 38.456874][ T4706] EXT4-fs error (device loop0): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 38.458678][ T4706] EXT4-fs error (device loop0): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /18/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 38.468431][ T5201] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.66: inode has both inline data and extents flags [ 38.468465][ T5201] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.471768][ T5201] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.66: couldn't read orphan inode 15 (err -117) [ 38.471793][ T5201] loop2: lost filesystem error report for type 5 error -117 [ 38.472727][ T5201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.473767][ T4706] EXT4-fs error (device loop0): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 38.475339][ T4706] EXT4-fs error (device loop0): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /18/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 38.479458][ T4706] EXT4-fs error (device loop0): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 38.490037][ T4722] Bluetooth: hci0: command tx timeout [ 38.499887][ T5211] loop1: detected capacity change from 0 to 2048 [ 38.500139][ T4706] EXT4-fs error (device loop0): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /18/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 38.500599][ T4706] EXT4-fs error (device loop0): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 38.519525][ T5211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.571220][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.594702][ T5002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.604807][ T5227] loop2: detected capacity change from 0 to 512 [ 38.605145][ T5227] EXT4-fs: Ignoring removed i_version option [ 38.608955][ T5227] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 38.611395][ T5227] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 38.611437][ T5227] System zones: 1-12 [ 38.611529][ T5227] EXT4-fs (loop2): orphan cleanup on readonly fs [ 38.611954][ T5227] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.70: invalid indirect mapped block 12 (level 1) [ 38.611974][ T5227] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.612593][ T5227] EXT4-fs (loop2): Remounting filesystem read-only [ 38.612730][ T5227] EXT4-fs (loop2): 1 truncate cleaned up [ 38.613734][ T5227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 38.620526][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 38.620537][ T30] audit: type=1326 audit(38.600:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5226 comm="syz.2.70" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb35798a8 code=0x0 [ 38.622145][ T5211] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.67: bg 0: block 345: padding at end of block bitmap is not set [ 38.652053][ T5211] fs-verity (loop1, inode 13): Error -28 writing Merkle tree block 1 [ 38.652087][ T5211] fs-verity (loop1, inode 13): Error -28 building Merkle tree [ 38.691806][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.748560][ T5240] netlink: 52 bytes leftover after parsing attributes in process `syz.3.71'. [ 38.750729][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.751209][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.779904][ T5002] veth0_vlan: entered promiscuous mode [ 38.782423][ T5002] veth1_vlan: entered promiscuous mode [ 38.805002][ T5002] veth0_macvtap: entered promiscuous mode [ 38.812019][ T5002] veth1_macvtap: entered promiscuous mode [ 38.815784][ T5257] loop3: detected capacity change from 0 to 128 [ 38.816719][ T5002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.827886][ T5002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.833920][ T5257] EXT4-fs (loop3): Test dummy encryption mode enabled [ 38.845007][ T5257] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.848992][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.849134][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.849199][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.849214][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.858906][ T5255] loop1: detected capacity change from 0 to 256 [ 38.898409][ T4710] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.918730][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.918741][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.931794][ T4396] 8021q: adding VLAN 0 to HW filter on device eth3 [ 38.935714][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.935728][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.966711][ T5264] FAULT_INJECTION: forcing a failure. [ 38.966711][ T5264] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.966733][ T5264] CPU: 1 UID: 0 PID: 5264 Comm: syz.3.76 Tainted: G L syzkaller #0 PREEMPT [ 38.966745][ T5264] Tainted: [L]=SOFTLOCKUP [ 38.966749][ T5264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.966754][ T5264] Call trace: [ 38.966757][ T5264] show_stack+0x2c/0x3c (C) [ 38.966775][ T5264] __dump_stack+0x30/0x40 [ 38.966787][ T5264] dump_stack_lvl+0xd8/0x12c [ 38.966799][ T5264] dump_stack+0x1c/0x28 [ 38.966809][ T5264] should_fail_ex+0x418/0x58c [ 38.966822][ T5264] should_fail+0x14/0x24 [ 38.966833][ T5264] should_fail_usercopy+0x20/0x30 [ 38.966845][ T5264] bpf_verifier_vlog+0x2f0/0xbc0 [ 38.966859][ T5264] btf_verifier_log+0x120/0x1a0 [ 38.966867][ T5264] btf_func_proto_log+0x5a8/0x7a0 [ 38.966877][ T5264] __btf_verifier_log_type+0x3bc/0x5e4 [ 38.966885][ T5264] btf_func_proto_check_meta+0x118/0x154 [ 38.966894][ T5264] btf_parse_type_sec+0x36c/0x17a8 [ 38.966904][ T5264] btf_new_fd+0x33c/0xa50 [ 38.966916][ T5264] bpf_btf_load+0x144/0x190 [ 38.966926][ T5264] __sys_bpf+0x7f0/0x82c [ 38.966935][ T5264] __arm64_sys_bpf+0xd0/0xec [ 38.966943][ T5264] invoke_syscall+0x98/0x244 [ 38.966955][ T5264] el0_svc_common+0xec/0x23c [ 38.966966][ T5264] do_el0_svc+0x4c/0x5c [ 38.966977][ T5264] el0_svc+0x60/0x1d8 [ 38.966989][ T5264] el0t_64_sync_handler+0x44/0x104 [ 38.967001][ T5264] el0t_64_sync+0x198/0x19c [ 38.984392][ T5264] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 39.046530][ T5271] loop3: detected capacity change from 0 to 1024 [ 39.055478][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.055519][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.060432][ T5271] jbd2_journal_init_inode: Cannot locate journal superblock [ 39.060475][ T5271] EXT4-fs (loop3): Could not load journal inode [ 39.103318][ T5277] loop5: detected capacity change from 0 to 512 [ 39.105098][ T5277] EXT4-fs: Ignoring removed i_version option [ 39.107618][ T5277] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 39.111667][ T5275] netlink: 36 bytes leftover after parsing attributes in process `syz.1.79'. [ 39.112348][ T5277] EXT4-fs (loop5): 1 truncate cleaned up [ 39.116901][ T5271] loop3: detected capacity change from 0 to 1024 [ 39.117461][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.117473][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.117999][ T5271] jbd2_journal_init_inode: Cannot locate journal superblock [ 39.118004][ T5271] EXT4-fs (loop3): Could not load journal inode [ 39.125743][ T5277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.152986][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.153004][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.153527][ T5271] jbd2_journal_init_inode: Cannot locate journal superblock [ 39.153533][ T5271] EXT4-fs (loop3): Could not load journal inode [ 39.166257][ T49] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 39.175558][ T5002] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.182977][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.182993][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.183579][ T5271] jbd2_journal_init_inode: Cannot locate journal superblock [ 39.183585][ T5271] EXT4-fs (loop3): Could not load journal inode [ 39.196984][ T228] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 39.197009][ T228] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.254856][ T5282] ext4: Unknown parameter 'nojournal_checksum.sb' [ 39.264245][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.264263][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.264833][ T5271] jbd2_journal_init_inode: Cannot locate journal superblock [ 39.264939][ T5271] EXT4-fs (loop3): Could not load journal inode [ 39.305192][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.305221][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.315814][ T5271] jbd2_journal_init_inode: Cannot locate journal superblock [ 39.315828][ T5271] EXT4-fs (loop3): Could not load journal inode [ 39.327447][ T228] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 39.327472][ T228] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.354294][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.354313][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.355336][ T5271] jbd2_journal_init_inode: Cannot locate journal superblock [ 39.355345][ T5271] EXT4-fs (loop3): Could not load journal inode [ 39.397839][ T4713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 39.400320][ T4713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 39.403053][ T4713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 39.404242][ T4713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 39.404510][ T4713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 39.444626][ T228] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 39.444652][ T228] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.455649][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.455668][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.456234][ T5271] jbd2_journal_init_inode: Cannot locate journal superblock [ 39.456239][ T5271] EXT4-fs (loop3): Could not load journal inode [ 39.472464][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 39.484319][ T5296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.85'. [ 39.484343][ T5296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 39.507405][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.507447][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.511403][ T5271] jbd2_journal_init_inode: Cannot locate journal superblock [ 39.511413][ T5271] EXT4-fs (loop3): Could not load journal inode [ 39.553298][ T228] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 39.553336][ T228] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.561853][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.561876][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.568707][ T5271] jbd2_journal_init_inode: Cannot locate journal superblock [ 39.568728][ T5271] EXT4-fs (loop3): Could not load journal inode [ 39.616343][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.616368][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.616991][ T5271] jbd2_journal_init_inode: Cannot locate journal superblock [ 39.617001][ T5271] EXT4-fs (loop3): Could not load journal inode [ 39.652108][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.652142][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.657543][ T5271] jbd2_journal_init_inode: Cannot locate journal superblock [ 39.657567][ T5271] EXT4-fs (loop3): Could not load journal inode [ 