last executing test programs: 57.587918921s ago: executing program 2 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f203020312031") 57.475683238s ago: executing program 2 (id=464): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) fcntl$setown(r0, 0x8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x40085500, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003"], 0x44}}, 0x20008004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x14, r7, 0x301, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r10, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf0, r7, 0x201, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000411}, 0x20040000) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@delneigh={0x1c, 0x1d, 0x2, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x0, r4, 0x40, 0x41}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004050}, 0x40046) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x11}, &(0x7f0000001400)=0x0) timer_settime(r12, 0x1, &(0x7f0000000200)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 56.585388154s ago: executing program 1 (id=473): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}, 0x2000000}], 0x40001b6, 0xf5) 56.495973802s ago: executing program 2 (id=474): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x16f0d8, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x10dcd8, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000c80)={[{@nodioread_nolock}, {@dioread_lock}, {@nolazytime}, {@nojournal_checksum}, {@resgid}, {@acl}, {@barrier}], [{@uid_lt}, {@dont_appraise}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, 'nodioread_nolockt\xf8\r\x12\xaf1\xa7x\xa5\xc8g\x027{\x16\xbd\xb9\xda\r\xa6\xdaZ\xdd\xdc\x9b\xa3\x87`\xff\x0fn/y+\x12\xc1\\\x84aw\x86o\x18\x1d\x97P\xaem\xd9\xecS}\x06]\x9b\')\xa2#h7gX\x8a\x00G\x86\x03|\nF\xb27\x16\x7f\x8e\xfe\xee\xd6\xe5\xf0Ae\x86|]yn> \xff\xb8\x84\xb6P\xe0\x18B\xaaF0\v\x97\xeb~%Z!\xafnB\xf9\xae8h\x1c\xaaM\x9d\xcab\a3E\xb7\xdb\xbc@D\xf7\xef\xe4|\xcc34\xae\xcf\x1c\xb4w\xb3\x1d7\xc6\x97\xf2Vt\xd6\xe5D*>\xcf!\xca\xcb\x82_\x1fo\xe1\xcb\x197\xe0\x83\x9d\\\xd4\xc7ey\xa7\xc4\xb4\x82\xa6\x04R\xffkY\x81[\x1d\xe9\xe2\x9f\x8ck\xeb\x13\x1f\x95\'\xed\x9c\x1d\xe3\x81?\x18\xb0\x9aq^\xef\x9bECw\xcd\x1b\xb0Y,\xa8\xc1E}y\bfX\x0e\x8bm\xa9\x84|\b'}}, {@permit_directio}]}, 0x0, 0x47f, &(0x7f0000000680)="$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") mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfe, 0x57b, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x10, 0x25, 0x1, 0xfffffffd, 0x3}) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 56.427306673s ago: executing program 1 (id=476): r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) fsmount(r1, 0x0, 0xf) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 56.308109991s ago: executing program 2 (id=478): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@getnexthop={0x20, 0x76, 0xb0d, 0x70bd2d, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0xd90, r0, 0x2}) ioctl$DVB_DEMUX_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f00000000c0)={0x9, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073114d00000000008510000002000000b7000000000000009500c200000000009500001200000000d920ad44e733c3e53fce78ae8cff77962124670f71672c439edfb6059f26e70b961ac33c4e3104be9c343d48371b9760bf3950a88ffb347403a75d9f6edbbfaa98df3c222731c27a1b00732632d4fe26d93e08d992e9d6c817be5edaff42061df3cb706aa0f4d0817216cf79e17c8f2361445f12ed0f7439f6"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x1d}, 0x1, 0x0, 0x0, 0x4000}, 0x24084000) 56.305937085s ago: executing program 1 (id=479): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="24020000", @ANYRESDEC=r3, @ANYBLOB="05000000000008000000064397a1d18f5f5600e4e0c5486d2c279fd17d2e19000000004be2e5399aa0fc2ef201e866c182b8a1f0eb4c75792221171c2bab55bfc65759081a3a145a9f904b8a4d8e022d9da6f51ca601c1519f6fafe0ed440af82c2df0bc01d58da9cad7bacaf1f791403674283d37aa36647186d822b80d593d052c6081c847fce1f568941686e38c81cf5d18ff0a54a5a7cb3038e5be61893a82f095533f8a616c5330c9", @ANYRES32=r2, @ANYRESOCT=0x0], 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf60f, 0x14}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x1ba176a2081c3027}, 0x20000040) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r6, 0x4b72, &(0x7f0000000700)={0x5, 0x2, 0x0, 0x0, 0xb, "f6ff00"}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r0, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x20004056) 56.182576347s ago: executing program 1 (id=484): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) clock_getres(0x1, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 56.095922578s ago: executing program 1 (id=487): r0 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x111) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x7, 0x200001ff, 0xfffffffffffffffd}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000500)=0x1) 55.971477165s ago: executing program 2 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f") 55.85668752s ago: executing program 32 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f") 55.824376773s ago: executing program 1 (id=493): r0 = syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x216, &(0x7f0000001480)="$eJzsVU1rE0EYfmYzm200h4I3rwbTi9psQTx7sRdP+gMM6VqLiR+dFE0ouHrpRUH8EwX/hB4EPetBRPCiBwt6qHiKyMo7885kkyxtYtPbPBDeZ97vfTMft9R9FQH4u7/dwiI0BKr4LAQkgLowukHZyF8sM8Z3adYN1r9k+Y2l6vU/PDW0f7vZbiebqncwiSCAQ3xGyaTq8qtnp6aPHyPvnoxqBKaJEvJ/ah2NdEtmspOm5yOaqMiHYzGeuXFt5n4y28csUSGOPITKRPOW/K4Cec3eHCcf0peGKPQRYqa9XkAogSYYzudPdfJvGiefXpjKhT4lDq9gdCyHEjrFB/psFW6/uRO6izQJZgpX4P9DXXkc4KcAQnzc326R9gbfYmReMz97JHQULd7kfE5LIAVECZlOSnkk+9aBQdbt3Lugev1zG53merKe3InjlYvLb0/y0cgeARvtZFnoNkx4QETCgc5pJWennfZlaE8B7NXfX3Ut2tZA3zXs3KW0l/PSmZxLBQi0o3AXOXIQeO3qR6zbUh1cx1ksAHiQkjnmAdVA2SRu0qetQqDEi4bMN4QBAixow/nW3fbaji7PYbuQLkfjK0K3iHlBhZKVS6ltcYdljeUqy91hPQ37dtk3SeoMP3i1lAJlPGx2u5v68TKMdGWXQeviRVc54Kr2NbTFahGmxIlpHT08PDw8PDw8jgn/AgAA//99GTit") name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000000000), 0x0) (async) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) (async) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) (async) r2 = syz_open_pts(r1, 0x0) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rxrpc/conns\x00', 0x0, 0x0) read(r5, &(0x7f0000000280)=""/26, 0x1a) (async) read$FUSE(r5, &(0x7f0000002f40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000006fc0)={r8, 0x0, 0x7e, 0xc, &(0x7f00000005c0)="e77ac065e766ac26eb467b7553123e154797a51008a53c21aca119883166ad3b70e5c09bcadb92f64adb9d32663ea993caf5acf188c034453814b5e57e275505e1ae91cbe8ee14f8bb4aae72a322d7e475b3a039a3193fe303e07371c2edf3375ebd6a376f4502a3db604ddcbf70eef60cac5986030b4a2f620869cf13b8", &(0x7f0000000640)=""/12, 0x0, 0x0, 0xfb, 0x1000, &(0x7f0000000680)="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", &(0x7f0000005fc0)="86081c465b5c7736e69140cdf4bc27fc64e87f6c9b064805649931f821d5b884f7dbb59b1ed2b5aa62f17035f78d3bb3160902e3d3663cd7bc9860f417b3d502a4ac1c62dbcbbdc4022b0c19e01741154707d7bebcde22445e42b3da8a6142c5550c53c8c67bf5407882d19d84d32ed88abc941941853ff6e86c4a28664fffbb4d0e9770dcf978f06da2d5d8407c93499e1f825bcd80a95467c854f33b33cd8fc3473b648c7a10223de6f57624cb1a419c25a71d14d687df2b7fd4de4a12d84235514f374e7aa26581a96d088e16cf187297c6177b1116518bf5711cd25a38d2c12eedcc81b9684cb6633ac4d72206b788ecdb8c104592cdb33b036ef223a179e38aca08f052698eb249195c4deb20e355be1dd12bda84cd3bc83fd298dcaa3cf520322ddf3f2820eada4cd232c5eef767fbbb280de0bfa8e1c1afdb6c66d33d57f2694fbf92d62acec845ba7a1abe1f3207b48532ee83719d0feefb5019770810fd2f0bb173b7aac41d4441b36bcbabd99f490a9314d7a77fd3d0e8e6d3ccd65df03c2a8a02c8f72e10ed8901fc7284ddada89584011a32066b5f4fe308fab0f0a262b6a19344fbe1dcdb80af8e21a75fba42d5801a54aa8a50f4a27d0ed99c8f9251faf95bf0a9538afd4ac336b7eb0a0cbf68eca644366a0b8775f05a94ed9e837251fa77723a94ef8eec569e5e97520ac17354598f5bf75a2795bbe6e433af9472ca30f03f7dc2bb98ae408f41579dafeaae7ae5d3623d6166863c054ef1c52d1934c8f3e692c39735b1a4be78ede2472c9983ece044c309a16633ad2b2e31db83cf552d598bc78f1908a05354132cc2af547ba4b1554e7e24a81b2a2a44284e4d10e1a9246a02dedce3b77716dcf08f69cb12fa791b43f51665176cefc2868e3b68dc48be3998ef08c8762187e2df60d30f91c6da84908f04043cd6fe1631f910836042c51c5d12844066241d41b8c8611e95c4d8a33e95b666e1f25377b4b3820850765acc2c5bee7876ace7635923ac92803852d9159eb2649ac2f104f9a27d9c626496b1d93fe3c8f183a3330d21de3fd2a4ccd902e8e2ca1f242d21df8d6e4dee647ccc41ecd04c61d627805957b186a0b8d06bfc969ae2c019d177a9ede638291d4b550bab69f59d0b1ec0898b459446de45718835b4070cdc90391ccf13ad53ec3896a7fdcd78893965b31b0c689414e7fa0dc7cbfe0b2b42cd379ef6caa0a7e432639f68db71943b0e7f03452079ea6576603242b074c061b30bfc22bd480a3a1a63f590c7492a066357be41b748489cf1a0fb48ca742e495fded449b092a168f1a84cd6497f1ffbf6301de57e4271e4b4632b4c0ed459de2c2e3ee8d313924d6f9cc182d76ad2ac9d2c16fdbd161c271dd99ffc44d44c42824453954e3795483080e90328b3600c47cfb2a137029d7d979c1c388fc6d0ec3494d66fd880d317a0adb6de69925841cc8ddc2163ef67420e061c358f4e5b3a72b613ab51abe2916224f5fae15d197805dc846956d3de6d54b6609320594f32f9bc43fbdd3f0cb919da6116220aa56a74e244dd436707e24830f1cf93895e6e6d15488dd799855465bcc9607a3f9a6d9a6be689a545857a4770c405ef1777e22dd3ad1c7ae86dd1f83af767f35532384f965229bc4134eb7edd6c96f6faf75534953341110c75a228b93014506bc8825d8ba1849d2b3653be4027707f64a949401e7f6bf560eb954eb741072fc64c6fba1dbea8b3e60d0b68b392d8e7eed6c26f23bb5265995fdb61b6c9a7c4baf5d32462a427a4e0fd70ccc110ed07658a5f2379c9c22497446399f4afa179f6ebee2ded5c388e6e44abbade436c454a84abb881405e29b365c20e3b620aae06fa429eccdac03ed1e4346a77c3a85e7b200b7dfe7e0106b938751f2df5445b12ddf26507de223bafe4d8921cc244e1412fd38c5370b32a31cc84ae891dc21bf55f86eec66cf913785155c0625363423b586ce54458ccc1cf63d1d0521b2efb8c2395a3b65ef3b1c0c7b343806fab6fff32c2726b6666d70f2e6d8126db3a0f80345c094fa29bd526f46fafef842e1f7cad95bafc826b24451069b65da802e213a0b7c943639fe5e0c661f580f9f27bef28007bb63f7bf0be20276e5e43592111f43a192d65729aae36517c5cfe931cf30455b1f9ab55b94648ef181998596d2761808f405f4804967bf9c7c541be75d3d4181d6cd5304b20bbb4487c601ad617f721d8cf7ffe7546db839bad38a6defa487d87f26128f7d41915b5537aeb5cbf8868da2fa0b504a436cf123c66850b2cfe12873b77b7a20ec6848649fb2cd63982fc616874d3a39274db8acbbfac10772fd23d0272bda5f609b379b65c34c05cb45d486aaeaea0a03db78731e63b884abe1d52e7b23c32be79e18da49691b6156aa6a5b648a9cedef1769d72f56fc36deea17151dd79345b7b592c784fff6dbaea4800a08528b1aac057da7b6397195af6ce8b7660dd8752b1be9bede8ed48ae287796cee0fbbd25a99f05dbf53954186729cf4d6f767f0f515e0aac704fffe47662e1537e4980f099072f408a17be1771a19e0fac55a8f02bcab008cd7184c2438e35db148916582b2467da544808acd967459321e498d4223c396455fd61d4cd6ddf2c190609f544e6d6c5418251e61eabe1a3f1c44d4807cfc4c2dddf7bf61b2c00e3730525e7ba8162cab540775be53b7da2c79e8709548216edd56db30bb9ce9e17c2b08e892b732b3c5ebbb0e067315cc66cb467d8165ce47d76424d663d23243009edeb17970cfd50e878d3e6e9f6fa166a73db9a62a0ffba34116423f4dd68de4bf1f186b03bbb7fdb923ac627cf8c596d47f8147c90aaf5a95e243def9984ea69129e4f05f43e0b9958ed7a719ae3fd34b70beb922bc5e01504ba8874717971e8459d747f004e8fda90ccad7a305e64bea38e905a5064d8426d2a5fcf3ae402ae91356f51214aaafb4861adc2be457556054737809a83aa33765afde7f395ab06bb93ce259e9938f871f1662a7f678b81d34d51e45dff6e1faeaab267aeec40ebf65ac842ce95058053b24f0e3899d514bf25e19b02fec3e48c586e7dbd0afca03ce5628cf0304e94b467fb8940c00040b984a89ee0c6a628ba7a38494161fc7c70589da729984b02