last executing test programs: 57.194971858s ago: executing program 1 (id=2): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty20(0xc, 0x4, 0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000180)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r5, 0x5) syz_emit_vhci(&(0x7f0000002540)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) r6 = accept4(r5, 0x0, 0x0, 0x800) recvfrom(r6, 0x0, 0x0, 0x22, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)={0x420, 0x3f4, 0xf3d62cc6723fc86, 0x70bd2d, 0x25dfdbfd, {0x0, 0x2, 0x1, [0x4, 0x6, 0x1, 0x100, 0x10, 0x5, 0x7, 0x6, 0x2, 0xa3b, 0x5, 0x9, 0x4ad7a0a, 0x401, 0x7, 0x8, 0x4, 0x101, 0x3, 0x6, 0x101, 0x2, 0x4, 0xfffffff8, 0x36d, 0x80000000, 0x7fe, 0x7f, 0x80000001, 0x7f, 0xfab4, 0x3645, 0x7fffffff, 0x800, 0x3, 0xf8f9, 0x8, 0x5, 0x4, 0x8, 0x5, 0xfff, 0x5, 0x3, 0x5, 0x80, 0xb73e, 0x800, 0xfffffff3, 0xfffffffd, 0x7fffffff, 0x5, 0xd, 0x40, 0x58, 0xff, 0x6, 0xfff, 0x401, 0x6, 0x3227, 0x9, 0x5, 0x8000], [0x7, 0x1ff, 0x10001, 0x8, 0x1, 0xf, 0x7, 0x7, 0x7, 0x71, 0x4, 0x3bb, 0x9, 0x5, 0x1, 0x4, 0x8000, 0x5c985d7b, 0x2, 0x3, 0x8, 0x45, 0x4, 0x0, 0xc5, 0x1, 0x1ff, 0x10, 0x6, 0x6, 0x4, 0x2, 0x3, 0x22, 0x4, 0x9f40, 0x6, 0x3, 0x0, 0x10, 0x3, 0x0, 0xf01, 0x3, 0x5, 0x94fd, 0xffff9597, 0x8001, 0x1, 0x5, 0x2, 0x2, 0x3, 0x5, 0x0, 0x5, 0x6, 0x1, 0x4, 0x3, 0x4, 0x7, 0x3, 0x400], [0x6, 0xa, 0x9, 0x5, 0x3, 0x7, 0x7, 0xdb, 0x4, 0x7, 0x3, 0x1, 0x1000, 0x40, 0x6, 0x9, 0x2, 0x2, 0x2, 0x9, 0xfa, 0x7ff, 0x8001, 0x9, 0x7f, 0xfffffff8, 0x0, 0x1fe00000, 0x7, 0x6, 0x3, 0x5, 0xfffffffb, 0x1, 0x5a, 0xdc9, 0x6, 0x1, 0x5, 0x57, 0xa, 0x8, 0x5, 0x100, 0x3b30, 0x1, 0x7, 0x80, 0x61b8, 0x7d8fcfe1, 0x101, 0x7119, 0x2, 0x7, 0x9, 0x0, 0x0, 0x7, 0x6, 0x6, 0x0, 0x5, 0x1, 0xfff], [0x4, 0x1ff, 0x2, 0x3, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffff800, 0x19, 0x0, 0x10001, 0x9, 0x1, 0x200e, 0x6, 0x4, 0x6, 0x8, 0x1ff, 0x401, 0x1, 0xc00, 0x10, 0xfffffff7, 0x5, 0xb001, 0x2, 0x1ff, 0x4, 0x6, 0x8, 0x7, 0x6, 0xee, 0x435e, 0x80000001, 0x80000000, 0x8, 0xd, 0x3, 0x800, 0xfffffff7, 0x7, 0xe424, 0x200, 0x2, 0x7, 0xd4, 0x8, 0xffffff9f, 0x9, 0x0, 0x2, 0x6, 0x0, 0x4, 0x6, 0x2, 0x1, 0x4, 0x8, 0x53db, 0x4]}}, 0x420}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000000) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000002500)=[{&(0x7f0000002440)=""/124, 0x7c}, {&(0x7f00000024c0)=""/31, 0x1f}], 0x2, 0x7, 0x3b4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002280)=@bpf_lsm={0xe, 0x4, &(0x7f0000002340)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000002380)='syzkaller\x00'}, 0x90) 55.668858184s ago: executing program 1 (id=18): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x1208002, &(0x7f0000000480)={[{@acl}, {@jqfmt_vfsold}, {@nodelalloc}, {@quota}, {@dioread_nolock}, {@user_xattr}, {@user_xattr}, {@noauto_da_alloc}]}, 0x1, 0x5e4, &(0x7f0000000bc0)="$eJzs3c9vVNUeAPDvnf6gpbzXQl7ee7jQJsZAIrS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJo45k7vLZ32TkunP27hfj7J0HPPmcs5l+l3zpnDOXcCqKzB9I9axP6ImE4i+pP5xbLOyAoHF5734M+PzqaPJOr1135PIsny8ucn2c++7OSeiPjxhyT2daysd2bu2sXxqanJq9nx8Oyl6eGZuWuHL1waPz95fvLy6AujJ44fO35i5Ehb13W9IO/0zXff7/9k7M1vvvorGfn2l7EkTsbL2ROXXsdmGYzBxr9JsrKo78RmV1aSjuz3ZOlLnHSW2CDWJX/9uiLif9EfHfHwxeuPj18ptXHAlqonEXWgohLxDxWVjwPyz/bLPwfXShmVANvh/qmFCYCV8d+5MDcYPY25gd0Pklg6rZNERHszc832RMTdO2M3z90ZuxlbNA8HFJu/ERH/L4r/pBH/A9ETA434rzXFfzouOJP9TPNfbbP+5VPFD2oh/mGbLMR/z6rxHy3i/60l8f92m/UPPky+09vU//e2e0kAAAAAAABQWbdPRcShov//ry2u/4mC9T99EXFyE+ofXHa8cv1P7d4mVAMUuH8q4qXC9b+1fPXvQEeW+ldjPUBXcu7C1OSRiPh3RByMrl3p8cgqdRz+dN+XrcoGs/V/+SOt/262FjBrx73OXc3nTIzPjm/0uoGI+zcinipc/5ss9v9JQf+fvh9MP2Id+567daZV2drxD2yV+tcRBwr7/4d3rUhWvz/HcGM8MJyPClZ6+sPPvmtVf7vx7xYTsHFp/7979fgfSJber2dm/XUcneustyprd/zfnbzeuOVMd5b3wfjs7NWRiO7kdEea25Q/uv42w5Moj4c8XtL4P/js6vN/ReP/3oiYX/Z3J3807ynO/ffvvl9btcf4H8qTxv/Euvr/9SdGbw1836r+R+v/jzX6+oNZjvk/WPBFHqbdzfkF4dhZVLTd7QUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ0EtIvZEUhtaTNdqQ0MRfRHxn9hdm7oyM/v8uSvvXZ5Iyxrf/1/Lv+m3f+E4yb//f2DJ8eiy46MRsTciPu/obRwPnb0yNVH2xQMAAAAAAAAAAAAAAAAAAMAO0ddi/3/qt46yWwdsuc6yGwCUpiD+fyqjHcD20/9DdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/UF3iHwAAAAAAnih7n7n9cxIR8y/2Nh6p7qysq9SWAVutVnYDgNK4xQ9Ul6U/UF0+4wPJGuU9LU9a68zVTJ/dwMkAAAAAAAAAAAAAUDkH9re1///Q9rQO2Er2/0N12f8P1dXY/7+RLXzAY8v+fyDWGAYU7v9f8ywAAAAAAAAAAAAAYDPNzF27OD41NXlV4o2d0YztTNTr9evpb8FOac9jnsiXwu+U9ixL5N/1+2hnlfeeBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPsnAAD//1U8I2g=") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x38bc43, 0x0, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000b40)={@my=0x1}) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000b80)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r2, &(0x7f0000009cc0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000009e40)={{0xffffffffffffffff, &(0x7f0000009d00)='nodelalloc', 0x280, &(0x7f0000009d40)={@align=0x5, {0x401, 0x2, 0x1ff, 0x71}}, 0x3, &(0x7f0000009d80), &(0x7f0000009dc0)=0xffff}, {[0xffffffff, 0x2, 0x8, 0x1]}, 0x10001, 0x1c, &(0x7f0000009e00)=""/28}) ioctl$BLKFINISHZONE(r3, 0x40101288, &(0x7f0000009ec0)={0x7, 0x6}) chdir(&(0x7f0000000400)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000009f00)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f00000011c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$kcm(0x21, 0x2, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r6, 0x110, 0x7, 0x0, 0x4) write$FUSE_INIT(r4, &(0x7f0000003200)={0x50, 0x0, r5, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r4, &(0x7f0000003280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f00000052c0)={0x10, 0xffffffffffffffda, r7}, 0x10) syz_fuse_handle_req(r4, &(0x7f0000005300)="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", 0x2000, &(0x7f0000007300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000073c0)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xfffdffff, 0x0, {0x8000, 0x0, 0x0, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, r8, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, r8, &(0x7f0000007480)={0x4, 0x4, 0x2, 0x4, 0x7ff, 0x9, 0xffffffffffff8001, 0x1, 0x3}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f00000003c0), 0xf02, 0xf0, 0x0) recvmmsg(r0, &(0x7f0000009b80)=[{{&(0x7f0000000300)=@tipc=@name, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/132, 0x84}], 0x1, &(0x7f0000000600)=""/53, 0x35}, 0x4}, {{0x0, 0x0, &(0x7f0000008500)=[{&(0x7f0000000640)=""/180, 0xb4}, {&(0x7f0000000700)=""/62, 0x3e}, {&(0x7f0000000740)=""/64, 0x40}, {&(0x7f0000000780)=""/149, 0x95}, {&(0x7f0000000840)=""/47, 0x2f}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/1, 0x1}, {&(0x7f0000000a40)=""/220, 0xdc}, {&(0x7f0000007500)=""/4096, 0x1000}], 0xa, &(0x7f00000085c0)=""/4096, 0x1000}}, {{&(0x7f00000095c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000096c0), 0x1, &(0x7f0000009700)=""/10, 0xa}, 0x6}, {{0x0, 0x0, &(0x7f0000009b00)=[{&(0x7f0000009740)=""/74, 0x4a}, {&(0x7f00000097c0)=""/166, 0xa6}, {&(0x7f0000009880)=""/241, 0xf1}, {&(0x7f0000009980)=""/233, 0xe9}, {&(0x7f0000009a80)=""/69, 0x45}], 0x5}, 0x9}], 0x400000000000346, 0x12000, &(0x7f0000009c80)={0x0, 0x989680}) 55.47243205s ago: executing program 1 (id=19): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x404000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYBLOB="0200"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r5, 0x2}, 0x8) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f00000002c0)=ANY=[], 0x1, 0x1e8, &(0x7f0000000300)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r7, &(0x7f0000000b80)="a32e26fe1d46fb6e3b555212e074656c1e0c939802e688aa60382d20c62c5abf1a7e3f291cc7b92499a7821cbbb0e19f77b9ff11080001b7ba1762c741aba4ee1b36556b9d8ef213a72f6934cc9155a61d8db881c5a4cbcdc826c7603806a0d45b1f29486fcf7907e982b22aeb24db4f0558320ffe359da14da1108347218340ef4fb3df1357554c8be7d0af7ca6bf4622efce15634bccce5563", 0x9a, 0x400, &(0x7f0000000c40)={0xa, 0x4e21, 0x1000, @private1, 0x4}, 0x1c) lseek(r6, 0x4, 0x3) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={r5, 0x1, 0x100}, 0x8) timer_getoverrun(r1) r8 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000580)={0xc, 0x2000003, 0x6b}) 52.784743689s ago: executing program 1 (id=57): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000001080)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) r1 = landlock_create_ruleset(&(0x7f0000001380)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) r2 = syz_usb_connect$uac1(0x4, 0xe3, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x19b5, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x3, 0x1, 0x8, 0x50, 0xe, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1d}, [@processing_unit={0xa, 0x24, 0x7, 0x6, 0x1, 0x3e, "6abc6e"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x407, 0x2, 0x2, 0xfb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0xf, 0xd, "8dd2", "db"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x2, 0x1001}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0xb, 0x3, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x3d, 0x3, 0x4, 0x80}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0xc, 0xf0, {0x7, 0x25, 0x1, 0x4, 0x1, 0x70d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf1, 0x4e, 0x2, 0x2, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x3, 0x7, 0x3}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xaf, 0x2, 0x5, 0x2}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa, 0x3, 0x8, 0x16, '&8', "be"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xe9, 0x1, 0xa0, 0x5, "a6c262"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf8, 0x1, 0x2, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xb, 0x7, 0xa, {0x7, 0x25, 0x1, 0x0, 0x80, 0xfa04}}}}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x128, 0x6, 0x2, 0x40, 0x20, 0x73}, 0xf, &(0x7f0000000780)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x9f, 0x1}]}, 0x8, [{0xce, &(0x7f00000007c0)=@string={0xce, 0x3, "6f402e92e2e7bfc3c88da3322c675cdd63ca661e721aaa9cbb7e4823ffd513faa52474c15ce5239cf5483ecace63a93debfa50367ac535b52162d41589b30014623497d64d2477e2814242d0ffd7915dbef8b3af5c242a994c0971209ad51e6faf8d6b00e7a1f359952941737e0b84563f231809e1d10bec44aa5d9b76020901bf5c127a1935dec76ec1298a2b501c342281ef1e6322ef2c69dea13eedc92e43ccbcec31bcd2e5039db4af1a01152d3a5517910947bb451d2060ef462411559ea9ff5cee0aa178e508a95848"}}, {0x57, &(0x7f00000008c0)=@string={0x57, 0x3, "1ffdfc59eacee86cb687ec3608c3ebc7a18e7b040ad7fcef99988d547446edef603a7b87dd8f7af906eb9d21e4aee2a443c3de4bca7875f821d74d60e26a9ebe02a09660acf2bfc7fc1e3bf0bf052b6e4032df3b52"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x449}}, {0x66, &(0x7f0000000980)=@string={0x66, 0x3, "ac71114d3a3d1ac2fb07ea02db410d41d9179f2e2ecb78447434ebf66c51205a2b29cefaf1210342cba7570db9151a700265f84cf052c8e5e005fa8bc3423066fd7e7557a2ec6d5381074a585b441547b95cbada63edad263d554d34fcac4f99abc5c560"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x44f}}, {0xb5, &(0x7f0000000a40)=@string={0xb5, 0x3, "8b1e13999eaee7249f4aae5e4ed008801865252923fd8be6e7366f00198f71ebcd2fd14fb88a4d67bd62c94480e20cbfa75776e5281b50c1be8a1771e3aeb0f89e498bcb435e1bedc0237d4fbde08d4b42ac5d8d79831740b513530b02c31671398628230a4dac1e123043c6bca68ed4c929c6b912539b558a5938c869e428b075ac7afcc952c79d89da7c1077fe0786c43823cd657bd68e9637856baf04803e60cba9eed5bf4ec4481001b48d213dd0dedfce"}}, {0x39, &(0x7f0000000b00)=@string={0x39, 0x3, "8d4d44e84d4bf6d31bf86ee1469b6afd8dd308c3069435fb40e57d774e66305e6a636d73819b8342afc3184360a2a3e918ffd290f0774f"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x446}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000e00)={0x14, &(0x7f0000000c00)={0x40, 0xd, 0xe0, {0xe0, 0x9, "f95d37b7376797c2d627d8e263b0715897619680c37548aa5841291bed8395d8b1698ccd892ac99543d0e469d8b4288edba357498f6db6882a40a735a96078a4852ecadaf368dfdfa5d83a23ee65c0edc54e3a50e213a9b89b81cb380cdaa15a356f49fc87f857a9b67331724eb4637921deb665cd7561e71c95d5f8db7e656311b08a5f2bd21ed1123d71596ea9811cc64f218757c2e9c7ffea3d8e8723eb6ff4f6da986e3375044891d4b2a6b9994e0f3bd6a1d88bfabb78bf5fb58cc272aec15e3758c5b9e06f224334fd620c9f493b005d3ac6c88a02b371ecffeaa8"}}, &(0x7f0000000d00)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "bd58ec2ab2ed51078e11c4b572efde2733c1cd97da792bca306b81d624d385d589222717c75525736ae08b797c08eb7e3afa030eeecf903cf252651669a488b45f65a37a42351c845a81eb020a2f5455f9210a3114ee9e14fab09210e2693e91046fccc303bd27edf6cf55263d05ef41ba8f34fcc4e78863593787036ed4e9ed84ff41627ac11c99315e35fe9fe51c577f6c8712e61aa14061449d6ceec6899c192f11f643f3db3c2c6fc0a780b3d36e15779db5cc810bdbbae539ece038b30f4504a67fc9544a2ce9ec159c6e8634aceeec7935381bb9cb5bdac9c3e6fb2e4d06e59e47a0494d89887b46d5c64a17e890908e"}}}, &(0x7f0000001100)={0x44, &(0x7f0000000e40)={0x40, 0x15, 0xd6, "37b7d740890939352422b80e616527a7d143c39c2f332bb2d238ff9a75c0b4263835755ab918490aaafed67f561061d21a716f730d9b711de14b2727e37a96bf87fd009844ea1075ba69a1cc46c80feb21d2e63ffe84e4df9c9de18da5f44853278a1181819d10c7bcb9353766ed7a1b45e64b2b7b2507ad4d467d63209b3ca7782126f6d3ebc06ac709a8df9bd06b6ab1f947ebbabceb3787b4f30db00871e9e0a9361c56b7ff0b18156d2c47921dd22b86e69a21849a11e58de7652caf7eae627d577c5ba5bc2ec920a527b22e7204f258ae5f1b4b"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000fc0)={0x20, 0x81, 0x1, "19"}, &(0x7f0000001000)={0x20, 0x82, 0x3, "c5b294"}, &(0x7f0000001040)={0x20, 0x83, 0x2, 'd5'}, &(0x7f0000001300)=ANY=[@ANYBLOB="2081040000008bd24eb548ba98d352a96e7feeeb7063e3d7d1855088034bb59e6571f98508ce9162cd430dfc992c508b73f06153537d831c7b15f522ecfbad6741333d90590bebc3033d6dfe1381a099718ed9bffa6b0b1977a27c3015c66328b230812c91bbdc2662b14a77be06d74045b973b7fe3c045d"], &(0x7f00000010c0)={0x20, 0x85, 0x3, "af6035"}}) capset(&(0x7f0000002100)={0x20080522}, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000100)) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xffeffffffffffffa]}, 0x8, 0x800) r8 = syz_io_uring_setup(0xf08, &(0x7f0000000240)={0x0, 0x8000595d, 0x1000, 0x3, 0x24e, 0x0, r7}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r7, 0x0, 0x0, 0x1, {0x110a}}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000400)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000440)={{}, {0x77359400}}, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f0000000600)={r4, &(0x7f0000000500)='\x00', 0x0, &(0x7f0000000540)={@_ha_fsid={[0x4, 0x3ff]}, {0x5, 0xb, 0x80, 0x5}}, 0xbed, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0xa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r12 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0x2e, &(0x7f0000000480)=0x3, 0x4) getsockopt$IP_SET_OP_GET_BYNAME(r12, 0x1, 0x53, &(0x7f0000001280)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000012c0)=0x28) r13 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f00000004c0)={0xa0000006}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c003f80080003000100000008000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 52.722912423s ago: executing program 32 (id=57): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000001080)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) r1 = landlock_create_ruleset(&(0x7f0000001380)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) r2 = syz_usb_connect$uac1(0x4, 0xe3, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x19b5, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x3, 0x1, 0x8, 0x50, 0xe, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1d}, [@processing_unit={0xa, 0x24, 0x7, 0x6, 0x1, 0x3e, "6abc6e"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x407, 0x2, 0x2, 0xfb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0xf, 0xd, "8dd2", "db"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x2, 0x1001}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0xb, 0x3, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x3d, 0x3, 0x4, 0x80}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0xc, 0xf0, {0x7, 0x25, 0x1, 0x4, 0x1, 0x70d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf1, 0x4e, 0x2, 0x2, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x3, 0x7, 0x3}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xaf, 0x2, 0x5, 0x2}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa, 0x3, 0x8, 0x16, '&8', "be"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xe9, 0x1, 0xa0, 0x5, "a6c262"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf8, 0x1, 0x2, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xb, 0x7, 0xa, {0x7, 0x25, 0x1, 0x0, 0x80, 0xfa04}}}}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x128, 0x6, 0x2, 0x40, 0x20, 0x73}, 0xf, &(0x7f0000000780)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x9f, 0x1}]}, 0x8, [{0xce, &(0x7f00000007c0)=@string={0xce, 0x3, "6f402e92e2e7bfc3c88da3322c675cdd63ca661e721aaa9cbb7e4823ffd513faa52474c15ce5239cf5483ecace63a93debfa50367ac535b52162d41589b30014623497d64d2477e2814242d0ffd7915dbef8b3af5c242a994c0971209ad51e6faf8d6b00e7a1f359952941737e0b84563f231809e1d10bec44aa5d9b76020901bf5c127a1935dec76ec1298a2b501c342281ef1e6322ef2c69dea13eedc92e43ccbcec31bcd2e5039db4af1a01152d3a5517910947bb451d2060ef462411559ea9ff5cee0aa178e508a95848"}}, {0x57, &(0x7f00000008c0)=@string={0x57, 0x3, "1ffdfc59eacee86cb687ec3608c3ebc7a18e7b040ad7fcef99988d547446edef603a7b87dd8f7af906eb9d21e4aee2a443c3de4bca7875f821d74d60e26a9ebe02a09660acf2bfc7fc1e3bf0bf052b6e4032df3b52"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x449}}, {0x66, &(0x7f0000000980)=@string={0x66, 0x3, "ac71114d3a3d1ac2fb07ea02db410d41d9179f2e2ecb78447434ebf66c51205a2b29cefaf1210342cba7570db9151a700265f84cf052c8e5e005fa8bc3423066fd7e7557a2ec6d5381074a585b441547b95cbada63edad263d554d34fcac4f99abc5c560"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x44f}}, {0xb5, &(0x7f0000000a40)=@string={0xb5, 0x3, "8b1e13999eaee7249f4aae5e4ed008801865252923fd8be6e7366f00198f71ebcd2fd14fb88a4d67bd62c94480e20cbfa75776e5281b50c1be8a1771e3aeb0f89e498bcb435e1bedc0237d4fbde08d4b42ac5d8d79831740b513530b02c31671398628230a4dac1e123043c6bca68ed4c929c6b912539b558a5938c869e428b075ac7afcc952c79d89da7c1077fe0786c43823cd657bd68e9637856baf04803e60cba9eed5bf4ec4481001b48d213dd0dedfce"}}, {0x39, &(0x7f0000000b00)=@string={0x39, 0x3, "8d4d44e84d4bf6d31bf86ee1469b6afd8dd308c3069435fb40e57d774e66305e6a636d73819b8342afc3184360a2a3e918ffd290f0774f"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x446}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000e00)={0x14, &(0x7f0000000c00)={0x40, 0xd, 0xe0, {0xe0, 0x9, "f95d37b7376797c2d627d8e263b0715897619680c37548aa5841291bed8395d8b1698ccd892ac99543d0e469d8b4288edba357498f6db6882a40a735a96078a4852ecadaf368dfdfa5d83a23ee65c0edc54e3a50e213a9b89b81cb380cdaa15a356f49fc87f857a9b67331724eb4637921deb665cd7561e71c95d5f8db7e656311b08a5f2bd21ed1123d71596ea9811cc64f218757c2e9c7ffea3d8e8723eb6ff4f6da986e3375044891d4b2a6b9994e0f3bd6a1d88bfabb78bf5fb58cc272aec15e3758c5b9e06f224334fd620c9f493b005d3ac6c88a02b371ecffeaa8"}}, &(0x7f0000000d00)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "bd58ec2ab2ed51078e11c4b572efde2733c1cd97da792bca306b81d624d385d589222717c75525736ae08b797c08eb7e3afa030eeecf903cf252651669a488b45f65a37a42351c845a81eb020a2f5455f9210a3114ee9e14fab09210e2693e91046fccc303bd27edf6cf55263d05ef41ba8f34fcc4e78863593787036ed4e9ed84ff41627ac11c99315e35fe9fe51c577f6c8712e61aa14061449d6ceec6899c192f11f643f3db3c2c6fc0a780b3d36e15779db5cc810bdbbae539ece038b30f4504a67fc9544a2ce9ec159c6e8634aceeec7935381bb9cb5bdac9c3e6fb2e4d06e59e47a0494d89887b46d5c64a17e890908e"}}}, &(0x7f0000001100)={0x44, &(0x7f0000000e40)={0x40, 0x15, 0xd6, "37b7d740890939352422b80e616527a7d143c39c2f332bb2d238ff9a75c0b4263835755ab918490aaafed67f561061d21a716f730d9b711de14b2727e37a96bf87fd009844ea1075ba69a1cc46c80feb21d2e63ffe84e4df9c9de18da5f44853278a1181819d10c7bcb9353766ed7a1b45e64b2b7b2507ad4d467d63209b3ca7782126f6d3ebc06ac709a8df9bd06b6ab1f947ebbabceb3787b4f30db00871e9e0a9361c56b7ff0b18156d2c47921dd22b86e69a21849a11e58de7652caf7eae627d577c5ba5bc2ec920a527b22e7204f258ae5f1b4b"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000fc0)={0x20, 0x81, 0x1, "19"}, &(0x7f0000001000)={0x20, 0x82, 0x3, "c5b294"}, &(0x7f0000001040)={0x20, 0x83, 0x2, 'd5'}, &(0x7f0000001300)=ANY=[@ANYBLOB="2081040000008bd24eb548ba98d352a96e7feeeb7063e3d7d1855088034bb59e6571f98508ce9162cd430dfc992c508b73f06153537d831c7b15f522ecfbad6741333d90590bebc3033d6dfe1381a099718ed9bffa6b0b1977a27c3015c66328b230812c91bbdc2662b14a77be06d74045b973b7fe3c045d"], &(0x7f00000010c0)={0x20, 0x85, 0x3, "af6035"}}) capset(&(0x7f0000002100)={0x20080522}, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000100)) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xffeffffffffffffa]}, 0x8, 0x800) r8 = syz_io_uring_setup(0xf08, &(0x7f0000000240)={0x0, 0x8000595d, 0x1000, 0x3, 0x24e, 0x0, r7}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r7, 0x0, 0x0, 0x1, {0x110a}}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000400)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000440)={{}, {0x77359400}}, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f0000000600)={r4, &(0x7f0000000500)='\x00', 0x0, &(0x7f0000000540)={@_ha_fsid={[0x4, 0x3ff]}, {0x5, 0xb, 0x80, 0x5}}, 0xbed, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0xa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r12 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0x2e, &(0x7f0000000480)=0x3, 0x4) getsockopt$IP_SET_OP_GET_BYNAME(r12, 0x1, 0x53, &(0x7f0000001280)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000012c0)=0x28) r13 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f00000004c0)={0xa0000006}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c003f80080003000100000008000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 49.435099485s ago: executing program 2 (id=110): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, {[], @mld={0x82, 0x0, 0x0, 0xb, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) (fail_nth: 3) 49.380392362s ago: executing program 2 (id=111): r0 = syz_io_uring_setup(0x109f, &(0x7f0000000040)={0x0, 0xa74d, 0x940, 0xfffffffe, 0x94}, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x3c5d, &(0x7f0000001400)={0x0, 0xd4d0, 0x27, 0x7, 0x0, 0x0, r0}, &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, &(0x7f0000000100)={r2, 0x10, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={r2, 0x4}, &(0x7f0000000240)=0x8) 49.246443705s ago: executing program 2 (id=114): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1cc) (async) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540), 0x8, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) (async) syz_mount_image$fuse(&(0x7f00000005c0), &(0x7f0000000600)='./bus\x00', 0x322020, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./sys\x00', 0x1ff) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) add_key(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) (async) r1 = fspick(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000100)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000340), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f0000000380), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x38) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_clone(0x800400, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) (async) ioctl$sock_SIOCGIFBR(r5, 0x8940, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x7, 0x1000, &(0x7f0000000740)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 49.223594441s ago: executing program 2 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) mount$bind(&(0x7f0000000ac0)='.