39.709979][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.710004][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.711021][ T5271] jbd2_journal_init_inode: Cannot locate journal superblock [ 39.711030][ T5271] EXT4-fs (loop3): Could not load journal inode [ 39.739248][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.739272][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.747154][ T5271] jbd2_journal_init_inode: Cannot locate journal superblock [ 39.747178][ T5271] EXT4-fs (loop3): Could not load journal inode [ 39.759526][ T228] bridge_slave_1: left allmulticast mode [ 39.759635][ T228] bridge_slave_1: left promiscuous mode [ 39.759741][ T228] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.763853][ T228] bridge_slave_0: left allmulticast mode [ 39.763868][ T228] bridge_slave_0: left promiscuous mode [ 39.763955][ T228] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.777723][ T5326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.797932][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.797958][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.800744][ T5271] jbd2_journal_init_inode: Cannot locate journal superblock [ 39.800765][ T5271] EXT4-fs (loop3): Could not load journal inode [ 39.886368][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.955751][ T5334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.016907][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.039577][ T228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.072094][ T228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.109522][ T228] bond0 (unregistering): Released all slaves [ 40.166897][ T5332] syzkaller0: entered promiscuous mode [ 40.166918][ T5332] syzkaller0: entered allmulticast mode [ 40.222984][ T5365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 40.223004][ T5365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.99'. [ 40.266142][ T5368] EXT4-fs: Ignoring removed oldalloc option [ 40.269421][ T5368] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.100: bad orphan inode 32 [ 40.269441][ T5368] loop3: lost filesystem error report for type 5 error -117 [ 40.269580][ T5368] ext4_test_bit(bit=31, block=4) = 0 [ 40.269588][ T5368] EXT4-fs (loop3): 1 truncate cleaned up [ 40.269999][ T5368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.327774][ T4710] EXT4-fs error (device loop3): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 40.341921][ T4710] EXT4-fs error (device loop3): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 40.463288][ T5393] overlay: Unknown parameter 'fowner' [ 40.546556][ T4396] 8021q: adding VLAN 0 to HW filter on device eth4 [ 40.575627][ T228] hsr_slave_0: left promiscuous mode [ 40.576181][ T228] hsr_slave_1: left promiscuous mode [ 40.576489][ T228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.576503][ T228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.581525][ T4713] Bluetooth: hci0: command tx timeout [ 40.581860][ T228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.581871][ T228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.589408][ T228] veth1_macvtap: left promiscuous mode [ 40.589437][ T228] veth0_macvtap: left promiscuous mode [ 40.589484][ T228] veth1_vlan: left promiscuous mode [ 40.589580][ T228] veth0_vlan: left promiscuous mode [ 40.594550][ T5405] overlayfs: failed lookup in lower (newroot/25, name='bus', err=-40): overlapping layers [ 40.594612][ T5405] overlayfs: failed lookup in lower (newroot/25, name='bus', err=-40): overlapping layers [ 40.594664][ T5405] overlayfs: failed lookup in lower (newroot/25, name='bus', err=-40): overlapping layers [ 40.594709][ T5405] overlayfs: failed lookup in lower (newroot/25, name='bus', err=-40): overlapping layers [ 40.594758][ T5405] overlayfs: failed lookup in lower (newroot/25, name='bus', err=-40): overlapping layers [ 40.594829][ T5405] overlayfs: failed lookup in lower (newroot/25, name='bus', err=-40): overlapping layers [ 40.594876][ T5405] overlayfs: failed lookup in lower (newroot/25, name='bus', err=-40): overlapping layers [ 40.594920][ T5405] overlayfs: failed lookup in lower (newroot/25, name='bus', err=-40): overlapping layers [ 40.594964][ T5405] overlayfs: failed lookup in lower (newroot/25, name='bus', err=-40): overlapping layers [ 40.595719][ T5405] overlayfs: failed lookup in lower (newroot/25, name='bus', err=-40): overlapping layers [ 40.600630][ T5375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.661952][ T5401] fuse: Unknown parameter 'f@qô+*r_jÅEd' [ 40.824254][ T228] team0 (unregistering): Port device team_slave_1 removed [ 40.847811][ T228] team0 (unregistering): Port device team_slave_0 removed [ 40.867570][ T5419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.108'. [ 40.958079][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 40.960502][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 40.960920][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 40.961718][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 40.961916][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 41.036827][ T5291] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.038125][ T5291] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.042999][ T5291] bridge_slave_0: entered allmulticast mode [ 41.046098][ T5291] bridge_slave_0: entered promiscuous mode [ 41.059914][ T5291] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.059974][ T5291] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.060056][ T5291] bridge_slave_1: entered allmulticast mode [ 41.062616][ T5291] bridge_slave_1: entered promiscuous mode [ 41.118484][ T5291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.122757][ T5291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.180209][ T5291] team0: Port device team_slave_0 added [ 41.183956][ T5291] team0: Port device team_slave_1 added [ 41.219580][ T5291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.219594][ T5291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.219605][ T5291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.221535][ T5291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.221548][ T5291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.221559][ T5291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.305551][ T5291] hsr_slave_0: entered promiscuous mode [ 41.307414][ T5291] hsr_slave_1: entered promiscuous mode [ 41.450616][ T4713] Bluetooth: hci1: command tx timeout [ 41.482579][ T228] IPVS: stop unused estimator thread 0... [ 41.523313][ T5457] netlink: 44 bytes leftover after parsing attributes in process `syz.1.115'. [ 41.542409][ T5291] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 41.545345][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.545675][ T5291] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 41.547104][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.556640][ T4396] 8021q: adding VLAN 0 to HW filter on device eth5 [ 41.584237][ T228] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 41.584264][ T228] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.587996][ T5291] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 41.588124][ T5462] vxcan1: tx address claim with dest, not broadcast [ 41.596062][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.596431][ T5291] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 41.597753][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.626939][ T5462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.116'. [ 41.637283][ T5462] bridge_slave_0: left allmulticast mode [ 41.637303][ T5462] bridge_slave_0: left promiscuous mode [ 41.637402][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.645070][ T5462] bridge_slave_1: left allmulticast mode [ 41.647480][ T5462] bridge_slave_1: left promiscuous mode [ 41.647598][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.682115][ T228] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 41.682144][ T228] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.701110][ T5291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.711321][ T5291] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.713312][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.713349][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.719863][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.719892][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.761570][ T228] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 41.761597][ T228] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.806407][ T5482] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.119: corrupted inode contents [ 41.806432][ T5482] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.808197][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 41.808212][ C0] EXT4-fs (loop2): initial error at time 41: ext4_do_update_inode:5801: inode 16 [ 41.808230][ C0] EXT4-fs (loop2): last error at time 41: ext4_do_update_inode:5801: inode 16 [ 41.818817][ T5495] EXT4-fs: Ignoring removed i_version option [ 41.828118][ T5482] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #16: comm syz.2.119: mark_inode_dirty error [ 41.829059][ T5482] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.830569][ T5482] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.119: corrupted inode contents [ 41.830597][ T5482] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.831050][ T5482] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.119: mark_inode_dirty error [ 41.831069][ T5482] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.831335][ T5482] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.119: corrupted inode contents [ 41.831355][ T5482] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.831764][ T228] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 41.831781][ T228] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.834224][ T5495] EXT4-fs (loop1): 1 orphan inode deleted [ 41.834697][ T5495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.835371][ T5482] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 41.835388][ T5482] loop2: lost filesystem error report for type 5 error -117 [ 41.835885][ T5482] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.119: corrupted inode contents [ 41.835902][ T5482] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.844593][ T5482] EXT4-fs error (device loop2): ext4_truncate:4721: inode #16: comm syz.2.119: mark_inode_dirty error [ 41.844630][ T5482] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.849720][ T5482] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 41.849744][ T5482] loop2: lost filesystem error report for type 5 error -117 [ 41.850268][ T5482] EXT4-fs (loop2): 1 truncate cleaned up [ 41.850740][ T5482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.879250][ T399] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 41.879281][ T399] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 1 [ 41.891417][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.905586][ T5421] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.905651][ T5421] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.905709][ T5421] bridge_slave_0: entered allmulticast mode [ 41.906616][ T5421] bridge_slave_0: entered promiscuous mode [ 41.918688][ T5421] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.918718][ T5421] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.918774][ T5421] bridge_slave_1: entered allmulticast mode [ 41.919213][ T5421] bridge_slave_1: entered promiscuous mode [ 41.931729][ T4396] 8021q: adding VLAN 0 to HW filter on device eth6 [ 41.934991][ T5482] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 41.941921][ T5482] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.119: iget: bad i_size value: 1407374883557376 [ 41.944998][ T5421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.947544][ T5421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.976176][ T5421] team0: Port device team_slave_0 added [ 41.977035][ T5421] team0: Port device team_slave_1 added [ 42.026779][ T5421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.026796][ T5421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.026811][ T5421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.037745][ T5421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.037757][ T5421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.037770][ T5421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.047872][ T5511] EXT4-fs: Ignoring removed nobh option [ 42.064979][ T5511] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 42.064997][ T5511] loop1: lost filesystem error report for type 5 error -12 [ 42.066799][ T5511] EXT4-fs (loop1): 2 truncates cleaned up [ 42.067323][ T5511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.122094][ T228] bridge_slave_1: left allmulticast mode [ 42.122117][ T228] bridge_slave_1: left promiscuous mode [ 42.122196][ T228] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.124783][ T228] bridge_slave_0: left allmulticast mode [ 42.124795][ T228] bridge_slave_0: left promiscuous mode [ 42.124863][ T228] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.125968][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.175666][ T5525] overlay: ./file2 is not a directory [ 42.188914][ T5525] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #12: block 7: comm syz.1.122: bad entry in directory: directory entry overrun - offset=0, inode=4278190093, rec_len=196860, size=56 fake=0 [ 42.220388][ T228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.233489][ T228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.269146][ T228] bond0 (unregistering): Released all slaves [ 42.270945][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 42.272680][ T5421] hsr_slave_0: entered promiscuous mode [ 42.272989][ T5421] hsr_slave_1: entered promiscuous mode [ 42.273992][ T5421] debugfs: 'hsr0' already exists in 'hsr' [ 42.274004][ T5421] Cannot create hsr debugfs directory [ 42.284729][ T4396] 8021q: adding VLAN 0 to HW filter on device eth7 [ 42.289144][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.354365][ T5291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.410889][ T5421] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 42.415528][ T5421] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.415972][ T5421] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 42.419675][ T5421] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.419979][ T5421] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 42.434071][ T5421] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.452888][ T5421] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 42.454107][ T5421] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.595077][ T5291] veth0_vlan: entered promiscuous mode [ 42.596929][ T5291] veth1_vlan: entered promiscuous mode [ 42.626585][ T5291] veth0_macvtap: entered promiscuous mode [ 42.641427][ T5291] veth1_macvtap: entered promiscuous mode [ 42.648402][ T4713] Bluetooth: hci0: command tx timeout [ 42.653268][ T5421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.670619][ T5291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.671838][ T5291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.691705][ T5589] ext4: Bad value for 'min_batch_time' [ 42.724094][ T5421] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.742767][ T5589] ext4: Bad value for 'min_batch_time' [ 42.748281][ T1166] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.748436][ T1166] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.748457][ T1166] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.748477][ T1166] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.761849][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.761889][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.764824][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.764863][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.766007][ T5589] ext4: Bad value for 'min_batch_time' [ 42.880007][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.880025][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.884677][ T5589] ext4: Bad value for 'min_batch_time' [ 42.953295][ T228] hsr_slave_0: left promiscuous mode [ 42.954474][ T5589] ext4: Bad value for 'min_batch_time' [ 42.961567][ T228] hsr_slave_1: left promiscuous mode [ 42.961917][ T228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.961929][ T228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.963985][ T5589] ext4: Bad value for 'min_batch_time' [ 42.964676][ T228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.964689][ T228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.968428][ T4713] Bluetooth: hci3: command tx timeout [ 42.983686][ T228] veth1_macvtap: left promiscuous mode [ 42.983719][ T228] veth0_macvtap: left promiscuous mode [ 42.983772][ T228] veth1_vlan: left promiscuous mode [ 42.983807][ T228] veth0_vlan: left promiscuous mode [ 42.993413][ T5589] ext4: Bad value for 'min_batch_time' [ 43.030107][ T5589] ext4: Bad value for 'min_batch_time' [ 43.093883][ T5589] ext4: Bad value for 'min_batch_time' [ 43.154222][ T5589] ext4: Bad value for 'min_batch_time' [ 43.179067][ T5589] set_capacity_and_notify: 34 callbacks suppressed [ 43.179081][ T5589] loop1: detected capacity change from 0 to 512 [ 43.179310][ T5589] ext4: Bad value for 'min_batch_time' [ 43.224619][ T5589] loop1: detected capacity change from 0 to 512 [ 43.224882][ T5589] ext4: Bad value for 'min_batch_time' [ 43.243665][ T5589] loop1: detected capacity change from 0 to 512 [ 43.243998][ T5589] ext4: Bad value for 'min_batch_time' [ 43.270643][ T5589] loop1: detected capacity change from 0 to 512 [ 43.270867][ T5589] ext4: Bad value for 'min_batch_time' [ 43.273152][ T5589] loop1: detected capacity change from 0 to 512 [ 43.273349][ T5589] ext4: Bad value for 'min_batch_time' [ 43.275496][ T5589] loop1: detected capacity change from 0 to 512 [ 43.275679][ T5589] ext4: Bad value for 'min_batch_time' [ 43.277810][ T5589] loop1: detected capacity change from 0 to 512 [ 43.277979][ T5589] ext4: Bad value for 'min_batch_time' [ 43.353267][ T5589] loop1: detected capacity change from 0 to 512 [ 43.353516][ T5589] ext4: Bad value for 'min_batch_time' [ 43.366409][ T5589] loop1: detected capacity change from 0 to 512 [ 43.366665][ T5589] ext4: Bad value for 'min_batch_time' [ 43.420503][ T5589] loop1: detected capacity change from 0 to 512 [ 43.420738][ T5589] ext4: Bad value for 'min_batch_time' [ 43.444191][ T5589] ext4: Bad value for 'min_batch_time' [ 43.464727][ T5589] ext4: Bad value for 'min_batch_time' [ 43.524624][ T228] team0 (unregistering): Port device team_slave_1 removed [ 43.532047][ T4713] Bluetooth: hci1: command tx timeout [ 43.544553][ T228] team0 (unregistering): Port device team_slave_0 removed [ 43.586438][ T5620] fuse: Bad value for 'fd' [ 43.603374][ T49] smc: removing ib device syz0 [ 43.757051][ T5086] infiniband syz0: ib_query_port failed (-19) [ 43.757559][ T4396] 8021q: adding VLAN 0 to HW filter on device eth8 [ 43.758540][ T5595] __nla_validate_parse: 1 callbacks suppressed [ 43.758550][ T5595] netlink: 12 bytes leftover after parsing attributes in process `syz.5.130'. [ 43.846454][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.846470][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.021164][ T5650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.83'. [ 44.021182][ T5650] netlink: 12 bytes leftover after parsing attributes in process `syz.6.83'. [ 44.021199][ T5650] netlink: 'syz.6.83': attribute type 13 has an invalid length. [ 44.061869][ T5421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.112717][ T5663] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.130852][ T5663] EXT4-fs error (device loop1): ext4_init_orphan_info:619: comm syz.1.137: orphan file block 0: bad magic [ 44.130873][ T5663] loop1: lost filesystem error report for type 5 error -117 [ 44.131218][ T5663] EXT4-fs (loop1): mount failed [ 44.226635][ T5658] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.244289][ T5667] netlink: 'syz.6.138': attribute type 5 has an invalid length. [ 44.362105][ T5658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.377591][ T5421] veth0_vlan: entered promiscuous mode [ 44.385686][ T5421] veth1_vlan: entered promiscuous mode [ 44.389358][ T5658] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.136: bg 0: block 2: invalid block bitmap [ 44.391337][ T5658] EXT4-fs (loop2): Remounting filesystem read-only [ 44.391398][ T5658] EXT4-fs warning (device loop2): ext4_xattr_inode_lookup_create:1613: inode #18: comm syz.2.136: cleanup dec ref error -117 [ 44.412508][ T5421] veth0_macvtap: entered promiscuous mode [ 44.413538][ T5421] veth1_macvtap: entered promiscuous mode [ 44.416629][ T5421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.417542][ T5421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.483929][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.528415][ T5644] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.546605][ T14] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.546662][ T14] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.546680][ T14] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.550953][ T5689] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.582733][ T5689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.662533][ T399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.662550][ T399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.713306][ T5002] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.764869][ T4396] 8021q: adding VLAN 0 to HW filter on device eth10 [ 44.837841][ T5708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.850428][ T5644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.850444][ T5644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.851553][ T5711] ext4: Unknown parameter 'euid<00000000000000000000' [ 44.969846][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.051726][ T4713] Bluetooth: hci3: command tx timeout [ 45.101104][ T5724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 45.134410][ T5690] overlayfs: statfs failed on './file0' [ 45.255427][ T5738] fuse: Bad value for 'fd' [ 45.365134][ T5744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.448010][ T5726] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 45.450299][ T4396] 8021q: adding VLAN 0 to HW filter on device eth9 [ 45.608487][ T4713] Bluetooth: hci1: command tx timeout [ 45.701897][ T5761] cgroup: fork rejected by pids controller in /syz1 [ 45.719139][ T5797] netlink: 'syz.5.156': attribute type 5 has an invalid length. [ 46.011785][ T5801] loop5: p2 < > p4 [ 46.014946][ T5801] loop5: p4 size 262144 extends beyond EOD, truncated [ 46.075666][ T5810] netlink: 'syz.7.159': attribute type 34 has an invalid length. [ 46.080541][ T4396] 8021q: adding VLAN 0 to HW filter on device eth11 [ 46.283215][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.349265][ T5817] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.356662][ T5842] vhci_hcd vhci_hcd.2: invalid port number 0 [ 46.361857][ T5841] Dev loop4: unable to read RDB block 7 [ 46.361875][ T5841] loop4: AHDI p1 p2 p3 [ 46.361886][ T5841] loop4: partition table partially beyond EOD, truncated [ 46.361969][ T5841] loop4: p1 start 1601398130 is beyond EOD, truncated [ 46.361978][ T5841] loop4: p2 start 1702059890 is beyond EOD, truncated [ 46.447185][ T5860] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.454016][ T5860] EXT4-fs (loop5): Test dummy encryption mode enabled [ 46.456729][ T5860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.513459][ T5866] netlink: 28 bytes leftover after parsing attributes in process `syz.6.165'. [ 46.513486][ T5866] netlink: 28 bytes leftover after parsing attributes in process `syz.6.165'. [ 46.513514][ T5866] netlink: 'syz.6.165': attribute type 6 has an invalid length. [ 46.517478][ T5866] 8021q: VLANs not supported on ip6_vti0 [ 46.619832][ T5860] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 46.625421][ T5860] netlink: 32 bytes leftover after parsing attributes in process `syz.5.164'. [ 46.626589][ T5860] ±ÿ†Ý'É|d<: renamed from lo (while UP) [ 46.666288][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.706847][ T5002] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.917083][ T5918] trusted_key: encrypted_key: keyword 'bbr' not recognized [ 47.129032][ T4713] Bluetooth: hci3: command tx timeout [ 47.265348][ T5935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.280633][ T5935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.174'. [ 47.280660][ T5935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.174'. [ 47.284031][ T5942] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.174: corrupted xattr block 33: invalid ea_ino [ 47.285805][ T5942] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.174: corrupted xattr block 33: invalid ea_ino [ 47.286193][ T5942] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.174: corrupted xattr block 33: invalid ea_ino [ 47.287441][ T5942] EXT4-fs error (device loop1): ext4_xattr_block_find:1885: inode #15: comm syz.1.174: corrupted xattr block 33: invalid ea_ino [ 47.330986][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.402494][ T5952] tipc: Started in network mode [ 47.402511][ T5952] tipc: Node identity 4, cluster identity 4711 [ 47.402517][ T5952] tipc: Node number set to 4 [ 47.431869][ T5956] netlink: 292 bytes leftover after parsing attributes in process `syz.6.179'. [ 47.432366][ T5956] netlink: 'syz.6.179': attribute type 2 has an invalid length. [ 47.643427][ T4396] 8021q: adding VLAN 0 to HW filter on device eth12 [ 47.688345][ T4713] Bluetooth: hci1: command tx timeout [ 48.242635][ T6025] set_capacity_and_notify: 20 callbacks suppressed [ 48.242649][ T6025] loop1: detected capacity change from 0 to 512 [ 48.243070][ T6025] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.244409][ T6025] EXT4-fs: test_dummy_encryption requires encrypt feature [ 48.393654][ T6039] tap0: tun_chr_ioctl cmd 2148553947 [ 48.393780][ T6039] tap0: tun_chr_ioctl cmd 1074025681 [ 48.433148][ T6044] loop1: detected capacity change from 0 to 512 [ 48.447324][ T6044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.477465][ T6044] comedi comedi0: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 48.602170][ T6056] loop2: detected capacity change from 0 to 128 [ 48.615542][ T6051] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 48.625239][ T6056] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.101013][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.208078][ T6088] loop1: detected capacity change from 0 to 256 [ 49.208286][ T4713] Bluetooth: hci3: command tx timeout [ 49.416422][ T6098] Bluetooth: MGMT ver 1.23 [ 49.460002][ T6102] loop1: detected capacity change from 0 to 512 [ 49.460379][ T6102] vfat: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 49.501920][ T6102] loop1: detected capacity change from 0 to 1024 [ 49.503385][ T6109] loop7: detected capacity change from 0 to 512 [ 49.513281][ T6109] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.541305][ T6102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.561132][ T6102] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.199: missing EA_INODE flag [ 49.567121][ T6109] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 49.572142][ T6102] EXT4-fs (loop1): Remounting filesystem read-only [ 49.659004][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.678938][ T6117] overlayfs: failed to resolve './bus': -2 [ 49.745918][ T6131] Quota error (device loop7): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 49.745981][ T6131] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 49.746004][ T6131] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.202: Failed to acquire dquot type 0 [ 49.752988][ T6131] overlayfs: failed to set uuid (/file0, err=-117); falling back to uuid=null. [ 49.762598][ T6130] loop1: detected capacity change from 0 to 1024 [ 49.781395][ T4716] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.811352][ T6130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.819935][ T6138] 9p: Bad value for 'rfdno' [ 49.846109][ T5421] Quota error (device loop7): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 49.846158][ T5421] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 49.846176][ T5421] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz-executor: Failed to acquire dquot type 0 [ 49.888027][ T6135] overlayfs: failed to resolve './bus': -2 [ 49.900183][ T6140] overlayfs: failed to resolve './bus': -2 [ 50.131484][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.204355][ T6179] __nla_validate_parse: 2 callbacks suppressed [ 50.204371][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.212'. [ 50.204385][ T6179] netlink: 47 bytes leftover after parsing attributes in process `syz.6.212'. [ 50.218776][ T5421] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 50.225653][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 50.308895][ T4854] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.324916][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 50.419938][ T4854] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.423690][ T6197] loop1: detected capacity change from 0 to 256 [ 50.457236][ T4712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 50.463247][ T6200] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 50.467426][ T4712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 50.471982][ T4712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 50.473399][ T4854] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.474076][ T4712] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 50.474295][ T4712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 50.592007][ T4854] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.739799][ T4854] bridge_slave_1: left allmulticast mode [ 50.739820][ T4854] bridge_slave_1: left promiscuous mode [ 50.739888][ T4854] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.741437][ T4854] bridge_slave_0: left allmulticast mode [ 50.741452][ T4854] bridge_slave_0: left promiscuous mode [ 50.741514][ T4854] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.824963][ T4854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.849597][ T4854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.864293][ T4854] bond0 (unregistering): Released all slaves [ 50.956876][ T6236] loop2: detected capacity change from 0 to 4096 [ 50.960797][ T6236] EXT4-fs: Ignoring removed orlov option [ 50.964132][ T6236] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.964144][ T6236] EXT4-fs (loop2): Test dummy encryption mode enabled [ 50.966021][ T6236] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec128, mo2=0002] [ 50.966060][ T6236] System zones: 0-5 [ 50.974087][ T6236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.991431][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.991494][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.991549][ T6203] bridge_slave_0: entered allmulticast mode [ 50.992024][ T6203] bridge_slave_0: entered promiscuous mode [ 50.993077][ T6236] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.221: bg 0: block 98: padding at end of block bitmap is not set [ 50.995452][ T6236] EXT4-fs (loop2): Remounting filesystem read-only [ 51.003078][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.003133][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.003187][ T6203] bridge_slave_1: entered allmulticast mode [ 51.004017][ T6203] bridge_slave_1: entered promiscuous mode [ 51.014542][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.016904][ T40] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 51.016928][ T40] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 51.060684][ T6203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.063540][ T6203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.078345][ T6203] team0: Port device team_slave_0 added [ 51.079598][ T6203] team0: Port device team_slave_1 added [ 51.086454][ T6203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.086465][ T6203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.086481][ T6203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.087944][ T6203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.087952][ T6203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.087966][ T6203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.186536][ T6259] netlink: 168 bytes leftover after parsing attributes in process `syz.5.226'. [ 51.187110][ T6259] netlink: 16 bytes leftover after parsing attributes in process `syz.5.226'. [ 51.187121][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.226'. [ 51.210480][ T4396] 8021q: adding VLAN 0 to HW filter on device eth13 [ 51.262868][ T4854] hsr_slave_0: left promiscuous mode [ 51.264038][ T4854] hsr_slave_1: left promiscuous mode [ 51.264334][ T4854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.264347][ T4854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.264901][ T4854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.264912][ T4854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.280507][ T4854] veth1_macvtap: left promiscuous mode [ 51.280538][ T4854] veth0_macvtap: left promiscuous mode [ 51.280586][ T4854] veth1_vlan: left promiscuous mode [ 51.280620][ T4854] veth0_vlan: left promiscuous mode [ 51.287374][ T6261] ubi0: attaching mtd0 [ 51.288089][ T6261] ubi0: scanning is finished [ 51.288098][ T6261] ubi0: empty MTD device detected [ 51.386598][ T6261] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 51.386620][ T6261] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 51.386629][ T6261] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 51.386636][ T6261] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 51.386643][ T6261] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 