816e4c79c45f9be7abfcb29b1e55f97cbfb156e34a5e6fe90d054f75ed6bbe67458894f531dfdb9bf0e7fa392af118b49cefee23703a3b070de735cb04c1903132a8e25b428037269cd018309399d59c506e572016512ca70295fc61309eba4fd972a92ae6c256eb1da018ceac799e8e484bb6f57ad1e38c6f4d4ee734cbc7705cc7212d5ab145e036e4e62eed0f339743f78924598c2570142af1d6857578e4888ec127b640042286cbe42c2f4a0a88f75667c80bd2e5d401c3e658139d8986dec61b5306bd989594e68692f3d762770515f5de4414ad5f2a17510502dc520bed3931d6c2512be13810079fc655864cf5893569696dd90749aec98e75a607297aa199e42ae552c1c9b9606d6beb762a7e788a7879a8d3a10d93b634fee80b39f31a969160ec250d701759d28cda412c1b5141629449a18b2a7a126d65674fd4657d56208036a6ef6ee6fe92b08238d27f98e6067f738a2411b467242de3814d7037574e1a2cbc9f829cf89c61ebd3cbb4fc678693c40e48dca351538a2b5530c90e738682d33e2a8584cadf922974259499b7bbb2441b577e85e9db6df8a98c85bd68240757c0dc7bffbd1c9c668b7d9e100332a1282949bffb4be57abf259b54a4d098266f918863921e37bdecdff6b03d955538086c2aca0438a8dd9dd3abd8b2d8b423b96bb2a66298ec88ac10c865eb20256b6d57e7750636a538ff4df83d5cb3b4d0f4eead549b92278de4c6b6d32c0847d06bd0491c92fb2f02716cc9ddcd87c2124fbc92c7ee2eb932c1cc97916297539c5d8d62f2d3a34903da6ef59317da822295895b10d218f3340b900a4e9dc698817cb316470c8d272bfb85b941cb11aa651b5b3621c44f867a266041ffc61aa2ad8916c9a4d212e5082053185448f298656e60ff2fd6dd7b45a3e0f120b832e3c0bddb4c12bb4fcea1235aa6ce76f4fa3ce96ab82896b57d744395f9fadcde7f7534fec3727861eeba56b664f0473beaf5f81346e9d7c9f75e184e6de60a9a4b690afc00d6b1795202845c3bbed26af0077de9a20eb13325b8113516a262d73240492a7fdd98381e62019098572712d7666f8fdeb3593365f04287454ea524be86b6c9f0713bf4a6c4176aa47dee800e046900652fa325ee0664e872dfd2abcbd7c0aee7a918f4309685cdbad1c33959a4c83fc572fa726a9e8a27647ec88044f0fc9cd309da608d993c340aabe781f17dd43d7ccfa879f913a1260331cb448a5338bc68c9d8f94d6e8560545b95577b8ed39787e1fea59ec0494c6e6a96aa87e107fa8b79414442e39577456e76d8b21a66ac4a32114d0050d9f5d93fb47d746dc60e7c6c90bbe361f6910530512bf8ab31d380606a15c2d98d226a6157ceceaf0440efea3a2b5423b349177c5a911c1fa8358185a0910c7c77aaf0d5768d1c3523d56828f88ca01e619dbad40a86df890126a57e9ab4d484ed7f2fa95a5ab4ff8fb84ed9fe3fae2516dddcea1f3d4b2e173f2d828f72b192a40e1be11344b8177193cb6a674b038bd910c125b787cf844273554942057ddda64e33a5f1e8a4c7fcafb4cca9a0ab69ec8264c0327d5139dea9f06e9c01ee725ff30737b32f525c4e1d590ecad77c6b806b04d1b88e56d910ca8357f7912b0f3a1df2b7f2e9f4d91b358a5a8448a9792e3ee0854519cd1c6b620a5d9135794d739fc6e3350e5a2fcd7df456c03879fcd59237a5505fe28fc8fc2f41bc16350ac23790cc4bf3d882c2fb785372501de32da676b354f0333c0f036fc6c7b670f703a46ad0ae3d51d9faf4473cd46e322fd71e7967ca70c905a0dbfdffde7500e4b45b9796b28afb1387c4991edf886f2b3a526f76e44550ac13d6a226a2f59dc77384c4e7846aa7562a1815dffce27436eee0cded4c034b360014a17d9d8c0414c0f0b223fceac719aec150ed8260677e6d3fa55ab8c84f1357da620eff0e91eef131d109e4f0040802ce1a2b6343c605dc0470f6b7c234bb5db34cfc33b9dee154f24ad67d84651688f7749c4b2827b1ddf5eeb6f04c8ebc18e1a884cdefe733a092bda9068909c9b93e6ce5be1fcfb5827d4bae65268b2e6c494d9cd0ba4c1a22d8c402e9dbb21b4b31c5073a0a84bb6b16922623c682ab1949dc76f8111067309c100d5ddbd13b369a7cb10b099a056e4913e0a96157b8864426598ad4bf0b25b15d2de43edd8f141c488dbac2d6f776b98ce9c1aa352de608250433a262fc4ea5b3c644b2f454ec03c0dd52f71951118a001e78a089508bac9db670085fece1dfb5437a69386e0c683c99093dab65b27bc4bda9dc73c93f5440eaa157e454fd9ce800b56cc8decca6b3614dae34a7cccd1cf047301f1b472f50aa9e15d56b14f7e5833a70d9a54e281db3483745b8f11517025e4c08a789dd41b6a1c905ceff109adf9f94148a6bcdae51257859d3b60453ef2758c2e773a9ad09e6ad912fa88ab5ffddb782d94bc65817744d25cc8526a97c9140b5c2e6cf89bc99661abfd85dce850f189f9ee0a3a461bea28b3fa6112256262bf83d9e41f80de784570da5342c48ee039025357b9be69104d1949d5c56ae8cc7cea68b435e04a3f0cc982e0685d7dd9a2cf8285e5b975451868fa3c55807b678ee04575c", 0x2, 0x0, 0x8}, 0x50) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) (async) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async) r11 = dup3(r2, r1, 0x0) read$FUSE(r11, &(0x7f0000003f80)={0x2020}, 0x2020) (async) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f0000000400)) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000200)='./proc\x00', &(0x7f0000000240), 0x1000a, &(0x7f00000004c0)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x1d000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize}, {@blksize}], [{@dont_appraise}, {@hash}, {@euid_gt={'euid>', r12}}, {@fsmagic={'fsmagic', 0x3d, 0x7fff}}, {@obj_role}]}}) 55.721151231s ago: executing program 33 (id=493): r0 = syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x216, &(0x7f0000001480)="$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") name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000000000), 0x0) (async) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) (async) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) (async) r2 = syz_open_pts(r1, 0x0) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rxrpc/conns\x00', 0x0, 0x0) read(r5, &(0x7f0000000280)=""/26, 0x1a) (async) read$FUSE(r5, &(0x7f0000002f40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000006fc0)={r8, 0x0, 0x7e, 0xc, &(0x7f00000005c0)="e77ac065e766ac26eb467b7553123e154797a51008a53c21aca119883166ad3b70e5c09bcadb92f64adb9d32663ea993caf5acf188c034453814b5e57e275505e1ae91cbe8ee14f8bb4aae72a322d7e475b3a039a3193fe303e07371c2edf3375ebd6a376f4502a3db604ddcbf70eef60cac5986030b4a2f620869cf13b8", &(0x7f0000000640)=""/12, 0x0, 0x0, 0xfb, 0x1000, &(0x7f0000000680)="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", &(0x7f0000005fc0)="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", 0x2, 0x0, 0x8}, 0x50) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) (async) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async) r11 = dup3(r2, r1, 0x0) read$FUSE(r11, &(0x7f0000003f80)={0x2020}, 0x2020) (async) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f0000000400)) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000200)='./proc\x00', &(0x7f0000000240), 0x1000a, &(0x7f00000004c0)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x1d000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize}, {@blksize}], [{@dont_appraise}, {@hash}, {@euid_gt={'euid>', r12}}, {@fsmagic={'fsmagic', 0x3d, 0x7fff}}, {@obj_role}]}}) 48.059864009s ago: executing program 5 (id=648): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x2, 0x4, 0x5, 0x5, 0xc, 0x1000, 0x8000, 0x684}, 0x20) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000200)={r1, 0xfffd}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x2e, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x6, 0x80007, 0x7f, 0x20000006, 0xc9, 0x26, 0x5f, 0x9, 0x5, 0xffef2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000000, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x5, 0x89d1, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xe7, 0x80008171, 0xffff, 0x17, 0x10, 0x74c71973, 0x2, 0x42, 0x8f, 0xfffffffc, 0x6, 0x80000000, 0x0, 0x0, 0xb, 0x400, 0x80, 0x0, 0x4, 0xa, 0xb, 0x4, 0x3, 0x40], [0x401, 0xf0000000, 0x80000131, 0x8004, 0x6, 0x6, 0xbc3, 0xc8, 0xf9, 0xe, 0x82bf, 0x6c7, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x2, 0x5, 0x2f, 0x10, 0x10000, 0xd, 0x8, 0x7, 0x4, 0x7, 0x0, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x1, 0x3, 0x14, 0x20009, 0x8, 0xf, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0x3, 0xfffffffe, 0x2, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x8003, 0x6c0, 0xbc47, 0xfffffffa, 0x45, 0x969], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x100008d2, 0x3, 0xff, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x6, 0x9e6, 0x2000000, 0x3ef, 0x5, 0x8470, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0xc2, 0x2, 0x9, 0x20000008, 0x4, 0x6d01, 0xa, 0x1, 0x800002, 0x1fe, 0x7e, 0x7, 0x0, 0x2950bfaf, 0xd3c, 0x5ae, 0x7, 0x4000a9, 0x5, 0x9, 0xacb, 0x2000af, 0xfffffffe, 0xfffffffd, 0x7ff, 0x12b, 0x4, 0x1, 0x95, 0x0, 0x5, 0x1c, 0x1, 0x3f, 0x2004, 0x80a2ed, 0x8004, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x2, 0x2, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x7, 0x401, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0x100, 0x10000, 0xe63, 0x7e, 0x2000006, 0x2, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x1000, 0x4d, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x4041, 0x5, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) 48.059043531s ago: executing program 5 (id=650): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000008071122d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) semop(0x0, &(0x7f0000000100)=[{0x0, 0x5}, {0x1, 0xbad7, 0x1000}, {0x1, 0x1, 0x1000}], 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000700)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)=' ', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x409, 0xfffffff9, 0xebb, 0xc40, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r4, &(0x7f0000000000)='7', 0x1) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000001c0)={r7, 0x4}, 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfffffd9d) r9 = socket(0x1e, 0x4, 0x0) connect$tipc(r9, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r9, r8, 0x0, 0x8010002b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1a, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000006000000000000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000594bf8fffdffffff180000000900000000000000ff070000180100002020782500000000002020207b0004000000000000a100000000000007010000f8ffffffb702000008000000b7030000100000008500000006000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x3ff, 0x53, &(0x7f0000000340)=""/83, 0x41000, 0x10, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0xf, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r2, r3, r2, r4, r8], &(0x7f0000000600)=[{0x1, 0x5, 0x5, 0x8}, {0x0, 0x1001, 0x8, 0x7}, {0x1, 0x5, 0xa, 0xb}], 0x10, 0x6}, 0x94) 47.669528607s ago: executing program 5 (id=657): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f") 47.570867597s ago: executing program 5 (id=660): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000087b8ae8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0fffdffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002020100b705000008000000850000003900000095"], &(0x7f00000000c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xe}, 0x94) 47.507164621s ago: executing program 5 (id=663): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x0, 0x101301) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x40b148, 0x1000, 0x1, 0x23c}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaa010080c200000008004500001c0066000000019078ac1414bbac1414bb11009078000000ff"], 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x10011, &(0x7f0000000400)={[{@minixdf}, {@data_writeback}, {@abort}, {@noauto_da_alloc}, {@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x401}}]}, 0x1, 0x646, &(0x7f0000001f80)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x3c}}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x180) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000180011090000100001000000021820000002ff070000000008000100ac141402"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1, &(0x7f0000000280), 0x0, 0x20044800}, 0x4000000) close_range(r1, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0x0, 0x24) lseek(r8, 0x0, 0x2) ppoll(&(0x7f0000000080)=[{r8, 0x2429}], 0x1, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 