\x00', &(0x7f0000000b00)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="71050603030676b0070c"], 0x17) mount$bind(0x0, &(0x7f0000000b40)='./file0\x00', 0x0, 0x100000, 0x0) fallocate(r0, 0x4c, 0x8000000000000001, 0xce45) mount$bind(&(0x7f0000000b80)='./file0/../file0\x00', &(0x7f0000000bc0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) setns(0xc9, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x0, [], [], 0x0, [0x0, 0x2]}, 0xffffffff, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002180000ffffffff00000000"}]}, 0x60}}, 0x0) mount$bind(&(0x7f0000000c40)='./file0/file0\x00', &(0x7f0000000c80)='./file0\x00', 0x0, 0x38ff817, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newroute={0x60, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x0, 0x18, 0x1, 0x1, 0x0, [@empty]}}}]}, 0x60}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r6, &(0x7f0000000240)=[{{&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=[{0x10, 0x29, 0x37}], 0x10}}], 0x1, 0x4000000) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101000007000000"], 0x60}}, 0x0) mount(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) 48.788511s ago: executing program 2 (id=117): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000080), 0x3, 0x42f, &(0x7f00000017c0)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfe}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf0c30fc0979da194}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x70, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004c000}, 0x0) (async) write$tun(r2, &(0x7f00000000c0)=ANY=[], 0xfdef) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async) fdatasync(r0) (async) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f0000000580)=""/151, 0x97}], 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x100000000000001) 48.547951718s ago: executing program 2 (id=123): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/damon_reclaim/parameters/commit_inputs\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x31, 0x5, 0x0, {0x0, 0x3, 0x0, 0x6}}, 0x30) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) bind$nfc_llcp(r3, &(0x7f00000000c0)={0x27, r4, 0x0, 0x3, 0x9, 0x80, "614c74c9ded4f8f7a183c3b6a114d5f3c5869adf87a953025a1d03f2693610f476971b4645c988e30bf4984e811d95a1ee9a9649208b0f3d39e5ee13418d33", 0x2b}, 0x60) r5 = eventfd2(0x7fff, 0x80000) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000300)={0x0, 0x4, 0x0, 0x5, 0xffff, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x3, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) (async) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000300)={0x0, 0x4, 0x0, 0x5, 0xffff, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x3, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) 48.487507155s ago: executing program 33 (id=123): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/damon_reclaim/parameters/commit_inputs\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x31, 0x5, 0x0, {0x0, 0x3, 0x0, 0x6}}, 0x30) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) bind$nfc_llcp(r3, &(0x7f00000000c0)={0x27, r4, 0x0, 0x3, 0x9, 0x80, "614c74c9ded4f8f7a183c3b6a114d5f3c5869adf87a953025a1d03f2693610f476971b4645c988e30bf4984e811d95a1ee9a9649208b0f3d39e5ee13418d33", 0x2b}, 0x60) r5 = eventfd2(0x7fff, 0x80000) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000300)={0x0, 0x4, 0x0, 0x5, 0xffff, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x3, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) (async) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000300)={0x0, 0x4, 0x0, 0x5, 0xffff, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x3, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) 47.750830214s ago: executing program 0 (id=133): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x410, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x6, 0xfff1}, {0x10, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b7050000000000008500000063000000150002000000000079013000000000007a0000005600000095"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {0x8}, {0x2, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x8, 0xc824, 0x4, 0xe3, 0x6, 0x0, 0x7, 0x7, 0xe, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x6, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0xc, 0x8, 0xfffffffa, 0xfffffff7, 0x3, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x4, 0x3, 0x7ff, 0x5, 0x0, 0x3, 0x2, 0x6, 0x5, 0xfffff000, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x80, 0x3, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x800, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x0, 0x7, 0x200, 0x2, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x2e, 0xc, 0x6, 0x20, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0x1, 0x6, 0x8, 0x990, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x7ff, 0x8000, 0x5, 0x6, 0x10000, 0xd41b, 0x7, 0xf, 0x40004, 0xf918, 0x7f, 0x3, 0x8, 0x2, 0x140, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x4000001, 0xfffffffe, 0x6, 0x9, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0x5, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x0, 0x4ebe3ccc, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x9, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x7, 0x4, 0x81, 0x58783dd6, 0xed2, 0x5, 0x5, 0x9]}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x800, 0x2, 0xa, 0xbc2, 0x1ff, 0x10, 0x4, 0x8, 0x4, 0x4, 0x6, 0xff, 0x2b45, 0x1, 0x0, 0x6, 0x1, 0x5, 0x552a, 0x9, 0x1, 0x8, 0x3ff, 0x9, 0x9, 0x1000, 0x4, 0x5fdb, 0x1ff, 0x2, 0x10000, 0x7, 0x4, 0x9, 0xfff, 0x10000, 0x10000, 0xd6, 0xfffffff8, 0x8, 0x8001, 0x80000000, 0x32, 0xe, 0x3, 0x0, 0x0, 0x1, 0x10001, 0x481, 0x9, 0xffffff46, 0x8, 0x9, 0x90d3, 0xffff177f, 0x7, 0x0, 0xb099, 0x3, 0x1, 0xff, 0xfffffff2, 0x10, 0xc, 0xfd, 0x101, 0x7, 0x0, 0x0, 0x2, 0x0, 0x3, 0x81, 0xd, 0x3, 0x3, 0x6, 0x6e, 0x90, 0x3, 0x8000, 0xe, 0x9, 0x401, 0xb879, 0x8, 0x8, 0x1, 0x2, 0x80000001, 0xbb4f, 0x2, 0x1, 0x5, 0x1b2, 0xbc, 0x2, 0x2, 0x44bd, 0x2, 0x5, 0x3, 0x8, 0x57e, 0x3, 0x5c5, 0x7, 0x10000, 0x8000009, 0x1, 0x5, 0x1, 0xc9f, 0x8, 0xd, 0x7, 0x6, 0x34, 0x400, 0x2, 0x0, 0x3, 0x4, 0x9, 0x9, 0xb7, 0xfffffffb, 0x7fffffff, 0x401, 0x6, 0x0, 0xb, 0x5, 0xfffffffa, 0x6, 0xf8d, 0xfffff907, 0x5d54156, 0x6, 0x2, 0x40, 0x101, 0x3, 0x1, 0x10001, 0xd141, 0x9, 0x2, 0x2, 0x8, 0x5, 0x9, 0x7, 0xb2, 0x50a6c46e, 0x3, 0x10001, 0x5, 0x1, 0x816, 0x6, 0xbdf2, 0x5, 0x2, 0x5, 0x8, 0x9, 0x8, 0xffffffff, 0x6, 0x484, 0xa24, 0xffffffa1, 0x4a, 0x3, 0x5, 0x7fffffff, 0x1, 0x7, 0x6, 0x1, 0x80000000, 0x3, 0x3, 0x9, 0x854, 0x3ff, 0x56, 0x3, 0x1, 0xf, 0xfd0, 0x7, 0x40, 0x4fb, 0x8, 0x5, 0x80, 0xb36, 0x1, 0x3, 0x5, 0x2, 0x4, 0x8, 0xffffffff, 0x2, 0x4, 0x9, 0xb, 0xccf1, 0x4902, 0x6, 0x7, 0x4, 0x7a, 0x7, 0xfffffffa, 0x8e1, 0x0, 0x0, 0x2aeb00d5, 0xfff, 0x60000000, 0x9, 0x9ec, 0x8, 0x2, 0x1, 0x0, 0x1, 0x7, 0x1, 0x8, 0x101, 0xfffffffd, 0x1, 0x1, 0x4, 0x1000000, 0x10000, 0xffff, 0x5, 0xffffffff, 0x6, 0x4, 0x0, 0x3, 0x3, 0x4, 0x0, 0x9, 0x400, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) r3 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000540)={0x24, &(0x7f0000000380)={0x40, 0x30, 0xd0, {0xd0, 0x2c, "3320bdb295eb3b4f90c5e42e5003b9aa3fcc9ce765e766e011a6d3b11ffd7072b862f382ee42414c8ef01f463bcf5809f180a5d65c75c2ab816b5bf22761a843d2b685e2acb207f32c264a9ffaf3629045060ec727f4e75d42a61bd4a6da4b935330079c01b3522af62df2ee399337835a82a64c5c83aae1cb5524cd6e26554a1f7e30e3b91b4ebdc7291e31d5313d77033ed57881632d458ef1d5bcc33ceccda4e9baa8eb924a69c3a985084442ba93d5b13413cebe412e77331fe626d7ee4cc6a247e37a82344b518efa938d6d"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f00000004c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x4, "d4f5454f"}, @local=@item_4={0x3, 0x2, 0x0, "00c461c9"}, @main=@item_4={0x3, 0x0, 0x8, "c261895b"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0x212}}}}, &(0x7f0000000fc0)={0x2c, &(0x7f0000000580)={0x40, 0xa, 0xde, "d7dbc96600e41453a67d794d8fc30b713bc67d5a2054f84ee8cee47b86aeefe9bbc9a0067bd439a29f96ae898f0629942f63f392614bd6dcf5ce662c75f5c6aace2d6ada3d3d27d9ee36cfb634ddef4b7d2c8155af9d964cbf936de519c42b6d1cff1336fb10a254f9e704b3511f1e98a1eef4de168439da41ad35bf7a84d5041bcb38f5556a564f3673284c73c9bbbbd162e69193e16b78622499f15c18c07539cfc6adbcd209356a73588dbd44e0d2b1bb7b68037801e04b26f343716f7ea0a99424219d1ee352437a24ec5ffa5e2969f0a4d3393a0fed8700710f05df"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000f40)={0x20, 0x1, 0x26, "bed5760402a962b9b4b8b697f7dd27d6a0d573d824075e7709b89aadfac176797b400efcf5b1"}, &(0x7f0000000f80)={0x20, 0x3, 0x1, 0x2}}) 46.992596916s ago: executing program 0 (id=145): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, {[], @mld={0x82, 0x0, 0x0, 0xb, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) (fail_nth: 6) 46.937562711s ago: executing program 0 (id=147): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x4, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="660a00000000000061117b0000000000850000001e00000095"], &(0x7f00000008c0)='GPL\x00'}, 0x94) (async) socket$inet6(0xa, 0x1, 0x78c3) (async) fsetxattr(r0, &(0x7f0000000400)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000020601000000000600000000030000000e0003006269746d61703a697000000014000780060005404e24000005001500030000002c000780080012400000800008000b4000000013180001b3536c6540fc020000000000000000000000000001400007800c00028008000140ffffffff1800018014000240fc00000000000000000000000000000108000a400000008108000a40000100000500050002e5ff000500010006000000"], 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x800000000000070, 0x1e1082) (async) prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a80)=0x7) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="8a0b95c53ffe0100fcff070004130000010005339f37000000000180"], 0x1c}, 0x1, 0x0, 0x0, 0x4084085}, 0x4008094) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000bc0)=0x7) mmap(&(0x7f00001ff000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x2000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000c40)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000cc0), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f0000000d00), 0x10106, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x5) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d80)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000dc0)={0xe000001a}) (async) read$char_usb(r7, &(0x7f0000000e00)=""/170, 0xaa) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="000404000000010000f90900000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200048c1}, 0x0) 45.868217121s ago: executing program 0 (id=159): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="db1f26bdbeb0e15ce1b17f03706f2f7c5a5b8988077a000c01060001000000010000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 45.787420593s ago: executing program 0 (id=161): timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8000000000000001, 0x6, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x6, 0x2, 0x2, 0x6, 0xd, 0x8000}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) ioctl(r1, 0x8b32, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000200), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./binfmt\x00', &(0x7f0000000540)='binfmt_misc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./binfmt/status\x00', 0x1, 0x0) write(r3, &(0x7f00000005c0)='1', 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r2, &(0x7f0000000380)=""/233, 0xe9, 0x40000002, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x23, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000001380), 0x4, 0xbe5, &(0x7f0000000680)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) socket$nl_generic(0x10, 0x3, 0x10) 44.8186189s ago: executing program 0 (id=178): fsopen(&(0x7f00000004c0)='cgroup2\x00', 0x1) (async) r0 = fsopen(&(0x7f00000004c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r1, 0x22, 0x0, 0x3, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001a0021000000000000000000818080000000ecffffffffff13"], 0x44}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001a0021000000000000000000818080000000ecffffffffff13"], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000059078ac1414000a01010000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000000e6f923c4b5965b11383d00952d866e7bffc401a4960dd24ac163dfd12627e832141d3cf90c549dca5434e38f6bd8e9"], 0x0) unshare(0x100000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0xf) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0404"], 0xd) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0404"], 0xd) socket$kcm(0x11, 0x0, 0x0) r7 = socket(0x2, 0x80000, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x600000, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c0041a391ee9c7df3869d07b88839af6fa7ceea65b0bedb9d2194768876cc8b536bd52f2522855fa5788f603461a66f57802f23d0a5fe67bbec3400eb4b64c82e444e8b68113edf962e9a4453e4bc1a25e26c91f474086add31abee463492a1106ddd0b374b26d1115e3d694864af7d2aac9096956d93fd7bf8732a0427bd910b05717f585dca03ce2e8d8df9f31290cde7c6bb268002e887e2078ef7c14a152882d7f212dca33d8414c843a663eba27e8967950bd34100ddb6cd16d132aaa22b0800e74dc8232095503a4cd655044d520a3cef04b69d37ec04db83f38d7e0f924e91eec47999f63b19de"]) r10 = socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r10, &(0x7f0000000080)={&(0x7f0000000780)={0x1d, r11}, 0x10, &(0x7f0000000480)={&(0x7f0000000700)=@canfd={{0x1}, 0x31, 0x2, 0x0, 0x0, "70cc0283b079b2f798e089208deff24902c3d56ea611b06d4f9c291de62b33394f48964b2abb9e1f9496cb1d1841dc0e06a3877b63c0489c232b8f02749c1752"}, 0x48}, 0x1, 0x0, 0x900, 0x8003}, 0x20044850) (async) sendmsg$can_raw(r10, &(0x7f0000000080)={&(0x7f0000000780)={0x1d, r11}, 0x10, &(0x7f0000000480)={&(0x7f0000000700)=@canfd={{0x1}, 0x31, 0x2, 0x0, 0x0, "70cc0283b079b2f798e089208deff24902c3d56ea611b06d4f9c291de62b33394f48964b2abb9e1f9496cb1d1841dc0e06a3877b63c0489c232b8f02749c1752"}, 0x48}, 0x1, 0x0, 0x900, 0x8003}, 0x20044850) 33.725525391s ago: executing program 4 (id=313): mkdirat(0xffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x1, 0x5) write$cgroup_int(r0, &(0x7f0000000180)=0x1, 0x12) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0xb8, 0x24, 0xd0f, 0xfffffffe, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x8c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffc, 0x3a}}, @TCA_HTB_INIT={0x0, 0x2, {0x3, 0x5}}, @TCA_HTB_INIT={0x0, 0x2, {0x3, 0x0, 0x6}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xe, 0x6}}, @TCA_HTB_INIT={0xfffffffffffffec1, 0x2, {0x3, 0x3, 0x8}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0xf2}}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e00000000", @ANYRES32=r4, @ANYBLOB="05000000"], 0x1c}}, 0x404c010) 33.53235095s ago: executing program 4 (id=315): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000013c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f00000008c0)='./file0/file0\x00', 0x0, &(0x7f00000017c0)={[{@lazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@nodioread_nolock}, {@noinit_itable}, {@nojournal_checksum}, {@nobarrier}, {@sb={'sb', 0x3d, 0x1}}, {@data_ordered}, {@noauto_da_alloc}, {@dax_never}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200000000000}}]}, 0x2, 0x522, &(0x7f0000000900)="$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") r1 = syz_open_dev$vim2m(&(0x7f0000000f00), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000f40)={0x3, @pix={0x5, 0x8, 0x33424752, 0x3, 0x3, 0x8, 0xc, 0x3, 0x1, 0x9, 0x2, 0x5}}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000e40)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000e80)={0x0, 0x1, 0x800, 0x9, 0x5, 0xea, 0x1, 0x9, 0xf6b}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000001040)=[{{&(0x7f0000001080)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000001100)="9c", 0x1}], 0x1}}], 0x1, 0x48000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000001140)=@assoc_value={0x0}, &(0x7f0000001180)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000011c0)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x1, 0x2, 0xb, r5}, 0x20) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000001200)={r5, 0x110}, 0x8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = add_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000300)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r6) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$KEYCTL_PKEY_QUERY(0x18, r7, 0x0, &(0x7f0000000880)='blake2s-224-generic\x00', 0x0) r8 = syz_io_uring_setup(0x3, &(0x7f0000001240)={0x0, 0x3f7, 0x13500, 0x0, 0x163}, &(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000001380)={0x28, 0x0, 0x0, r8, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r9], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 33.481997183s ago: executing program 4 (id=318): r0 = syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x41020, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{}, {@allow_other}, {@default_permissions}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@fowner_eq}, {@smackfshat={'smackfshat', 0x3d, 'user\x00'}}]}}, 0x1, 0x0, &(0x7f00000004c0)="dd27c8c210281b38db74e11da6774ae378a56f0a8f18438c193b240699a04cd35c516b4ebf1b66a1e6453fbc4247b4db541a5e1ed34e26a06ebd47a0e60087efa61127b7aa0353e2d8f495abebfc0b4057a04e9f4da6a289e8268041c3e4d5d46c6aa2c70b7abb155ed4f076defd56a4c093a4c857c1e5df9f64b416e25b79e76c3163c2a6d13d0cb2c2c6c04aca47a6f9d2cd4be7869a39346519a8500d5ca2fa31ae41482416bd0ca806") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='fd\x00') fstat(r1, &(0x7f0000000600)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000580)=@v2={0x2, @aes256, 0x10, '\x00', @c}) r2 = socket$nl_route(0x10, 0x3, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000680)=[0xee00]) setregid(r3, r3) capset(&(0x7f00000006c0)={0x20071026}, &(0x7f0000000700)={0x200000, 0x200003, 0x0, 0x0, 0x7}) fchmodat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0xa2) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="dbf2ef73c15321ab026e856b17a3e36b4a52058ae3eaa2821cf17f16ed545f6d33e4c3f0d0a7a3df389de4488e63fe1cdfb0599acbc29f0141daa4959a3c7a3a5df6390e29519d37a986eb0a15d3f3d8de45e4ae39ebadfa39b7f2971cf3b750fb62a497d299c4b48ed2aa2b63d941a723504fac33641b414d21fcef5f2616111419435133cf320de88a36573e3057585827edc9f3f342b8488c19b54cd80c92a7a5d1dd11286fb42c1935c7250b1fbffadf27ca7c5618ff2b423382e6fb49fc6538fbae6a90229ebbb3e650f1e7ccac40abf7514fae561a9a7d", 0xda, 0xfffffffffffffffb) keyctl$unlink(0x9, r5, 0xfffffffffffffffe) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x2}, @IFLA_GENEVE_ID={0x8, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0000}, 0x40850) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44050) 33.403892682s ago: executing program 4 (id=320): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="280045800400138014009c00fe80000000000000000000000000000c08007c00", @ANYRES32, @ANYBLOB="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"], 0x368}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x24, r2, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x60, r2, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f00000003c0)=0x19, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r7) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000007c0)={0x0, "43316ffb89b9279c965344edad905ea795a87224bdf9a940e1e653fcc7759680a2daa9d938967eaf84a5a953114370e20214611f3b7d35c1be533c685fc4d9c9", 0x34}, 0x48, 0xfffffffffffffffc) r8 = add_key$user(&(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000900)={r8, r8, r8}, 0xffffffffffffffff, 0xfe, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x68, 0x28, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x30}]}}]}, 0x68}}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 33.346395121s ago: executing program 4 (id=322): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006111240000000000851095000000000000009500a5050000000000154c5847122e1a8af643eb00"/59], &(0x7f0000000280)='GPL\x00', 0x4, 0x29e, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x29, 0xa5, 0x7, 0x4, 0x8, @private0={0xfc, 0x0, '\x00', 0xd2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80, 0x1, 0x906c, 0x2}}) (rerun: 64) r3 = socket(0x10, 0x803, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000ac0)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @rand_addr=0x64010100}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) (async, rerun: 32) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r0, 0xffffffffffffffff}, 0x4) (async, rerun: 32) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000224bd7000fbdbdf25020000006d12f685f2327e01c3ad10db6af3f5626c3d0d1503a020eb13aaeaa65b07b4694911826c43098cc3c9e6041e7620b5fc916a1ff4ba291f3a0e73f465104ab78a2a53ab521525501357d9b41498e14625f81d20682dca243cef30b1b7e227dc173e3b242435d897d52faeb6840505ab9d2b9769b8c4c62240f0aa410c32fedb1f3db6e694980000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a80)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000ac0)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000b00)=@assoc_value, &(0x7f0000000b40)=0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r7}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x11, &(0x7f0000000780)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x10, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8eb, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x4, 0x6, 0x7, 0x18, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x7f, &(0x7f0000000400)=""/127, 0x41100, 0x76, '\x00', r2, 0x0, r5, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0xd, 0x6, 0xdc}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000880)=[r6, r1, r0, r7], &(0x7f00000008c0)=[{0x5, 0x4, 0x2, 0xa}, {0x0, 0x2, 0x6, 0x4}, {0x0, 0x3, 0x7, 0x2}, {0x0, 0x3}, {0x2, 0x5, 0x1, 0x7}], 0x10, 0xe5}, 0x94) 33.061033845s ago: executing program 4 (id=326): socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000e40)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000e80)={0x2, 0x2383, @loopback}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xe, 0x6, &(0x7f0000001000)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @generic={0xb7, 0x3, 0x0, 0x0, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x32}, @exit], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001080)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={r4, &(0x7f0000001100), &(0x7f0000001140)=@tcp=r3}, 0x20) write(r3, &(0x7f0000001180)='h', 0x100000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xd50, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0x200000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 29.678524023s ago: executing program 34 (id=178): fsopen(&(0x7f00000004c0)='cgroup2\x00', 0x1) (async) r0 = fsopen(&(0x7f00000004c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r1, 0x22, 0x0, 0x3, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001a0021000000000000000000818080000000ecffffffffff13"], 0x44}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001a0021000000000000000000818080000000ecffffffffff13"], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000059078ac1414000a01010000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000000e6f923c4b5965b11383d00952d866e7bffc401a4960dd24ac163dfd12627e832141d3cf90c549dca5434e38f6bd8e9"], 0x0) unshare(0x100000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0xf) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0404"], 0xd) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0404"], 0xd) socket$kcm(0x11, 0x0, 0x0) r7 = socket(0x2, 0x80000, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x600000, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c0041a391ee9c7df3869d07b88839af6fa7ceea65b0bedb9d2194768876cc8b536bd52f2522855fa5788f603461a66f57802f23d0a5fe67bbec3400eb4b64c82e444e8b68113edf962e9a4453e4bc1a25e26c91f474086add31abee463492a1106ddd0b374b26d1115e3d694864af7d2aac9096956d93fd7bf8732a0427bd910b05717f585dca03ce2e8d8df9f31290cde7c6bb268002e887e2078ef7c14a152882d7f212dca33d8414c843a663eba27e8967950bd34100ddb6cd16d132aaa22b0800e74dc8232095503a4cd655044d520a3cef04b69d37ec04db83f38d7e0f924e91eec47999f63b19de"]) r10 = socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r10, &(0x7f0000000080)={&(0x7f0000000780)={0x1d, r11}, 0x10, &(0x7f0000000480)={&(0x7f0000000700)=@canfd={{0x1}, 0x31, 0x2, 0x0, 0x0, "70cc0283b079b2f798e089208deff24902c3d56ea611b06d4f9c291de62b33394f48964b2abb9e1f9496cb1d1841dc0e06a3877b63c0489c232b8f02749c1752"}, 0x48}, 0x1, 0x0, 0x900, 0x8003}, 0x20044850) (async) sendmsg$can_raw(r10, &(0x7f0000000080)={&(0x7f0000000780)={0x1d, r11}, 0x10, &(0x7f0000000480)={&(0x7f0000000700)=@canfd={{0x1}, 0x31, 0x2, 0x0, 0x0, "70cc0283b079b2f798e089208deff24902c3d56ea611b06d4f9c291de62b33394f48964b2abb9e1f9496cb1d1841dc0e06a3877b63c0489c232b8f02749c1752"}, 0x48}, 0x1, 0x0, 0x900, 0x8003}, 0x20044850) 17.838696405s ago: executing program 35 (id=326): socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000e40)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000e80)={0x2, 0x2383, @loopback}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xe, 0x6, &(0x7f0000001000)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @generic={0xb7, 0x3, 0x0, 0x0, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x32}, @exit], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001080)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={r4, &(0x7f0000001100), &(0x7f0000001140)=@tcp=r3}, 0x20) write(r3, &(0x7f0000001180)='h', 0x100000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xd50, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0x200000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 4.299234059s ago: executing program 7 (id=446): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x116, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaa8caa0380c200000008004b0001080000000000069078ac141401ac1e0001890bd7ac1414c8ffffffff890b00e00000017f000001000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078fffe63158acd87b2444ddff592fe860e17746c5fe9206ba37d33b2aef403e2dd7f6b69728c495e2da5469e3e734a79a6c65e401c41d236a8842843f6aba4637c3af9ddc1e6a03759479d35a894ce4fbb80c581d5ce574fe7e44a2ea2a5f3ae0ac2dcf1bb2422f6a87335a80650424ecc25abc65cea8e4fc8ad7fbc60ee39ce1ba2d18db54f5298e18e88871db57e0ad16372b9625a87542bb4a9d60dd9d63646ab76e4e8cd805ec6e2c7d66985f503bd5f3dec245fe3ab22422cae2e5f14bf33e6eeccc877614d25296f"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/236, 0xec}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0xc) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x116, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaa8caa0380c200000008004b0001080000000000069078ac141401ac1e0001890bd7ac1414c8ffffffff890b00e00000017f000001000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078fffe63158acd87b2444ddff592fe860e17746c5fe9206ba37d33b2aef403e2dd7f6b69728c495e2da5469e3e734a79a6c65e401c41d236a8842843f6aba4637c3af9ddc1e6a03759479d35a894ce4fbb80c581d5ce574fe7e44a2ea2a5f3ae0ac2dcf1bb2422f6a87335a80650424ecc25abc65cea8e4fc8ad7fbc60ee39ce1ba2d18db54f5298e18e88871db57e0ad16372b9625a87542bb4a9d60dd9d63646ab76e4e8cd805ec6e2c7d66985f503bd5f3dec245fe3ab22422cae2e5f14bf33e6eeccc877614d25296f"], 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) (async) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/236, 0xec}], 0x1) (async) landlock_restrict_self(0xffffffffffffffff, 0xc) (async) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000040)) (async) 4.024398472s ago: executing program 7 (id=447): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000500)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4000002}, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x0, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000005c0)={0x42, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000600)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x200004}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000680)={0x43, 0x2, 0x2}, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x555}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff}, &(0x7f0000000040)=0xc) r5 = openat$ttyprintk(0xffffff9c, &(0x7f0000000440), 0x2000, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f0000000480)=0x13) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x2, 0xc0000}, &(0x7f00000000c0)=0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0xac, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xe, 0xf410, 0x2b6, 0x2, 0x10009, 0xffffffff}}, {0x4}}]}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0xe, 0x0, 0x7, 0x4, 0x7, 0xb, 0x7, 0x9, 0xb, 0x1, 0x1, 0xe, 0xf, 0x1, 0x2, 0x4], 0x1, [0x6, 0x6, 0x6f6c, 0x29, 0x657, 0x9, 0x6, 0xfffd, 0x8, 0x9, 0x8, 0x8, 0xffff, 0x0, 0xb, 0xffff], [0x4, 0x8001, 0x81, 0x2, 0xde, 0x1, 0x8, 0x800, 0x5, 0xfc01, 0xfff9, 0x7, 0x0, 0x0, 0x2, 0x1023]}}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x845}, 0x2408c004) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r4, 0x84, 0x7a, &(0x7f0000000100)={r6, 0xffffffffffffffff, 0x80000}, &(0x7f0000000280)=0xc) 3.913383762s ago: executing program 7 (id=448): r0 = socket$inet_udp(0x2, 0x2, 0x0) semget(0x1, 0x5, 0x6b4) (async) semop(0x0, &(0x7f0000000100)=[{0x1, 0x8001, 0x1000}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0xc) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x75e, 0x4) (async, rerun: 64) r1 = io_uring_setup(0x4d57, &(0x7f0000000140)={0x0, 0xcb9c, 0x8, 0x1, 0x143}) madvise(&(0x7f000019b000/0x1000)=nil, 0x1000, 0x12) (async) io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f0000000200)={0x0}, 0x1) (async) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) rseq(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) (async, rerun: 64) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/module/usbcore/parameters/quirks\x00', 0x51100, 0x18) (rerun: 64) r3 = openat(r2, &(0x7f0000000300)='./sys\x00', 0x0, 0x0) write(r3, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000001014d9ec29bd7010f4d9df25080003000100000008004c000000000008004b001300000008004a000000000008004b001300000008000300000000000800150003000000080001000000000008004f"], 0x58}, 0x1, 0x0, 0x0, 0x4004005}, 0x4004080) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, 0x0, 0x4048040) (async) close(0xffffffffffffffff) r6 = syz_clone3(0x0, 0x0) ptrace$cont(0x19, r6, 0x1000000080000001, 0x6) (async) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f0000000500)={0x0, &(0x7f0000000540)='@\xb8$*!\x00', 0x6}) (async) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x24044884) (async) socket(0x10, 0x3, 0x0) 3.276472069s ago: executing program 8 (id=450): syz_mount_image$fuse(0x0, &(0x7f0000000000)='.