51.386649][ T6261] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 51.386655][ T6261] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2926259942 [ 51.386663][ T6261] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 51.387020][ T6276] ubi0: background thread "ubi_bgt0d" started, PID 6276 [ 51.416065][ T6279] netlink: 'syz.1.228': attribute type 1 has an invalid length. [ 51.416081][ T6279] nbd: error processing sock list [ 51.422850][ T6279] block nbd0: shutting down sockets [ 51.448349][ T4713] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 51.453000][ T4713] Bluetooth: hci0: command 0x0c1a tx timeout [ 51.534561][ T4854] team0 (unregistering): Port device team_slave_1 removed [ 51.555533][ T4854] team0 (unregistering): Port device team_slave_0 removed [ 51.613306][ T4396] 8021q: adding VLAN 0 to HW filter on device eth14 [ 51.844591][ T6203] hsr_slave_0: entered promiscuous mode [ 51.844951][ T6203] hsr_slave_1: entered promiscuous mode [ 51.845145][ T6203] debugfs: 'hsr0' already exists in 'hsr' [ 51.845156][ T6203] Cannot create hsr debugfs directory [ 51.926232][ T6203] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 51.927610][ T6203] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.928106][ T6203] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 51.937126][ T6203] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.937495][ T6203] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 51.942331][ T6203] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.943107][ T6203] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 51.945273][ T6203] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.982201][ T6203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.995928][ T6203] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.020726][ T6203] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.020746][ T6203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.034102][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.034129][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.035160][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.035183][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.238853][ T6203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.287538][ T6342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.294788][ T6345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.575433][ T4713] Bluetooth: hci3: command tx timeout [ 52.640311][ T6366] xt_hashlimit: size too large, truncated to 1048576 [ 52.640395][ T6366] xt_hashlimit: max too large, truncated to 1048576 [ 52.667753][ T6203] veth0_vlan: entered promiscuous mode [ 52.673524][ T6203] veth1_vlan: entered promiscuous mode [ 52.676474][ T6369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 52.700712][ T6203] veth0_macvtap: entered promiscuous mode [ 52.703854][ T6203] veth1_macvtap: entered promiscuous mode [ 52.704978][ T5002] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.734074][ T6203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.737314][ T6203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.759958][ T5911] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.762776][ T4854] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.762804][ T4854] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.762820][ T4854] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.783911][ T5911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.783930][ T5911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.796835][ T5625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.796850][ T5625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.016290][ T4396] 8021q: adding VLAN 0 to HW filter on device eth15 [ 53.121038][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.156761][ T4396] 8021q: adding VLAN 0 to HW filter on device eth16 [ 54.659051][ T4713] Bluetooth: hci3: command tx timeout [ 56.738286][ T4713] Bluetooth: hci3: command tx timeout [ 58.808329][ T4713] Bluetooth: hci3: command tx timeout [ 64.490200][ T1580] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.490239][ T1580] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.497318][ T1088] cfg80211: failed to load regulatory.db [ 117.350213][ T6643] set_capacity_and_notify: 4 callbacks suppressed [ 117.350226][ T6643] loop8: detected capacity change from 0 to 512 [ 117.355660][ T6643] EXT4-fs (loop8): Test dummy encryption mode enabled [ 117.369617][ T6643] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #12: comm syz.8.244: missing EA_INODE flag [ 117.369645][ T6643] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 117.371587][ T6638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.242'. [ 117.375828][ T6643] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.244: error while reading EA inode 12 err=-117 [ 117.375850][ T6643] loop8: lost filesystem error report for type 5 error -117 [ 117.376135][ T6643] EXT4-fs (loop8): 1 orphan inode deleted [ 117.376611][ T6643] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.380037][ T6639] loop2: detected capacity change from 0 to 512 [ 117.380598][ T6639] EXT4-fs: Ignoring removed nobh option [ 117.413352][ T6639] EXT4-fs error (device loop2): ext4_xattr_inode_iget:473: comm syz.2.243: EA inode 11 has unexpected i_nlink=0 ref_count=7168870745731235840 [ 117.413378][ T6639] loop2: lost filesystem error report for type 5 error -117 [ 117.413538][ T6639] EXT4-fs (loop2): Remounting filesystem read-only [ 117.414261][ T6639] EXT4-fs (loop2): 1 orphan inode deleted [ 117.414733][ T6639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.423117][ T30] audit: type=1326 audit(117.410:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6634 comm="syz.1.242" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb01798a8 code=0x7ffc0000 [ 117.432256][ T30] audit: type=1326 audit(117.420:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6634 comm="syz.1.242" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb01798a8 code=0x7ffc0000 [ 117.440067][ T6638] loop1: detected capacity change from 0 to 512 [ 117.441075][ T30] audit: type=1326 audit(117.420:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6634 comm="syz.1.242" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb01798a8 code=0x7ffc0000 [ 117.441101][ T30] audit: type=1326 audit(117.420:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6634 comm="syz.1.242" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb01798a8 code=0x7ffc0000 [ 117.441120][ T30] audit: type=1326 audit(117.420:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6634 comm="syz.1.242" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffb01798a8 code=0x7ffc0000 [ 117.441140][ T30] audit: type=1326 audit(117.420:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6634 comm="syz.1.242" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb01795a0 code=0x7ffc0000 [ 117.441159][ T30] audit: type=1326 audit(117.430:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6634 comm="syz.1.242" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb015c76c code=0x7ffc0000 [ 117.441175][ T30] audit: type=1326 audit(117.430:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6634 comm="syz.1.242" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffb017964c code=0x7ffc0000 [ 117.441190][ T30] audit: type=1326 audit(117.430:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6634 comm="syz.1.242" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb015c76c code=0x7ffc0000 [ 117.441204][ T30] audit: type=1326 audit(117.430:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6634 comm="syz.1.242" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb01794d0 code=0x7ffc0000 [ 117.544793][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.563855][ T6636] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 117.816633][ T6683] loop5: detected capacity change from 0 to 512 [ 117.822951][ T6683] EXT4-fs: Ignoring removed oldalloc option [ 117.826788][ T6683] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 117.850130][ T6683] EXT4-fs (loop5): 1 truncate cleaned up [ 117.850558][ T6683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.871842][ T6665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.877864][ T6665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.970640][ T6203] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.070237][ T6691] loop8: detected capacity change from 0 to 8 [ 118.079743][ T5625] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.079775][ T5625] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.079792][ T5625] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.079806][ T5625] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.085493][ T6691] unable to read inode lookup table [ 118.095697][ T6696] loop8: detected capacity change from 0 to 8 [ 118.201806][ T6709] loop1: detected capacity change from 0 to 2048 [ 118.232282][ T6709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.247033][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.283244][ T6722] loop2: detected capacity change from 0 to 1024 [ 118.304166][ T6722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 118.339010][ T6722] capability: warning: `syz.2.260' uses deprecated v2 capabilities in a way that may be insecure [ 118.340598][ T6722] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.260: Freeing blocks not in datazone - block = 0, count = 16 [ 118.341517][ T6722] EXT4-fs (loop2): Remounting filesystem read-only [ 118.356218][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 118.395750][ T6738] xt_CT: No such helper "pptp" [ 118.437496][ T6750] loop2: detected capacity change from 0 to 1024 [ 118.451299][ T6754] warning: `syz.1.270' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.466957][ T6750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 118.544250][ T6771] 8021q: VLANs not supported on tunl0 [ 118.682458][ T5002] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.711719][ T6789] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 118.711922][ T6790] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 119.410827][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 119.468323][ T6830] loop2: detected capacity change from 0 to 1024 [ 119.512169][ T6830] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 119.818290][ T6838] fuse: Bad value for 'fd' [ 119.835687][ T1088] kernel write not supported for file [eventfd] (pid: 1088 comm: kworker/1:2) [ 119.837494][ T6845] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.286: Failed to acquire dquot type 1 [ 119.837510][ T6845] loop2: lost filesystem error report for type 5 error -117 [ 119.837939][ T6845] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.286: Failed to acquire dquot type 1 [ 119.837953][ T6845] loop2: lost filesystem error report for type 5 error -117 [ 119.838195][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 119.838206][ C1] EXT4-fs (loop2): last error at time 119: ext4_acquire_dquot:7069 [ 119.854885][ T6838] overlay: ./file0 is not a directory [ 119.858057][ T6845] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.286: bg 0: block 248: padding at end of block bitmap is not set [ 119.858085][ T6845] loop2: lost filesystem error report for type 5 error -117 [ 119.864606][ T6845] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 119.864678][ T6845] loop2: lost filesystem error report for type 5 error -117 [ 119.865185][ T6845] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.286: Failed to acquire dquot type 1 [ 119.865199][ T6845] loop2: lost filesystem error report for type 5 error -117 [ 119.866113][ T6845] EXT4-fs (loop2): 1 orphan inode deleted [ 119.887327][ T6845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.909076][ T6845] netlink: 52 bytes leftover after parsing attributes in process `syz.2.286'. [ 120.023007][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.292'. [ 120.023026][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.292'. [ 120.035435][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.292'. [ 120.035452][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.292'. [ 120.038329][ T5921] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.038358][ T5921] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.038375][ T5921] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.038390][ T5921] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.074655][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.141344][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.292'. [ 120.141363][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.292'. [ 120.141596][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.292'. [ 120.141603][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.292'. [ 120.351573][ T6923] syz_tun: entered allmulticast mode [ 120.364128][ T6922] syz_tun: left allmulticast mode [ 120.442955][ T6931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 120.461246][ T6931] tipc: Started in network mode [ 120.461267][ T6931] tipc: Node identity ac14140f, cluster identity 4711 [ 120.462211][ T6931] tipc: New replicast peer: 255.255.255.255 [ 120.462743][ T6931] tipc: Enabled bearer , priority 10 [ 120.477317][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 121.002007][ T6959] ext4: Unknown parameter '' [ 121.062126][ T6965] can0: slcan on ptm0. [ 121.085253][ T6965] dummy0: entered allmulticast mode [ 121.085865][ T6964] dummy0: left allmulticast mode [ 121.108379][ T6969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.142339][ T6969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.154444][ T6964] can0 (unregistered): slcan off ptm0. [ 121.163751][ T6969] FAULT_INJECTION: forcing a failure. [ 121.163751][ T6969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.163773][ T6969] CPU: 0 UID: 0 PID: 6969 Comm: syz.5.310 Tainted: G L syzkaller #0 PREEMPT [ 121.163785][ T6969] Tainted: [L]=SOFTLOCKUP [ 121.163789][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 121.163794][ T6969] Call trace: [ 121.163797][ T6969] show_stack+0x2c/0x3c (C) [ 121.163817][ T6969] __dump_stack+0x30/0x40 [ 121.163831][ T6969] dump_stack_lvl+0xd8/0x12c [ 121.163842][ T6969] dump_stack+0x1c/0x28 [ 121.163853][ T6969] should_fail_ex+0x418/0x58c [ 121.163866][ T6969] should_fail+0x14/0x24 [ 121.163877][ T6969] should_fail_usercopy+0x20/0x30 [ 121.163889][ T6969] bpf_verifier_vlog+0x478/0xbc0 [ 121.163903][ T6969] __btf_verifier_log+0xe8/0x13c [ 121.163911][ T6969] __btf_verifier_log_type+0x464/0x5e4 [ 121.163920][ T6969] btf_datasec_check_meta+0x348/0x71c [ 121.163929][ T6969] btf_parse_type_sec+0x36c/0x17a8 [ 121.163939][ T6969] btf_new_fd+0x33c/0xa50 [ 121.163950][ T6969] bpf_btf_load+0x144/0x190 [ 121.163960][ T6969] __sys_bpf+0x7f0/0x82c [ 121.163969][ T6969] __arm64_sys_bpf+0xd0/0xec [ 121.163978][ T6969] invoke_syscall+0x98/0x244 [ 121.163990][ T6969] el0_svc_common+0xec/0x23c [ 121.164001][ T6969] do_el0_svc+0x4c/0x5c [ 121.164012][ T6969] el0_svc+0x60/0x1d8 [ 121.164024][ T6969] el0t_64_sync_handler+0x44/0x104 [ 121.164036][ T6969] el0t_64_sync+0x198/0x19c [ 121.166754][ T6969] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 121.167857][ T6969] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 121.167876][ T6969] EXT4-fs (loop5): This should not happen!! Data will be lost [ 121.167876][ T6969] [ 121.167884][ T6969] EXT4-fs (loop5): Total free blocks count 0 [ 121.167891][ T6969] EXT4-fs (loop5): Free/Dirty block details [ 121.167901][ T6969] EXT4-fs (loop5): free_blocks=68451041280 [ 121.167911][ T6969] EXT4-fs (loop5): dirty_blocks=64 [ 121.167918][ T6969] EXT4-fs (loop5): Block reservation details [ 121.167924][ T6969] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 121.189866][ T5002] EXT4-fs error (device loop5): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /41/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 121.192641][ T5002] EXT4-fs error (device loop5): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 121.192789][ T5002] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 121.192925][ T5002] EXT4-fs error (device loop5): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /41/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 121.193118][ T5002] EXT4-fs error (device loop5): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 121.193203][ T5002] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 121.193327][ T5002] EXT4-fs error (device loop5): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /41/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 121.193510][ T5002] EXT4-fs error (device loop5): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 121.193595][ T5002] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 121.193708][ T5002] EXT4-fs error (device loop5): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /41/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 121.193879][ T5002] EXT4-fs error (device loop5): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 121.193973][ T5002] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 121.194083][ T5002] EXT4-fs error (device loop5): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /41/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 121.194323][ T5002] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 121.194699][ T5002] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 121.195140][ T5002] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 121.198508][ T5002] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 121.198938][ T5002] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 121.199278][ T5002] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 121.215175][ T6981] ip_tunnel: non-ECT from 0.0.8.0 with TOS=0x2 [ 121.286835][ T6987] 9p: Bad value for 'wfdno' [ 121.357298][ T4713] Bluetooth: hci0: Opcode 0x0c3a failed: -19 [ 121.715907][ T4801] tipc: Node number set to 2886997007 [ 121.865025][ T7032] cgroup: Unknown subsys name 'cpuset' [ 121.865371][ T7032] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 121.929998][ T4801] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 121.931452][ T5002] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.971521][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.971549][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.000103][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.000759][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.000922][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.001040][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.001181][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.001438][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.001585][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.002401][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.002681][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.003932][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.004088][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.004214][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.005215][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.005408][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.005980][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.006132][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.006255][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.006388][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.006506][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.006616][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.007810][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.008061][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.014522][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.014824][ T7043] syzkaller1: entered promiscuous mode [ 122.014835][ T7043] syzkaller1: entered allmulticast mode [ 122.037972][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.039713][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.040155][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.040321][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.040450][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.042849][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.043983][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.044375][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.044554][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.044802][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.045840][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.048396][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.051923][ T4722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.054281][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.054961][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.055299][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.055520][ T4722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.075468][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.075696][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.079835][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.081277][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.082211][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.083486][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.085640][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.086264][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.087219][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.089763][ T7041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.099718][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.100203][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.100361][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.101359][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.101604][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.102444][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.102462][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.104492][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.105702][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.107304][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.108265][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.109669][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.109852][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.111014][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.113029][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.115234][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.116583][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.117975][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.121052][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.121804][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.122964][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.124284][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.125432][ T7042] overlayfs: failed to resolve './bus': -2 [ 122.191498][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.191524][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.198652][ T4801] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 122.280951][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.280980][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.285889][ T7060] bond0: entered promiscuous mode [ 122.285902][ T7060] bond_slave_0: entered promiscuous mode [ 122.285963][ T7060] bond_slave_1: entered promiscuous mode [ 122.286768][ T7060] batadv0: entered promiscuous mode [ 122.287234][ T7060] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 122.287246][ T7060] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 122.291289][ T7060] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 122.293304][ T7060] bond0: left promiscuous mode [ 122.293336][ T7060] bond_slave_0: left promiscuous mode [ 122.293432][ T7060] bond_slave_1: left promiscuous mode [ 122.294200][ T7060] batadv0: left promiscuous mode [ 122.469909][ T7075] overlayfs: workdir and upperdir must be separate subtrees [ 122.474783][ T7079] set_capacity_and_notify: 9 callbacks suppressed [ 122.474795][ T7079] loop8: detected capacity change from 0 to 512 [ 122.480659][ T7079] EXT4-fs: Ignoring removed bh option [ 122.480676][ T7079] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.485716][ T7045] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.485743][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.485866][ T7045] bridge_slave_0: entered allmulticast mode [ 122.486286][ T7045] bridge_slave_0: entered promiscuous mode [ 122.489128][ T7079] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 122.494864][ T7045] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.495084][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.495192][ T7045] bridge_slave_1: entered allmulticast mode [ 122.495662][ T7045] bridge_slave_1: entered promiscuous mode [ 122.497613][ T7079] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 122.497783][ T7079] EXT4-fs (loop8): orphan cleanup on readonly fs [ 122.498417][ T7079] __quota_error: 69 callbacks suppressed [ 122.498424][ T7079] Quota error (device loop8): do_insert_tree: Free block already used in tree: block 4 [ 122.498447][ T7079] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 122.498472][ T7079] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.330: Failed to acquire dquot type 1 [ 122.498482][ T7079] loop8: lost filesystem error report for type 5 error -5 [ 122.499529][ T7079] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:487: comm syz.8.330: Invalid block bitmap block 0 in block_group 0 [ 122.499547][ T7079] loop8: lost filesystem error report for type 5 error -117 [ 122.505233][ T7079] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:487: comm syz.8.330: Invalid block bitmap block 0 in block_group 0 [ 122.505258][ T7079] loop8: lost filesystem error report for type 5 error -117 [ 122.507499][ T7079] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:487: comm syz.8.330: Invalid block bitmap block 0 in block_group 0 [ 122.507514][ T7079] loop8: lost filesystem error report for type 5 error -117 [ 122.507747][ T7079] Quota error (device loop8): write_blk: dquota write failed [ 122.507776][ T7079] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 122.507788][ T7079] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.330: Failed to acquire dquot type 1 [ 122.507796][ T7079] loop8: lost filesystem error report for type 5 error -28 [ 122.508175][ C0] EXT4-fs (loop8): error count since last fsck: 5 [ 122.508186][ C0] EXT4-fs (loop8): last error at time 122: ext4_acquire_dquot:7069 [ 122.508313][ T7079] Quota error (device loop8): write_blk: dquota write failed [ 122.508351][ T7079] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 122.508361][ T7079] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.330: Failed to acquire dquot type 1 [ 122.508370][ T7079] loop8: lost filesystem error report for type 5 error -28 [ 122.510287][ T7079] EXT4-fs (loop8): 1 orphan inode deleted [ 122.515222][ T7079] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.553261][ T49] bridge_slave_1: left allmulticast mode [ 122.553283][ T49] bridge_slave_1: left promiscuous mode [ 122.553363][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.553789][ T6203] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.566706][ T49] bridge_slave_0: left allmulticast mode [ 122.566726][ T49] bridge_slave_0: left promiscuous mode [ 122.566806][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.639781][ T7087] __nla_validate_parse: 5 callbacks suppressed [ 122.639796][ T7087] netlink: 20 bytes leftover after parsing attributes in process `syz.6.333'. [ 122.647269][ T7089] loop1: detected capacity change from 0 to 512 [ 122.677267][ T7089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.697254][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.746735][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.752822][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.757096][ T7100] netlink: 36 bytes leftover after parsing attributes in process `syz.6.337'. [ 122.779123][ T49] bond0 (unregistering): Released all slaves [ 122.822543][ T7045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.823461][ T7045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.833472][ T7045] team0: Port device team_slave_0 added [ 122.834160][ T7045] team0: Port device team_slave_1 added [ 122.840972][ T7113] loop1: detected capacity change from 0 to 512 [ 122.850790][ T7113] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.854207][ T7113] EXT4-fs (loop1): invalid inodes per group: 32 [ 122.894763][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.894776][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.894792][ T7045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.895439][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.895447][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.895460][ T7045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.915674][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.926924][ T7125] binder: 7119:7125 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 122.926940][ T7125] binder: 7119:7125 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 122.926950][ T7125] binder: 7125 RLIMIT_NICE not set [ 122.934206][ T7125] binder: 7119:7125 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 122.934219][ T7125] binder: 7119:7125 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 122.934228][ T7125] binder: 7125 RLIMIT_NICE not set [ 122.934235][ T7125] binder: 7119:7125 ioctl c0306201 200004c0 returned -11 [ 122.991532][ T7138] netlink: 'syz.2.344': attribute type 10 has an invalid length. [ 122.991683][ T7045] hsr_slave_0: entered promiscuous mode [ 122.995965][ T7045] hsr_slave_1: entered promiscuous mode [ 122.996225][ T7045] debugfs: 'hsr0' already exists in 'hsr' [ 122.996239][ T7045] Cannot create hsr debugfs directory [ 123.034146][ T7146] loop8: detected capacity change from 0 to 512 [ 123.034511][ T7146] EXT4-fs: Ignoring removed oldalloc option [ 123.042704][ T7151] netlink: 'syz.2.344': attribute type 10 has an invalid length. [ 123.087963][ T7138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.091439][ T7138] team0: Port device netdevsim1 added [ 123.105557][ T7146] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.106326][ T4396] 8021q: adding VLAN 0 to HW filter on device eth17 [ 123.191750][ T49] hsr_slave_0: left promiscuous mode [ 123.213716][ T7164] fuse: Bad value for 'fd' [ 123.236492][ T49] hsr_slave_1: left promiscuous mode [ 123.281443][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.281588][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.317988][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.319179][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.392162][ T7169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.351'. [ 123.393219][ T49] veth1_macvtap: left promiscuous mode [ 123.393609][ T49] veth0_macvtap: left promiscuous mode [ 123.393663][ T49] veth1_vlan: left promiscuous mode [ 123.393708][ T49] veth0_vlan: left promiscuous mode [ 123.522365][ T49] team0 (unregistering): Port device team_slave_1 removed [ 123.526574][ T49] team0 (unregistering): Port device team_slave_0 removed [ 123.584474][ T7159] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 123.598902][ T4396] 8021q: adding VLAN 0 to HW filter on device eth18 [ 123.614338][ T6203] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.661037][ T7187] loop8: detected capacity change from 0 to 512 [ 123.666474][ T7187] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 123.672715][ T7187] EXT4-fs (loop8): 1 truncate cleaned up [ 123.677036][ T7187] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.767311][ T7045] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 123.772309][ T7045] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.772740][ T7045] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 123.775774][ T7045] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.776213][ T7045] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 123.777163][ T7045] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.783665][ T7045] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 123.784726][ T7045] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.808006][ T7200] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 123.831456][ T6203] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.866428][ T7212] binder: 7212 RLIMIT_NICE not set [ 123.942631][ T7045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.961622][ T7045] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.969978][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.970008][ T5911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.970515][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.970535][ T5911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.977314][ T7218] netlink: 'syz.8.356': attribute type 2 has an invalid length. [ 123.999409][ T7045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.062563][ T7235] loop1: detected capacity change from 0 to 256 [ 124.086624][ T4396] 8021q: adding VLAN 0 to HW filter on device eth19 [ 124.088345][ T4722] Bluetooth: hci0: command tx timeout [ 124.164708][ T7242] bond0: (slave bond_slave_0): Releasing backup interface [ 124.185869][ T7256] overlayfs: failed to clone upperpath [ 124.207605][ T7254] loop8: detected capacity change from 0 to 2048 [ 124.224073][ T7045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.257839][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 124.257859][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'. [ 124.275549][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'. [ 124.288359][ T5911] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.288451][ T5911] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.288474][ T5911] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.288489][ T5911] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.356463][ T7273] loop8: detected capacity change from 0 to 512 [ 124.356732][ T7273] EXT4-fs: Ignoring removed oldalloc option [ 124.358533][ T7273] EXT4-fs (loop8): Test dummy encryption mode enabled [ 124.405998][ T7045] veth0_vlan: entered promiscuous mode [ 124.407960][ T7045] veth1_vlan: entered promiscuous mode [ 124.415830][ T7273] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.425172][ T7045] veth0_macvtap: entered promiscuous mode [ 124.429441][ T7045] veth1_macvtap: entered promiscuous mode [ 124.439904][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.442293][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.447905][ T5625] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.447948][ T5625] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.447974][ T5625] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.447998][ T5625] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.460824][ T7289] fuse: Bad value for 'fd' [ 124.483333][ T6203] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.494960][ T4396] 8021q: adding VLAN 0 to HW filter on device eth20 [ 124.534184][ T4854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.534202][ T4854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.545327][ T5909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.545344][ T5909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.401105][ T7323] FAULT_INJECTION: forcing a failure. [ 125.401105][ T7323] name failslab, interval 1, probability 0, space 0, times 0 [ 125.401128][ T7323] CPU: 0 UID: 0 PID: 7323 Comm: syz.2.378 Tainted: G L syzkaller #0 PREEMPT [ 125.401142][ T7323] Tainted: [L]=SOFTLOCKUP [ 125.401145][ T7323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 125.401151][ T7323] Call trace: [ 125.401154][ T7323] show_stack+0x2c/0x3c (C) [ 125.401172][ T7323] __dump_stack+0x30/0x40 [ 125.401185][ T7323] dump_stack_lvl+0xd8/0x12c [ 125.401197][ T7323] dump_stack+0x1c/0x28 [ 125.401208][ T7323] should_fail_ex+0x418/0x58c [ 125.401222][ T7323] should_failslab+0xc4/0x120 [ 125.401235][ T7323] __kmalloc_cache_noprof+0x94/0x5fc [ 125.401244][ T7323] alloc_netdev_mqs+0x97c/0xf34 [ 125.401258][ T7323] tun_set_iff+0x41c/0xc0c [ 125.401268][ T7323] __tun_chr_ioctl+0x6f4/0x18f4 [ 125.401278][ T7323] tun_chr_ioctl+0x38/0x4c [ 125.401287][ T7323] __arm64_sys_ioctl+0x154/0x1cc [ 125.401300][ T7323] invoke_syscall+0x98/0x244 [ 125.401312][ T7323] el0_svc_common+0xec/0x23c [ 125.401332][ T7323] do_el0_svc+0x4c/0x5c [ 125.401343][ T7323] el0_svc+0x60/0x1d8 [ 125.401359][ T7323] el0t_64_sync_handler+0x44/0x104 [ 125.401370][ T7323] el0t_64_sync+0x198/0x19c [ 125.407823][ T7323] netlink: 104 bytes leftover after parsing attributes in process `syz.2.378'. [ 125.408045][ T7323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.378'. [ 125.409219][ T7323] ip_tables: iptables: counters copy to user failed while replacing table [ 125.444355][ T7322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.377'. [ 125.459603][ T7328] bridge0: port 3(ipvlan2) entered blocking state [ 125.459676][ T7328] bridge0: port 3(ipvlan2) entered disabled state [ 125.459736][ T7328] ipvlan2: entered allmulticast mode [ 125.459744][ T7328] bridge0: entered allmulticast mode [ 125.460521][ T7328] ipvlan2: left allmulticast mode [ 125.460529][ T7328] bridge0: left allmulticast mode [ 125.495955][ T30] audit: type=1326 audit(125.480:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7320 comm="syz.1.377" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb01798a8 code=0x7ffc0000 [ 125.496007][ T30] audit: type=1326 audit(125.480:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7320 comm="syz.1.377" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb01798a8 code=0x7ffc0000 [ 125.496139][ T30] audit: type=1326 audit(125.480:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7320 comm="syz.1.377" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb01798a8 code=0x7ffc0000 [ 125.496196][ T30] audit: type=1326 audit(125.480:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7320 comm="syz.1.377" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb01798a8 code=0x7ffc0000 [ 125.533500][ T7335] binder: 7324:7335 BC_FREEZE_NOTIFICATION_DONE 0000000400000004 not found [ 125.533521][ T7335] binder: 7324:7335 ioctl c0306201 20000100 returned -22 [ 125.561172][ T7340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.385'. [ 125.670030][ T7331] netlink: 'syz.2.380': attribute type 1 has an invalid length. [ 125.682023][ T7341] ip6gretap1: entered allmulticast mode [ 125.727860][ T7356] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 125.743549][ T7357] tipc: Enabling of bearer rejected, already enabled [ 125.747635][ T7357] tipc: New replicast peer: 172.20.20.11 [ 125.767070][ T7361] loop9: detected capacity change from 0 to 1024 [ 125.777818][ T7359] gadgetfs: bound to dummy_udc driver [ 125.809656][ T7361] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.822145][ T7361] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 125.825519][ T7361] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 125.825542][ T7361] EXT4-fs (loop9): This should not happen!! Data will be lost [ 125.825542][ T7361] [ 125.825553][ T7361] EXT4-fs (loop9): Total free blocks count 0 [ 125.825562][ T7361] EXT4-fs (loop9): Free/Dirty block details [ 125.825570][ T7361] EXT4-fs (loop9): free_blocks=68451041280 [ 125.825580][ T7361] EXT4-fs (loop9): dirty_blocks=64 [ 125.825587][ T7361] EXT4-fs (loop9): Block reservation details [ 125.825593][ T7361] EXT4-fs (loop9): i_reserved_data_blocks=4 [ 125.843410][ T7361] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 125.877621][ T7372] loop1: detected capacity change from 0 to 512 [ 125.881101][ T7372] ext4: Unknown parameter 'obj_type' [ 125.882876][ T7373] ext4: Unknown parameter '' [ 125.928779][ T1580] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.928809][ T1580] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.999875][ T7383] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 126.052480][ T7384] bond0: entered promiscuous mode [ 126.052496][ T7384] bond_slave_1: entered promiscuous mode [ 126.083482][ T7385] ================================================================== [ 126.083496][ T7385] BUG: KASAN: slab-out-of-bounds in soft_cursor+0x378/0x6bc [ 126.083516][ T7385] Read of size 40 at addr ffff0000d3009b58 by task syz.9.395/7385 [ 126.083525][ T7385] [ 126.083531][ T7385] CPU: 1 UID: 0 PID: 7385 Comm: syz.9.395 Tainted: G L syzkaller #0 PREEMPT [ 126.083543][ T7385] Tainted: [L]=SOFTLOCKUP [ 126.083546][ T7385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 126.083551][ T7385] Call trace: [ 126.083554][ T7385] show_stack+0x2c/0x3c (C) [ 126.083569][ T7385] __dump_stack+0x30/0x40 [ 126.083581][ T7385] dump_stack_lvl+0xd8/0x12c [ 126.083592][ T7385] print_address_description+0xb0/0x238 [ 126.083601][ T7385] print_report+0x68/0x84 [ 126.083609][ T7385] kasan_report+0x8c/0xc4 [ 126.083619][ T7385] kasan_check_range+0x17c/0x1ac [ 126.083628][ T7385] __asan_memcpy+0x3c/0x84 [ 126.083639][ T7385] soft_cursor+0x378/0x6bc [ 126.083647][ T7385] cw_cursor+0xb18/0x11e4 [ 126.083656][ T7385] fbcon_cursor+0x344/0x498 [ 126.083663][ T7385] hide_cursor+0xdc/0x2d0 [ 126.083672][ T7385] redraw_screen+0x200/0x51c [ 126.083680][ T7385] vc_do_resize+0x884/0xbbc [ 126.083688][ T7385] __vc_resize+0x60/0x74 [ 126.083696][ T7385] fbcon_do_set_font+0x3d8/0x734 [ 126.083705][ T7385] fbcon_set_font+0x4f0/0x6ac [ 126.083713][ T7385] con_font_op+0x954/0xc4c [ 126.083722][ T7385] vt_ioctl+0x1664/0x1d4c [ 126.083732][ T7385] tty_ioctl+0x828/0xcb8 [ 126.083740][ T7385] __arm64_sys_ioctl+0x154/0x1cc [ 126.083753][ T7385] invoke_syscall+0x98/0x244 [ 126.083764][ T7385] el0_svc_common+0xec/0x23c [ 126.083776][ T7385] do_el0_svc+0x4c/0x5c [ 126.083787][ T7385] el0_svc+0x60/0x1d8 [ 126.083799][ T7385] el0t_64_sync_handler+0x44/0x104 [ 126.083810][ T7385] el0t_64_sync+0x198/0x19c [ 126.083819][ T7385] [ 126.083821][ T7385] Allocated by task 6078: [ 126.083826][ T7385] kasan_save_track+0x40/0x78 [ 126.083833][ T7385] kasan_save_alloc_info+0x40/0x50 [ 126.083842][ T7385] __kasan_kmalloc+0x9c/0xb4 [ 126.083849][ T7385] __kmalloc_noprof+0x34c/0x6c8 [ 126.083856][ T7385] font_data_rotate+0x100/0x2f0 [ 126.083866][ T7385] fbcon_rotate_font+0x218/0x374 [ 126.083873][ T7385] fbcon_modechanged+0x19c/0x698 [ 126.083879][ T7385] rotate_store+0x1f4/0x334 [ 126.083886][ T7385] dev_attr_store+0x6c/0x90 [ 126.083895][ T7385] sysfs_kf_write+0xe0/0x108 [ 126.083906][ T7385] kernfs_fop_write_iter+0x260/0x3b8 [ 126.083915][ T7385] vfs_write+0x51c/0xa0c [ 126.083926][ T7385] ksys_write+0x12c/0x228 [ 126.083936][ T7385] __arm64_sys_write+0x84/0x98 [ 126.083947][ T7385] invoke_syscall+0x98/0x244 [ 126.083956][ T7385] el0_svc_common+0xec/0x23c [ 126.083966][ T7385] do_el0_svc+0x4c/0x5c [ 126.083975][ T7385] el0_svc+0x60/0x1d8 [ 126.083984][ T7385] el0t_64_sync_handler+0x44/0x104 [ 126.083994][ T7385] el0t_64_sync+0x198/0x19c [ 126.084000][ T7385] [ 126.084002][ T7385] The buggy address belongs to the object at ffff0000d3008000 [ 126.084002][ T7385] which belongs to the cache kmalloc-4k of size 4096 [ 126.084008][ T7385] The buggy address is located 2904 bytes to the right of [ 126.084008][ T7385] allocated 4096-byte region [ffff0000d3008000, ffff0000d3009000) [ 126.084017][ T7385] [ 126.084019][ T7385] The buggy address belongs to the physical page: [ 126.084023][ T7385] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113008 [ 126.084030][ T7385] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 126.084036][ T7385] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 126.084044][ T7385] page_type: f5(slab) [ 126.084051][ T7385] raw: 05ffc00000000040 ffff0000c0002140 dead000000000100 dead000000000122 [ 126.084058][ T7385] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 126.084066][ T7385] head: 05ffc00000000040 ffff0000c0002140 dead000000000100 dead000000000122 [ 126.084072][ T7385] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 126.084079][ T7385] head: 05ffc00000000003 fffffdffc34c0201 00000000ffffffff 00000000ffffffff [ 126.084086][ T7385] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 126.084090][ T7385] page dumped because: kasan: bad access detected [ 126.084093][ T7385] [ 126.084095][ T7385] Memory state around the buggy address: [ 126.084099][ T7385] ffff0000d3009a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 126.084104][ T7385] ffff0000d3009a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 126.084110][ T7385] >ffff0000d3009b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 126.084113][ T7385] ^ [ 126.084118][ T7385] ffff0000d3009b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 126.084123][ T7385] ffff0000d3009c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 126.084127][ T7385] ================================================================== [ 126.084131][ T7385] Disabling lock debugging due to kernel taint [ 126.178848][ T4722] Bluetooth: hci0: command tx timeout [ 128.248270][ T4722] Bluetooth: hci0: command tx timeout [ 130.328366][ T4722] Bluetooth: hci0: command tx timeout