47.371603123s ago: executing program 5 (id=667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008"], 0x5c}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x10000, 0x0, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x8}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) 32.290257652s ago: executing program 34 (id=667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008"], 0x5c}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x10000, 0x0, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x8}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) 16.172089905s ago: executing program 6 (id=1013): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) io_setup(0x9, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="0240330026000000186a000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0xa, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)="306663353a313232373ad36c06c0f16268", 0x11) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) 16.067580962s ago: executing program 6 (id=1016): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) r1 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000740)={0x17, &(0x7f00000004c0)=[{0x5, '\x00', @st={0x4, [{0x3, @uvalue=0x1}, {0x2, @uvalue=0x5}, {0x1, @uvalue=0x100000001}, {0x3, @uvalue=0x2}]}, 0xfffe}, {0x20, '\x00', @data=0x9, 0xfffffff8}, {0x1a, '\x00', @st={0x4, [{0x1, @svalue=0xe}, {0x3, @svalue=0x4}, {0x3, @svalue=0x3}, {0x0, @uvalue=0x2}]}, 0x4}, {0x36, '\x00', @data=0x9, 0x2}, {0x31, '\x00', @data=0x2, 0xfffffff8}, {0x1e, '\x00', @buffer={"c8499cb3e05d725be3d48bfa394728cdabca91dfa39d5e05a717b13b023ed5ed", 0x20}, 0xfff}, {0x13, '\x00', @buffer={"2369641b0602a041cc89f9309f8a0dca8edb9aba843d53d77678e09ad4c50b0c", 0x20}, 0x5b5}, {0x25, '\x00', @buffer={"e6b30b4a7eefe30375a5f640de0ec6a5579b9149ff4fe2dc251e4608802ab131", 0x20}, 0xfffffff8}]}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SET_MM_MAP(0x26, 0xe, 0x0, 0x0) (async) ioprio_set$pid(0x1, r2, 0x2007) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) (async) rt_tgsigqueueinfo(r2, 0x0, 0x15, &(0x7f0000003800)={0xf, 0x289, 0x1}) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000000)=0x4d) (async) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) (async) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf77f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x80008, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e3502c9], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800d, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffff9, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x3, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7683, 0x0, 0x2, 0x11, 0x8000001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x7ffffff, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x8000000, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) (async) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r6 = openat(r1, &(0x7f0000000040)='./file2\x00', 0x42, 0xc) ioctl$OCFS2_IOC_RESVSP64(r6, 0x4030582a, &(0x7f0000000000)={0x1, 0x2, 0xfffffffffffffff9, 0x444, 0x6, 0x4}) gettid() r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="ff0700a90fb88bce44d007cc86e7000000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x44008) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x4, 0xd8000000, 0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x108, 0x0, 0x5d30, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x6644, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x10000003, 0x0, 0x1, 0x1ff]}, 0x45c) 15.047928981s ago: executing program 6 (id=1038): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='+p', 0x2) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x4040004) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000006000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 15.028339331s ago: executing program 6 (id=1041): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file3\x00', 0x1010041, &(0x7f0000000000)={[{@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpjquota}]}, 0x1, 0x546, &(0x7f0000000180)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1004401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000001700fbdbdf250a8000000004ff00"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount$9p_xen(0x0, &(0x7f0000000100)='./file3\x00', 0x0, 0x32048, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file3\x00', 0x1010041, &(0x7f0000000000)={[{@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpjquota}]}, 0x1, 0x546, &(0x7f0000000180)="$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") (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1004401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000001700fbdbdf250a8000000004ff00"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) mount$9p_xen(0x0, &(0x7f0000000100)='./file3\x00', 0x0, 0x32048, 0x0) (async) 14.92038745s ago: executing program 6 (id=1045): syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000010020601080000000000000000030000000900020073797a31000000000700010007000000050005000200000a0c000780080006400000000011000300686173683a6e65742c6e6574000000000500049215cafc803350bd43139607094aab1a"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x20044012) setns(0xc9, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) nanosleep(&(0x7f0000000b00)={0x0, 0x2faf080}, 0x0) r1 = socket(0x1f, 0x5, 0x8) connect(r1, &(0x7f0000000900)=@generic={0x1f, "0102030405060100"}, 0xa) 14.411923022s ago: executing program 6 (id=1055): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmsg$802154_dgram(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x40000) setsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x1ff, 0x0) 14.387240216s ago: executing program 35 (id=1055): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmsg$802154_dgram(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x40000) setsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x1ff, 0x0) 10.472242676s ago: executing program 4 (id=1112): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) io_setup(0x9, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="0240330026000000186a000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0xa, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000020000000000000000000071180f000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) 9.104976191s ago: executing program 4 (id=1143): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0xc3, &(0x7f0000000480)=""/195}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 9.051083515s ago: executing program 4 (id=1149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1a7f703902bfe9cd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x1f, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200440e5}, 0x4890) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0xdd86, r12, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1}, 0x4011) socket$unix(0x1, 0x5, 0x0) 8.687923689s ago: executing program 4 (id=1158): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000020c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000002140)={[{@numtail}, {@shortname_win95}, {@shortname_win95}, {}, {@utf8}, {@fat=@uid}, {@rodir}, {@utf8no}, {@fat=@check_normal}, {}, {@utf8no}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@fat=@nfs}, {@shortname_lower}]}, 0x7, 0x2a6, &(0x7f0000000740)="$eJzs3c2KI1UUAOBT+ekkukgWrkSYAl24GqZ9gm5kBLVBULJQF9o4GZBUGOhAIK0YZ+UT+AQ+jxtx6cYHUNw5C7GkUpWYzFR6TDvTPTTft+nDuffU/amia1U3n782Gd97ML3/8Otfo9tNonEUR/EoiUE0YuXbqPXz7/V5AOAF9yjP44+81ClT8+0e7R2VrcZznxwA8Fxsvv+3GrzdAeDG+ujjT94/Pjm5+2GadiMm382GSZR/y/bj+/FlZDGKO9GPvyLytTJ+592Tu9FKC4N4Y7KYDYvKyWc/Vtc//i1iWX8Y/RjU1x+mpY36xWzYjpeq8Y+yGH3wQ/TjlaLml/dWc1/Vv1VTH8ODePP1jfnfjn789EU8iCzuPVb/zWGavp1//+dXnxbZoj5ZzIaddb+qd/Oq7gkAAAAAAAAAAAAAAAAAAAAAADff7XRtsH3+zurg/wvanzwfqLc64Gexcb7PnTRN86Ts/299K15tRes61w4AAAAAAAAAAAAAAAAAAAAviun8fHya9SJiGWSjszKTzSNiO7NHsPqsv6Yp/t7OdCLiMkOUwa19q6JZTS1LiiW347+Xt6OzrHx65+aeqyi2PxudJa247IY/GSTrTK8MohFxNr0V5VhFplcGG5n/PXo3yrEq49PkaTe3W/eQPIMgr3n8mjurDh7P9KoV1HTuXTD6wcuXmnPe39GURER7vZkXX6f9bPfw6v4HAQAAAAAAAAAAAAAAAAAApen8fNxYfvRb0/jwGiYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANdgOj8fny5//3+PYFEV7+qTN4ugFVWmZtiDK14mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN9w/AQAA//8XQlpx") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 8.463373552s ago: executing program 4 (id=1159): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) (async) getsockname$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4c011) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x4441, 0x0) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@null, 0x3, 'bond0\x00'}) (async) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@null, 0x3, 'bond0\x00'}) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f00000003c0)=@srh={0x73, 0x8, 0x4, 0x4, 0x80, 0x48, 0x81, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}, 0x48) (async) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f00000003c0)=@srh={0x73, 0x8, 0x4, 0x4, 0x80, 0x48, 0x81, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}, 0x48) ioctl$MEMGETOOBSEL(r4, 0x80c84d0a, &(0x7f0000000440)) (async) ioctl$MEMGETOOBSEL(r4, 0x80c84d0a, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r2, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c2c4be739ed4"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x8090) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r4) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r4) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xf4, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x5, 0x3, "ac"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1b, 0x3, "0793f667fdb3938c3a8a5ebbadd1a192ec2e8ac265d183"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x37, 0x3, "2ba45b1405bf01c777e507a023d572170d475021e3cb37ff7865936a476c8c1d1b3aab289c66c8745ddcc3683290df067f7b88"}]}, @TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa1c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcd13}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4080}, 0x4800) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000008c0)={0x0, r0, 0x40, 0x9, 0x3, 0x7}) (async) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000008c0)={0x0, r0, 0x40, 0x9, 0x3, 0x7}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000900)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000001bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b80)={&(0x7f0000000980)={0x11e0, r2, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x33}}}}, [@NL80211_ATTR_FRAME_MATCH={0xe, 0x5b, "5392868b9cb68540cf8b"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7fff}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0xaa, 0x5b, "aa53387b4eebd3665ac7605f9c5d7b876fd471005a761b21ffc3c777e758e7a67f125347821ab5f3a6b2d36224d80193a016fc75fad913c6dbc9bde52bc4a9232105f587d6c41acd7d9ad126267bcb40a3d9984daf7adb5b8d1e2fed7fbdbb85d02c02ecf2b1106ed6d02bd76106f59cdba3c53032bac678abebfce19cd75a09f7d92617cf93bff8693fde21ef1b264ee13f0ca437345bd6ad335c9038d75bbe0e00517b19cc"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xcc7c}, @NL80211_ATTR_FRAME_MATCH={0xdd, 