\x00', 0x81, 0x0, 0x40, 0x0, 0x0) 3.204981392s ago: executing program 8 (id=452): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x90}}, 0x0) sendmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x8841) 2.603638667s ago: executing program 8 (id=454): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}, @IFLA_GENEVE_ID={0x8}]}}}]}, 0x4c}}, 0x0) 2.602976584s ago: executing program 8 (id=455): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x20a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000900)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty20(0xc, 0x4, 0x1) connect$unix(r1, &(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a00), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000a40), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000a80)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000ac0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000b00), 0xffffffffffffff94, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000b80)=""/76, 0x4c}, {&(0x7f0000000c00)=""/124, 0x7c}, {&(0x7f0000000c80)=""/31, 0x1f}], 0x3, 0x7, 0x3b4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000cc0)='bbr', 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0xe, 0x4, &(0x7f0000000dc0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000e00)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x2, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000e40)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000e80)={0x2020}, 0x2020) r6 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x8001, 0x100}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 2.529131378s ago: executing program 7 (id=457): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x6, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000430001000000000000000000020000000e0001006172705f63616368650000000800020000000000"], 0x2c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = fsopen(&(0x7f00000008c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup(r5, &(0x7f0000000900)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000940)={r3, r6, 0xb, 0x0, @void}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000980)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) (async) connect$inet6(r7, &(0x7f00000009c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0xf8, 0xc8}}}, 0x6) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x201, 0x8000}, 0x4) (async) syz_emit_ethernet(0x86, &(0x7f00000006c0)=ANY=[@ANYBLOB="0180c200000e0180c2000003080045000078000000020011000000000000000000000000fffc00649078020000000200000002000000e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc0c17d7b032591c2a7eb609eb8d2d9d1528cbbe8b3bc8849d1e6124e7e59132830080200000002000d300000000000400"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000f1d5d9a9fd6b3a340000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x13, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0xe, 0x0, &(0x7f0000000580)="14fd54ab72df97e6256c00000000", 0x0, 0x200007fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x14a80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0xdb, &(0x7f0000000b00)={@random="c00300", @link_local, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x2, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xc5, 0x0, 0xe000, 0x0, 0x11, 0x0, @remote, @empty}, {0x4e21, 0x0, 0xb1, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}, "abf5833f0b8c95afbd35e3ce6f561b5089298c4ed565897ef9710ebd0ff1a76cd0c9fa028ce11dee6b17022c72331cdc1e8ed7a5e6031dc69f889ab0d9620c14364d987711aa303117770650b017d010de3e0d102f2753bcf2574624e93ccf0b9acd6731ffa2473d60318f27a2a41733fe623e889bf3c79b69dcfd272ac03269515e7fba73542a814f8c19d2e84b910cd1d97a41028cad87e977d8506ebe9750b651d99af0"}}}}}}, 0x0) userfaultfd(0x80001) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.527852271s ago: executing program 3 (id=458): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000001, 0x4) (async) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000340)=0x80000000, 0x4) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) (async) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x4}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='3', 0x4e) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000480)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f00000004c0)=0xfd, 0x4) (async) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaafad1e048716e08004a000040000000000011907a0000000000000000441408510a0101010000c485ac14143b0000000200004e200018907804000000050000000700000000000000"], 0x0) (async) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10042, 0x0) (async) fallocate(r3, 0x0, 0x32, 0x8ffff) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) (async) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f00000003c0)=0x1, 0x4) (async) write$cgroup_devices(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="63202a3a3020c5"], 0x9) (async) sendmsg$rds(r5, &(0x7f0000000b80)={&(0x7f00000005c0)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000600)=""/206, 0xce}, {&(0x7f0000000700)=""/64, 0x40}, {&(0x7f0000000740)=""/165, 0xa5}, {&(0x7f0000000800)=""/32, 0x20}, {&(0x7f0000000840)=""/17, 0x11}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/23, 0x17}], 0x7, &(0x7f0000000ac0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000980)=""/72, 0x48}, &(0x7f0000000a00), 0x48}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x4}, &(0x7f0000000a40)=0x4, &(0x7f0000000a80)=0x3, 0xe8d, 0x6, 0x4, 0x0, 0xc, 0x1}}], 0xa0, 0x48815}, 0x40000) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x701, 0x0, 0x25dfdbfc, {0x41}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) 1.81024543s ago: executing program 6 (id=417): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x89901) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [], {0x10, 0x1}}, 0x24, 0x1) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x100, &(0x7f0000000340)={0x100005, 0x0, 0x180000, {r1}}, 0x20) 1.687309795s ago: executing program 8 (id=459): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2a0471a, &(0x7f0000000100)={[{@errors_remount}]}, 0x82, 0x4a7, &(0x7f0000000140)="$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") chdir(&(0x7f0000000600)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x42, 0x21) write$binfmt_aout(r1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sync_file_range(r1, 0x4, 0xd5f0, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="3300000008000601010000800201", 0xe) 1.623829106s ago: executing program 6 (id=460): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001c000104000000000100000002000000", @ANYRES32=0x1, @ANYBLOB="020000ec070001"], 0x2c}}, 0x20040000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2a08051, &(0x7f0000000140)=ANY=[], 0x0, 0x2f6, &(0x7f00000004c0)="$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") 1.527217924s ago: executing program 3 (id=461): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x2a, &(0x7f0000000b00)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x6, 0x79, 0x7f, 0x4, 0x11, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x20, 0x7, 0x3ff}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x4) 1.483015269s ago: executing program 5 (id=416): openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x4, &(0x7f0000000200)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x2, 0x10}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f00000005c0)={r0, r1}, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0xfe1b) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000000317300000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000003c0)={r2, &(0x7f0000000400), &(0x7f0000000440)=""/73}, 0x70) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8, 0x3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_MAX_P={0x0, 0x3, 0x1ff}, @TCA_CHOKE_PARMS={0xffffffffffffff4d, 0x1, {0x64, 0x2, 0x3, 0x17, 0x1a, 0x8, 0x1}}, @TCA_CHOKE_PARMS={0x0, 0x1, {0x800, 0x200, 0x1, 0xa, 0xd, 0x2, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x7fffffff, 0x0, 0x6, 0x20, 0x8, 0x3}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab79fa20d403336b687491532080101805feb9c6fa8a46a77186efcb394ce1a1cd7f2130835e3bf9e3ac25dd10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc400"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x4001f00}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv4_getroute={0x1c, 0x1a, 0x421, 0x70bd2c, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x7, 0x0, 0x3, 0xc8, 0x0, 0x6a00}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2004011) r6 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) read$alg(r6, &(0x7f0000000000)=""/170, 0xaa) 1.440073172s ago: executing program 8 (id=462): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x28}, 0x18) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000feffff7f080000000800000088100400", @ANYRES32=r0, @ANYBLOB="070000000000c274bdaeeef267d21cf00fc175cd", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000003000000020000000b00"/28], 0x50) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) msgget(0x0, 0x322) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000480)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000540), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000580), 0xf, 0x101301) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) timerfd_create(0x0, 0x0) write$uinput_user_dev(r7, &(0x7f00000005c0)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0xeb, 0xc95a, 0x6, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0xffffff28, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x4, 0x101, 0x7fff, 0x1, 0x80000000, 0x9, 0x3, 0xb, 0xfffffffb, 0x71, 0x9, 0x7, 0x0, 0x1, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x9e, 0x6, 0x3ff], [0x1, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x169432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x2, 0x5, 0x3, 0x8, 0x7, 0x5, 0x0, 0xe, 0x312, 0x81, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0xa, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x2, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x3, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x1, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x8024, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x83, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0xcba, 0x200, 0xffbf2445, 0xfff]}, 0x45c) ppoll(&(0x7f0000000a40)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.439642212s ago: executing program 6 (id=463): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000015c0)={0x18}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000001600)={0x28, 0x7, 0x0, 0x0, &(0x7f0000001640)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000001680)={0x18, 0x0, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000016c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000001700)={0x18}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000001740)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000001780)={0x28, 0x7, 0x0, 0x0, &(0x7f00000017c0)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000001800)={0x28, 0x7, r1, 0x0, 0x1c, 0xffffffffffffffff, 0x2}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000001840)={0x18, r1, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000001880)={0x8, r1}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000018c0)={0x18}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f0000001900)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000001940)={0x18, 0x1, 0x1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000001980)={0x20, 0x0, 0x0, 0x0, &(0x7f00000019c0)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000001a00)={0x48, 0x1, r1, 0x0, 0x1, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000001a80)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000001b00)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000001b40)={0x48, 0x3, r3, 0x0, 0x1004000, 0x1000, &(0x7f0000001bc0)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f0000001c00)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000001c80), 0x1}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000001cc0)={0x18, 0x0, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000001d00)={0x8, r2}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000001d40)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000001d80)={0x48, 0xa, r2, 0x0, r4}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001000000095ededb4307c50099c391d1bf92f5b"], 0x1c}}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000300)={0x1d, r7, 0x0, {0x0, 0x1, 0x4}, 0xfe}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xd, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18300000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="00000000020000580b7d2e00b70500000000000085000000c9", @ANYRESHEX=r0, @ANYRES8=r0], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1002, &(0x7f0000000580)=""/4098, 0x0, 0xc, '\x00', r7, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.375779031s ago: executing program 3 (id=464): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000940)={0xa, 0x5000, 0x0, @loopback, 0x3}, 0x1c) writev(r2, &(0x7f0000000980)=[{&(0x7f00000009c0)="06a5a714e3887cd4f7f97506f176b8", 0xf}, {&(0x7f0000000a00)="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", 0x535}], 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}, @IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) (async) socket$inet6(0xa, 0x3, 0x3c) (async) connect$inet6(r2, &(0x7f0000000940)={0xa, 0x5000, 0x0, @loopback, 0x3}, 0x1c) (async) writev(r2, &(0x7f0000000980)=[{&(0x7f00000009c0)="06a5a714e3887cd4f7f97506f176b8", 0xf}, {&(0x7f0000000a00)="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", 0x535}], 0x2) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}, @IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) (async) 1.340681063s ago: executing program 5 (id=465): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="ce347dedfa4b236d0622787c42d95b4dfa", 0x11) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x210402, 0x0) (async) mount(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000c00)='affs\x00', 0x8000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x161) (async) sendto$inet(r0, &(0x7f0000000500)="ad49ced9d68772247230f7c53d45102a943654f2319e96e28a401d0d44006a8e891d9836e5c6d08f071d4f0a271e15c589d87d36bcfbb59ddd62538da2e79f597134e94af532eff20331fe77eeda76fe", 0x50, 0x50, &(0x7f0000000580)={0x2, 0x4e22, @remote}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x6, 0xf, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000040000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7b9829d02000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b700000000000000950000000066ca30d71849cd81c4c0e47311351498bb93ca2bba16bcd728081cf2c96b6bbc772f683ebcb2ffe27e2a86620d3e96d24b3ccd110bce36ba237743301422fcec9d9b93af23d0aa295e7192dd5157e06fba4d962c59321ddc79b8c873bf932bc5928bb9609a7eb061f4b23dfaa86ea67593a08c74d5b65aa3b0406f12ce7de6e8d55537a057c336dee34b300b5e7b7b78d26a3840"], &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x4000, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x181280, 0x4) write(r2, &(0x7f0000000440)='10', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/set_event\x00', 0x2, 0x0) write(r3, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x14) (async) setuid(0xee01) (async) syz_open_dev$vim2m(&(0x7f00000002c0), 0x94, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0\x00', 0x1000010, &(0x7f0000000600)=ANY=[@ANYBLOB="e993ab0241bcba3f6f636861727365743d63703836302c696f636861727365743d63703836312c757466383d312c757466383d302c757466383d312c696f636861727365743d6d61636772e5656b2c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c757466383d312c756e695f786c6174653d312c636865636b3d7374726963742c6e6f6e756d7461696c3d302c696f63686172d7aba68baf9452810a15467365743d63703934392c6e6f636173652c73686f72746e"], 0x7, 0x2ba, &(0x7f0000000700)="$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") r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0x19, &(0x7f0000000d80), 0xfebf) (async) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000001100)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30008011) sendmsg$kcm(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)='Z', 0x1}], 0x1}, 0x4008035) unshare(0x22020600) (async) open(&(0x7f0000000040)='./bus\x00', 0x10000, 0x100) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f00000009c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.264229949s ago: executing program 6 (id=466): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000340)={[{@user_xattr}]}, 0x1, 0x490, &(0x7f000000ad40)="$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") lsetxattr$security_ima(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f00000008c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x15, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f80)={'syztnl1\x00', &(0x7f0000000f40)={'gretap0\x00', 0x0, 0x7, 0x80, 0xfffffff3, 0x3471, {{0x7, 0x4, 0x2, 0x0, 0x1c, 0x66, 0x0, 0x1, 0x29, 0x0, @broadcast, @multicast2, {[@generic={0x94, 0x6, 'T\"\nA'}]}}}}}) sendmmsg$inet(r0, &(0x7f0000001440)=[{{&(0x7f0000000b80)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000bc0)="51fe06eb3011a8c38a254215f71d414e122567cec3ec6a00f5f9bbcc839937e6e77c59d3ce445e983103524255b1b5f81264279986a87fb94cdc9840d4bef5add0ecc7b963de8c3032218cf48bf5a8e93f86b558b005de4b914d9f2acd471943c334f5e5acc119f31872ae3e15cd3793d81ec3766abfda35c23a6a12abb9985ac3", 0x81}, {&(0x7f0000000c80)="c65745469abf3d3b184f97d85364db219441e577e0c25329c49b0463ec8513da4301d5c14aa5ce37c7d5eb7a55ea81556233a067146937a22f09a8e04c74b7d665c7658b0dda6094b636cb5e104d12ccf7480b00e9ab691153e53c09ddea4af6fd94f5dfbd2dd88fab5f", 0x6a}, {&(0x7f0000000d00)="bc3939b267111e6542be196d24772eb8e465866ae7d08ca10fb0765eb7c91178b1724bd97147845e9bb2447573c8", 0x2e}, {&(0x7f0000000d40)="5e26db224f16886eeec827a231160741ab8607eb21bc53400eb9b8a11cca0d1d084bd7331e77bb48dab83eb4b14f19b16c71aac03f34ed450e77aa3880506032c3e428ee6d1ec1", 0x47}, {&(0x7f0000000dc0)="f89b1ff18792d432794b3dd57dac9b0803f61318d1c2e4179f1abd13cbfbee6a90db128825126ef9333707f5930d10b3cc03ad40f5d0edf303b1dbb7d0d4622c92d213093b3e1289be47e7054b98ee6594327537403e08ae410b45501817ebe07928ed1aee4e12fae4dad4c51717806e", 0x70}, {&(0x7f00000014c0)="c449a517f9c8846ce8316bb66547d29a27c8843d3d6cf331213ca471179624e3308f3543f24c6de03e357e5791ecc90b679d1e7f4952236cd6e424e63d4171092630e252d336512a727020f612bd2e6061ea45a7b36f86bfcd9b8140b3b6dddbc11a62722299b02f42ccbc1648e15f002df2e4818a596f3b87098a8901000000", 0x80}], 0x6, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1400000000000000000000000200000001000100000000008000000000000000000000000700000000892be00a010100ac1414bb00000000e00000027f0000017f0000017f000001ac1414aaac1414aaac1414aa01443c10130a01010000000001ffffffff000009f8e0000001000000007f00000100000002e000000100000005e0000002000000000a01010100000008830754e0000001180000000000000000000000070000004408181000000ca11c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="e00000028c1e010100000000140000000000000000000600000000000000140000000000000000000000010000000600"/60], 0x100}}, {{&(0x7f00000010c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001380)=[{&(0x7f0000001100)="bd3294910f286413e4aeb4c16c760fcad7e2", 0x12}, {&(0x7f0000001140)="d0785c4194dad4eedca820aa78d20644a7083a46894919676d8d989437aee889a793d682fb448545329ede968f52cb1b7a78dbd4a194e15d769318f5557f2497acd529c54d1f898f518c6700be20e5dff6cb939d9d6911629d0b88aeb8ab1402dafa45e497103a1a548d2b2f0c0279ecb972ac9a", 0x74}, {&(0x7f00000011c0)="b2ed10581fb47c95081e9c6b031f941519c95d1664cb200db1274e145571c5c0641ec826470014b570706b62b9df7723bfed9a0926c31ea184fc962c41262d737bc7a7cc0df4f89120ea7a18b09ec8223af5de9f3ad808d15418f31be61215de653eb2e0798e8438a00b12108731cdca29702364260dd0da63d34cbfee81c5a7cbbbdda0480f5c0701301e77d1130f16abb11dc2395da132a7f5102b131e6f9cee514ecbb95a5d14d301be501ca589762330ee17f1037336f214319532b64e656b86642f6377281c78654dafde22c1307ee1c917e24f85da2a2b985cbc3b1520105fe57cca183aa14ae8264d9b0b7ecfb3d975ef", 0xf4}, {&(0x7f00000012c0)="9a05bc92e96c61906ba4da736135206f3e3d153ffa8e0f948fc78aad789336d47d31b1938958cacbbdb312ab5a82693b1f3d24d364eb93a1e97faff60426bffaebb9a33c31b110e32d962d0adb11b14548381e0e19ddc7dee64cccf1c83b92494b2bdeada4dcd9c38ece75a3d9ebe55d9d4d55642aa293ee745fa480675c409960718d8db149a242", 0x88}], 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="680000000000000000f1000007000000442cdb93e0000002000004f37f000001000000046401010100000007ac141423000000040a01010100000200072bf4ac1414aaac1414aaffffffffffffffffac1414aae0000001ac141418ac1414aae0000002ac1e010100"], 0x68}}], 0x2, 0x24000000) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x80500, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000007000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000006fc0)={&(0x7f000000b200)=ANY=[@ANYBLOB="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"], 0x4020}, 0x1, 0x0, 0x0, 0x400c800}, 0x800) lsetxattr$security_ima(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940), &(0x7f0000000980)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x9ab7, 0x0) setxattr$security_evm(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "6d749a5382ca5ce7ec65c58862c0a998"}, 0x11, 0x1) syz_open_dev$video(&(0x7f0000000800), 0x9, 0x100) r3 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x0, 0x0) statx(r2, &(0x7f0000000e80)='./file1/file0\x00', 0x0, 0x20, &(0x7f0000007040)) r4 = syz_open_dev$usbfs(&(0x7f0000000300), 0x20000007c, 0x0) futex_waitv(&(0x7f0000001600)=[{0x7, 0x0, 0x2}, {0x200, 0x0, 0x2}, {0x8, 0x0}, {0x6, 0x0, 0x82}, {0x2, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0xfffffffffffff001, 0x0, 0x82}, {0xae, 0x0, 0x2}, {0xdde, 0x0, 0x82}, {0x6, 0x0, 0x2}, {0x7c, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x1000, 0x0, 0x2}, {0x63, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x5, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0xe0, 0x0, 0x82}, {0x42, 0x0}, {0x30, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0xb, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0xffff, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0xffff, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0x81, 0x0, 0x82}, {0x62c7c877, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0xf9, 0x0, 0xeb60d69341c1125b}, {0x271d, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x5, 0x0, 0x1}, {0x96, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0xe4a, 0x0, 0x2}, {0x8000000000000001, 0x0, 0x2}, {0xc50, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x80000001, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x9, 0x0, 0x2}, {0x8000000000000000, 0x0, 0x82}, {0xec, 0x0, 0x2}, {0xe6, 0x0, 0x82}, {0x3f, 0x0, 0x82}], 0x34, 0x0, &(0x7f0000001b00)={0x77359400}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000040961b040000000000f550d2dbed1e598f000000090400000203000000092100000001221800090581032000000000"], 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x72d, 0x100, 0x8, 0x390}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x10, 0x5, 0x2e3, 0x0, r5}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x1000, 0x3, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x52bf, 0x0, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8af2, 0x2000, 0xb, 0x9d7c}}], 0x1, &(0x7f0000000a40)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x0, 0x5, 0x0, 0x0}}, 0x0) r6 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f0000000ac0)) bpf$PROG_LOAD(0x5, &(0x7f0000007140)={0x1, 0x4, &(0x7f0000007200)=ANY=[@ANYBLOB="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"], &(0x7f0000007340)='GPL\x00', 0x5, 0xfd90, &(0x7f0000007380)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000007440), 0x1f3, 0x10, &(0x7f0000007480), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe1e}, 0x2a) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000074c0), 0x10) sendmsg$can_bcm(r7, &(0x7f0000007500)={&(0x7f0000007540), 0x10, &(0x7f0000007580)={&(0x7f00000075c0)=ANY=[@ANYRES32=r7], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', 0x143242, 0x40) r8 = socket$packet(0x11, 0x3, 0x300) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r9, 0x4001af84, 0x0) setsockopt$packet_int(r8, 0x107, 0x17, 0x0, 0x0) 1.171405189s ago: executing program 7 (id=467): r0 = syz_open_pts(0xffffffffffffffff, 0x100) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x30502, 0x20) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x30502, 0x20) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x8}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000004c0)={0x18b, 0x10, &(0x7f00000000c0)="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"}) (async) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000004c0)={0x18b, 0x10, &(0x7f00000000c0)="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"}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000840)={0xa4, 0x0, &(0x7f0000000680)=[@clear_death={0x400c630f, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000500)={@fd={0x66642a85, 0x0, r0, 0x0, 0x1}, @fda={0x66646185, 0x4, 0x0, 0x10}, @flat=@handle={0x73682a85, 0x5, 0x1, 0x3}}}}, @register_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3, 0x1}, @child_ptr={0x70742a85, 0x1, &(0x7f0000000580)=[r0, r0, r2, r1], 0x10, 0x1, 0x8}, @flat=@weak_binder={0x77622a85, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}, 0x400}], 0x100, 0x0, &(0x7f0000000740)}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000840)={0xa4, 0x0, &(0x7f0000000680)=[@clear_death={0x400c630f, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000500)={@fd={0x66642a85, 0x0, r0, 0x0, 0x1}, @fda={0x66646185, 0x4, 0x0, 0x10}, @flat=@handle={0x73682a85, 0x5, 0x1, 0x3}}}}, @register_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3, 0x1}, @child_ptr={0x70742a85, 0x1, &(0x7f0000000580)=[r0, r0, r2, r1], 0x10, 0x1, 0x8}, @flat=@weak_binder={0x77622a85, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}, 0x400}], 0x100, 0x0, &(0x7f0000000740)}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000a80)={0x3, @win={{0x1f, 0x6, 0x0, 0x7ff}, 0x4, 0x10, &(0x7f0000000940)={{0x5, 0x0, 0x8000, 0xc8e8}, &(0x7f0000000900)={{0x200, 0x6, 0x60000000, 0x2}, &(0x7f00000008c0)={{0x3, 0x4, 0x9, 0xd}, &(0x7f0000000880)={{0x9, 0xfffffffa, 0x1, 0x3}}}}}, 0x2, &(0x7f0000000980)="26fc789ee46ed975057262adf086958f87e07196b1e7e4af478cef34e36a732ac623bce49872da4359d178e988cd83f4a9b4fb3d89246c625daffc2930d37ee03ee9600027e224e5bde60e174a5cd3dc9c4ac2ed9126d3e42ef9663a423728d639b462338699c9638bd85bf042fc96d21867c12149d740a2d4604baf36cc54e69deb8274c9ba03cdc3ae8e6ba38622c9a5bc6bbae48405cbe5b70c7fb94fdfdcb50b75ca74b6b6836e3e4f4183bb64871f22c46784b4fa048412d8b2fada9327c7b7af2203d6922605da21", 0x2}}) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) (async) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) r3 = fsmount(r1, 0x0, 0x5) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000c00)={0x3ff, 0x80, 0x3, 0x7, 0xc, 0x33}) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000c00)={0x3ff, 0x80, 0x3, 0x7, 0xc, 0x33}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000c80)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002cc0)={{{@in=@multicast2}}, {{@in6=@loopback}}}, &(0x7f0000002dc0)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002cc0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000002dc0)=0xe8) read$FUSE(r1, &(0x7f0000002e00)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000002e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r4, &(0x7f0000004e40)={0xb0, 0x0, r5, [{{0x5, 0x2, 0x7, 0x8, 0x6, 0x5, {0x2, 0x9b0, 0x4, 0x9, 0x6, 0x6, 0x7, 0x6, 0x7, 0x4000, 0x8, r6, r7, 0xd5be, 0x3}}, {0x2, 0x114e, 0x2, 0x2, '@*'}}]}, 0xb0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONTX(r8, 0x4b6c, &(0x7f0000005300)={0x65, 0x6, &(0x7f0000004f00)="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"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000005340)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(r9, 0xc0106440, &(0x7f00000053c0)={0x3, 0x8000, &(0x7f0000005380)}) openat$tun(0xffffffffffffff9c, &(0x7f0000005400), 0xac0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000005400), 0xac0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000005440)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff7, 0x1, 0x0, 0x3, 0x3, 0xc8d}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000005440)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff7, 0x1, 0x0, 0x3, 0x3, 0xc8d}, 0x20) fcntl$setpipe(r3, 0x407, 0xfffffffffffffffd) timer_create(0x6, &(0x7f0000005640)={0x0, 0x40, 