0x5b, "04fb7a69c1e110e7b75bc993bab3632a0528abf7c577fbb5631341f54245fc3682f99204ca6f31957cf28b3d2a7ec7011a52ae8422732c1316b47f3388af7547c6d91967c2614395b7034504da6c14ba6bca188bd5222a50b682a39571f937e9df1761bd8c5559dbb0d74f53eb9a235a2d2d7b9bad1ecdd4bdcbfffb26d746b44b5220f490427049972aa75dfe5f4b308615516b3704853f417e340ca283dde575bd61a76565c23e1adc23a158c1cfef804b3872d3c9c27c1a624a430bed159d149db0f8767355ef66d140c05cc8c754121851ec2e6686944f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x11e0}, 0x1, 0x0, 0x0, 0x48040}, 0x20046000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000001c00)={0x0, 0x6}, &(0x7f0000001c40)=0x8) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000001c00)={0x0, 0x6}, &(0x7f0000001c40)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000001c80)={r8, @in={{0x2, 0x4e22, @remote}}, 0x3, 0x101, 0x3, 0x285, 0x9a}, &(0x7f0000001d40)=0x98) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x4c, r2, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x4d}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x47}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f00), 0x40200, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000001f40)='./file0\x00', 0x4) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) getpeername$unix(r7, &(0x7f0000002080), &(0x7f0000002100)=0x6e) ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0x1) mount(&(0x7f0000002140)=@sr0, &(0x7f0000002180)='./file0\x00', &(0x7f00000021c0)='debugfs\x00', 0x30002, &(0x7f0000002200)='bond0\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000002240)={{0x1, 0x1, 0x18, r10, {0x4}}, './file0\x00'}) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000002280)={'ip_vti0\x00', 0x10}) syz_open_dev$dri(&(0x7f00000022c0), 0x7, 0x440c80) (async) syz_open_dev$dri(&(0x7f00000022c0), 0x7, 0x440c80) ioctl$F2FS_IOC_COMPRESS_FILE(r7, 0xf518, 0x0) (async) ioctl$F2FS_IOC_COMPRESS_FILE(r7, 0xf518, 0x0) 8.053277414s ago: executing program 4 (id=1163): r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000140)={0xd0e, [0x2000, 0x3, 0x5, 0xfb, 0xa, 0x6, 0x3, 0x4, 0x6, 0xe4, 0x18, 0x1, 0x0, 0x40, 0x2, 0x1ff, 0x1, 0xb9c, 0xfffa, 0x3, 0x3, 0x7ff, 0x3, 0x3, 0x0, 0xf5, 0x7fff, 0x54f1, 0x1, 0x7ff, 0x0, 0x1, 0x3, 0xfffc, 0x81, 0x8, 0xff34, 0x2, 0x400, 0x1, 0x10, 0x8000, 0x3, 0x5, 0x9, 0xb5, 0x0, 0x2], 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f00000001c0), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 7.918816956s ago: executing program 36 (id=1163): r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000140)={0xd0e, [0x2000, 0x3, 0x5, 0xfb, 0xa, 0x6, 0x3, 0x4, 0x6, 0xe4, 0x18, 0x1, 0x0, 0x40, 0x2, 0x1ff, 0x1, 0xb9c, 0xfffa, 0x3, 0x3, 0x7ff, 0x3, 0x3, 0x0, 0xf5, 0x7fff, 0x54f1, 0x1, 0x7ff, 0x0, 0x1, 0x3, 0xfffc, 0x81, 0x8, 0xff34, 0x2, 0x400, 0x1, 0x10, 0x8000, 0x3, 0x5, 0x9, 0xb5, 0x0, 0x2], 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f00000001c0), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 7.551544878s ago: executing program 7 (id=1174): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000300)={[{@commit}]}, 0x7, 0x500, &(0x7f0000000c40)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) read$FUSE(r0, &(0x7f0000001140)={0x2020}, 0x2020) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x8000, 0x700, 0x0, 0x40000000, {{0x8, 0x4, 0x1, 0x2, 0x20, 0x67, 0x0, 0x6, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@generic={0x0, 0x8, "c01fa6b51ac1"}, @noop]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r1, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x880}, 0x20044040) 7.452615845s ago: executing program 7 (id=1178): r0 = socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="050000000000f7ff01004400000008000300", @ANYRES32=r5, @ANYBLOB="0a0018000303030303030000080026006c0900000400240008000d000180ffff0500180135000000050019010c000000050018011a000000050019010b000000050018010e000000080027"], 0x84}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x2a, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x1, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0xfffe, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 7.270602694s ago: executing program 7 (id=1185): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000002b00000000000000000001"], 0xfdef) 7.140666221s ago: executing program 7 (id=1189): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x200100, &(0x7f0000000380), 0x3, 0x59b, &(0x7f0000000e00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000140)={'lowerdir'}, 0x9, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x2f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x200100, &(0x7f0000000380), 0x3, 0x59b, &(0x7f0000000e00)="$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") (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000140)={'lowerdir'}, 0x9, 0x0) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x2f) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) getdents64(r0, 0x0, 0x0) (async) 6.948829148s ago: executing program 7 (id=1192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{}, {0x95, 0x0, 0x0, 0x7ffc0000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.120036388s ago: executing program 7 (id=1201): syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) nanosleep(&(0x7f0000000b00)={0x0, 0x2faf080}, 0x0) r0 = socket(0x1f, 0x5, 0x8) connect(r0, &(0x7f0000000900)=@generic={0x1f, "0102030405060100"}, 0xa) 6.074881338s ago: executing program 37 (id=1201): syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) nanosleep(&(0x7f0000000b00)={0x0, 0x2faf080}, 0x0) r0 = socket(0x1f, 0x5, 0x8) connect(r0, &(0x7f0000000900)=@generic={0x1f, "0102030405060100"}, 0xa) 1.2609692s ago: executing program 9 (id=1165): r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000240)={0x1000, 0x80000, 0xffffffffffffffff}) sendto$inet_nvme_icreq_pdu(r1, &(0x7f0000000280)={{0x0, 0x5, 0x80, 0x17}, 0x0, 0x0, 0x0, 0x9}, 0x80, 0x0, 0x0, 0x0) socketpair(0x21, 0x1, 0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000100)=0xffffff87) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={r5, 0x6, 0x20}, &(0x7f0000000180)=0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @empty}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x6, 0x0, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x52, &(0x7f0000000040)={0x0, 0x0}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={r5, 0x2f33}, 0x8) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="01000000400800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000fe000000000000000000"], 0x80}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x2000000, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c4, &(0x7f0000000980)="$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") 1.192251736s ago: executing program 0 (id=1248): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0xd, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x33f}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001f00)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=@base={0xc, 0x4, 0x4, 0x80000007, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0x80}, 0x50) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x80) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000000000000000000000ffff0002", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028006"], 0x3c}}, 0x0) (async) fcntl$setpipe(r5, 0x407, 0x3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) (async, rerun: 64) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fef8ffffff71a4f3fe0000000071102800000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b500f3ffffff00009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000380), 0x10, 0xffffffffffffffff, r3}, 0x94) 1.127506529s ago: executing program 9 (id=1250): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001040)={0x2, 0x13, 0x8, 0x0, 0x3, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x17, 0x4, 0x2}]}, 0x18}}, 0x10) r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000740)={@desc={0x1, 0x0, @desc2}, 0x40, 0x0, '\x00', @a}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x90000005}) epoll_pwait(r7, &(0x7f00000000c0)=[{}], 0x1, 0x101, 0x0, 0x0) close(r5) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) personality(0xfe47fef9f5ff7379) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) r10 = syz_io_uring_setup(0x7998, &(0x7f0000000140)={0x0, 0xd0fd, 0x100, 0x10000003, 0x1c}, &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r10, 0x0, 0x15ef, 0x4d, 0x0, 0x40) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001a14010000000000000000000800010000000000080003"], 0x20}}, 0x0) 1.045396569s ago: executing program 0 (id=1252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1a7f703902bfe9cd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x1f, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200440e5}, 0x4890) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0xdd86, r11, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1}, 0x4011) socket$unix(0x1, 0x5, 0x0) 955.598195ms ago: executing program 8 (id=1253): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) setuid(0xee01) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2f}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1802000002000000000000000a0000808500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r7, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000080)=0xc) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="00000000000000005c001a800600000001000000500005802400018008000100010000000800020000000000080003000000000008000400", @ANYRES32=r11, @ANYBLOB="2800038008000100010000000a00020000112233445500000800030000000000080004"], 0x7c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x5, 0xd, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x10, 0x4, 0xf}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x6c, r2, 0xfaac4106a1b87a7, 0x70bd27, 0x1, {0xb}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8814}, 0x880) 854.18649ms ago: executing program 9 (id=1254): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x4000}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 773.208332ms ago: executing program 8 (id=1255): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1e1c42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x451, 0x8001008, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x970a40, 0x6ab858183a7ef6cb) truncate(&(0x7f0000000080)='./file2\x00', 0x800007) finit_module(r3, 0xfffffffffffffffe, 0x1) syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000000000c00430002"], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 770.430577ms ago: executing program 0 (id=1264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1a7f703902bfe9cd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x1f, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200440e5}, 0x4890) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0xdd86, r11, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1}, 0x4011) socket$unix(0x1, 0x5, 0x0) 643.687394ms ago: executing program 3 (id=1256): madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbe}, @generic={0xd, 0x3, 0x2, 0xd, 0x4}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x0}, 0x68) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/182) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x710}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc000) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f00000001c0)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @random="af4e6a961c0b", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @rand_addr=0x64010101, {[@generic={0x7, 0x2}]}}}}}}, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x30) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x57bb, 0x1c410, 0x2, 0x820002f7}) 633.482951ms ago: executing program 3 (id=1257): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0xa71}}, 0x24) syz_emit_ethernet(0x70, &(0x7f0000000240)={@random="d3f34746b238", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x62, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x7f00, @rand_addr=0x64010100}, {0x0, 0x4e20, 0x4e, 0x0, @opaque="08c8e3636d791bdbbba8e031bc30378ba3470e33bdffb7d00a9526268855b3a3dc82d95d51a36d024930671475b92fb3365a3609ffffffffce0f5ba8daaeddd3c916aa692493"}}}}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611824000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x2000000000000047, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x1}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a0000000000000000020000000c0000800800", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 607.731632ms ago: executing program 3 (id=1258): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000500)='./sys\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r3, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x25, 0x2, @val=@tcx={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x3d, 0x24, 0x64, 0x0, 0x3, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, {0x4e23, 0x4e24, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xfe, 0x100, @val=0x80}}}}}}}, 0x0) 483.588008ms ago: executing program 3 (id=1259): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "e60de7561b559bbd", "09bfb3b45ae65aa1a892d96922a157cc", "db34d2cc", "1e8c218b54fb16e1"}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r7, 0x541b, 0xffefff1f00000000) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x17, 0x12, [@private, @broadcast, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x20040014) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x20040014) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x86c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404c880}, 0x4054) 474.171185ms ago: executing program 0 (id=1260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) r1 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xf}, {0xa, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x48, 0x2, {{0x7, 0x8, 0x4, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0x88a, 0xd, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x17, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x91, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x7c) 466.359028ms ago: executing program 8 (id=1261): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfe63, 0xe7c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x80001, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81102) 417.412887ms ago: executing program 8 (id=1262): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38}, 0x28) 374.719071ms ago: executing program 8 (id=1263): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000080)='transport=loop,nqn=nqn.2014-08.org.nvmexpress.discovery', 0x37) r1 = syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x30, &(0x7f0000001000)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x600}}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}, 0x0, 0x0, &(0x7f0000001140)="7c04c889e69980f8868360fe4d91754106cf8b974324248b8dff19247f41d925e15b38dd72cf4322ee56970fb3ee7b6385eb0c37349d4c8af3ca95bb22600b9f366d8800152639bb98dc55f639fd046d165f912c0d821a19d7fbc8b48f2f1a2de1a40ba91426567c3c9622217fce2674996ed884bef5289ac381b7d3c08ddd4d93829361da4d45d360a25c5be13aaa4643e844f4e14cf31693150295a7cd609bbed2f703bedc8a08a2d1eab47951b08f68ab12bcff98857d3252772db56fa6bb47b36e75157b49b8e443") openat$incfs(r1, &(0x7f0000001240)='.log\x00', 0x2100, 0x80) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000004c0)=@multiplanar_mmap={0x8, 0x0, 0x4, 0x80, 0x3, {}, {0x4, 0x1, 0x3, 0x2, 0x1, 0x0, "1f88ba7b"}, 0x6, 0x1, {0x0}, 0x5}) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r4, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery,ctrl_loss_tmo=', 0xaf) sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="05000000020800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000900f0000000000000000e4ff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000400100000000000080fc"], 0x80}}, 0x4044) syz_mount_image$squashfs(&(0x7f0000000740), &(0x7f0000000280)='./file1\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x29, 0x20e, &(0x7f0000000780)="$eJzsVU1rE0EYft7NbLbRIAFvXg22F22zBfEoXuxdf4AhXWsx8aMb0YSCq5deFMQ/UfBP6EHQuwcRwYseFPRQ8VSRyDvz7nQ2m9pEqad5YHmf93tmdj6upbfTCMCvnc0OGtAg1PGeCArAPBnbbtXI7yJHgs/K6M+qRflJZDoYvnlk6PB6u9tNNtLBn0kEAg6IKZKy6cLzx8enzx8jrx8WLYRpskj9Ta9/I/2KWdmy60nBEk2KkVyMV25dOuTBh7NlnS+N0JLavq4fdcC1fLGuYzN1R1Z2hbyaISZmEc201ycQLqAJYF0/6+XfNE7ePTWdJ8ZUJL2G4rIcSPgU/7/9vD/hu0iTYKb0FPI/0osPAnwjIMTbnc0OW6/ILcbuVfPlR0JnsfLSiTmhgAygCka6KNdREjsPYLHfu7WYDoan13vttWQtuRHHy2eXXh2VIzq6D6x3kyXSwzDpARMFCz6nNcfPO+3Dnj+DA3KGBp6X2MgpmV/OCydtCDdA4OQ6NaTuC9s/EtudtIfLOIU5AHczdseyQE1wNYWrPLUVECqitJQzTmAXAea040znZnd1CwTK07ahbI3WR4RWiUXhRsnyOTv9LZFNkSsit/f6aeRvV/4mKV3hq2gLGVDFvXa/v9Fik2Fsq9oK2hY3bOdAuspr2MibNSNMiSPTBnp4eHh4eHh4HBJ+BwAA//+JdTvR") sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x40) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000001"], 0x454680) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143040, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x30, r8, 0x1, 0x5, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2d9}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x240000e4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000006b4b40000000000002000004c30280000100000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x8c, &(0x7f0000000080)=""/140, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r9, 0x1f, &(0x7f0000000180)={0x28, 0x48, 0x0, r10, &(0x7f0000000100)="02000154b66d469c5a8284b71af785299e6f9fce964e9e12a61fe95d7d5667defdbf947d0f618c42ef3c385039d4ac584f011e4d1885233675f53352880936a6c79146a71bed54b49964092df6a7271a6238a47aa321e2d0b83a65949d528c1d7d9969dd35bb3457a09d1177c75370c487605d90e1e36523ad1877e0252bf6bc", 0x0, 0x8, 0x1, 0x0, {0x0, 0x0, r6, 0xff}}, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r9, 0x40305829, &(0x7f0000000340)={0x17c04, 0xffffffffffffffff, 0x81, 0x7fff, 0x1000000000000000, 0x4}) 276.043621ms ago: executing program 0 (id=1265): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f2030203120312072") 275.533952ms ago: executing program 3 (id=1266): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0x9f0000, 0x4, 0x7ff, r1, 0x0, &(0x7f0000000100)={0x9909dd, 0x9, '\x00', @p_u16=&(0x7f00000000c0)=0xb7}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x1, 0x700, 0x8, 0x7, {{0x32, 0x4, 0x0, 0x36, 0xc8, 0x66, 0x0, 0x9, 0x29, 0x0, @multicast2, @rand_addr=0x64010102, {[@generic={0x89, 0x3, "91"}, @timestamp_addr={0x44, 0x24, 0x94, 0x1, 0x4, [{@loopback, 0x4}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@local, 0x80000000}]}, @generic={0x89, 0xd, "2acf40e046a9e2ef9b28ab"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x1a, 0x0, 0xe, [0x9, 0x4dc, 0x1, 0x1, 0x76f9, 0x1, 0x3]}, @noop, @generic={0x82, 0x7, "a5c63a8da1"}, @timestamp_prespec={0x44, 0x14, 0x30, 0x3, 0x5, [{@empty, 0x5}, {@local, 0x3a5}]}, @timestamp_addr={0x44, 0x34, 0xa8, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x7}, {@empty, 0xff}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x1}, {@broadcast, 0xffff}, {@local, 0x5}]}, @timestamp_addr={0x44, 0xc, 0x56, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x4e88}]}]}}}}}) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0xf, 0x4e21, 0x2, 0xa, 0x80, 0x0, 0x2c, r3, 0xee00}, {0x101, 0x10, 0x2, 0x56c9b70c, 0x2, 0x0, 0x9}, {0x1, 0x8, 0x1, 0xa431}, 0x6b81, 0x0, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d6, 0xff}, 0x2, @in=@multicast2, 0x3500, 0x1, 0x1, 0xfa, 0x40, 0x1, 0x8a7}}, 0xe8) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f00000003c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r5, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xd}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xc6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x20048000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r5, 0x300, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44101}, 0x20000040) ioctl$XFS_IOC_GETBMAP(r4, 0xc0205826, &(0x7f0000000640)={0x401, 0x7fff, 0x6, 0x89, 0xaa}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x44400, 0x0) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f00000006c0)=r3) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000700)={0x0, 0x0, 0x8}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000780)={r7, @in6={{0xa, 0x4e21, 0x6, @mcast1, 0x7}}, 0x3, 0x400000, 0x6, 0xae, 0x1}, &(0x7f0000000840)=0x98) openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x181002, 0x0) read$usbfs(r6, &(0x7f00000008c0)=""/30, 0x1e) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000900)={{r4}, {@val, @max}}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000940)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d80)={'syztnl1\x00', &(0x7f0000000d40)={'tunl0\x00', r3, 0x7800, 0x7800, 0x9908, 0x6, {{0x6, 0x4, 0x3, 0x9, 0x18, 0x68, 0x0, 0x7, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0xc0, r5, 0x10, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000090}, 0x20048041) ioctl$RTC_WIE_ON(r6, 0x700f) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000f40)=@req3={0x6, 0x8, 0x0, 0x3, 0x5, 0xf0f, 0x40}, 0x1c) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f0000000f80)=0x9) syz_open_dev$vim2m(&(0x7f0000000fc0), 0xc, 0x2) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000002100)={r6, 0x0, 0xd8, 0x0, &(0x7f0000001000)="61d7288a46ccf2d79db1024cc5394c80feb38e3eaf6bc515d953ce15c6848c5e6e4edb90cc74ed278519d122b8e5a9cc696127fde45da3cd8ab268822376a5daaad43de4f171fe29b4b995710a357136e8217c6cc8a1a60b05a626819fce286ec53feffe75bdd6a97034c49a1f24fc2aa32c9dcdbacdb0b7079f985ceac19893baf697d4b4a8b22f5cec79d6f1314376c9d7ce0c7e3a9cc881becba7c7d4e37ac090074d839ec1d86ba751f883409b3282f708ff5c2d82b92af0d8435bfda7d53498b743e272eb1fcbea8bf8feb4dcf24a1ddafb01bc5518", 0x0, 0x6, 0x0, 0x1000, 0x0, &(0x7f0000001100)="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", 0x0, 0x2, 0x0, 0x7dc8aabb}, 0x50) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000002180)={0x0, 0x1, 0xc1c7, 0xb, 0x3, 0x0, 0xff}) getsockopt$MRT(r6, 0x0, 0xce, &(0x7f0000002200), &(0x7f0000002240)=0x4) 207.853766ms ago: executing program 0 (id=1267): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000380)={[{@init_itable}, {@data_err_ignore}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@quota}, {@journal_path={'journal_path', 0x3d, './file1'}}]}, 0x4, 0x500, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x250942, 0x50) recvmsg(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f00000000c0)={0x3}) setns(0xc9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000500000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x0, r7, 0x1, 