0x0, @thr={&(0x7f0000005480)="2ba08651fd8e6d302e091c0433312cde2ae529dc4b93f7bec026f8842496ebe0259e8af340d63caf98761e8d1c293d943a32ac60623edc3d012f1d8f4b1beb79658b533151e40d9966cc89874d44194ea193e46fb9e832a74f16d1039865e4de4178137e5b99f8c7f13afdb89678c58adcdacf7831f03220fc1563d1157fcb076a0d7ac849533918b8d628b39ad61194bff026fe2c626345c3d37bd8cd96fc050b0c45bf20912b8b3221b11187cc5194622d35d4367ebf7f661b6a5158458d634db3a38bfe60088259dcf0c868d3350362ecc80522d02b0d61ae1d8a48d5b4b9ea", &(0x7f0000005580)="18f1e97093f43ae3de8297887b719ec2367e72787a13f2ac1004fb46ac1306477ba49202efd213443fe38d4d0c32bc6045b30c453977a540da045329eea414062e320cc0d9d484db8bacefd556510842125b458984c86ce1d3b5262a9f1c6999a528a40cee0b5505563d9fd5a084d6e24e8a2da421dc08cfecace23f2e31dd22b861735b1ca4a5d34e1329de25e7f93d6de532b00305306a60e3c1dfc0467dc69489f6c9ce3cbd5f3940813bc38899eb89886e9040"}}, &(0x7f0000005680)=0x0) timer_settime(r10, 0x0, &(0x7f00000056c0)={{}, {0x0, 0x3938700}}, &(0x7f0000005700)) r11 = fsopen(&(0x7f0000005740)='ncpfs\x00', 0x1) r12 = fsmount(r11, 0x0, 0x78) connect$inet6(r1, &(0x7f0000005780)={0xa, 0x4e21, 0x6af8, @private1, 0x7}, 0x1c) socket$alg(0x26, 0x5, 0x0) (async) r13 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_SET_FD(r12, 0x4c00, r13) 1.086783555s ago: executing program 5 (id=468): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="b7020000020000207b2ac0ff00000000632ac8ff00000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="b7020000020000207b2ac0ff00000000632ac8ff00000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x801, 0x1fffffd, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4b003}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x13}, @IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 1.008451138s ago: executing program 3 (id=469): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r1, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) recvfrom$unix(r4, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000740)=[{&(0x7f0000000780)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000800)='l', 0x1}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000008400000000000000ff0f"], 0x18, 0x14001}], 0x1, 0x4044040) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x4000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001400090528bd7080faffffff6b4b8266", @ANYRES32=r6, @ANYBLOB="08000100ac14141e080002007f000001"], 0x28}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000400)='100', 0x3) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02037f02210000000000000000000000030006000000000002000000ac14142e0000000000000000020001000000000010fffd007fffffff030005002b00000002000000ac1414aa0000000000000000170008"], 0x108}, 0x1, 0x7}, 0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0xd) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x1c3902, 0x0) sendfile(r9, r10, 0x0, 0x2000fb) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1c8) 674.728263ms ago: executing program 5 (id=470): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) mkdirat(r0, &(0x7f0000000040)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./debug\x00', 0xaf) mount(0x0, &(0x7f0000000440)='./debug\x00', &(0x7f0000000480)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='/#0r7', 0x5) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x3c}}, 0x880) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x482, 0x0) ioctl$TIOCGSOFTCAR(r6, 0x5432, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007000000000000000000000000000000000108000f"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xa, 0x1c, 0x1, 0x0, 0x0, 0x2, 0x0, @remote, @multicast1}, @info_request={0xf, 0x0, 0x0, 0x3, 0x3}}}}}, 0x0) ioctl(r5, 0xc138fd06, &(0x7f0000000000)="0400000000000000") 650.348271ms ago: executing program 7 (id=471): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000054000000030a010400000000000000000200000a0900010073797a30000000000900030073797a30000000002800048008000140000000030800024000000000140003"], 0xe4}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x204, 0xa0c2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000080)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f00000001c0), 0x0}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x21, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000000c0)) write$UHID_INPUT(r1, &(0x7f0000000740)={0xf, {"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", 0x1000}}, 0x1006) 482.040253ms ago: executing program 5 (id=472): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000100)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@user_xattr}, {@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}]}, 0x4, 0x533, &(0x7f0000000240)="$eJzs3WFrJGcdAPD/TLK55C5ttipyFmyLrdwVvd1LY/UUaSuIviqo9f0Zk00It8keyaZeQrEpfgBBRAU/gG8EX/hSkH4EEQr6XlQU0av6Tm9kdiaaze7exssm225+P5js8+wz8/z/z5Cd3Zl92AngwnomIl6JiKmIeD4iFsrn03KJg2LJ13s3K7wZWfbaX5NI8ufuv7Fy2Fden46IK+VmsxHxtS9HfDPpjbuzt39nudlsbJf1envzbn1nb//GxubyemO9sbW0tPjziHjx1s0yanaqcVYj4qUv/vEH3/3Jl1765Se/9bvbf77+7Tytz3+4yDsiVk4VYICi70pnXxzK99H2WQQbk3w8lalxZwEAwEnkn/E/EBEf63z+X4ipzqc5AAAAYJJkL8/Hv5KIDAAAAJhYaUTMR5LWyrkA85GmtVoxh/dDcTlttnban1hr7W6t5m0R1aikaxvNxs1yrnA1KsnaxuONxXKObVFvNl44Vl+KiCci4vsLc516baXVXB33xQ8AAAC4IK483X3+/4+FtFMGAAAAJkx1YAUAAACYFE75AQAAYPI5/wcAAICJ9pVXX82X7PA+3quv7+3eab1+Y7Wxc6e2ubtSW2lt362t/7NcfXNYf81W6+6nYmv3Xr09E+36zt7+7c3W7lb79kbXLbABAACAc/TE02//NomIg8/NdZYofwcQoMsfxp0AMEpT404AGJvpcScAjE1l6BqOEDDpkiHtvZN3imuF8auzyQcAABi9ax/p/f5/pmwbfm0AeD8z1wcALp7ub/fmxpYHcP4qXTMATzQbsLg8cPWsMgLO2+PFw6VB7QN/vOME3/8X1xiy7JESAwAARma+syRprTwHmI80rdUiHosHWTUqydpGs3GzbPvNQuVSXl/sbJkMnTMMAAAAAAAAAAAAAAAAAAAAAAAAABSyLIkMAAAAmGgR6Z+Szq/5R1xbeG6+++rAsbt+/fi1H95bbre3FyNmkr8tRHkzwPaPyudfyNwSAAAAAMZrLv9TnKeXj4vjTgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASfPu/TdWDpfzjPuXL0REtV/86ZjtPM5GJSIu/z2J6SPbJRExNYL4B29FxNV+8ZN4kGVZtcyiX/y5M45f7eya/vHTiLgygvhwkb2dH39e6ff6S+OZzmP/119evjSC+IOPf+l/j39TA44/jx2r9ygTfPKdn9VnBsV/K+LJ6f7Hn8P4SRG/K0ReeXbY4IoO4htf39/v236ky37xj8aqtzfv1nf29m9sbC6vN9YbW0tLi5++9ZlbL966WV/baDbKv33DfO+jv3gwKMV8/JcHxK92j79n/z83bPwdWfz7nXv3P1hUKv3iX3+2//vv1QHx0/K97+NlOW+/dlg+KMpHPfXTXz/1sPGvDhj/7JDxXz/R+OOzz3/1O7/v29KzNwCA87Czt39nudlsbD+kMHuCdf6vQsRp+3l5pPm8FwoxfJ3Z90iqZ1HI3iz+H0/Xzyk37ylkp9l8OkaQxkzP63QqHrXDJOIg7+uE/5AAAMCE+d+H/r7fIAEAAAAAAAAAAAAAAAAAAADn4BF/lmw2Ik688vGYB+MZKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAQ/0nAAD//6H+0dA=") openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file1\x00', 0xd02, 0x15) (async) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000080)={0x0, 0x1, 0x1012, 0xffffffffffffffff, 0x0, 0x0}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000001540)='./file1\x00', 0x101042, 0x1d8) (rerun: 64) 373.920154ms ago: executing program 5 (id=473): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0xa}, 0x28) (async, rerun: 64) r1 = socket$inet6(0xa, 0x3, 0x1) (async, rerun: 64) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f00000001c0)=0x8003, 0x4) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r2, &(0x7f0000000240), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000280), 0x1c) 341.433394ms ago: executing program 6 (id=474): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x20, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@integrity={0x0, 0x90, 0x0, 0x58, 'integrity\x00', {{@ram={'/dev/ram', 0x0}, 0x20, '128'}, 0x20, '8', 0x20, 'J', ' 1 journal_watermark:50'}}]}) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000600)={{&(0x7f0000000180)=[{0x800, 0x6, 0x401, {0x6, 0x1}, 0x8, 0x800, 0x1}, {0x7ff, 0x4, 0x5f, {0x2}, 0xc5, 0x2, 0x2}, {0x1, 0x2, 0xffffffff00000, {0x6, 0x3d85}, 0x3, 0x8, 0x9}, {0x1, 0xffff, 0x800, {0x1, 0xffffffffffffffff}, 0x1ff, 0x91b, 0x7}, {0x7ff, 0xbdc4, 0xc, {0x15a, 0x6fb58748}, 0x4, 0x9, 0xffffff00}], 0x5, 0x40, 0x7, 0x7}, {&(0x7f00000002c0)=[{0xfffffffffffffff8, 0xffffffffffffffff}], 0x1, 0x10, 0x0, 0x4}, {&(0x7f00000004c0)=[0x6, 0x9], 0x2, 0x8, 0x9, 0x3}, {&(0x7f0000000500)=[{0x23ad, 0xbdf3, 0x9, 0x3, 0x7}, {0x81, 0x0, 0x7f, 0x2643, 0xc44}, {0x8, 0x8, 0xe9e8, 0x3, 0x9}, {0xfffffffffffffffd, 0x0, 0x5, 0x1, 0x8}], 0x4, 0x28, 0x9, 0x3}, {&(0x7f00000005c0)=[0x6], 0x1, 0x8, 0x8, 0x6}}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = fsopen(&(0x7f00000009c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x82) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a00)={r1, r3, 0x16, 0x0, @void}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f0000000a40)={{0x0}, 0x0, 0x22}, 0x20) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000b80)={0x1, &(0x7f0000000bc0)=[{0x64, 0x1}]}, 0x10) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, 0x1402, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}}, 0x80) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = fanotify_init(0xf00, 0x1) (async) clock_adjtime(0x0, &(0x7f0000000a80)={0x66b6, 0x200000000, 0x3, 0x0, 0x7ff, 0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x4, 0x0, 0x248a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x2, 0x1, 0x8000, 0x8}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000840)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) (async) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x81000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@raid={0x0, 0xc08, 0x0, 0x80, 'raid\x00', {'raid1', 0x20, '3 64 raid10_copies 2', 0x20, 0x1, [{0x20, @dev=@rnull={'/dev/syzrnull', 0x0}, 0x20, @ram_num={'1:', 0x1}}]}}]}) 137.573713ms ago: executing program 3 (id=475): r0 = syz_open_dev$evdev(&(0x7f0000000700), 0x4b97, 0x40000) pselect6(0x40, &(0x7f0000000740)={0x3, 0xd, 0x4, 0x7, 0x2, 0x80000000, 0x6, 0xfffffffffffffc01}, 0x0, &(0x7f0000000780)={0xe, 0x9, 0x9ac, 0x3ea, 0x40, 0x72, 0x1, 0x9}, &(0x7f00000007c0), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000580)="300000001c00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100270000000a0002000000000000000000300000001d00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000", 0x90) open_by_handle_at(r1, &(0x7f0000000640)=@raw={0xac, 0x4f, {"e6d223655c59734384b48ed433c8901dc281f7237530fa671140304d1b7d81240fc4bc1e418fe563a27f4cd39f6429759a0deb685b2a5fa9268124203d97c6bbd78e15fc4c62dbbf6eeea6d3b52046edc157e7339697fb14e7b81eb500338df1354db630e9801f1815c9faaed9a65f03061921ea26927f2fa5b4b692027ba69b4aa616181d580b104c683eb07338df6cfc78cbd860f5c2f0dbcc4710dc07ff0b11c244ddff085a45b69e"}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/686], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x3a, 0x10, &(0x7f0000000540), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x3b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000100006912b6000000000095", @ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840), r4) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004004) 24.478687ms ago: executing program 6 (id=476): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "8c"}]}], {0x14}}, 0x6c}}, 0x0) r3 = syz_clone(0x8202000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x40b, &(0x7f00000000c0)={0x0}) waitid(0x0, r3, &(0x7f0000000300), 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000540)={&(0x7f0000000580)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@rthdr={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x2, 0x1, 0x0, [@private1]}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x50}, 0x4) write(r4, &(0x7f0000000100)='+p', 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 0s ago: executing program 3 (id=477): socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00006f7000/0x4000)=nil, 0x4000, 0x2000000, 0x40012, r1, 0xb7474000) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0x3c, 0x0, 0x0, 0x3}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) kernel console output (not intermixed with test programs): ily 0 port 6081 - 0 [ 31.228585][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.231275][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.245000][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.245012][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.249169][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.249180][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.267892][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.267901][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.283371][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.283382][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.321055][ T4744] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.322602][ T4740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.351783][ T4740] veth0_vlan: entered promiscuous mode [ 31.363206][ T4750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.365848][ T4740] veth1_vlan: entered promiscuous mode [ 31.384294][ T4740] veth0_macvtap: entered promiscuous mode [ 31.385465][ T4740] veth1_macvtap: entered promiscuous mode [ 31.393575][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.395572][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.408670][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.410005][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.410124][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.410220][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.434199][ T4736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.674079][ T4934] loop2: detected capacity change from 0 to 512 [ 31.677257][ T4934] ======================================================= [ 31.677257][ T4934] WARNING: The mand mount option has been deprecated and [ 31.677257][ T4934] and is ignored by this kernel. Remove the mand [ 31.677257][ T4934] option from the mount to silence this warning. [ 31.677257][ T4934] ======================================================= [ 31.687159][ T4745] Bluetooth: hci2: command tx timeout [ 31.700491][ T4745] Bluetooth: hci0: command tx timeout [ 31.700610][ T4745] Bluetooth: hci3: command tx timeout [ 31.700680][ T4745] Bluetooth: hci4: command tx timeout [ 31.700743][ T4745] Bluetooth: hci1: command tx timeout [ 31.705872][ T4934] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 31.717143][ T4934] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 31.717207][ T4934] System zones: 1-12 [ 31.717651][ T4934] EXT4-fs (loop2): orphan cleanup on readonly fs [ 31.717927][ T4934] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3: invalid indirect mapped block 12 (level 1) [ 31.717968][ T4934] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 31.718611][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 31.718622][ C1] EXT4-fs (loop2): initial error at time 31: ext4_free_branches:1023: inode 11 [ 31.718637][ C1] EXT4-fs (loop2): last error at time 31: ext4_free_branches:1023: inode 11 [ 31.736165][ T4934] EXT4-fs (loop2): Remounting filesystem read-only [ 31.736516][ T4934] EXT4-fs (loop2): 1 truncate cleaned up [ 31.737079][ T4934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 31.766630][ T4736] veth0_vlan: entered promiscuous mode [ 31.778974][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.778988][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.780991][ T4736] veth1_vlan: entered promiscuous mode [ 31.809524][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.809538][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.812264][ T4736] veth0_macvtap: entered promiscuous mode [ 31.822057][ T4736] veth1_macvtap: entered promiscuous mode [ 31.843818][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.852649][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.890519][ T219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.890911][ T219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.890930][ T219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.890948][ T219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.904485][ T4750] veth0_vlan: entered promiscuous mode [ 31.906144][ T4750] veth1_vlan: entered promiscuous mode [ 31.978169][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.978181][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.978283][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.978290][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.987973][ T4750] veth0_macvtap: entered promiscuous mode [ 31.995037][ T4750] veth1_macvtap: entered promiscuous mode [ 32.004301][ T4750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.006399][ T4750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.039122][ T4948] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 32.056148][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.056159][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.068588][ T219] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.068914][ T219] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.068934][ T219] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.068955][ T219] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.071751][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.071769][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.097961][ T4952] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8'. [ 32.097999][ T4952] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 32.105081][ T4952] Zero length message leads to an empty skb [ 32.431551][ T4747] Bluetooth: Wrong link type (-71) [ 32.435790][ T4744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 32.626849][ T4963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 32.821677][ T4963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 32.987277][ T4971] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11'. [ 32.987293][ T4971] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 33.136876][ T4976] netlink: 'syz.3.12': attribute type 3 has an invalid length. [ 33.507850][ T4993] loop4: detected capacity change from 0 to 1024 [ 33.512485][ T4993] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 33.535567][ T4993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.575454][ T5003] loop1: detected capacity change from 0 to 1024 [ 33.584658][ T5003] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.617837][ T5003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.644218][ T5003] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.18: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 33.647814][ T5003] fuse: fd is not a fuse device [ 33.698496][ T4747] Bluetooth: hci2: command tx timeout [ 33.721041][ T4736] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 33.721824][ T4736] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 33.779142][ T4747] Bluetooth: hci4: command tx timeout [ 33.779292][ T4747] Bluetooth: hci3: command tx timeout [ 33.779456][ T4747] Bluetooth: hci0: command tx timeout [ 34.408331][ T4750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.423086][ T5013] capability: warning: `syz.2.22' uses deprecated v2 capabilities in a way that may be insecure [ 34.423531][ T5013] netlink: 344 bytes leftover after parsing attributes in process `syz.2.22'. [ 34.441308][ T5017] syz.2.24 uses obsolete (PF_INET,SOCK_PACKET) [ 34.446860][ T5017] gadgetfs: bound to dummy_udc driver [ 34.465842][ T5019] loop4: detected capacity change from 0 to 512 [ 34.485617][ T5019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.497518][ T5024] netlink: 132 bytes leftover after parsing attributes in process `syz.2.25'. [ 34.509158][ T5028] netlink: 132 bytes leftover after parsing attributes in process `syz.2.25'. [ 34.526659][ T4750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.561669][ T5039] loop4: detected capacity change from 0 to 512 [ 34.581027][ T5039] loop4: detected capacity change from 0 to 4096 [ 34.584170][ T5039] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.586075][ T5039] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0103] [ 34.586131][ T5039] System zones: 0-5 [ 34.587859][ T5039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.631020][ T5047] loop3: detected capacity change from 0 to 256 [ 34.704232][ T5048] process 'syz.3.30' launched './file0' with NULL argv: empty string added [ 34.908212][ T5064] loop0: detected capacity change from 0 to 512 [ 34.922225][ T5064] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.35: iget: bad i_size value: 38620345925642 [ 34.922245][ T5064] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.922547][ T5064] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.35: couldn't read orphan inode 15 (err -117) [ 34.922590][ T5064] loop0: lost filesystem error report for type 5 error -117 [ 34.923390][ T5064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.986120][ T13] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 34.986990][ T13] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 34.987004][ T13] EXT4-fs (loop0): This should not happen!! Data will be lost [ 34.987004][ T13] [ 34.987011][ T13] EXT4-fs (loop0): Total free blocks count 0 [ 34.987018][ T13] EXT4-fs (loop0): Free/Dirty block details [ 34.987028][ T13] EXT4-fs (loop0): free_blocks=0 [ 34.987038][ T13] EXT4-fs (loop0): dirty_blocks=1 [ 34.987044][ T13] EXT4-fs (loop0): Block reservation details [ 34.987049][ T13] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 34.988984][ T4740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.318232][ T5088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.41'. [ 35.391689][ T5101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 35.391710][ T5101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 35.393865][ T5101] gretap0: entered promiscuous mode [ 35.394301][ T5101] macvlan2: entered allmulticast mode [ 35.394314][ T5101] gretap0: entered allmulticast mode [ 35.401248][ T5101] loop0: detected capacity change from 0 to 1024 [ 35.403044][ T5101] EXT4-fs: Ignoring removed bh option [ 35.548210][ T4750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.590840][ T5112] loop3: detected capacity change from 0 to 512 [ 35.591198][ T5112] EXT4-fs: Ignoring removed oldalloc option [ 35.608638][ T5112] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.46: bad orphan inode 32 [ 35.608656][ T5112] loop3: lost filesystem error report for type 5 error -117 [ 35.608833][ T5112] ext4_test_bit(bit=31, block=4) = 0 [ 35.608842][ T5112] EXT4-fs (loop3): 1 truncate cleaned up [ 35.609283][ T5112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.662551][ T5119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 35.750121][ T4735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.778985][ T4745] Bluetooth: hci2: command tx timeout [ 35.801809][ T4821] binder: undelivered freeze notification, 0000000000000001 [ 35.858571][ T4745] Bluetooth: hci0: command tx timeout [ 35.858598][ T4745] Bluetooth: hci4: command tx timeout [ 35.858599][ T4747] Bluetooth: hci3: command tx timeout [ 36.045041][ T5137] FAULT_INJECTION: forcing a failure. [ 36.045041][ T5137] name failslab, interval 1, probability 0, space 0, times 1 [ 36.045061][ T5137] CPU: 0 UID: 0 PID: 5137 Comm: syz.3.54 Not tainted syzkaller #0 PREEMPT [ 36.045071][ T5137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.045076][ T5137] Call trace: [ 36.045079][ T5137] show_stack+0x2c/0x3c (C) [ 36.045095][ T5137] __dump_stack+0x30/0x40 [ 36.045104][ T5137] dump_stack_lvl+0xd8/0x12c [ 36.045113][ T5137] dump_stack+0x1c/0x28 [ 36.045120][ T5137] should_fail_ex+0x418/0x58c [ 36.045132][ T5137] should_failslab+0xc4/0x120 [ 36.045141][ T5137] __kmalloc_cache_noprof+0x94/0x5fc [ 36.045152][ T5137] v4l2_m2m_ctx_init+0x64/0x268 [ 36.045166][ T5137] vicodec_open+0x588/0x9a0 [ 36.045179][ T5137] v4l2_open+0x198/0x338 [ 36.045188][ T5137] chrdev_open+0x398/0x3e8 [ 36.045200][ T5137] do_dentry_open+0x5c4/0xfbc [ 36.045209][ T5137] vfs_open+0x44/0x2dc [ 36.045216][ T5137] path_openat+0x1084/0x18f0 [ 36.045228][ T5137] do_file_open+0x1c8/0x2e8 [ 36.045240][ T5137] do_sys_openat2+0x114/0x1e8 [ 36.045248][ T5137] do_sys_open+0xb0/0xe0 [ 36.045256][ T5137] __arm64_sys_openat+0xa8/0xc4 [ 36.045265][ T5137] invoke_syscall+0x98/0x244 [ 36.045274][ T5137] el0_svc_common+0xec/0x23c [ 36.045282][ T5137] do_el0_svc+0x4c/0x5c [ 36.045290][ T5137] el0_svc+0x60/0x1d8 [ 36.045299][ T5137] el0t_64_sync_handler+0x44/0x104 [ 36.045307][ T5137] el0t_64_sync+0x198/0x19c [ 36.166202][ T219] IPVS: starting estimator thread 0... [ 36.198811][ T5143] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.210269][ T5143] EXT4-fs error (device loop2): __ext4_fill_super:5622: inode #2: comm syz.2.56: iget: special inode unallocated [ 36.210289][ T5143] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 36.210511][ T5143] EXT4-fs (loop2): get root inode failed [ 36.210519][ T5143] EXT4-fs (loop2): mount failed [ 36.248517][ T5141] IPVS: using max 59 ests per chain, 141600 per kthread [ 36.434005][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.579108][ T4741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.582677][ T4741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.584137][ T4741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.584905][ T4741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.585938][ T4741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.634663][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.671080][ T5164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.671288][ T5164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.709975][ T5182] xt_nfacct: accounting object `syz0' does not exist [ 36.716836][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.748585][ T5154] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.756565][ T5182] ip6gretap1: entered allmulticast mode [ 36.759091][ T5182] batman_adv: batadv0: Adding interface: ip6gretap1 [ 36.759099][ T5182] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.759115][ T5182] batman_adv: batadv0: Interface activated: ip6gretap1 [ 36.816697][ T5189] Bluetooth: MGMT ver 1.23 [ 36.821237][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.906039][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.945647][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.945981][ T5154] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.946231][ T5154] bridge_slave_0: entered allmulticast mode [ 36.946683][ T5154] bridge_slave_0: entered promiscuous mode [ 36.955718][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.955782][ T5154] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.955840][ T5154] bridge_slave_1: entered allmulticast mode [ 36.956752][ T5154] bridge_slave_1: entered promiscuous mode [ 36.977627][ T5154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.990867][ T5218] set_capacity_and_notify: 1 callbacks suppressed [ 36.990878][ T5218] loop0: detected capacity change from 0 to 512 [ 36.996351][ T5218] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 36.996375][ T5218] EXT4-fs (loop0): group descriptors corrupted! [ 37.009304][ T5219] mmap: syz.3.75 (5219): VmData 37625856 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 37.021441][ T5154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.025852][ T5223] capability: warning: `syz.0.76' uses 32-bit capabilities (legacy support in use) [ 37.069735][ T5154] team0: Port device team_slave_0 added [ 37.070546][ T5154] team0: Port device team_slave_1 added [ 37.085837][ T5154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.085847][ T5154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.085864][ T5154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.107364][ T5154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.107375][ T5154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.107388][ T5154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.122830][ T5236] loop4: detected capacity change from 0 to 4096 [ 37.123347][ T5236] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.127457][ T5236] ext4: Unknown parameter 'euid>00000000000000000000' [ 37.133365][ T12] bridge_slave_1: left allmulticast mode [ 37.133400][ T12] bridge_slave_1: left promiscuous mode [ 37.133886][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.144195][ T12] bridge_slave_0: left allmulticast mode [ 37.144209][ T12] bridge_slave_0: left promiscuous mode [ 37.144271][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.278157][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.284477][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.291805][ T12] bond0 (unregistering): Released all slaves [ 37.306313][ T5253] loop2: detected capacity change from 0 to 512 [ 37.319374][ T5253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.363368][ T5154] hsr_slave_0: entered promiscuous mode [ 37.363657][ T5154] hsr_slave_1: entered promiscuous mode [ 37.363837][ T5154] debugfs: 'hsr0' already exists in 'hsr' [ 37.363846][ T5154] Cannot create hsr debugfs directory [ 37.492338][ T5250] loop4: detected capacity change from 0 to 8192 [ 37.552834][ T4426] 8021q: adding VLAN 0 to HW filter on device eth0 [ 37.710767][ T5154] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.714856][ T5154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.715372][ T5154] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.716751][ T5154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.717274][ T5154] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.720198][ T5154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.720685][ T5154] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.723045][ T5154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.802150][ T12] hsr_slave_0: left promiscuous mode [ 37.803551][ T12] hsr_slave_1: left promiscuous mode [ 37.804161][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.804178][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.804690][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.804702][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.822367][ T12] veth1_macvtap: left promiscuous mode [ 37.822405][ T12] veth0_macvtap: left promiscuous mode [ 37.822469][ T12] veth1_vlan: left promiscuous mode [ 37.822514][ T12] veth0_vlan: left promiscuous mode [ 37.858972][ T4745] Bluetooth: hci2: command tx timeout [ 37.938808][ T4745] Bluetooth: hci4: command tx timeout [ 37.938816][ T4741] Bluetooth: hci0: command tx timeout [ 37.986209][ T12] team0 (unregistering): Port device team_slave_1 removed [ 38.003593][ T12] team0 (unregistering): Port device team_slave_0 removed [ 38.042250][ T4744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.105082][ T5309] loop4: detected capacity change from 0 to 512 [ 38.130921][ T5309] loop4: detected capacity change from 0 to 512 [ 38.142889][ T5309] loop4: detected capacity change from 0 to 512 [ 38.151509][ T5307] Bluetooth: ISO socket layer initialized [ 38.157118][ T5309] loop4: detected capacity change from 0 to 512 [ 38.174303][ T5309] loop4: detected capacity change from 0 to 512 [ 38.185684][ T4426] 8021q: adding VLAN 0 to HW filter on device eth1 [ 38.189242][ T5309] loop4: detected capacity change from 0 to 512 [ 38.197519][ T5305] syzkaller1: entered promiscuous mode [ 38.197533][ T5305] syzkaller1: entered allmulticast mode [ 38.263172][ T5154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.272974][ T5154] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.285385][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.285412][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.294344][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.294377][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.332990][ T5154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.355750][ T5317] __nla_validate_parse: 2 callbacks suppressed [ 38.355764][ T5317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.92'. [ 38.669069][ T4741] Bluetooth: hci1: command tx timeout [ 39.015166][ T5154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.077238][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 39.077252][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 39.097953][ T4426] 8021q: adding VLAN 0 to HW filter on device eth2 [ 39.281109][ T5154] veth0_vlan: entered promiscuous mode [ 39.286493][ T5154] veth1_vlan: entered promiscuous mode [ 39.324595][ T5154] veth0_macvtap: entered promiscuous mode [ 39.325501][ T5387] FAULT_INJECTION: forcing a failure. [ 39.325501][ T5387] name failslab, interval 1, probability 0, space 0, times 0 [ 39.325518][ T5387] CPU: 0 UID: 0 PID: 5387 Comm: syz.2.100 Not tainted syzkaller #0 PREEMPT [ 39.325531][ T5387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 39.325537][ T5387] Call trace: [ 39.325541][ T5387] show_stack+0x2c/0x3c (C) [ 39.325557][ T5387] __dump_stack+0x30/0x40 [ 39.325566][ T5387] dump_stack_lvl+0xd8/0x12c [ 39.325573][ T5387] dump_stack+0x1c/0x28 [ 39.325580][ T5387] should_fail_ex+0x418/0x58c [ 39.325590][ T5387] should_failslab+0xc4/0x120 [ 39.325599][ T5387] __kmalloc_noprof+0x108/0x6c8 [ 39.325608][ T5387] bpf_test_init+0xa8/0x154 [ 39.325617][ T5387] bpf_prog_test_run_xdp+0x408/0xe0c [ 39.325625][ T5387] bpf_prog_test_run+0x1e0/0x250 [ 39.325635][ T5387] __sys_bpf+0x6bc/0x82c [ 39.325644][ T5387] __arm64_sys_bpf+0xd0/0xec [ 39.325653][ T5387] invoke_syscall+0x98/0x244 [ 39.325661][ T5387] el0_svc_common+0xec/0x23c [ 39.325668][ T5387] do_el0_svc+0x4c/0x5c [ 39.325675][ T5387] el0_svc+0x60/0x1d8 [ 39.325683][ T5387] el0t_64_sync_handler+0x44/0x104 [ 39.325690][ T5387] el0t_64_sync+0x198/0x19c [ 39.330974][ T5154] veth1_macvtap: entered promiscuous mode [ 39.347096][ T5154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.355257][ T5154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.359886][ T392] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.359957][ T392] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.359980][ T392] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.398566][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.500126][ T341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.500143][ T341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.516080][ T4426] 8021q: adding VLAN 0 to HW filter on device eth3 [ 39.541526][ T341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.541541][ T341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.625163][ T5411] fuse: Unknown parameter 'fwT›‰d' [ 39.728288][ T5428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 39.736424][ T5428] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.812900][ T5437] FAULT_INJECTION: forcing a failure. [ 39.812900][ T5437] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.812921][ T5437] CPU: 0 UID: 0 PID: 5437 Comm: syz.2.110 Not tainted syzkaller #0 PREEMPT [ 39.812933][ T5437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 39.812938][ T5437] Call trace: [ 39.812941][ T5437] show_stack+0x2c/0x3c (C) [ 39.812956][ T5437] __dump_stack+0x30/0x40 [ 39.812964][ T5437] dump_stack_lvl+0xd8/0x12c [ 39.812971][ T5437] dump_stack+0x1c/0x28 [ 39.812978][ T5437] should_fail_ex+0x418/0x58c [ 39.812988][ T5437] should_fail+0x14/0x24 [ 39.812996][ T5437] should_fail_usercopy+0x20/0x30 [ 39.813004][ T5437] _inline_copy_from_user+0x3c/0x174 [ 39.813014][ T5437] bpf_test_init+0xd8/0x154 [ 39.813021][ T5437] bpf_prog_test_run_xdp+0x408/0xe0c [ 39.813030][ T5437] bpf_prog_test_run+0x1e0/0x250 [ 39.813040][ T5437] __sys_bpf+0x6bc/0x82c [ 39.813049][ T5437] __arm64_sys_bpf+0xd0/0xec [ 39.813058][ T5437] invoke_syscall+0x98/0x244 [ 39.813065][ T5437] el0_svc_common+0xec/0x23c [ 39.813072][ T5437] do_el0_svc+0x4c/0x5c [ 39.813079][ T5437] el0_svc+0x60/0x1d8 [ 39.813087][ T5437] el0t_64_sync_handler+0x44/0x104 [ 39.813094][ T5437] el0t_64_sync+0x198/0x19c [ 39.848930][ T5438] netlink: 256 bytes leftover after parsing attributes in process `syz.4.109'. [ 40.310290][ T5456] netlink: 48 bytes leftover after parsing attributes in process `syz.3.113'. [ 40.310317][ T5456] netlink: 48 bytes leftover after parsing attributes in process `syz.3.113'. [ 40.360571][ T59] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x76 [ 40.409391][ T5463] IPv6: NLM_F_REPLACE set, but no existing node found! [ 40.476322][ T30] audit: type=1326 audit(40.440:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5465 comm="syz.3.118" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c77a228 code=0x0 [ 40.530644][ T5475] EXT4-fs (loop5): Test dummy encryption mode enabled [ 40.533015][ T5475] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #3: comm syz.5.119: pblk 0 bad header/extent: invalid magic - magic 0, entries 1, max 4(0), depth 0(0) [ 40.533037][ T5475] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 40.533579][ T5475] EXT4-fs error (device loop5): ext4_quota_enable:7264: comm syz.5.119: Bad quota inode: 3, type: 0 [ 40.533596][ T5475] loop5: lost filesystem error report for type 5 error -117 [ 40.533750][ T5475] EXT4-fs warning (device loop5): ext4_enable_quotas:7305: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 40.533979][ T5475] EXT4-fs (loop5): mount failed [ 40.635800][ T5480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.639738][ T5483] FAULT_INJECTION: forcing a failure. [ 40.639738][ T5483] name failslab, interval 1, probability 0, space 0, times 0 [ 40.639755][ T5483] CPU: 0 UID: 0 PID: 5483 Comm: syz.5.122 Not tainted syzkaller #0 PREEMPT [ 40.639774][ T5483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 40.639781][ T5483] Call trace: [ 40.639785][ T5483] show_stack+0x2c/0x3c (C) [ 40.639803][ T5483] __dump_stack+0x30/0x40 [ 40.639813][ T5483] dump_stack_lvl+0xd8/0x12c [ 40.639821][ T5483] dump_stack+0x1c/0x28 [ 40.639829][ T5483] should_fail_ex+0x418/0x58c [ 40.639839][ T5483] should_failslab+0xc4/0x120 [ 40.639848][ T5483] __kvmalloc_node_noprof+0x160/0x7fc [ 40.639857][ T5483] bpf_test_run_xdp_live+0x178/0x1770 [ 40.639867][ T5483] bpf_prog_test_run_xdp+0x634/0xe0c [ 40.639875][ T5483] bpf_prog_test_run+0x1e0/0x250 [ 40.639886][ T5483] __sys_bpf+0x6bc/0x82c [ 40.639895][ T5483] __arm64_sys_bpf+0xd0/0xec [ 40.639904][ T5483] invoke_syscall+0x98/0x244 [ 40.639911][ T5483] el0_svc_common+0xec/0x23c [ 40.639918][ T5483] do_el0_svc+0x4c/0x5c [ 40.639926][ T5483] el0_svc+0x60/0x1d8 [ 40.639933][ T5483] el0t_64_sync_handler+0x44/0x104 [ 40.639940][ T5483] el0t_64_sync+0x198/0x19c [ 40.644790][ T5480] netlink: 'syz.0.120': attribute type 3 has an invalid length. [ 40.703542][ T5484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.728471][ T5491] overlayfs: failed to resolve './bus': -2 [ 40.738630][ T4741] Bluetooth: hci1: command tx timeout [ 40.836656][ T5495] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 40.837021][ T5495] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 40.837057][ T5495] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.837057][ T5495] [ 40.837087][ T5495] EXT4-fs (loop0): Total free blocks count 0 [ 40.837117][ T5495] EXT4-fs (loop0): Free/Dirty block details [ 40.837149][ T5495] EXT4-fs (loop0): free_blocks=4096 [ 40.837181][ T5495] EXT4-fs (loop0): dirty_blocks=32 [ 40.837211][ T5495] EXT4-fs (loop0): Block reservation details [ 40.837240][ T5495] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 41.032281][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.038458][ T5498] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 41.057363][ T5498] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.064647][ T4735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.073240][ T5500] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 41.073330][ T5500] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.076793][ T5500] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 41.076808][ T5500] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 41.076828][ T5500] EXT4-fs error (device loop4): ext4_acquire_dquot:7070: comm syz.4.126: Failed to acquire dquot type 1 [ 41.076839][ T5500] loop4: lost filesystem error report for type 5 error -5 [ 41.078399][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 41.078417][ C1] EXT4-fs (loop4): initial error at time 41: ext4_acquire_dquot:7070 [ 41.078430][ C1] EXT4-fs (loop4): last error at time 41: ext4_acquire_dquot:7070 [ 41.113302][ T5500] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.126: bg 0: block 40: padding at end of block bitmap is not set [ 41.113335][ T5500] loop4: lost filesystem error report for type 5 error -117 [ 41.123303][ T5500] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 41.123325][ T5500] loop4: lost filesystem error report for type 5 error -117 [ 41.124657][ T5500] EXT4-fs warning (device loop4): ext4_evict_inode:196: inode #16: comm syz.4.126: data will be lost [ 41.124720][ T5500] EXT4-fs (loop4): 1 truncate cleaned up [ 41.128081][ T5498] netlink: 'syz.5.125': attribute type 12 has an invalid length. [ 41.128093][ T5498] netlink: 'syz.5.125': attribute type 29 has an invalid length. [ 41.128101][ T5498] netlink: 148 bytes leftover after parsing attributes in process `syz.5.125'. [ 41.167468][ T5500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.187619][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.202013][ T4745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 41.202664][ T4745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 41.203571][ T4745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 41.209086][ T4745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 41.209291][ T4745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 41.217159][ T4750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.247124][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.266280][ T5498] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 41.278736][ T5498] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 41.292617][ T5506] netlink: 'syz.3.127': attribute type 10 has an invalid length. [ 41.294502][ T5506] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.309304][ T5154] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.318340][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.384516][ T5531] netlink: 36 bytes leftover after parsing attributes in process `syz.3.131'. [ 41.428008][ T5505] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.433975][ T59] bridge_slave_1: left allmulticast mode [ 41.433993][ T59] bridge_slave_1: left promiscuous mode [ 41.434080][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.445568][ T59] bridge_slave_0: left allmulticast mode [ 41.445586][ T59] bridge_slave_0: left promiscuous mode [ 41.445666][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.483699][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 41.556429][ T5538] FAULT_INJECTION: forcing a failure. [ 41.556429][ T5538] name failslab, interval 1, probability 0, space 0, times 0 [ 41.556450][ T5538] CPU: 0 UID: 0 PID: 5538 Comm: syz.3.134 Not tainted syzkaller #0 PREEMPT [ 41.556463][ T5538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 41.556470][ T5538] Call trace: [ 41.556473][ T5538] show_stack+0x2c/0x3c (C) [ 41.556489][ T5538] __dump_stack+0x30/0x40 [ 41.556498][ T5538] dump_stack_lvl+0xd8/0x12c [ 41.556506][ T5538] dump_stack+0x1c/0x28 [ 41.556513][ T5538] should_fail_ex+0x418/0x58c [ 41.556523][ T5538] should_failslab+0xc4/0x120 [ 41.556531][ T5538] __kvmalloc_node_noprof+0x160/0x7fc [ 41.556541][ T5538] bpf_test_run_xdp_live+0x198/0x1770 [ 41.556551][ T5538] bpf_prog_test_run_xdp+0x634/0xe0c [ 41.556559][ T5538] bpf_prog_test_run+0x1e0/0x250 [ 41.556570][ T5538] __sys_bpf+0x6bc/0x82c [ 41.556579][ T5538] __arm64_sys_bpf+0xd0/0xec [ 41.556587][ T5538] invoke_syscall+0x98/0x244 [ 41.556595][ T5538] el0_svc_common+0xec/0x23c [ 41.556602][ T5538] do_el0_svc+0x4c/0x5c [ 41.556610][ T5538] el0_svc+0x60/0x1d8 [ 41.556618][ T5538] el0t_64_sync_handler+0x44/0x104 [ 41.556625][ T5538] el0t_64_sync+0x198/0x19c [ 41.604857][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.629893][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.643219][ T59] bond0 (unregistering): Released all slaves [ 41.645595][ T59] bond1 (unregistering): Released all slaves [ 41.853423][ T5569] netlink: 48 bytes leftover after parsing attributes in process `syz.5.140'. [ 41.876725][ T5568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 41.926258][ T5154] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 41.951422][ T4426] 8021q: adding VLAN 0 to HW filter on device eth4 [ 42.030828][ T5581] EXT4-fs: Ignoring removed nobh option [ 42.030865][ T5581] ext3: Unknown parameter 'euid' [ 42.035331][ T5584] set_capacity_and_notify: 18 callbacks suppressed [ 42.035343][ T5584] loop5: detected capacity change from 0 to 512 [ 42.051439][ T5583] input: syz0 as /devices/virtual/input/input3 [ 42.216246][ T5596] FAULT_INJECTION: forcing a failure. [ 42.216246][ T5596] name failslab, interval 1, probability 0, space 0, times 0 [ 42.216267][ T5596] CPU: 0 UID: 0 PID: 5596 Comm: syz.0.145 Not tainted syzkaller #0 PREEMPT [ 42.216277][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.216281][ T5596] Call trace: [ 42.216284][ T5596] show_stack+0x2c/0x3c (C) [ 42.216298][ T5596] __dump_stack+0x30/0x40 [ 42.216306][ T5596] dump_stack_lvl+0xd8/0x12c [ 42.216313][ T5596] dump_stack+0x1c/0x28 [ 42.216320][ T5596] should_fail_ex+0x418/0x58c [ 42.216330][ T5596] should_failslab+0xc4/0x120 [ 42.216338][ T5596] __kmalloc_cache_node_noprof+0x98/0x618 [ 42.216348][ T5596] page_pool_create_percpu+0x90/0xb10 [ 42.216358][ T5596] page_pool_create+0x24/0x34 [ 42.216367][ T5596] bpf_test_run_xdp_live+0x1a8/0x1770 [ 42.216376][ T5596] bpf_prog_test_run_xdp+0x634/0xe0c [ 42.216384][ T5596] bpf_prog_test_run+0x1e0/0x250 [ 42.216394][ T5596] __sys_bpf+0x6bc/0x82c [ 42.216403][ T5596] __arm64_sys_bpf+0xd0/0xec [ 42.216412][ T5596] invoke_syscall+0x98/0x244 [ 42.216420][ T5596] el0_svc_common+0xec/0x23c [ 42.216427][ T5596] do_el0_svc+0x4c/0x5c [ 42.216434][ T5596] el0_svc+0x60/0x1d8 [ 42.216442][ T5596] el0t_64_sync_handler+0x44/0x104 [ 42.216449][ T5596] el0t_64_sync+0x198/0x19c [ 42.289406][ T59] hsr_slave_0: left promiscuous mode [ 42.292058][ T59] hsr_slave_1: left promiscuous mode [ 42.292369][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.292380][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.294039][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.294050][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.309975][ T59] veth1_macvtap: left promiscuous mode [ 42.310003][ T59] veth0_macvtap: left promiscuous mode [ 42.310049][ T59] veth1_vlan: left promiscuous mode [ 42.310116][ T59] veth0_vlan: left promiscuous mode [ 42.363066][ T5607] loop5: detected capacity change from 0 to 2048 [ 42.376952][ T5607] loop5: p1 < > p2 p3 < > p4 < p5 > [ 42.376968][ T5607] loop5: partition table partially beyond EOD, truncated [ 42.377064][ T5607] loop5: p1 start 3405774849 is beyond EOD, truncated [ 42.384093][ T5607] loop5: p3 start 4225 is beyond EOD, truncated [ 42.542461][ T59] team0 (unregistering): Port device team_slave_1 removed [ 42.553623][ T59] team0 (unregistering): Port device team_slave_0 removed [ 42.633007][ T5505] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.633035][ T5505] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.633101][ T5505] bridge_slave_0: entered allmulticast mode [ 42.633522][ T5505] bridge_slave_0: entered promiscuous mode [ 42.650434][ T5505] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.650484][ T5505] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.650551][ T5505] bridge_slave_1: entered allmulticast mode [ 42.651072][ T5505] bridge_slave_1: entered promiscuous mode [ 42.666564][ T5505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.667516][ T5505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.679959][ T5505] team0: Port device team_slave_0 added [ 42.681884][ T5505] team0: Port device team_slave_1 added [ 42.801712][ T5505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.801725][ T5505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.801739][ T5505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.803289][ T4426] 8021q: adding VLAN 0 to HW filter on device eth5 [ 42.804509][ T26] rxe_eth0 speed is unknown, defaulting to 1000 [ 42.804788][ T5505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.804797][ T5505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.804812][ T5505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.818551][ T4741] Bluetooth: hci1: command tx timeout [ 42.861671][ T5505] hsr_slave_0: entered promiscuous mode [ 42.861962][ T5505] hsr_slave_1: entered promiscuous mode [ 42.862988][ T5505] debugfs: 'hsr0' already exists in 'hsr' [ 42.863000][ T5505] Cannot create hsr debugfs directory [ 42.893563][ T5646] loop3: detected capacity change from 0 to 512 [ 42.897979][ T5646] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 42.897997][ T5646] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.898004][ T5646] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.923322][ T5646] EXT4-fs (loop3): 1 truncate cleaned up [ 42.923724][ T5646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.218696][ T4741] Bluetooth: hci3: command tx timeout [ 43.233353][ T5665] FAULT_INJECTION: forcing a failure. [ 43.233353][ T5665] name failslab, interval 1, probability 0, space 0, times 0 [ 43.233372][ T5665] CPU: 0 UID: 0 PID: 5665 Comm: syz.4.156 Not tainted syzkaller #0 PREEMPT [ 43.233385][ T5665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.233391][ T5665] Call trace: [ 43.233395][ T5665] show_stack+0x2c/0x3c (C) [ 43.233411][ T5665] __dump_stack+0x30/0x40 [ 43.233420][ T5665] dump_stack_lvl+0xd8/0x12c [ 43.233428][ T5665] dump_stack+0x1c/0x28 [ 43.233435][ T5665] should_fail_ex+0x418/0x58c [ 43.233445][ T5665] should_failslab+0xc4/0x120 [ 43.233454][ T5665] __kvmalloc_node_noprof+0x160/0x7fc [ 43.233463][ T5665] page_pool_create_percpu+0x2f8/0xb10 [ 43.233474][ T5665] page_pool_create+0x24/0x34 [ 43.233482][ T5665] bpf_test_run_xdp_live+0x1a8/0x1770 [ 43.233491][ T5665] bpf_prog_test_run_xdp+0x634/0xe0c [ 43.233499][ T5665] bpf_prog_test_run+0x1e0/0x250 [ 43.233510][ T5665] __sys_bpf+0x6bc/0x82c [ 43.233518][ T5665] __arm64_sys_bpf+0xd0/0xec [ 43.233527][ T5665] invoke_syscall+0x98/0x244 [ 43.233535][ T5665] el0_svc_common+0xec/0x23c [ 43.233542][ T5665] do_el0_svc+0x4c/0x5c [ 43.233549][ T5665] el0_svc+0x60/0x1d8 [ 43.233558][ T5665] el0t_64_sync_handler+0x44/0x104 [ 43.233565][ T5665] el0t_64_sync+0x198/0x19c [ 43.233577][ T5665] page_pool_create_percpu() gave up with errno -12 [ 43.263190][ T5667] loop5: detected capacity change from 0 to 512 [ 43.294541][ T5667] EXT4-fs (loop5): failed to initialize system zone (-117) [ 43.294586][ T5667] EXT4-fs (loop5): mount failed [ 43.329331][ T5505] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 43.335239][ T5505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 43.336797][ T5505] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 43.348748][ T5505] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 43.349053][ T5505] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 43.356625][ T5505] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 43.360812][ T5505] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 43.367709][ T5505] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 43.381748][ T5672] loop4: detected capacity change from 0 to 8192 [ 43.386833][ T5672] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.407514][ T5683] FAT-fs (loop4): error, clusters badly computed (1 != 0) [ 43.407528][ T5683] FAT-fs (loop4): Filesystem has been set read-only [ 43.415078][ T5683] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 43.418147][ T5683] FAT-fs (loop4): error, clusters badly computed (3 != 2) [ 43.420818][ T5683] FAT-fs (loop4): error, clusters badly computed (4 != 3) [ 43.422096][ T5683] FAT-fs (loop4): error, clusters badly computed (5 != 4) [ 43.422352][ T5683] FAT-fs (loop4): error, clusters badly computed (6 != 5) [ 43.424127][ T5683] FAT-fs (loop4): error, clusters badly computed (7 != 6) [ 43.425507][ T5683] FAT-fs (loop4): error, clusters badly computed (8 != 7) [ 43.430778][ T5683] FAT-fs (loop4): error, clusters badly computed (9 != 8) [ 43.433748][ T5683] FAT-fs (loop4): error, clusters badly computed (10 != 9) [ 43.517728][ T5505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.538535][ T5505] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.540915][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.540941][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.551360][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.551387][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.670084][ T5720] netlink: 'syz.4.162': attribute type 1 has an invalid length. [ 43.670102][ T5720] __nla_validate_parse: 5 callbacks suppressed [ 43.670112][ T5720] netlink: 228 bytes leftover after parsing attributes in process `syz.4.162'. [ 43.700976][ T4426] 8021q: adding VLAN 0 to HW filter on device eth6 [ 43.740793][ T5727] loop4: detected capacity change from 0 to 8 [ 43.757154][ T4735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.767594][ T5727] SQUASHFS error: Unable to read directory block [631:26] [ 43.787874][ T5727] SQUASHFS error: Unable to read directory block [631:26] [ 43.794287][ T5727] SQUASHFS error: Unable to read directory block [631:26] [ 43.813123][ T5702] loop0: detected capacity change from 0 to 4096 [ 43.813848][ T5505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.823072][ T5702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.838063][ T5734] loop3: detected capacity change from 0 to 1024 [ 43.840326][ T5734] EXT4-fs: Ignoring removed bh option [ 43.841404][ T5734] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 43.841447][ T5734] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 43.841483][ T5734] EXT4-fs error (device loop3): ext4_get_journal_inode:5928: comm syz.3.164: inode #1: comm syz.3.164: iget: illegal inode # [ 43.841495][ T5734] loop3: lost filesystem error report for type 5 error -117 [ 43.841579][ T5734] EXT4-fs (loop3): no journal found [ 43.841585][ T5734] EXT4-fs (loop3): can't get journal size [ 43.843812][ T5734] EXT4-fs (loop3): failed to initialize system zone (-22) [ 43.843857][ T5734] EXT4-fs (loop3): mount failed [ 43.957684][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 43.965163][ T5757] loop3: detected capacity change from 0 to 128 [ 43.968172][ T5757] overlayfs: failed lookup in lower (newroot/43, name='file0', err=-40): overlapping layers [ 43.969525][ T5757] overlayfs: failed lookup in lower (newroot/43, name='file0', err=-40): overlapping layers [ 43.993931][ T5505] veth0_vlan: entered promiscuous mode [ 43.997864][ T5505] veth1_vlan: entered promiscuous mode [ 44.008682][ T5505] veth0_macvtap: entered promiscuous mode [ 44.012047][ T5505] veth1_macvtap: entered promiscuous mode [ 44.016081][ T5505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.018226][ T5505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.055563][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.055579][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.064521][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.064536][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.079107][ T42] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.079139][ T42] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.079155][ T42] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.079187][ T42] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.114579][ T5776] fuse: Bad value for 'fd' [ 44.122279][ T5780] netlink: 1180 bytes leftover after parsing attributes in process `syz.6.124'. [ 44.175340][ T4426] 8021q: adding VLAN 0 to HW filter on device eth7 [ 44.196931][ T5797] loop3: detected capacity change from 0 to 2048 [ 44.202850][ T5797] EXT4-fs: Ignoring removed i_version option [ 44.234293][ T5797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.235279][ T5801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.248180][ T5801] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.174: corrupted xattr block 33: invalid header [ 44.251951][ T5801] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.174: corrupted xattr block 33: invalid header [ 44.252352][ T5801] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.174: corrupted xattr block 33: invalid header [ 44.356016][ T5801] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.174: corrupted xattr block 33: invalid header [ 44.366068][ T5801] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 44.366819][ T5801] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 44.366835][ T5801] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.366835][ T5801] [ 44.366842][ T5801] EXT4-fs (loop4): Total free blocks count 0 [ 44.366849][ T5801] EXT4-fs (loop4): Free/Dirty block details [ 44.366859][ T5801] EXT4-fs (loop4): free_blocks=65280 [ 44.366869][ T5801] EXT4-fs (loop4): dirty_blocks=31 [ 44.366876][ T5801] EXT4-fs (loop4): Block reservation details [ 44.366882][ T5801] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 44.385242][ T5801] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 44.405684][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.177'. [ 44.417445][ T4740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.477671][ T4735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.507012][ T5833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.181'. [ 44.507305][ T5833] netlink: 'syz.3.181': attribute type 1 has an invalid length. [ 44.540603][ T4741] Bluetooth: hci2: connection err: -111 [ 44.542148][ T4741] Bluetooth: hci2: connection err: -111 [ 44.584880][ T5841] bond1: Unable to set up delay as MII monitoring is disabled [ 44.585882][ T5841] bond1 (unregistering): Released all slaves [ 44.610317][ T5840] bond1: Unable to set up delay as MII monitoring is disabled [ 44.611145][ T5840] bond1 (unregistering): Released all slaves [ 44.667442][ T5865] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 44.667454][ T5865] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 44.684589][ T5865] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.186: bg 0: block 4: invalid block bitmap [ 44.684608][ T5865] loop5: lost filesystem error report for type 5 error -117 [ 44.688395][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 44.688411][ C0] EXT4-fs (loop5): initial error at time 44: ext4_validate_block_bitmap:436 [ 44.688423][ C0] EXT4-fs (loop5): last error at time 44: ext4_validate_block_bitmap:436 [ 44.700278][ T5865] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 44.700294][ T5865] loop5: lost filesystem error report for type 5 error -117 [ 44.700954][ T5865] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.186: invalid indirect mapped block 1 (level 1) [ 44.700975][ T5865] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 44.702485][ T5865] EXT4-fs (loop5): 1 truncate cleaned up [ 44.705595][ T5865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.743456][ T5857] EXT4-fs (loop3): unable to read superblock [ 44.785235][ T5860] psci: CPU1 killed (polled 0 ms) [ 44.896449][ T5882] EXT4-fs: Ignoring removed bh option [ 44.898866][ T4741] Bluetooth: hci1: command tx timeout [ 44.925700][ T5882] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.941646][ T5882] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.976897][ T5154] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.047494][ T5505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.299575][ T4741] Bluetooth: hci3: command tx timeout [ 45.320257][ T5904] loop3: p2 p3 < > p4 < p5 > [ 45.320269][ T5904] loop3: partition table partially beyond EOD, truncated [ 45.321132][ T5904] loop3: p3 start 4225 is beyond EOD, truncated [ 45.463375][ T4729] udevd[4729]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 45.476284][ T4757] udevd[4757]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 45.478973][ T4726] udevd[4726]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 45.520675][ T5914] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 45.710873][ T5923] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 45.726796][ T5923] input: syz0 as /devices/virtual/input/input5 [ 45.855138][ T5932] ERROR: Out of memory at tomoyo_memory_ok. [ 46.263259][ T5936] Dev loop3: RDB in block 1 has bad checksum [ 46.460813][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.460992][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.914686][ T4741] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 46.914822][ T4741] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 47.202832][ T4741] Bluetooth: hci1: Malformed LE Event: 0x0b [ 47.378605][ T4741] Bluetooth: hci3: command tx timeout [ 47.513939][ T5979] netlink: 36 bytes leftover after parsing attributes in process `syz.6.213'. [ 47.571733][ T5982] set_capacity_and_notify: 9 callbacks suppressed [ 47.571746][ T5982] loop4: detected capacity change from 0 to 1024 [ 47.576976][ T5982] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 47.576976][ T5982] [ 47.724608][ T5989] netlink: 104 bytes leftover after parsing attributes in process `syz.3.217'. [ 47.736734][ T5993] netlink: 248 bytes leftover after parsing attributes in process `syz.4.218'. [ 47.780918][ T5993] syz.4.218 (5993): drop_caches: 0 [ 47.784444][ T5994] No control pipe specified [ 47.786633][ T5996] fuse: Bad value for 'fd' [ 47.902325][ T6006] netlink: 128 bytes leftover after parsing attributes in process `syz.3.220'. [ 48.008219][ T30] audit: type=1326 audit(47.970:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6007 comm="syz.4.222" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb917a228 code=0x0 [ 48.031932][ T6009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.220'. [ 48.152707][ T6019] loop4: detected capacity change from 0 to 4096 [ 48.172110][ T6019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.224945][ T6025] loop2: detected capacity change from 0 to 7 [ 48.227583][ T6025] Dev loop2: unable to read RDB block 7 [ 48.227600][ T6025] loop2: unable to read partition table [ 48.227666][ T6025] loop2: partition table beyond EOD, truncated [ 48.227676][ T6025] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 48.847182][ T4750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.885083][ T6051] loop4: detected capacity change from 0 to 256 [ 49.006588][ T6058] __nla_validate_parse: 2 callbacks suppressed [ 49.006602][ T6058] netlink: 64 bytes leftover after parsing attributes in process `syz.6.236'. [ 49.223894][ T6071] loop4: detected capacity change from 0 to 128 [ 49.235021][ T6071] EXT4-fs: Ignoring removed orlov option [ 49.236596][ T6071] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.275678][ T6076] loop6: detected capacity change from 0 to 8 [ 49.356279][ T6076] loop6: detected capacity change from 0 to 256 [ 49.356662][ T6076] vfat: Bad value for 'shortname' [ 49.402079][ T6076] loop6: detected capacity change from 0 to 256 [ 49.466788][ T4750] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.723247][ T6097] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.013377][ T6118] FAULT_INJECTION: forcing a failure. [ 50.013377][ T6118] name failslab, interval 1, probability 0, space 0, times 0 [ 50.013400][ T6118] CPU: 0 UID: 0 PID: 6118 Comm: syz.6.249 Not tainted syzkaller #0 PREEMPT [ 50.013412][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 50.013417][ T6118] Call trace: [ 50.013420][ T6118] show_stack+0x2c/0x3c (C) [ 50.013436][ T6118] __dump_stack+0x30/0x40 [ 50.013445][ T6118] dump_stack_lvl+0xd8/0x12c [ 50.013453][ T6118] dump_stack+0x1c/0x28 [ 50.013461][ T6118] should_fail_ex+0x418/0x58c [ 50.013472][ T6118] should_failslab+0xc4/0x120 [ 50.013482][ T6118] __kmalloc_node_noprof+0x10c/0x6e4 [ 50.013492][ T6118] mempool_init_node+0x10c/0x484 [ 50.013502][ T6118] mempool_init_noprof+0x50/0x68 [ 50.013511][ T6118] bioset_init+0x274/0x67c [ 50.013524][ T6118] __alloc_disk_node+0x8c/0x4e4 [ 50.013534][ T6118] __blk_alloc_disk+0xec/0x1a8 [ 50.013544][ T6118] dm_create+0x3ec/0xd94 [ 50.013556][ T6118] dev_create+0x108/0x258 [ 50.013566][ T6118] dm_ctl_ioctl+0x884/0xbbc [ 50.013576][ T6118] __arm64_sys_ioctl+0x154/0x1cc [ 50.013586][ T6118] invoke_syscall+0x98/0x244 [ 50.013595][ T6118] el0_svc_common+0xec/0x23c [ 50.013603][ T6118] do_el0_svc+0x4c/0x5c [ 50.013611][ T6118] el0_svc+0x60/0x1d8 [ 50.013620][ T6118] el0t_64_sync_handler+0x44/0x104 [ 50.013628][ T6118] el0t_64_sync+0x198/0x19c [ 50.017651][ T6120] loop4: detected capacity change from 0 to 512 [ 50.058469][ T6120] EXT4-fs (loop4): Test dummy encryption mode enabled [ 50.063409][ T6120] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 50.065284][ T6120] EXT4-fs (loop4): 1 truncate cleaned up [ 50.065754][ T6120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.194530][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.6.252'. [ 50.369745][ T6137] fscrypt: AES-256-XTS using blk-crypto-fallback [ 50.369969][ T6137] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 13: comm syz.4.250: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 50.375093][ T6137] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.250: bg 0: block 465: padding at end of block bitmap is not set [ 50.376121][ T6137] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 50.376139][ T6137] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.376139][ T6137] [ 50.376149][ T6137] EXT4-fs (loop4): Total free blocks count 0 [ 50.376157][ T6137] EXT4-fs (loop4): Free/Dirty block details [ 50.376167][ T6137] EXT4-fs (loop4): free_blocks=0 [ 50.376177][ T6137] EXT4-fs (loop4): dirty_blocks=34 [ 50.376183][ T6137] EXT4-fs (loop4): Block reservation details [ 50.376189][ T6137] EXT4-fs (loop4): i_reserved_data_blocks=34 [ 50.499052][ T4741] Bluetooth: hci3: command tx timeout [ 50.757195][ T6149] @0Ù: renamed from dummy0 (while UP) [ 50.773716][ T6144] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.773850][ T6144] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.773927][ T6144] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.774009][ T6144] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.802392][ T6144] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.806180][ T6144] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.806272][ T6144] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.806361][ T6144] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.806437][ T6144] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.822037][ T6144] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.855274][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.6.254'. [ 50.855292][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.6.254'. [ 51.230295][ T6165] overlayfs: failed to resolve './file0': -2 [ 51.612665][ T6193] 9p: Bad value for 'rfdno' [ 51.614027][ T6191] 9p: Bad value for 'rfdno' [ 51.886224][ T4750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.138623][ T6226] tap0: tun_chr_ioctl cmd 1074025677 [ 52.138713][ T6226] tap0: linktype set to 805 [ 52.309908][ T6240] syz.3.274 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 52.431121][ T6252] loop5: detected capacity change from 0 to 8 [ 52.505424][ T6238] [U] € [ 52.578890][ T4741] Bluetooth: hci3: command tx timeout [ 52.787672][ T6273] set_capacity_and_notify: 1 callbacks suppressed [ 52.787686][ T6273] loop5: detected capacity change from 0 to 512 [ 52.798248][ T6273] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 52.798264][ T6273] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 52.814160][ T6273] EXT4-fs (loop5): 1 truncate cleaned up [ 52.816779][ T6273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.085093][ T6276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.085262][ T6276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.103608][ T6276] loop6: detected capacity change from 0 to 512 [ 53.103996][ T6276] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.113863][ T6276] EXT4-fs (loop6): orphan cleanup on readonly fs [ 53.113876][ T6276] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 53.123379][ T6276] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.281: attempt to clear invalid blocks 2 len 1 [ 53.123406][ T6276] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 53.125073][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 53.130930][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 53.130940][ C0] EXT4-fs (loop6): initial error at time 53: ext4_clear_blocks:876: inode 13 [ 53.130954][ C0] EXT4-fs (loop6): last error at time 53: ext4_clear_blocks:876: inode 13 [ 53.142303][ T6276] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 53.142675][ T6276] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.281: invalid indirect mapped block 1819239214 (level 0) [ 53.142690][ T6276] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 53.144865][ T6276] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.281: invalid indirect mapped block 1819239214 (level 1) [ 53.144893][ T6276] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 53.164611][ T6276] EXT4-fs (loop6): 1 truncate cleaned up [ 53.165073][ T6276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.175804][ T6276] EXT4-fs (loop6): Quota file not on filesystem root. Journaled quota will not work [ 53.346029][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 53.346139][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 53.388196][ T6285] overlayfs: failed to clone upperpath [ 53.428992][ T6287] loop4: detected capacity change from 0 to 512 [ 53.429401][ T6287] EXT4-fs: Ignoring removed oldalloc option [ 53.440742][ T6287] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.283: corrupted in-inode xattr: e_value size too large [ 53.440767][ T6287] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.440987][ T6287] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.283: couldn't read orphan inode 15 (err -117) [ 53.441007][ T6287] loop4: lost filesystem error report for type 5 error -117 [ 53.441643][ T6287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.705378][ T6289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.283'. [ 53.727143][ T5154] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.760571][ T6291] loop5: detected capacity change from 0 to 8 [ 53.762921][ T6291] SQUASHFS error: Failed to read block 0x6ee: -5 [ 53.762930][ T6291] SQUASHFS error: Unable to read metadata cache entry [6ec] [ 53.762937][ T6291] SQUASHFS error: Unable to read inode 0x127 [ 53.839707][ T5505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.896542][ T6296] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 53.896561][ T6296] overlayfs: failed to set xattr on upper [ 53.896566][ T6296] overlayfs: ...falling back to redirect_dir=nofollow. [ 53.896571][ T6296] overlayfs: ...falling back to uuid=null. [ 54.039175][ T6308] fuse: Bad value for 'fd' [ 54.040576][ T6305] loop5: detected capacity change from 0 to 512 [ 54.156037][ T6315] loop5: detected capacity change from 0 to 512 [ 54.191591][ T6315] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 54.191608][ T6315] FAT-fs (loop5): Filesystem has been set read-only [ 54.191709][ T6315] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 54.191913][ T6315] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 54.191998][ T6315] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 54.195419][ T6315] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 54.196381][ T6315] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 54.212995][ T6315] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 54.213114][ T6315] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 54.213302][ T6315] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 54.213391][ T6315] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 54.214843][ T6315] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 54.214938][ T6315] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 54.215111][ T6315] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 54.215210][ T6315] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 54.215280][ T6315] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 54.215383][ T6315] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 54.297693][ T4750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.864505][ T6329] binder: 6328:6329 tried to acquire reference to desc 0, got 1 instead [ 54.864847][ T6329] binder: 6328:6329 sending u0000000000000003 node 8, cookie mismatch 0000000000000001 != 0000000000000000 [ 54.864861][ T6329] binder: 6329:6328 translate binder failed [ 54.865030][ T6329] binder: 6328:6329 transaction call to 6328:0 failed 7/29201/-22, code 0 size 72-24 line 3553 [ 54.913142][ T4842] binder: undelivered TRANSACTION_ERROR: 29201 [ 55.049688][ T6344] loop6: detected capacity change from 0 to 2048 [ 55.135273][ T6358] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.221524][ T6358] loop5: detected capacity change from 0 to 1024 [ 55.236842][ T6358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.260656][ T6358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.405236][ T6383] loop4: detected capacity change from 0 to 512 [ 55.420746][ T6383] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.311: bg 0: block 5: invalid block bitmap [ 55.420774][ T6383] loop4: lost filesystem error report for type 5 error -117 [ 55.424649][ T6383] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 55.424666][ T6383] loop4: lost filesystem error report for type 5 error -117 [ 55.428393][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 55.428413][ C0] EXT4-fs (loop4): initial error at time 55: ext4_validate_block_bitmap:436 [ 55.428425][ C0] EXT4-fs (loop4): last error at time 55: ext4_mb_clear_bb:6680 [ 55.447179][ T6383] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.311: invalid indirect mapped block 3 (level 2) [ 55.447205][ T6383] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.456034][ T6383] EXT4-fs (loop4): 1 orphan inode deleted [ 55.456047][ T6383] EXT4-fs (loop4): 1 truncate cleaned up [ 55.456523][ T6383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.514092][ T4750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.631092][ T6391] netlink: 88 bytes leftover after parsing attributes in process `syz.4.313'. [ 55.686403][ T6397] loop4: detected capacity change from 0 to 512 [ 55.805726][ T6404] net_ratelimit: 56 callbacks suppressed [ 55.805740][ T6404] ip_tables: iptables: counters copy to user failed while replacing table [ 55.813177][ T6404] netlink: 20 bytes leftover after parsing attributes in process `syz.6.319'. [ 55.813193][ T6404] netlink: 20 bytes leftover after parsing attributes in process `syz.6.319'. [ 55.861082][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.320'. [ 55.875024][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.320'. [ 55.895550][ T6408] vhci_hcd vhci_hcd.1: invalid port number 65 [ 55.961080][ T5154] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.977194][ T30] audit: type=1326 audit(55.940:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.6.323" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 55.977215][ T30] audit: type=1326 audit(55.940:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.6.323" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 55.977276][ T30] audit: type=1326 audit(55.940:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.6.323" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 55.977474][ T30] audit: type=1326 audit(55.940:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.6.323" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 55.977601][ T30] audit: type=1326 audit(55.940:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.6.323" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 55.977670][ T30] audit: type=1326 audit(55.940:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.6.323" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 55.990844][ T30] audit: type=1326 audit(55.960:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.6.323" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 56.009790][ T30] audit: type=1326 audit(55.980:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.6.323" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 56.033839][ T30] audit: type=1326 audit(56.000:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.6.323" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 56.033869][ T30] audit: type=1326 audit(56.000:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.6.323" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 56.761290][ T6453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.783348][ T6453] EXT4-fs error (device loop6): ext4_check_all_de:675: inode #12: block 7: comm syz.6.329: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 56.828844][ T6461] tunl0: entered promiscuous mode [ 56.840028][ T6461] netlink: 'syz.5.330': attribute type 4 has an invalid length. [ 56.840041][ T6461] netlink: 9 bytes leftover after parsing attributes in process `syz.5.330'. [ 56.853673][ T5505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.953933][ T6466] can0: slcan on ptm0. [ 57.019177][ T6465] can0 (unregistered): slcan off ptm0. [ 57.104138][ T6473] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 57.104259][ T6473] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 57.367233][ T6486] fuse: Bad value for 'fd' [ 58.287032][ T6500] set_capacity_and_notify: 3 callbacks suppressed [ 58.287046][ T6500] loop6: detected capacity change from 0 to 512 [ 58.287793][ T6500] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.307781][ T6500] EXT4-fs (loop6): orphan cleanup on readonly fs [ 58.308868][ T6500] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4223: comm syz.6.337: Allocating blocks 41-42 which overlap fs metadata [ 58.308884][ T6500] loop6: lost filesystem error report for type 5 error -117 [ 58.314879][ T6500] EXT4-fs error (device loop6): ext4_acquire_dquot:7070: comm syz.6.337: Failed to acquire dquot type 0 [ 58.314893][ T6500] loop6: lost filesystem error report for type 5 error -117 [ 58.315060][ T6500] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 58.315603][ T6500] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #12: comm syz.6.337: corrupted inode contents [ 58.315624][ T6500] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.315841][ T6500] EXT4-fs error (device loop6): ext4_dirty_inode:6736: inode #12: comm syz.6.337: mark_inode_dirty error [ 58.315853][ T6500] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.315975][ T6500] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #12: comm syz.6.337: corrupted inode contents [ 58.315985][ T6500] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.316055][ T6500] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.337: mark_inode_dirty error [ 58.316065][ T6500] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.316203][ T6500] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #12: comm syz.6.337: corrupted inode contents [ 58.316213][ T6500] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.316363][ T6500] EXT4-fs error (device loop6) in ext4_orphan_del:304: Corrupt filesystem [ 58.316372][ T6500] loop6: lost filesystem error report for type 5 error -117 [ 58.317078][ T6500] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #12: comm syz.6.337: corrupted inode contents [ 58.317099][ T6500] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.317202][ T6500] EXT4-fs error (device loop6): ext4_truncate:4721: inode #12: comm syz.6.337: mark_inode_dirty error [ 58.317211][ T6500] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.317293][ T6500] EXT4-fs error (device loop6) in ext4_process_orphan:346: Corrupt filesystem [ 58.317300][ T6500] loop6: lost filesystem error report for type 5 error -117 [ 58.317516][ T6500] EXT4-fs (loop6): 1 truncate cleaned up [ 58.319850][ C0] EXT4-fs (loop6): error count since last fsck: 12 [ 58.319866][ C0] EXT4-fs (loop6): initial error at time 58: ext4_mb_mark_diskspace_used:4223 [ 58.319877][ C0] EXT4-fs (loop6): last error at time 58: ext4_process_orphan:346 [ 58.328430][ T6500] EXT4-fs (loop6): pa 0000000092be0373: logic 1, phys. 41, len 23 [ 58.328444][ T6500] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23 [ 58.329322][ T6500] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.453841][ T6496] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.453926][ T6496] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.471105][ T5505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.482254][ T6496] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.493206][ T6496] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.493245][ T6496] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.507031][ T6496] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.516948][ T6496] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 58.516970][ T6496] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 58.528029][ T6496] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 58.538313][ T6496] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.538333][ T6496] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.599315][ T6496] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.604656][ T6496] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.604691][ T6496] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.605345][ T6496] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.989855][ T6541] loop5: detected capacity change from 0 to 1024 [ 59.032069][ T6541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.132992][ T5154] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.310784][ T6566] netlink: 'syz.5.347': attribute type 1 has an invalid length. [ 59.310804][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.347'. [ 59.310815][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.347'. [ 59.337031][ T6566] loop5: detected capacity change from 0 to 1024 [ 59.421579][ T6566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.795108][ T4745] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 59.795873][ T4745] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 59.796218][ T4745] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 59.796526][ T4745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 59.796722][ T4745] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 59.858511][ T4745] Bluetooth: hci0: command 0x0c1a tx timeout [ 60.094523][ T5154] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.285902][ T6618] loop5: detected capacity change from 0 to 512 [ 60.294827][ T6583] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.316091][ T6618] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.498579][ T4745] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.524754][ T6618] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 60.527908][ T6618] netlink: 32 bytes leftover after parsing attributes in process `syz.5.354'. [ 60.536776][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.354'. [ 60.580245][ T4745] Bluetooth: hci4: command 0x0c1a tx timeout [ 60.634896][ T5154] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.660958][ T4745] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.660992][ T4745] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.955147][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.955177][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.955244][ T6583] bridge_slave_0: entered allmulticast mode [ 60.955678][ T6583] bridge_slave_0: entered promiscuous mode [ 60.969632][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.969681][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.969734][ T6583] bridge_slave_1: entered allmulticast mode [ 60.972416][ T6583] bridge_slave_1: entered promiscuous mode [ 61.053083][ T6583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.054370][ T6583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.105486][ T6583] team0: Port device team_slave_0 added [ 61.106188][ T6583] team0: Port device team_slave_1 added [ 61.147851][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.147873][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.147885][ T6583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.164027][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.164036][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.164049][ T6583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.237120][ T6583] hsr_slave_0: entered promiscuous mode [ 61.237470][ T6583] hsr_slave_1: entered promiscuous mode [ 61.237674][ T6583] debugfs: 'hsr0' already exists in 'hsr' [ 61.237685][ T6583] Cannot create hsr debugfs directory [ 61.342475][ T6656] fuse: Bad value for 'fd' [ 61.356120][ T6656] loop5: detected capacity change from 0 to 512 [ 61.386852][ T42] Bluetooth: hci6: Frame reassembly failed (-84) [ 61.394379][ T6657] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 61.500491][ T6583] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 61.505671][ T6583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.514335][ T6583] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 61.517374][ T6583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.517749][ T6583] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 61.531514][ T6583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.531813][ T6583] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 61.534832][ T6583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.560367][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.560394][ T6583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.521527][ T4745] Bluetooth: hci5: command tx timeout [ 62.522223][ T4745] Bluetooth: hci0: command 0x0c1a tx timeout [ 62.527669][ T1612] ieee802154 phy0 wpan0: encryption failed: -22 [ 62.527697][ T1612] ieee802154 phy1 wpan1: encryption failed: -22 [ 62.723525][ T4745] Bluetooth: hci4: command 0x0c1a tx timeout [ 62.723581][ T4747] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.738602][ T4745] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.738651][ T4747] Bluetooth: hci1: command 0x0c1a tx timeout [ 62.770257][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.797737][ T6583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.814268][ T6583] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.818032][ T392] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.818058][ T392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.818689][ T392] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.818711][ T392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.862224][ T6583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.158712][ T6684] IPVS: rr: UDP 127.0.0.1:20000 - no destination available [ 63.311967][ T6583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.458571][ T6696] netlink: 14 bytes leftover after parsing attributes in process `syz.3.365'. [ 63.459096][ T4747] Bluetooth: hci6: command 0x1003 tx timeout [ 63.459162][ T4741] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 63.533845][ T6696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.556381][ T6696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.565551][ T6696] bond0 (unregistering): Released all slaves [ 63.630702][ T6583] veth0_vlan: entered promiscuous mode [ 63.632703][ T6583] veth1_vlan: entered promiscuous mode [ 63.637810][ T6583] veth0_macvtap: entered promiscuous mode [ 63.693653][ T6583] veth1_macvtap: entered promiscuous mode [ 63.697586][ T6583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.736581][ T6583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.741231][ T219] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.741322][ T219] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.741349][ T219] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.741377][ T219] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.826319][ T4741] Bluetooth: hci1: unexpected event for opcode 0x0428 [ 63.860650][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.368'. [ 63.860667][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.368'. [ 63.903657][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.903669][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.932972][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.932984][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.229790][ T6720] FAULT_INJECTION: forcing a failure. [ 64.229790][ T6720] name failslab, interval 1, probability 0, space 0, times 0 [ 64.229813][ T6720] CPU: 0 UID: 0 PID: 6720 Comm: syz.6.372 Not tainted syzkaller #0 PREEMPT [ 64.229825][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 64.229830][ T6720] Call trace: [ 64.229833][ T6720] show_stack+0x2c/0x3c (C) [ 64.229848][ T6720] __dump_stack+0x30/0x40 [ 64.229857][ T6720] dump_stack_lvl+0xd8/0x12c [ 64.229865][ T6720] dump_stack+0x1c/0x28 [ 64.229873][ T6720] should_fail_ex+0x418/0x58c [ 64.229884][ T6720] should_failslab+0xc4/0x120 [ 64.229894][ T6720] __kvmalloc_node_noprof+0x160/0x7fc [ 64.229905][ T6720] io_alloc_cache_init+0x48/0x154 [ 64.229915][ T6720] io_ring_ctx_alloc+0x3f8/0x958 [ 64.229926][ T6720] io_uring_create+0x6c/0x830 [ 64.229937][ T6720] __arm64_sys_io_uring_setup+0x284/0x290 [ 64.229949][ T6720] invoke_syscall+0x98/0x244 [ 64.229958][ T6720] el0_svc_common+0xec/0x23c [ 64.229966][ T6720] do_el0_svc+0x4c/0x5c [ 64.229974][ T6720] el0_svc+0x60/0x1d8 [ 64.229983][ T6720] el0t_64_sync_handler+0x44/0x104 [ 64.229991][ T6720] el0t_64_sync+0x198/0x19c [ 64.349853][ T6722] loop6: detected capacity change from 0 to 1024 [ 64.350258][ T6722] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.387513][ T6722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 64.508232][ T878] cfg80211: failed to load regulatory.db [ 64.578549][ T4741] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.578576][ T4741] Bluetooth: hci5: command tx timeout [ 64.619921][ T5505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 64.620620][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 64.739803][ T4747] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.739830][ T4747] Bluetooth: hci4: command 0x0c1a tx timeout [ 64.819123][ T4741] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.991634][ T6750] loop7: detected capacity change from 0 to 512 [ 65.041790][ T6750] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 65.072472][ T6750] EXT4-fs (loop7): 1 orphan inode deleted [ 65.072935][ T6750] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.099532][ T219] __quota_error: 17 callbacks suppressed [ 65.099542][ T219] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 65.099571][ T219] EXT4-fs error (device loop7): ext4_release_dquot:7106: comm kworker/u8:5: Failed to release dquot type 1 [ 65.099581][ T219] loop7: lost filesystem error report for type 5 error -117 [ 65.292213][ T6583] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.460786][ T6767] netlink: 'syz.5.381': attribute type 3 has an invalid length. [ 65.460806][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.381'. [ 65.586692][ T6783] syzkaller0: entered promiscuous mode [ 65.586708][ T6783] syzkaller0: entered allmulticast mode [ 66.680551][ T4741] Bluetooth: hci5: command tx timeout [ 68.765241][ T4741] Bluetooth: hci5: command tx timeout [ 69.447129][ T6827] netlink: 32 bytes leftover after parsing attributes in process `syz.5.391'. [ 69.447157][ T6827] netlink: 48 bytes leftover after parsing attributes in process `syz.5.391'. [ 69.447172][ T6827] netlink: 48 bytes leftover after parsing attributes in process `syz.5.391'. [ 70.161819][ T6849] loop7: detected capacity change from 0 to 8192 [ 70.418732][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.391'. [ 70.439822][ T6858] loop6: detected capacity change from 0 to 1024 [ 70.487447][ T6858] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 70.518504][ T6858] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 70.518943][ T6858] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.768641][ T6887] overlay: filesystem on ./file0 not supported as upperdir [ 70.813356][ T5505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.046464][ T6898] device-mapper: ioctl: The device has no table. [ 71.283952][ T6890] bridge_slave_0: left allmulticast mode [ 71.283971][ T6890] bridge_slave_0: left promiscuous mode [ 71.284050][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.296597][ T6890] bridge_slave_1: left allmulticast mode [ 71.296611][ T6890] bridge_slave_1: left promiscuous mode [ 71.296664][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.317051][ T6890] bond0: (slave bond_slave_0): Releasing backup interface [ 71.333041][ T6890] bond0: (slave bond_slave_1): Releasing backup interface [ 71.356014][ T6890] team0: Port device team_slave_0 removed [ 71.376950][ T6890] team0: Port device team_slave_1 removed [ 71.377313][ T6890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.377325][ T6890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.392359][ T6890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.392372][ T6890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.398179][ T6890] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 72.311390][ T6917] loop6: detected capacity change from 0 to 1024 [ 72.311834][ T6917] EXT4-fs: Ignoring removed bh option [ 74.716623][ T6917] EXT4-fs warning (device loop6): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop6. [ 74.779713][ T4747] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.781462][ T4747] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.781831][ T4747] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.782148][ T4747] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.782376][ T4747] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.128046][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.158155][ T6938] tipc: Started in network mode [ 75.158177][ T6938] tipc: Node identity 1000001, cluster identity 4711 [ 75.158187][ T6938] tipc: Node number set to 16777217 [ 75.238007][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.257986][ T6946] overlayfs: failed to clone upperpath [ 75.303286][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.378058][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.543347][ T59] bridge_slave_1: left allmulticast mode [ 75.543369][ T59] bridge_slave_1: left promiscuous mode [ 75.543455][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.560392][ T59] bridge_slave_0: left allmulticast mode [ 75.560406][ T59] bridge_slave_0: left promiscuous mode [ 75.560499][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.762695][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.767078][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.776319][ T59] bond0 (unregistering): Released all slaves [ 76.820024][ T4747] Bluetooth: hci6: command tx timeout [ 76.916500][ T6963] netlink: 16 bytes leftover after parsing attributes in process `syz.7.419'. [ 76.954205][ T4741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.954947][ T4741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.955270][ T4741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.955609][ T4741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.956061][ T4741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.011616][ T6970] netlink: 88 bytes leftover after parsing attributes in process `syz.3.420'. [ 77.018177][ T6929] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.043371][ T4747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.070653][ T4747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.071093][ T4747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.071417][ T4747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.074865][ T4747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.389341][ T6976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.389512][ T6976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.680577][ T59] hsr_slave_0: left promiscuous mode [ 77.680840][ T59] hsr_slave_1: left promiscuous mode [ 77.682438][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.682450][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.686554][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.686566][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.718613][ T59] veth1_macvtap: left promiscuous mode [ 77.718642][ T59] veth0_macvtap: left promiscuous mode [ 77.718689][ T59] veth1_vlan: left promiscuous mode [ 77.718729][ T59] veth0_vlan: left promiscuous mode [ 78.070779][ T59] team0 (unregistering): Port device team_slave_1 removed [ 78.077105][ T59] team0 (unregistering): Port device team_slave_0 removed [ 78.263400][ T7014] loop7: detected capacity change from 0 to 256 [ 78.269675][ T7014] vfat: Unknown parameter 'sh3ß¡äŠr¬¼”m\‹§Yºortname' [ 78.307379][ T6964] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.354140][ T4426] 8021q: adding VLAN 0 to HW filter on device eth8 [ 78.772552][ T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.796280][ T6971] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.798610][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'. [ 78.900318][ T4741] Bluetooth: hci6: command tx timeout [ 78.980376][ T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.059295][ T4741] Bluetooth: hci1: command tx timeout [ 79.145871][ T4741] Bluetooth: hci3: command tx timeout [ 79.249645][ T6929] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.249676][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.249737][ T6929] bridge_slave_0: entered allmulticast mode [ 79.271859][ T6929] bridge_slave_0: entered promiscuous mode [ 79.280240][ T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.311640][ T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.398609][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.398640][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.398700][ T6929] bridge_slave_1: entered allmulticast mode [ 79.399132][ T6929] bridge_slave_1: entered promiscuous mode [ 79.406724][ T4426] 8021q: adding VLAN 0 to HW filter on device eth9 [ 79.447789][ T7045] loop7: detected capacity change from 0 to 512 [ 79.473470][ T7045] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.473483][ T7045] EXT4-fs: Ignoring removed orlov option [ 79.484608][ T7045] EXT4-fs (loop7): DAX unsupported by block device. [ 79.559591][ T7045] FAULT_INJECTION: forcing a failure. [ 79.559591][ T7045] name failslab, interval 1, probability 0, space 0, times 0 [ 79.559614][ T7045] CPU: 0 UID: 0 PID: 7045 Comm: syz.7.427 Not tainted syzkaller #0 PREEMPT [ 79.559628][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 79.559634][ T7045] Call trace: [ 79.559637][ T7045] show_stack+0x2c/0x3c (C) [ 79.559652][ T7045] __dump_stack+0x30/0x40 [ 79.559660][ T7045] dump_stack_lvl+0xd8/0x12c [ 79.559667][ T7045] dump_stack+0x1c/0x28 [ 79.559674][ T7045] should_fail_ex+0x418/0x58c [ 79.559683][ T7045] should_failslab+0xc4/0x120 [ 79.559692][ T7045] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 79.559701][ T7045] __d_alloc+0x50/0x600 [ 79.559711][ T7045] d_alloc_pseudo+0x2c/0xd8 [ 79.559720][ T7045] alloc_path_pseudo+0xe8/0x1d4 [ 79.559729][ T7045] alloc_file_pseudo+0xb0/0x198 [ 79.559737][ T7045] create_pipe_files+0x288/0x650 [ 79.559746][ T7045] __do_pipe_flags+0x5c/0x204 [ 79.559754][ T7045] do_pipe2+0xa0/0x250 [ 79.559767][ T7045] __arm64_sys_pipe2+0x64/0x7c [ 79.559776][ T7045] invoke_syscall+0x98/0x244 [ 79.559784][ T7045] el0_svc_common+0xec/0x23c [ 79.559791][ T7045] do_el0_svc+0x4c/0x5c [ 79.559798][ T7045] el0_svc+0x60/0x1d8 [ 79.559806][ T7045] el0t_64_sync_handler+0x44/0x104 [ 79.559813][ T7045] el0t_64_sync+0x198/0x19c [ 79.633233][ T6929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.634143][ T6929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.762734][ T6929] team0: Port device team_slave_0 added [ 79.763564][ T6929] team0: Port device team_slave_1 added [ 79.831952][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.831970][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.831981][ T6929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.890397][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.924741][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.924754][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.924780][ T6929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.010270][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.039260][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.045047][ T6929] hsr_slave_0: entered promiscuous mode [ 80.045912][ T6929] hsr_slave_1: entered promiscuous mode [ 80.046130][ T6929] debugfs: 'hsr0' already exists in 'hsr' [ 80.046140][ T6929] Cannot create hsr debugfs directory [ 80.101186][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.101213][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.101273][ T6964] bridge_slave_0: entered allmulticast mode [ 80.101706][ T6964] bridge_slave_0: entered promiscuous mode [ 80.102435][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.102457][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.102513][ T6964] bridge_slave_1: entered allmulticast mode [ 80.102891][ T6964] bridge_slave_1: entered promiscuous mode [ 80.194753][ T6964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.202753][ T6964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.207521][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.241169][ T4426] 8021q: adding VLAN 0 to HW filter on device eth10 [ 80.266819][ T6964] team0: Port device team_slave_0 added [ 80.266913][ T6971] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.266977][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.267071][ T6971] bridge_slave_0: entered allmulticast mode [ 80.278258][ T6971] bridge_slave_0: entered promiscuous mode [ 80.281015][ T6971] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.281036][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.281088][ T6971] bridge_slave_1: entered allmulticast mode [ 80.286196][ T6971] bridge_slave_1: entered promiscuous mode [ 80.324022][ T6964] team0: Port device team_slave_1 added [ 80.384058][ T6971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.384912][ T6971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.406682][ T6964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.406691][ T6964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.406703][ T6964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.407315][ T6964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.407322][ T6964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.407334][ T6964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.471796][ T59] bridge_slave_1: left allmulticast mode [ 80.471817][ T59] bridge_slave_1: left promiscuous mode [ 80.471892][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.472918][ T59] bridge_slave_0: left allmulticast mode [ 80.472981][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.743738][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.745496][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.747243][ T59] bond0 (unregistering): Released all slaves [ 80.846558][ T59] bond0 (unregistering): Released all slaves [ 80.853076][ T6971] team0: Port device team_slave_0 added [ 80.855946][ T6971] team0: Port device team_slave_1 added [ 80.874450][ T4426] 8021q: adding VLAN 0 to HW filter on device eth11 [ 80.921468][ T59] tipc: Left network mode [ 80.953057][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.953069][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.953081][ T6971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.953682][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.953689][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.953704][ T6971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.979112][ T4747] Bluetooth: hci6: command tx timeout [ 80.984452][ T6964] hsr_slave_0: entered promiscuous mode [ 80.986737][ T6964] hsr_slave_1: entered promiscuous mode [ 80.987482][ T6964] debugfs: 'hsr0' already exists in 'hsr' [ 80.987496][ T6964] Cannot create hsr debugfs directory [ 81.054244][ T6971] hsr_slave_0: entered promiscuous mode [ 81.057395][ T6971] hsr_slave_1: entered promiscuous mode [ 81.062839][ T6971] debugfs: 'hsr0' already exists in 'hsr' [ 81.062859][ T6971] Cannot create hsr debugfs directory [ 81.132350][ T6929] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 81.137037][ T6929] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.139626][ T4747] Bluetooth: hci1: command tx timeout [ 81.154781][ T6929] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 81.166271][ T6929] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.218581][ T4747] Bluetooth: hci3: command tx timeout [ 81.223675][ T6929] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 81.224826][ T6929] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.225132][ T6929] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 81.237154][ T6929] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.618749][ T4741] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 81.700189][ T4426] 8021q: adding VLAN 0 to HW filter on device eth12 [ 81.734354][ T7137] loop7: detected capacity change from 0 to 128 [ 81.801632][ T6929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.854531][ T6929] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.862609][ T219] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.862653][ T219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.891792][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.891821][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.920809][ T59] hsr_slave_0: left promiscuous mode [ 81.921212][ T59] hsr_slave_1: left promiscuous mode [ 81.921731][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.921742][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.922038][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.922047][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.925720][ T7142] loop7: detected capacity change from 0 to 512 [ 81.944339][ T59] hsr_slave_0: left promiscuous mode [ 81.944948][ T59] hsr_slave_1: left promiscuous mode [ 81.951802][ T7142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.951819][ T7142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.954469][ T7142] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 81.973070][ T7142] EXT4-fs (loop7): 1 truncate cleaned up [ 81.973698][ T7142] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.974913][ T59] veth1_macvtap: left promiscuous mode [ 81.974942][ T59] veth0_macvtap: left promiscuous mode [ 81.975035][ T59] veth1_vlan: left promiscuous mode [ 81.975072][ T59] veth0_vlan: left promiscuous mode [ 81.999347][ T59] veth1_macvtap: left promiscuous mode [ 81.999370][ T59] veth0_macvtap: left promiscuous mode [ 81.999420][ T59] veth1_vlan: left promiscuous mode [ 81.999451][ T59] veth0_vlan: left promiscuous mode [ 82.032483][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.7.436'. [ 82.167453][ T59] team0 (unregistering): Port device team_slave_1 removed [ 82.179558][ T59] team0 (unregistering): Port device team_slave_0 removed [ 82.472400][ T6929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.491444][ T6583] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.633958][ T6971] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 82.637986][ T7157] loop7: detected capacity change from 0 to 512 [ 82.658910][ T6971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.659243][ T6971] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 82.686861][ T7157] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.438: Unrecognised inode hash code 255 [ 82.686885][ T7157] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.438: Corrupt directory, running e2fsck is recommended [ 82.705683][ T7157] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 82.705736][ T7157] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.438: corrupted in-inode xattr: invalid ea_ino [ 82.705752][ T7157] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.708405][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 82.708420][ C0] EXT4-fs (loop7): initial error at time 82: ext4_iget_extra_inode:5210: inode 15 [ 82.708436][ C0] EXT4-fs (loop7): last error at time 82: ext4_iget_extra_inode:5210: inode 15 [ 82.722082][ T7157] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.438: couldn't read orphan inode 15 (err -117) [ 82.722106][ T7157] loop7: lost filesystem error report for type 5 error -117 [ 82.722682][ T7157] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.746782][ T6971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.805473][ T6971] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 82.813282][ T6971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.813606][ T6971] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 82.827721][ T6971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.835057][ T7157] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.438: Unrecognised inode hash code 255 [ 82.835075][ T7157] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.438: Corrupt directory, running e2fsck is recommended [ 82.842320][ T7157] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.438: Unrecognised inode hash code 255 [ 82.842336][ T7157] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.438: Corrupt directory, running e2fsck is recommended [ 82.842357][ T7157] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #2: block 4: comm syz.7.438: bad entry in directory: inode out of bounds - offset=0, inode=262143, rec_len=1024, size=1024 fake=0 [ 83.164619][ T4747] Bluetooth: hci6: command tx timeout [ 83.219037][ T4747] Bluetooth: hci1: command tx timeout [ 83.234203][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 83.298572][ T4747] Bluetooth: hci3: command tx timeout [ 83.425611][ T6583] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.535191][ T6971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.431708][ T6971] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.434573][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.434604][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.435105][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.435122][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.441630][ T7196] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.487165][ T6929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.585808][ T6964] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.638934][ T6964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.734810][ T6964] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.759696][ T6964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.760048][ T6964] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.778170][ T6964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.797271][ T6964] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.823729][ T6964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.832217][ T6971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.896405][ T7218] device-mapper: table: 248:2: thin: Error opening origin device (-ENOENT) [ 84.896419][ T7218] device-mapper: ioctl: error adding target to table [ 84.947164][ T30] audit: type=1326 audit(84.910:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7206 comm="syz.3.443" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c77a228 code=0x0 [ 85.032135][ T6964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.035753][ T6964] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.068010][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.068040][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.074891][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.074913][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.240332][ T6929] veth0_vlan: entered promiscuous mode [ 85.260531][ T6929] veth1_vlan: entered promiscuous mode [ 85.298605][ T4747] Bluetooth: hci1: command tx timeout [ 85.321938][ T6929] veth0_macvtap: entered promiscuous mode [ 85.341093][ T6929] veth1_macvtap: entered promiscuous mode [ 85.376827][ T6929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.378643][ T4747] Bluetooth: hci3: command tx timeout [ 85.393494][ T6929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.438716][ T392] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.444316][ T281] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.444429][ T281] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.444449][ T281] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.627634][ T7259] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.631270][ T392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.631281][ T392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.637741][ T6971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.666200][ T7259] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.697407][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.697423][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.835308][ T7293] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 85.875948][ T6964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.995095][ T6971] veth0_vlan: entered promiscuous mode [ 86.014466][ T6971] veth1_vlan: entered promiscuous mode [ 86.063900][ T6971] veth0_macvtap: entered promiscuous mode [ 86.076653][ T6971] veth1_macvtap: entered promiscuous mode [ 86.090764][ T6971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.107164][ T6971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.196558][ T6964] veth0_vlan: entered promiscuous mode [ 86.246044][ T6964] veth1_vlan: entered promiscuous mode [ 86.259782][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.289763][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.289962][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.290024][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.330453][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.330465][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.330564][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.330571][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.335562][ T6964] veth0_macvtap: entered promiscuous mode [ 86.375117][ T6964] veth1_macvtap: entered promiscuous mode [ 86.486650][ T6964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.487694][ T6964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.471587][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.471705][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.472073][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.472154][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.611187][ T7353] loop8: detected capacity change from 0 to 512 [ 87.628144][ T392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.628153][ T392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.657219][ T392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.657235][ T392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.674813][ T7353] EXT4-fs (loop8): 1 truncate cleaned up [ 87.675302][ T7353] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.718099][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.460'. [ 87.723249][ T7358] loop6: detected capacity change from 0 to 512 [ 87.775752][ T7361] ip_tables: iptables: counters copy to user failed while replacing table [ 87.794595][ T6929] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.863204][ T7364] netlink: 884 bytes leftover after parsing attributes in process `syz.5.416'. [ 87.908288][ T7372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 87.940686][ T878] bridge0: entered promiscuous mode [ 87.952833][ T7380] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 88.023999][ T7385] loop6: detected capacity change from 0 to 512 [ 88.026050][ T7374] loop5: detected capacity change from 0 to 256 [ 88.033674][ T7374] vfat: Unknown parameter 'é“«A¼º?ocharset' [ 88.052430][ T7385] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.143586][ T7385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.143775][ T7385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.321825][ T7399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.650023][ T7409] vhci_hcd vhci_hcd.2: invalid port number 96 [ 88.650044][ T7409] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 88.656361][ T7407] geneve2: entered promiscuous mode [ 88.740573][ T7411] loop5: detected capacity change from 0 to 512 [ 88.748248][ T7411] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 88.769997][ T7411] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082] [ 88.770026][ T7411] System zones: 0-2, 18-18, 34-34 [ 88.775594][ T7411] EXT4-fs (loop5): 1 orphan inode deleted [ 88.777713][ T7411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.791362][ T281] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 88.791392][ T281] EXT4-fs error (device loop5): ext4_release_dquot:7106: comm kworker/u8:6: Failed to release dquot type 1 [ 88.874566][ T6964] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.897545][ T6971] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.997538][ T7416] FAULT_INJECTION: forcing a failure. [ 88.997538][ T7416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.997558][ T7416] CPU: 0 UID: 0 PID: 7416 Comm: syz.5.473 Not tainted syzkaller #0 PREEMPT [ 88.997569][ T7416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 88.997576][ T7416] Call trace: [ 88.997579][ T7416] show_stack+0x2c/0x3c (C) [ 88.997595][ T7416] __dump_stack+0x30/0x40 [ 88.997603][ T7416] dump_stack_lvl+0xd8/0x12c [ 88.997610][ T7416] dump_stack+0x1c/0x28 [ 88.997617][ T7416] should_fail_ex+0x418/0x58c [ 88.997627][ T7416] should_fail+0x14/0x24 [ 88.997635][ T7416] should_fail_usercopy+0x20/0x30 [ 88.997643][ T7416] _inline_copy_from_user+0x3c/0x174 [ 88.997653][ T7416] __sys_bpf+0x1b4/0x82c [ 88.997662][ T7416] __arm64_sys_bpf+0xd0/0xec [ 88.997671][ T7416] invoke_syscall+0x98/0x244 [ 88.997679][ T7416] el0_svc_common+0xec/0x23c [ 88.997686][ T7416] do_el0_svc+0x4c/0x5c [ 88.997693][ T7416] el0_svc+0x60/0x1d8 [ 88.997701][ T7416] el0t_64_sync_handler+0x44/0x104 [ 88.997708][ T7416] el0t_64_sync+0x198/0x19c [ 89.119315][ T7421] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 89.119475][ T7421] device-mapper: table: 248:1: raid: Bad value for 'raid10_copies' (-EINVAL) [ 89.119484][ T7421] device-mapper: ioctl: error adding target to table [ 89.375206][ T7427] siw: device registration error -23 [ 89.383043][ T7427] smc: removing ib device rxe0 ** 13971 printk messages dropped ** [ 89.830147][ T7427] ------------[ cut here ]------------ [ 89.830151][ T7427] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x58/0x60, CPU#0: syz.6.476/7427 [ 89.841448][ T7427] Modules linked in: [ 89.842274][ T7427] CPU: 0 UID: 0 PID: 7427 Comm: syz.6.476 Not tainted syzkaller #0 PREEMPT [ 89.844154][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 89.846294][ T7427] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 89.848086][ T7427] pc : rxe_pool_cleanup+0x58/0x60 [ 89.849264][ T7427] lr : rxe_pool_cleanup+0x58/0x60 [ 89.850409][ T7427] sp : ffff8000945a6f40 [ 89.851301][ T7427] x29: ffff8000945a6f40 x28: dfff800000000000 x27: ffff0000f1da6706 [ 89.853220][ T7427] x26: dfff800000000000 x25: ffff0000d64d5148 x24: dfff800000000000 [ 89.855102][ T7427] x23: 1fffe0001ac9a9f9 x22: ffff0000d64d4fc8 x21: dfff800000000000 [ 89.856927][ T7427] x20: ffff80008455fca0 x19: ffff0000d64d5468 x18: 00000000ffffffff [ 89.858603][ T7427] x17: 4d45545359534255 x16: 5300306578722f64 x15: 0000000000000001 [ 89.860277][ T7427] x14: 000000000074e71a x13: 0000000000000001 x12: 0000000000000000 [ 89.862174][ T7427] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 [ 89.863996][ T7427] x8 : ffff80009a02a000 x7 : 0000000000000000 x6 : 0000000000000000 [ 89.865916][ T7427] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000843e0a2c [ 89.867737][ T7427] x2 : 0000000000000002 x1 : ffff000108658000 x0 : 0000000000000001 [ 89.869663][ T7427] Call trace: [ 89.870419][ T7427] rxe_pool_cleanup+0x58/0x60 (P) [ 89.871559][ T7427] rxe_dealloc+0x30/0xd0 [ 89.872575][ T7427] ib_dealloc_device+0x50/0x1e0 [ 89.873635][ T7427] __ib_unregister_device+0x2bc/0x33c [ 89.874844][ T7427] ib_unregister_device_and_put+0x5c/0x80 [ 89.876133][ T7427] nldev_dellink+0x330/0x374 [ 89.877089][ T7427] rdma_nl_rcv+0x4f0/0x814 [ 89.878104][ T7427] netlink_unicast+0x600/0x7f8 [ 89.879174][ T7427] netlink_sendmsg+0x648/0x948 [ 89.880264][ T7427] __sock_sendmsg+0xc8/0x17c [ 89.881316][ T7427] ____sys_sendmsg+0x3d0/0x6c8 [ 89.882418][ T7427] ___sys_sendmsg+0x198/0x224 [ 89.883461][ T7427] __sys_sendmsg+0x158/0x204 [ 89.884457][ T7427] __arm64_sys_sendmsg+0x88/0x9c [ 89.885555][ T7427] invoke_syscall+0x98/0x244 [ 89.886574][ T7427] el0_svc_common+0xec/0x23c [ 89.887655][ T7427] do_el0_svc+0x4c/0x5c [ 89.888600][ T7427] el0_svc+0x60/0x1d8 [ 89.889464][ T7427] el0t_64_sync_handler+0x44/0x104 [ 89.890603][ T7427] el0t_64_sync+0x198/0x19c [ 89.891642][ T7427] irq event stamp: 270004 [ 89.892642][ T7427] hardirqs last enabled at (270003): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 89.895092][ T7427] hardirqs last disabled at (270004): [] el1_brk64+0x20/0x54 [ 89.897154][ T7427] softirqs last enabled at (269890): [] __alloc_skb+0x1c0/0x610 [ 89.899287][ T7427] softirqs last disabled at (269886): [] __alloc_skb+0x1a8/0x610 [ 89.901477][ T7427] ---[ end trace 0000000000000000 ]--- [ 89.903905][ T7427] ------------[ cut here ]------------ [ 89.903911][ T7427] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x58/0x60, CPU#0: syz.6.476/7427 [ 89.907021][ T7427] Modules linked in: [ 89.907801][ T7427] CPU: 0 UID: 0 PID: 7427 Comm: syz.6.476 Tainted: G W syzkaller #0 PREEMPT [ 89.909944][ T7427] Tainted: [W]=WARN [ 89.910776][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 89.912900][ T7427] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 89.914512][ T7427] pc : rxe_pool_cleanup+0x58/0x60 [ 89.915552][ T7427] lr : rxe_pool_cleanup+0x58/0x60 [ 89.916577][ T7427] sp : ffff8000945a6f40 [ 89.917439][ T7427] x29: ffff8000945a6f40 x28: dfff800000000000 x27: ffff0000f1da6706 [ 89.919126][ T7427] x26: dfff800000000000 x25: ffff0000d64d5148 x24: dfff800000000000 [ 89.920764][ T7427] x23: 1fffe0001ac9a9f9 x22: ffff0000d64d4fc8 x21: dfff800000000000 [ 89.922492][ T7427] x20: ffff80008455fca0 x19: ffff0000d64d5760 x18: 00000000ffffffff [ 89.924213][ T7427] x17: 4d45545359534255 x16: 5300306578722f64 x15: 0000000000000001 [ 89.925977][ T7427] x14: 000000000074e71a x13: 0000000000000001 x12: 0000000000000000 [ 89.927681][ T7427] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 [ 89.929482][ T7427] x8 : ffff80009a02a000 x7 : 0000000000000000 x6 : 0000000000000000 [ 89.931296][ T7427] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000843e0a2c [ 89.933102][ T7427] x2 : 0000000000000002 x1 : ffff000108658000 x0 : 0000000000000001 [ 89.934956][ T7427] Call trace: [ 89.935671][ T7427] rxe_pool_cleanup+0x58/0x60 (P) [ 89.936837][ T7427] rxe_dealloc+0x6c/0xd0 [ 89.937788][ T7427] ib_dealloc_device+0x50/0x1e0 [ 89.938858][ T7427] __ib_unregister_device+0x2bc/0x33c [ 89.940110][ T7427] ib_unregister_device_and_put+0x5c/0x80 [ 89.941407][ T7427] nldev_dellink+0x330/0x374 [ 89.942485][ T7427] rdma_nl_rcv+0x4f0/0x814 [ 89.943513][ T7427] netlink_unicast+0x600/0x7f8 [ 89.944534][ T7427] netlink_sendmsg+0x648/0x948 [ 89.945575][ T7427] __sock_sendmsg+0xc8/0x17c [ 89.946498][ T7427] ____sys_sendmsg+0x3d0/0x6c8 [ 89.947469][ T7427] ___sys_sendmsg+0x198/0x224 [ 89.948470][ T7427] __sys_sendmsg+0x158/0x204 [ 89.949482][ T7427] __arm64_sys_sendmsg+0x88/0x9c [ 89.950586][ T7427] invoke_syscall+0x98/0x244 [ 89.951603][ T7427] el0_svc_common+0xec/0x23c [ 89.952614][ T7427] do_el0_svc+0x4c/0x5c [ 89.953493][ T7427] el0_svc+0x60/0x1d8 [ 89.954375][ T7427] el0t_64_sync_handler+0x44/0x104 [ 89.955508][ T7427] el0t_64_sync+0x198/0x19c [ 89.956475][ T7427] irq event stamp: 270698 [ 89.957381][ T7427] hardirqs last enabled at (270697): [] __arm64_exit_to_kernel_mode+0x70/0xcc [ 89.959687][ T7427] hardirqs last disabled at (270698): [] el1_brk64+0x20/0x54 [ 89.961638][ T7427] softirqs last enabled at (270696): [] handle_softirqs+0xb2c/0xcbc [ 89.963711][ T7427] softirqs last disabled at (270007): [] __do_softirq+0x14/0x20 [ 89.965549][ T7427] ---[ end trace 0000000000000000 ]--- [ 89.967680][ T7427] ------------[ cut here ]------------ [ 89.967686][ T7427] WARNING: drivers/infiniband/core/restrack.c:52 at rdma_restrack_clean+0xa4/0xd4, CPU#0: syz.6.476/7427 [ 89.970897][ T7427] Modules linked in: [ 89.971608][ T7427] CPU: 0 UID: 0 PID: 7427 Comm: syz.6.476 Tainted: G W syzkaller #0 PREEMPT [ 89.973554][ T7427] Tainted: [W]=WARN [ 89.974371][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 89.976438][ T7427] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 89.978004][ T7427] pc : rdma_restrack_clean+0xa4/0xd4 [ 89.979121][ T7427] lr : rdma_restrack_clean+0xa4/0xd4 [ 89.980230][ T7427] sp : ffff8000945a6f30 [ 89.981109][ T7427] x29: ffff8000945a6f30 x28: dfff800000000000 x27: ffff0000f1da6706 [ 89.982885][ T7427] x26: dfff800000000000 x25: ffff0000d50d4000 x24: ffff0000d50d4048 [ 89.984681][ T7427] x23: 0000000000000048 x22: 1fffe0001ac9a9e2 x21: dfff800000000000 [ 89.986472][ T7427] x20: ffff0000d50d4000 x19: ffff0000d64d4f10 x18: 00000000ffffffff [ 89.988266][ T7427] x17: 4d45545359534255 x16: 5300306578722f64 x15: 0000000000000001 [ 89.989934][ T7427] x14: 000000000074ec46 x13: 0000000000000001 x12: 0000000000000000 [ 89.991647][ T7427] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 [ 89.993457][ T7427] x8 : ffff80009a02a000 x7 : 0000000000000000 x6 : 0000000000000000 [ 89.995237][ T7427] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000843deed0 [ 89.996979][ T7427] x2 : 0000000000000000 x1 : ffff000108658000 x0 : 0000000000000001 [ 89.998683][ T7427] Call trace: [ 89.999414][ T7427] rdma_restrack_clean+0xa4/0xd4 (P) [ 90.000607][ T7427] ib_dealloc_device+0x14c/0x1e0 [ 90.001744][ T7427] __ib_unregister_device+0x2bc/0x33c [ 90.003000][ T7427] ib_unregister_device_and_put+0x5c/0x80 [ 90.004221][ T7427] nldev_dellink+0x330/0x374 [ 90.005165][ T7427] rdma_nl_rcv+0x4f0/0x814 [ 90.006208][ T7427] netlink_unicast+0x600/0x7f8 [ 90.007341][ T7427] netlink_sendmsg+0x648/0x948 [ 90.008479][ T7427] __sock_sendmsg+0xc8/0x17c [ 90.009557][ T7427] ____sys_sendmsg+0x3d0/0x6c8 [ 90.010602][ T7427] ___sys_sendmsg+0x198/0x224 [ 90.011617][ T7427] __sys_sendmsg+0x158/0x204 [ 90.012615][ T7427] __arm64_sys_sendmsg+0x88/0x9c [ 90.013690][ T7427] invoke_syscall+0x98/0x244 [ 90.014749][ T7427] el0_svc_common+0xec/0x23c [ 90.015816][ T7427] do_el0_svc+0x4c/0x5c [ 90.016707][ T7427] el0_svc+0x60/0x1d8 [ 90.017596][ T7427] el0t_64_sync_handler+0x44/0x104 [ 90.018670][ T7427] el0t_64_sync+0x198/0x19c [ 90.019671][ T7427] irq event stamp: 271050 [ 90.020649][ T7427] hardirqs last enabled at (271049): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 90.023020][ T7427] hardirqs last disabled at (271050): [] el1_brk64+0x20/0x54 [ 90.024931][ T7427] softirqs last enabled at (271046): [] handle_softirqs+0xb2c/0xcbc [ 90.027049][ T7427] softirqs last disabled at (270701): [] __do_softirq+0x14/0x20 [ 90.029066][ T7427] ---[ end trace 0000000000000000 ]--- [ 90.219322][ T281] ================================================================== [ 90.219334][ T281] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x48/0x60 [ 90.219350][ T281] Read of size 1 at addr ffff0000d50d4018 by task kworker/u8:6/281 [ 90.219358][ T281] [ 90.219364][ T281] CPU: 0 UID: 0 PID: 281 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT [ 90.219375][ T281] Tainted: [W]=WARN [ 90.219378][ T281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 90.219383][ T281] Workqueue: krdsd rds_ib_dev_free [ 90.219400][ T281] dump_backtrace(regs = 0000000000000000 tsk = 0000000000000000) [ 90.219407][ T281] Call trace: [ 90.219409][ T281] show_stack+0x2c/0x3c (C) [ 90.219420][ T281] __dump_stack+0x30/0x40 [ 90.219430][ T281] dump_stack_lvl+0xd8/0x12c [ 90.219437][ T281] print_address_description+0xb0/0x238 [ 90.219448][ T281] print_report+0x68/0x84 [ 90.219456][ T281] kasan_report+0x8c/0xc4 [ 90.219467][ T281] __kasan_check_byte+0x3c/0x54 [ 90.219476][ T281] lock_acquire+0xa4/0x320 [ 90.219486][ T281] _raw_spin_lock+0x48/0x60 [ 90.219494][ T281] restrack_drain_res+0xa8/0x14c [ 90.219505][ T281] rdma_restrack_begin_del+0x8c/0xd8 [ 90.219514][ T281] ib_dealloc_pd_user+0x38/0x178 [ 90.219523][ T281] rds_ib_dev_free+0xc0/0x27c [ 90.219532][ T281] process_scheduled_works+0x91c/0x1250 [ 90.219543][ T281] worker_thread+0x798/0xbd0 [ 90.219553][ T281] kthread+0x304/0x3d4 [ 90.219562][ T281] ret_from_fork+0x10/0x20 [ 90.219571][ T281] [ 90.219573][ T281] Allocated by task 4736: [ 90.219577][ T281] kasan_save_track+0x40/0x78 [ 90.219593][ T281] kasan_save_alloc_info+0x40/0x50 [ 90.219603][ T281] __kasan_kmalloc+0x9c/0xb4 [ 90.219611][ T281] __kmalloc_cache_noprof+0x2f4/0x5fc [ 90.219619][ T281] rdma_restrack_init+0x60/0x154 [ 90.219627][ T281] _ib_alloc_device+0x58/0x4c8 [ 90.219636][ T281] rxe_net_add+0x30/0x114 [ 90.219646][ T281] rxe_newlink+0x114/0x1c0 [ 90.219652][ T281] nldev_newlink+0x47c/0x4f4 [ 90.219659][ T281] rdma_nl_rcv+0x4f0/0x814 [ 90.219665][ T281] netlink_unicast+0x600/0x7f8 [ 90.219674][ T281] netlink_sendmsg+0x648/0x948 [ 90.219683][ T281] __sock_sendmsg+0xc8/0x17c [ 90.219691][ T281] __sys_sendto+0x250/0x328 [ 90.219698][ T281] __arm64_sys_sendto+0xec/0x10c [ 90.219706][ T281] invoke_syscall+0x98/0x244 [ 90.219713][ T281] el0_svc_common+0xec/0x23c [ 90.219719][ T281] do_el0_svc+0x4c/0x5c [ 90.219725][ T281] el0_svc+0x60/0x1d8 [ 90.219731][ T281] el0t_64_sync_handler+0x44/0x104 [ 90.219737][ T281] el0t_64_sync+0x198/0x19c [ 90.219744][ T281] [ 90.219745][ T281] Freed by task 7427: [ 90.219749][ T281] kasan_save_track+0x40/0x78 [ 90.219756][ T281] kasan_save_free_info+0x54/0x6c [ 90.219774][ T281] __kasan_slab_free+0x74/0xa4 [ 90.219782][ T281] kfree+0x188/0x658 [ 90.219789][ T281] rdma_restrack_clean+0xb8/0xd4 [ 90.219796][ T281] ib_dealloc_device+0x14c/0x1e0 [ 90.219805][ T281] __ib_unregister_device+0x2bc/0x33c [ 90.219813][ T281] ib_unregister_device_and_put+0x5c/0x80 [ 90.219822][ T281] nldev_dellink+0x330/0x374 [ 90.219828][ T281] rdma_nl_rcv+0x4f0/0x814 [ 90.219835][ T281] netlink_unicast+0x600/0x7f8 [ 90.219843][ T281] netlink_sendmsg+0x648/0x948 [ 90.219851][ T281] __sock_sendmsg+0xc8/0x17c [ 90.219858][ T281] ____sys_sendmsg+0x3d0/0x6c8 [ 90.219866][ T281] ___sys_sendmsg+0x198/0x224 [ 90.219874][ T281] __sys_sendmsg+0x158/0x204 [ 90.219882][ T281] __arm64_sys_sendmsg+0x88/0x9c [ 90.219891][ T281] invoke_syscall+0x98/0x244 [ 90.219897][ T281] el0_svc_common+0xec/0x23c [ 90.219903][ T281] do_el0_svc+0x4c/0x5c [ 90.219908][ T281] el0_svc+0x60/0x1d8 [ 90.219914][ T281] el0t_64_sync_handler+0x44/0x104 [ 90.219919][ T281] el0t_64_sync+0x198/0x19c [ 90.219925][ T281] [ 90.219927][ T281] The buggy address belongs to the object at ffff0000d50d4000 [ 90.219927][ T281] which belongs to the cache kmalloc-1k of size 1024 [ 90.219933][ T281] The buggy address is located 24 bytes inside of [ 90.219933][ T281] freed 1024-byte region [ffff0000d50d4000, ffff0000d50d4400) [ 90.219941][ T281] [ 90.219943][ T281] The buggy address belongs to the physical page: [ 90.219947][ T281] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1150d0 [ 90.219954][ T281] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 90.219961][ T281] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 90.219969][ T281] page_type: f5(slab) [ 90.219975][ T281] raw: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122 [ 90.219982][ T281] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 90.219988][ T281] head: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122 [ 90.219994][ T281] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 90.220000][ T281] head: 05ffc00000000003 fffffdffc3543401 00000000ffffffff 00000000ffffffff [ 90.220006][ T281] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 90.220010][ T281] page dumped because: kasan: bad access detected [ 90.220013][ T281] [ 90.220015][ T281] Memory state around the buggy address: [ 90.220019][ T281] ffff0000d50d3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.220023][ T281] ffff0000d50d3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.220028][ T281] >ffff0000d50d4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.220032][ T281] ^ [ 90.220035][ T281] ffff0000d50d4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.220040][ T281] ffff0000d50d4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.220044][ T281] ================================================================== [ 90.220068][ T281] Disabling lock debugging due to kernel taint [ 90.220190][ T281] ------------[ cut here ]------------ [ 90.220195][ T281] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.h:68:9 [ 90.220203][ T281] index 12500 is out of range for type 'unsigned long[8]' [ 90.220210][ T281] CPU: 0 UID: 0 PID: 281 Comm: kworker/u8:6 Tainted: G B W syzkaller #0 PREEMPT [ 90.220220][ T281] Tainted: [B]=BAD_PAGE, [W]=WARN [ 90.220223][ T281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 90.220227][ T281] Workqueue: krdsd rds_ib_dev_free [ 90.220236][ T281] dump_backtrace(regs = 0000000000000000 tsk = 0000000000000000) [ 90.220241][ T281] Call trace: [ 90.220244][ T281] show_stack+0x2c/0x3c (C) [ 90.220252][ T281] __dump_stack+0x30/0x40 [ 90.220259][ T281] dump_stack_lvl+0xd8/0x12c [ 90.220266][ T281] dump_stack+0x1c/0x28 [ 90.220273][ T281] ubsan_epilogue+0x14/0x48 [ 90.220282][ T281] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 90.220292][ T281] queued_spin_lock_slowpath+0x834/0xb5c [ 90.220300][ T281] do_raw_spin_lock+0x21c/0x2d0 [ 90.220310][ T281] _raw_spin_lock+0x50/0x60 [ 90.220317][ T281] restrack_drain_res+0xa8/0x14c [ 90.220326][ T281] rdma_restrack_begin_del+0x8c/0xd8 [ 90.220335][ T281] ib_dealloc_pd_user+0x38/0x178 [ 90.220343][ T281] rds_ib_dev_free+0xc0/0x27c [ 90.220352][ T281] process_scheduled_works+0x91c/0x1250 [ 90.220361][ T281] worker_thread+0x798/0xbd0 [ 90.220371][ T281] kthread+0x304/0x3d4 [ 90.220380][ T281] ret_from_fork+0x10/0x20 [ 90.220388][ T281] ---[ end trace ]--- [ 90.220402][ T281] Unable to handle kernel paging request at virtual address ffff8000897ba140 [ 90.220407][ T281] KASAN: probably user-memory-access in range [0x000000044bdd0a00-0x000000044bdd0a07] [ 90.220413][ T281] Mem abort info: [ 90.220416][ T281] ESR = 0x0000000096000047 [ 90.220420][ T281] EC = 0x25: DABT (current EL), IL = 32 bits [ 90.220425][ T281] SET = 0, FnV = 0 [ 90.220429][ T281] EA = 0, S1PTW = 0 [ 90.220432][ T281] FSC = 0x07: level 3 translation fault [ 90.220437][ T281] Data abort info: [ 90.220439][ T281] ISV = 0, ISS = 0x00000047, ISS2 = 0x00000000 [ 90.220444][ T281] CM = 0, WnR = 1, TnD = 0, TagAccess = 0 [ 90.220449][ T281] GCS = 0, Overlay = 0, DirtyBit = 0 [ 90.220454][ T281] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000219508000 [ 90.220460][ T281] [ffff8000897ba140] pgd=0000000000000000, p4d=100000021f82f003, pud=100000021f830003, pmd=100000021f834003, pte=0000000000000000 [ 90.220478][ T281] Internal error: Oops: 0000000096000047 [#1] SMP [ 90.390738][ T281] Modules linked in: [ 90.391529][ T281] CPU: 0 UID: 0 PID: 281 Comm: kworker/u8:6 Tainted: G B W syzkaller #0 PREEMPT [ 90.393920][ T281] Tainted: [B]=BAD_PAGE, [W]=WARN [ 90.395042][ T281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 90.397342][ T281] Workqueue: krdsd rds_ib_dev_free [ 90.398528][ T281] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 90.400263][ T281] pc : queued_spin_lock_slowpath+0x544/0xb5c [ 90.401607][ T281] lr : queued_spin_lock_slowpath+0x834/0xb5c [ 90.402903][ T281] sp : ffff800093797840 [ 90.403789][ T281] x29: ffff8000937978e0 x28: 1fffe000359ed028 x27: 1fffe00018b69762 [ 90.405569][ T281] x26: ffff0001acf68148 x25: ffff8000897ba140 x24: dfff800000000000 [ 90.407358][ T281] x23: ffff7000126f2f0c x22: 1fffe0001aa1a800 x21: ffff0001acf68140 [ 90.409147][ T281] x20: ffff0000c5b4bb10 x19: ffff0000d50d4000 x18: 00000000ffffffff [ 90.410931][ T281] x17: 363a682e6b636f6c x16: 0000000000000001 x15: 0000000000000000 [ 90.412672][ T281] x14: 0000000000006b48 x13: 0000000000000001 x12: 0000000000000004 [ 90.414433][ T281] x11: ffff700011604e68 x10: ffff8000897ba140 x9 : ffff8000897ba140 [ 90.416170][ T281] x8 : 0000000000000000 x7 : 0000000000000000 x6 : ffff800080484084 [ 90.417931][ T281] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f41d4 [ 90.419713][ T281] x2 : 0000000000000005 x1 : 0000000000000004 x0 : ffff0001acf68148 [ 90.421543][ T281] dump_backtrace(regs = 00000000fa794024 tsk = 0000000000000000) [ 90.423325][ T281] Call trace: [ 90.424113][ T281] queued_spin_lock_slowpath+0x544/0xb5c (P) [ 90.425490][ T281] do_raw_spin_lock+0x21c/0x2d0 [ 90.426663][ T281] _raw_spin_lock+0x50/0x60 [ 90.427709][ T281] restrack_drain_res+0xa8/0x14c [ 90.428850][ T281] rdma_restrack_begin_del+0x8c/0xd8 [ 90.429979][ T281] ib_dealloc_pd_user+0x38/0x178 [ 90.431078][ T281] rds_ib_dev_free+0xc0/0x27c [ 90.432087][ T281] process_scheduled_works+0x91c/0x1250 [ 90.433273][ T281] worker_thread+0x798/0xbd0 [ 90.434218][ T281] kthread+0x304/0x3d4 [ 90.435047][ T281] ret_from_fork+0x10/0x20 [ 90.435981][ T281] Code: aa1903e0 968adf85 910022a0 52800081 (f9000335) [ 90.437545][ T281] ---[ end trace 0000000000000000 ]--- [ 91.095036][ T281] Kernel panic - not syncing: Oops: Fatal exception [ 91.096563][ T281] Kernel Offset: disabled [ 91.097559][ T281] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 91.099022][ T281] Memory Limit: none [ 91.755539][ T281] Rebooting in 86400 seconds..