0x10}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000180)=0x2102, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYBLOB="195460834abffe799524c9cc1076da67db0581f96e6e913fb778bdbb73bc0800000000000000e3d933f03de46a538b0a18df3b9fb72cde"], 0xdd12}], 0x1, 0x0, 0x0, 0x10008882}, 0x44840) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x4}, 0xfffffe29, 0x6}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd27, 0x25dfdbfc, 0x0, [""]}, 0x14}}, 0x8051) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x0, 0x4ca, &(0x7f0000000500)="$eJzs3EtvG0UcAPD/2nn0nVDKow9ooCAiCkmTFugBCYFA6gUJCQ5wDGmoStMWNUGiVUUThMoR8QkKRyQ+ASe4IOAE4griipAq1EsLB2S0693ErlPXtZM41L+fZHvG+5iZnR3veGd3A+hZI+lbErEtIn6NiKFqtH6GkerHjWsXp/++dnE6iUrl9b8Gs/muX7s4XcxaLLc1j4yWIkofJ7F3hXTnzl84NTU7O3Muj4/Pn35vfO78hadPnp46MXNi5szk0aNHDk889+zkM22Va9NN8bRc1/d8eHbf7mNvffbqdCXe/uGrNL/b8um15agabivdWiMxEpVKpVKq+3Yge3+847VvLNsjYjEPJ31dzgwtK0dEWl39WfsfinIsV95QvPJRVzMHrKn0+DTY8G05/+xL0umbauZND2cV4C6xGN3OAdAdxRE//f9bvNar77ERXH0xfZ/Jyn8jf1Wn9EX6vz0Zrv5jL69R+tsikoWIK28u/HMlVjwPAQCwur5J+z9PrdT/K8X9NfPtiIihC9URnoMRsTMi7o2IXRFxX0Q27wMR8eAdpp+NPy0uxxv7Pz9vbrNoLUn7f8/nY1v1/b+lUZvhch7bno0K9SfvnJydOZRvk9HoH0zjE03S+PblXz691bS0/Gnfr3il6Rd9wTwff/bddILu+NT8VCdlrnV1MWJPX335qyMAydJIQFrruyNiTxvrT7fZySe/3JeGd2xtnH778jez0EaO6lW+iHiiWv8LUVf/y6OgSXWI5Fbjk+ObYnbm0HixVzT68afLr9XG+2vCnZW/c2n9b1lx/8/LXzSDYrx2rsUVDywHL//2Sb7Oxqbc7v4/kLxRl8wHU/Pz5yYiBgai8fvJ5WWLeDF/Wv7RAxGX84Hg2va/M+Lfz/Pl9kZEuhM/FBEPR8T+PO+PRMSjEXGgyab4/qXH3m2+sW5X//3NF+9AWv7jzeo/YjipHa9vI1A+9d3XxcqWqjL/cWmt/o9kodH8m1Z+/1rN4GpsQwAAANjoStkYdFIaWwqXSmNj1Wv4d8WW0uzZufmDI/H+mePVa+WHo79UnOkaqjkfOpFfMV/EJ2+KH46Ie7IrjTZn8bHps7Pbu1146HFbb9H+U3+s1UUvwMZRd7/W7e63S9Y2L8D66lthYBboDS3fr7121yEAXeJ5DdC7tH/oXSu1/0sRN7qQFWBd3eHR/4W1ygfQDc1+AZzyg7ub///Qu7R/6EmNt8QXlwK1c6f/cmDnsY4Wv/NA8ZyKdUo0ah+J0VGgvDFyWBwDWk4iSutXuau/t7S/+O+rlo39eWAwe7T2pZb23kurtNe1tv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8//0XAAD//5/B0CE=") 91.058445ms ago: executing program 3 (id=1268): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000087b8ae8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0fffdffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="000000000200fff3b705000008000000850000003900000095"], &(0x7f00000000c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xe}, 0x94) 66.983675ms ago: executing program 2 (id=1203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)={0x408, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x72}}}}, [@NL80211_ATTR_TESTDATA={0xbc, 0x45, "f086e34a311867cf8581e62f0543482ac1dad90e09f56c0d52e9588fa01ea274a8930cefac1f48a372f3ea93eccf321e5d72da4ac9cad0a14b97d0fcda3c3fbb827ef2412031a5d5ddc64ba4de72f9425a8a6e6a91cde2c93ce1caf702231a6b64885529efb21111651689a593ea771d113dc2dcd280bbe08e624d46aadeb20719e6d5015c2c7c31e8f70c6a6a74726c84fc572675c848f8720d2a00b1d6556b59eae7115c70cbfedd26d49296f1c3a5905ad16692aaffaf"}, @NL80211_ATTR_TESTDATA={0x3e, 0x45, "52e9c385197a3fa83ab96cc0421b426e4b93cf50c8e76d2e983ed534dc7f84f2a0800501d328d68d0a74050c68f3fca649be8554efc44d4b5e43"}, @NL80211_ATTR_TESTDATA={0xbd, 0x45, "6fea28a4be62277dd2c503de09efa712eba8e6d4457baedf6c1cf8cdf23136579ff5c7abeacfef22d4771a30c823643bc24cf37b210e093d886c6903a69b81d7158788fe4fb07741544282b30c3946ee0c32896a7ee1a4a5c749585707a5dd61a2421dc28a358870aec964a178604beb865553fcb89f82872f9ab818288e905e96daf5de1125363ee29f9280c00d844995ac981c3b60caf6b851c1b54caf049ada0decafb0d1512e7a6e783b09b6bdd8ced100b4dd94bd658e"}, @NL80211_ATTR_TESTDATA={0xa0, 0x45, "4fa1b35d7a523d38b4cef14bb74007f29d6b243a2ddad49c44792b3cdde671006d7d43ef054e406b40359bdc9397e823635ad7103180d94ca052031549057af407926aab0f798c050239812fff23aeb628daaf0cc5d51274e3891708210f6b4f4b2c33457efd61ae7b4d666fc5586428490f1a050519f9deb35f74b43f8c300bd72a5e86ff8a8144fb6b977b70d73eeced5b4f42a01c944040e347cc"}, @NL80211_ATTR_TESTDATA={0xaa, 0x45, "fcb86db4b0f90b744dcb3e870ce8258c641cf6d1932bf47e01b2bc30187eee602fe860eb64beca2ba18ea3ac155dc27df44cd029dbf006df2d37627d9b4ac404182b8b5e5c9170cb96170d5a2a22fedc35975a19429f34f7b65043320bdad743325a56ddcd47cf76f3203d6f47ba146db2f1205625bef3955d5398fdebe5a4a5840a102f370118766123484851e572da0140472bc309b439a8a9069449be79cfb3c2f742dc4a"}, @NL80211_ATTR_TESTDATA={0xdf, 0x45, "9c6bb7ad23c57d760b3604b2faa0ac7da6e808129e35263f14baaf9cf6d74a3c51d99adefb840d656b8f46ba229a4b45dd57c9c9141cd82df087e92864801c3388d75595afb375c4d8cca23e3841c63770f85bd884f4010243121306e726d5036db394e28cd1fde8638f66276d1abd70be63871a531007c5c0b6006b98317adf9453413b54aa0a6ef5a2473794a4343e2eec724a05f39c80a01c444962e1439bc38956f68e82aa6d020159b924ee1fb2378cc540faf8218fa1b34dfd5c57c8a37ef7612d972f12f55f5576692f0c49cbffa651ee639102468c64a0"}]}, 0x408}, 0x1, 0x0, 0x0, 0x801}, 0x4080) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='netdevsim0\x00'}) (async) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='netdevsim0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10) 0s ago: executing program 8 (id=1269): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000500)='./sys\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r3, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x25, 0x2, @val=@tcx={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x3d, 0x24, 0x64, 0x0, 0x3, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, {0x4e23, 0x4e24, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xfe, 0x100, @val=0x80}}}}}}}, 0x0) kernel console output (not intermixed with test programs): ing): (slave ip6gretap1): Releasing backup interface [ 171.778127][ T5069] bond3 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 72:28:88:4f:d9:59 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 171.818454][ T5069] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 171.860121][ T5069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.867970][ T5069] bond_slave_1: left promiscuous mode [ 171.868818][ T5069] bond0 (unregistering): Released all slaves [ 171.874286][ T5069] bond1 (unregistering): Released all slaves [ 171.891247][ T5069] bond2 (unregistering): Released all slaves [ 171.905612][ T5069] bond3 (unregistering): Released all slaves [ 171.933035][ T6852] netlink: 44 bytes leftover after parsing attributes in process `syz.3.533'. [ 171.934220][ T4395] 8021q: adding VLAN 0 to HW filter on device eth5 [ 171.958571][ T6611] veth0_vlan: entered promiscuous mode [ 171.963099][ T6602] veth0_vlan: entered promiscuous mode [ 171.972757][ T6611] veth1_vlan: entered promiscuous mode [ 171.978057][ T6602] veth1_vlan: entered promiscuous mode [ 172.014495][ T6602] veth0_macvtap: entered promiscuous mode [ 172.022608][ T6611] veth0_macvtap: entered promiscuous mode [ 172.031685][ T6602] veth1_macvtap: entered promiscuous mode [ 172.069873][ T6611] veth1_macvtap: entered promiscuous mode [ 172.074835][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.079969][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.129462][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.132443][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.147041][ T5079] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.147145][ T5079] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.147226][ T5079] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.147298][ T5079] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.204746][ T4395] 8021q: adding VLAN 0 to HW filter on device eth4 [ 172.296171][ T5071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.297941][ T5071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.324263][ T5071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.324294][ T5071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.327390][ T5071] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.327602][ T5071] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.327831][ T5071] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.346338][ T6216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.346369][ T6216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.348966][ T6216] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.375603][ T5069] hsr_slave_0: left promiscuous mode [ 172.378145][ T5069] hsr_slave_1: left promiscuous mode [ 172.378442][ T5069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.378453][ T5069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.380983][ T5069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.380994][ T5069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.388212][ T5069] veth1_macvtap: left promiscuous mode [ 172.388346][ T5069] veth0_macvtap: left promiscuous mode [ 172.388398][ T5069] veth1_vlan: left promiscuous mode [ 172.388431][ T5069] veth0_vlan: left promiscuous mode [ 172.510044][ T5069] team0 (unregistering): Port device team_slave_1 removed [ 172.514046][ T5069] team0 (unregistering): Port device team_slave_0 removed [ 172.727029][ T4709] Bluetooth: hci2: command tx timeout [ 172.727708][ T4709] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 172.728006][ T4709] Bluetooth: hci1: Injecting HCI hardware error event [ 172.729402][ T4709] Bluetooth: hci1: hardware error 0x00 [ 172.806619][ T4722] Bluetooth: hci3: command tx timeout [ 172.830429][ T5077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.832405][ T5077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.928526][ T6897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.961842][ T6903] Process accounting resumed [ 173.019844][ T6921] netlink: 'syz.5.543': attribute type 5 has an invalid length. [ 173.038732][ T6914] hub 1-0:1.0: USB hub found [ 173.042304][ T6914] hub 1-0:1.0: 1 port detected [ 173.054741][ T6919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.181146][ T4395] 8021q: adding VLAN 0 to HW filter on device eth7 [ 173.212920][ T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/1:0) [ 173.253441][ T6949] loop3: detected capacity change from 0 to 512 [ 173.295363][ T6949] EXT4-fs: Mount option(s) incompatible with ext2 [ 173.522277][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 173.522315][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.554'. [ 173.537976][ T4395] 8021q: adding VLAN 0 to HW filter on device eth6 [ 173.578454][ T6973] netlink: 'syz.4.557': attribute type 10 has an invalid length. [ 173.583771][ T6973] syz_tun: entered promiscuous mode [ 173.641563][ T6982] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.559' sets config #1 [ 173.643635][ T6986] FAULT_INJECTION: forcing a failure. [ 173.643635][ T6986] name failslab, interval 1, probability 0, space 0, times 0 [ 173.643678][ T6986] CPU: 1 UID: 0 PID: 6986 Comm: syz.0.560 Tainted: G L syzkaller #0 PREEMPT [ 173.643693][ T6986] Tainted: [L]=SOFTLOCKUP [ 173.643697][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 173.643703][ T6986] Call trace: [ 173.643706][ T6986] show_stack+0x2c/0x3c (C) [ 173.643724][ T6986] __dump_stack+0x30/0x40 [ 173.643736][ T6986] dump_stack_lvl+0xd8/0x12c [ 173.643746][ T6986] dump_stack+0x1c/0x28 [ 173.643755][ T6986] should_fail_ex+0x41c/0x590 [ 173.643767][ T6986] should_failslab+0xc4/0x120 [ 173.643779][ T6986] __kmalloc_noprof+0x108/0x6c8 [ 173.643787][ T6986] tomoyo_realpath_from_path+0xbc/0x4dc [ 173.643798][ T6986] tomoyo_path_number_perm+0x1f0/0x500 [ 173.643806][ T6986] tomoyo_file_ioctl+0x2c/0x3c [ 173.643815][ T6986] security_file_ioctl+0xdc/0x2b0 [ 173.643824][ T6986] __arm64_sys_ioctl+0xb0/0x1cc [ 173.643834][ T6986] invoke_syscall+0x98/0x244 [ 173.643844][ T6986] el0_svc_common+0xec/0x23c [ 173.643854][ T6986] do_el0_svc+0x4c/0x5c [ 173.643863][ T6986] el0_svc+0x64/0x260 [ 173.643873][ T6986] el0t_64_sync_handler+0x44/0x104 [ 173.643881][ T6986] el0t_64_sync+0x198/0x19c [ 173.643891][ T6986] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.643899][ T6986] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.560' sets config #1 [ 173.766103][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 173.766140][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.566'. [ 173.882554][ T7019] netlink: 72 bytes leftover after parsing attributes in process `syz.4.572'. [ 173.887764][ T7019] netlink: 'syz.4.572': attribute type 2 has an invalid length. [ 173.999788][ T7026] FAULT_INJECTION: forcing a failure. [ 173.999788][ T7026] name failslab, interval 1, probability 0, space 0, times 0 [ 173.999828][ T7026] CPU: 0 UID: 0 PID: 7026 Comm: syz.5.573 Tainted: G L syzkaller #0 PREEMPT [ 173.999846][ T7026] Tainted: [L]=SOFTLOCKUP [ 173.999850][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 173.999855][ T7026] Call trace: [ 173.999858][ T7026] show_stack+0x2c/0x3c (C) [ 173.999878][ T7026] __dump_stack+0x30/0x40 [ 173.999889][ T7026] dump_stack_lvl+0xd8/0x12c [ 173.999899][ T7026] dump_stack+0x1c/0x28 [ 173.999908][ T7026] should_fail_ex+0x41c/0x590 [ 173.999919][ T7026] should_failslab+0xc4/0x120 [ 173.999930][ T7026] __kmalloc_noprof+0x108/0x6c8 [ 173.999938][ T7026] tomoyo_encode2+0x10c/0x330 [ 173.999947][ T7026] tomoyo_encode+0x34/0x50 [ 173.999956][ T7026] tomoyo_realpath_from_path+0x488/0x4dc [ 173.999965][ T7026] tomoyo_path_number_perm+0x1f0/0x500 [ 173.999973][ T7026] tomoyo_file_ioctl+0x2c/0x3c [ 173.999983][ T7026] security_file_ioctl+0xdc/0x2b0 [ 173.999991][ T7026] __arm64_sys_ioctl+0xb0/0x1cc [ 174.000002][ T7026] invoke_syscall+0x98/0x244 [ 174.000012][ T7026] el0_svc_common+0xec/0x23c [ 174.000022][ T7026] do_el0_svc+0x4c/0x5c [ 174.000032][ T7026] el0_svc+0x64/0x260 [ 174.000041][ T7026] el0t_64_sync_handler+0x44/0x104 [ 174.000056][ T7026] el0t_64_sync+0x198/0x19c [ 174.000350][ T7026] ERROR: Out of memory at tomoyo_realpath_from_path. [ 174.000368][ T7026] usb usb5: usbfs: interface 0 claimed by hub while 'syz.5.573' sets config #1 [ 174.316806][ T7075] io-wq is not configured for unbound workers [ 174.414207][ T7096] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.438619][ T7100] usb usb5: usbfs: interface 0 claimed by hub while 'syz.5.592' sets config #1 [ 174.438660][ T7100] FAULT_INJECTION: forcing a failure. [ 174.438660][ T7100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.438676][ T7100] CPU: 1 UID: 0 PID: 7100 Comm: syz.5.592 Tainted: G L syzkaller #0 PREEMPT [ 174.438690][ T7100] Tainted: [L]=SOFTLOCKUP [ 174.438694][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 174.438699][ T7100] Call trace: [ 174.438701][ T7100] show_stack+0x2c/0x3c (C) [ 174.438719][ T7100] __dump_stack+0x30/0x40 [ 174.438730][ T7100] dump_stack_lvl+0xd8/0x12c [ 174.438739][ T7100] dump_stack+0x1c/0x28 [ 174.438749][ T7100] should_fail_ex+0x41c/0x590 [ 174.438760][ T7100] should_fail+0x14/0x24 [ 174.438769][ T7100] should_fail_usercopy+0x20/0x30 [ 174.438779][ T7100] simple_read_from_buffer+0xc4/0x238 [ 174.438789][ T7100] proc_fail_nth_read+0x1a8/0x248 [ 174.438798][ T7100] vfs_read+0x230/0x8c8 [ 174.438809][ T7100] ksys_read+0x12c/0x228 [ 174.438818][ T7100] __arm64_sys_read+0x84/0x98 [ 174.438829][ T7100] invoke_syscall+0x98/0x244 [ 174.438838][ T7100] el0_svc_common+0xec/0x23c [ 174.438848][ T7100] do_el0_svc+0x4c/0x5c [ 174.438858][ T7100] el0_svc+0x64/0x260 [ 174.438867][ T7100] el0t_64_sync_handler+0x44/0x104 [ 174.438876][ T7100] el0t_64_sync+0x198/0x19c [ 174.556828][ T7110] xt_socket: unknown flags 0x4 [ 174.596996][ T7131] loop5: detected capacity change from 0 to 256 [ 174.694495][ T7143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.699384][ T7143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.886614][ T4722] Bluetooth: hci3: command tx timeout [ 174.887921][ T4709] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 174.893978][ T7164] syzkaller1: entered allmulticast mode [ 174.920342][ T7166] loop5: detected capacity change from 0 to 512 [ 174.922359][ T7166] EXT4-fs: quotafile must be on filesystem root [ 174.928292][ T7166] nbd0: detected capacity change from 0 to 63 [ 174.939100][ T4709] block nbd0: Receive control failed (result -104) [ 175.047592][ T7173] usb usb5: usbfs: interface 0 claimed by hub while 'syz.5.611' sets config #1 [ 175.201712][ T7199] loop5: detected capacity change from 0 to 512 [ 175.210562][ T7199] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 175.226603][ T7199] EXT4-fs (loop5): 1 truncate cleaned up [ 175.227065][ T7199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.308365][ T7205] syzkaller0: entered promiscuous mode [ 175.308401][ T7205] syzkaller0: entered allmulticast mode [ 175.312545][ T7205] tipc: Started in network mode [ 175.313633][ T7205] tipc: Node identity e601336170fc, cluster identity 4711 [ 175.313839][ T7205] tipc: Enabled bearer , priority 0 [ 175.348093][ T7204] tipc: Resetting bearer [ 175.595796][ T7204] tipc: Disabling bearer [ 175.656414][ T7221] loop3: detected capacity change from 0 to 512 [ 175.668375][ T7221] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.628: inode has both inline data and extents flags [ 175.668407][ T7221] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 175.671359][ T7221] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.628: couldn't read orphan inode 15 (err -117) [ 175.671396][ T7221] loop3: lost filesystem error report for type 5 error -117 [ 175.676463][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 175.676481][ C0] EXT4-fs (loop3): initial error at time 175: ext4_orphan_get:1403: inode 15 [ 175.676499][ C0] EXT4-fs (loop3): last error at time 175: ext4_orphan_get:1408 [ 175.684738][ T7221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.816221][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.883732][ T7246] loop3: detected capacity change from 0 to 2048 [ 175.923819][ T7246] loop3: p1 p3 < > p4 < p5 > [ 175.923850][ T7246] loop3: partition table partially beyond EOD, truncated [ 175.925163][ T7246] loop3: p1 size 196608 extends beyond EOD, truncated [ 175.932770][ T7246] loop3: p3 start 614273 is beyond EOD, truncated [ 175.936953][ T7246] loop3: p5 size 196608 extends beyond EOD, truncated [ 176.002006][ T7253] loop4: detected capacity change from 0 to 256 [ 176.070428][ T6602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.091893][ T7255] cgroup: Invalid name [ 176.125071][ T6165] udevd[6165]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 176.157660][ T7264] comedi comedi0: comedi_config --init_data is deprecated [ 176.467843][ T7289] fuse: Bad value for 'fd' [ 176.612293][ T7254] overlayfs: statfs failed on './file0' [ 176.654519][ T7302] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1398 [ 176.656117][ T7303] binder: 7299:7303 ioctl c018620b 0 returned -14 [ 176.822883][ T7327] loop5: detected capacity change from 0 to 1024 [ 176.825829][ T7327] EXT4-fs: Mount option(s) incompatible with ext2 [ 176.937165][ T7338] __nla_validate_parse: 15 callbacks suppressed [ 176.940172][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.666'. [ 176.977069][ T4709] Bluetooth: hci3: command tx timeout [ 177.044655][ T7341] loop4: detected capacity change from 0 to 8 [ 177.412187][ T7354] overlay: filesystem on ./file1 not supported [ 177.601192][ T7363] netlink: 19 bytes leftover after parsing attributes in process `syz.4.673'. [ 177.620443][ T7363] netlink: 19 bytes leftover after parsing attributes in process `syz.4.673'. [ 177.698106][ T7369] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 177.719011][ T7369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.783773][ T7371] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 177.813357][ T7373] bridge0: port 3(netdevsim0) entered blocking state [ 177.815115][ T7373] bridge0: port 3(netdevsim0) entered disabled state [ 177.816972][ T7373] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 177.820741][ T7373] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 177.822496][ T7373] bridge0: port 3(netdevsim0) entered blocking state [ 177.822551][ T7373] bridge0: port 3(netdevsim0) entered forwarding state [ 178.212880][ T7385] netlink: 'syz.0.679': attribute type 10 has an invalid length. [ 178.221431][ T7385] veth0_to_bond: entered promiscuous mode [ 178.221796][ T7385] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 178.265173][ T7371] md/raid10:md0: not clean -- starting background reconstruction [ 178.265202][ T7371] md/raid10:md0: active with 1 out of 2 devices [ 178.265565][ T7371] set_capacity_and_notify: 2 callbacks suppressed [ 178.265573][ T7371] md0: detected capacity change from 0 to 2048 [ 178.294522][ T7371] usb usb5: usbfs: interface 0 claimed by hub while 'syz.6.678' sets config #1 [ 178.330983][ T7400] md: resync of RAID array md0 [ 178.339880][ T7400] md: md0: resync done. [ 178.399890][ T7404] md: recover of RAID array md0 [ 178.401059][ T7404] md: md0: recover done. [ 178.465828][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.684'. [ 178.465863][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.684'. [ 178.555032][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.846305][ T7427] loop6: detected capacity change from 0 to 1024 [ 178.859121][ T7427] EXT4-fs: Ignoring removed orlov option [ 178.871499][ T7427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.877113][ T7427] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.690: bg 0: block 112: padding at end of block bitmap is not set [ 178.890525][ T7425] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.690: lblock 0 mapped to illegal pblock 0 (length 1) [ 178.895931][ T7425] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.690: lblock 0 mapped to illegal pblock 0 (length 1) [ 178.900906][ T7425] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.690: lblock 0 mapped to illegal pblock 0 (length 1) [ 178.904350][ T7425] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.690: lblock 0 mapped to illegal pblock 0 (length 1) [ 178.908502][ T7425] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.690: lblock 0 mapped to illegal pblock 0 (length 1) [ 178.913837][ T7425] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.690: lblock 0 mapped to illegal pblock 0 (length 1) [ 178.916964][ T7425] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.690: lblock 0 mapped to illegal pblock 0 (length 1) [ 178.922201][ T7425] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.690: lblock 0 mapped to illegal pblock 0 (length 1) [ 178.925398][ T7425] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.690: lblock 0 mapped to illegal pblock 0 (length 1) [ 179.451114][ T7440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.693'. [ 179.452899][ T7440] veth1_to_team: entered promiscuous mode [ 179.454841][ T7440] gretap0: entered promiscuous mode [ 179.458242][ T7440] hsr1: entered promiscuous mode [ 179.564376][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 179.566291][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 179.588304][ T7449] loop3: detected capacity change from 0 to 512 [ 179.592456][ T7449] EXT4-fs: Mount option(s) incompatible with ext3 [ 179.634430][ T6611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 179.748424][ T7453] loop6: detected capacity change from 0 to 512 [ 179.770813][ T7453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.777741][ T7453] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #12: comm syz.6.699: corrupted xattr block 6: invalid header [ 179.785063][ T7453] EXT4-fs (loop6): Remounting filesystem read-only [ 179.803364][ T6611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.848102][ T7460] usb usb1: usbfs: process 7460 (syz.6.701) did not claim interface 23 before use [ 179.924564][ T7465] loop4: detected capacity change from 0 to 2048 [ 179.926568][ T7463] loop3: detected capacity change from 0 to 1024 [ 179.927029][ T7463] EXT4-fs: Ignoring removed orlov option [ 179.939232][ T7465] loop4: p1 p2 < > p3 < p5 p6 > p4 [ 179.940262][ T7465] loop4: partition table partially beyond EOD, truncated [ 179.941759][ T7465] loop4: p1 start 385023 is beyond EOD, truncated [ 179.943044][ T7465] loop4: p2 start 4278190080 is beyond EOD, truncated [ 179.945722][ T7465] loop4: p4 start 1979908096 is beyond EOD, truncated [ 179.946416][ T7463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.949982][ T7465] loop4: p5 start 385023 is beyond EOD, truncated [ 179.951191][ T7465] loop4: p6 start 1979908096 is beyond EOD, truncated [ 179.986736][ T10] hsr0: entered promiscuous mode [ 179.993022][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.049064][ T7471] loop3: detected capacity change from 0 to 512 [ 180.079755][ T7471] EXT4-fs (loop3): 1 truncate cleaned up [ 180.080369][ T7471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.081696][ T7468] loop6: detected capacity change from 0 to 1024 [ 180.082366][ T7468] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 180.082406][ T7468] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 180.090233][ T7468] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 180.090370][ T7468] EXT4-fs (loop6): orphan cleanup on readonly fs [ 180.094399][ T7468] EXT4-fs error (device loop6): ext4_read_inode_bitmap:169: comm syz.6.701: Inode bitmap for bg 0 marked uninitialized [ 180.094433][ T7468] loop6: lost filesystem error report for type 5 error -117 [ 180.096475][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 180.096494][ C1] EXT4-fs (loop6): initial error at time 180: ext4_read_inode_bitmap:169 [ 180.096507][ C1] EXT4-fs (loop6): last error at time 180: ext4_read_inode_bitmap:169 [ 180.097224][ T7468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.208953][ T7468] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 180.319916][ T7475] Injecting memory failure for pfn 0x1352b8 at process virtual address 0x20001000 [ 180.325776][ T7475] Memory failure: 0x1352b8: recovery action for clean LRU page: Recovered [ 180.325854][ T7475] Injecting memory failure for pfn 0x11f66e at process virtual address 0x20002000 [ 180.325933][ T7475] Memory failure: 0x11f66e: recovery action for clean LRU page: Recovered [ 180.325979][ T7475] Injecting memory failure for pfn 0x160033 at process virtual address 0x20003000 [ 180.326047][ T7475] Memory failure: 0x160033: recovery action for clean LRU page: Recovered [ 180.551488][ T7488] loop4: detected capacity change from 0 to 2048 [ 180.571476][ T7488] loop4: p2 < > p4 [ 180.573492][ T7488] loop4: p4 size 8192 extends beyond EOD, truncated [ 180.585764][ T4339] loop4: p2 < > p4 [ 180.587812][ T4339] loop4: p4 size 8192 extends beyond EOD, truncated [ 180.610036][ T7488] syzkaller1: entered promiscuous mode [ 180.610068][ T7488] syzkaller1: entered allmulticast mode [ 180.622788][ T7488] netlink: 76 bytes leftover after parsing attributes in process `syz.4.708'. [ 180.622817][ T7488] netlink: 60 bytes leftover after parsing attributes in process `syz.4.708'. [ 180.714075][ T6611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.901933][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.756874][ T7534] Bluetooth: ISO socket layer initialized [ 181.881152][ T7551] loop6: detected capacity change from 0 to 256 [ 182.132792][ T7554] syz.6.720: attempt to access beyond end of device [ 182.132792][ T7554] loop6: rw=2049, sector=1800, nr_sectors = 8 limit=256 [ 182.200297][ T7554] Dev loop4: unable to read RDB block 7 [ 182.200414][ T7554] loop4: unable to read partition table [ 182.200515][ T7554] loop4: partition table beyond EOD, truncated [ 182.200540][ T7554] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 182.264547][ T7557] __nla_validate_parse: 3 callbacks suppressed [ 182.264596][ T7557] netlink: 136 bytes leftover after parsing attributes in process `syz.0.722'. [ 182.289927][ T7557] bond2: option primary_reselect: invalid value (21) [ 182.292238][ T7557] bond2 (unregistering): Released all slaves [ 182.674409][ T4339] Dev loop4: unable to read RDB block 7 [ 182.676102][ T4339] loop4: unable to read partition table [ 182.677891][ T4339] loop4: partition table beyond EOD, truncated [ 182.813496][ T7598] binder: 7596:7598 tried to acquire reference to desc 0, got 1 instead [ 182.813716][ T7598] binder: 7596:7598 got transaction with invalid parent offset or type [ 182.813771][ T7598] binder: 7596:7598 transaction call to 7596:0 failed 14/29201/-22, code 0 size 80-24 line 3617 [ 182.818093][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 182.861364][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 182.861397][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 183.194807][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.735'. [ 183.588178][ T7654] set_capacity_and_notify: 1 callbacks suppressed [ 183.588225][ T7654] loop6: detected capacity change from 0 to 256 [ 183.846618][ T5069] rpcbind: server 127.0.0.1 not responding, timed out [ 184.020783][ T7696] loop6: detected capacity change from 0 to 128 [ 184.055503][ T7696] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.069396][ T7704] netlink: 88 bytes leftover after parsing attributes in process `syz.6.743'. [ 184.228993][ T7714] usb usb1: usbfs: process 7714 (syz.0.747) did not claim interface 23 before use [ 184.243111][ T6611] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.568708][ T7721] loop6: detected capacity change from 0 to 512 [ 184.585474][ T7721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.595634][ T7721] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.748: corrupted xattr block 33: invalid header [ 184.604360][ T7721] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.748: corrupted xattr block 33: invalid header [ 184.607416][ T7721] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.748: corrupted xattr block 33: invalid header [ 184.672411][ T7721] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.748: corrupted xattr block 33: invalid header [ 184.741975][ T58] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 184.743051][ T58] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 28 [ 184.743079][ T58] EXT4-fs (loop6): This should not happen!! Data will be lost [ 184.743079][ T58] [ 184.743104][ T58] EXT4-fs (loop6): Total free blocks count 0 [ 184.743118][ T58] EXT4-fs (loop6): Free/Dirty block details [ 184.743132][ T58] EXT4-fs (loop6): free_blocks=65280 [ 184.743147][ T58] EXT4-fs (loop6): dirty_blocks=8 [ 184.743159][ T58] EXT4-fs (loop6): Block reservation details [ 184.743169][ T58] EXT4-fs (loop6): i_reserved_data_blocks=8 [ 184.760496][ T6611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.766592][ T7740] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.751' sets config #1 [ 184.802699][ T7742] loop6: detected capacity change from 0 to 2048 [ 184.829630][ T7742] loop6: p1 p4 [ 184.829630][ T7742] p1: [ 184.836607][ T7742] loop6: p4 size 589824 extends beyond EOD, truncated [ 184.849331][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.752'. [ 184.857259][ T7742] veth0_macvtap: left promiscuous mode [ 184.878507][ T7742] netlink: 'syz.6.752': attribute type 1 has an invalid length. [ 184.878543][ T7742] netlink: 'syz.6.752': attribute type 2 has an invalid length. [ 185.037748][ T7756] loop4: detected capacity change from 0 to 512 [ 185.050598][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 185.050632][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 185.054291][ T7756] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 185.071002][ T7756] EXT4-fs (loop4): 1 truncate cleaned up [ 185.092156][ T6168] udevd[6168]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 185.102268][ T7376] udevd[7376]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 185.110708][ T7756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.171536][ T7768] loop6: detected capacity change from 0 to 1024 [ 185.191755][ T7768] EXT4-fs: Ignoring removed bh option [ 185.194010][ T7768] EXT4-fs: test_dummy_encryption requires encrypt feature [ 185.339435][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.552374][ T7785] loop6: detected capacity change from 0 to 512 [ 185.563556][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.762'. [ 185.876057][ T7799] loop6: detected capacity change from 0 to 512 [ 185.952458][ T7799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.088650][ T7805] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz.6.766: iget: bad i_size value: 2533274857506816 [ 186.214008][ T7804] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz.6.766: iget: bad i_size value: 2533274857506816 [ 186.224684][ T7806] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz.6.766: iget: bad i_size value: 2533274857506816 [ 186.238232][ T7799] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz.6.766: iget: bad i_size value: 2533274857506816 [ 186.246205][ T7799] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz.6.766: iget: bad i_size value: 2533274857506816 [ 186.298308][ T7818] netlink: 204 bytes leftover after parsing attributes in process `syz.0.769'. [ 186.301280][ T7818] vxcan3: entered promiscuous mode [ 186.301313][ T7818] vxcan3: entered allmulticast mode [ 186.304373][ T7819] vxcan5: entered promiscuous mode [ 186.304397][ T7819] vxcan5: entered allmulticast mode [ 186.373513][ T6611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.420177][ T7826] FAULT_INJECTION: forcing a failure. [ 186.420177][ T7826] name fail_futex, interval 1, probability 0, space 0, times 0 [ 186.420230][ T7826] CPU: 1 UID: 0 PID: 7826 Comm: syz.3.772 Tainted: G L syzkaller #0 PREEMPT [ 186.420252][ T7826] Tainted: [L]=SOFTLOCKUP [ 186.420257][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 186.420263][ T7826] Call trace: [ 186.420267][ T7826] show_stack+0x2c/0x3c (C) [ 186.420293][ T7826] __dump_stack+0x30/0x40 [ 186.420308][ T7826] dump_stack_lvl+0xd8/0x12c [ 186.420321][ T7826] dump_stack+0x1c/0x28 [ 186.420333][ T7826] should_fail_ex+0x41c/0x590 [ 186.420346][ T7826] should_fail+0x14/0x24 [ 186.420357][ T7826] get_futex_key+0x1ec/0x12b0 [ 186.420369][ T7826] futex_wait_requeue_pi+0x22c/0x7fc [ 186.420380][ T7826] do_futex+0x1e0/0x378 [ 186.420390][ T7826] __arm64_sys_futex+0x2e4/0x418 [ 186.420401][ T7826] invoke_syscall+0x98/0x244 [ 186.420413][ T7826] el0_svc_common+0xec/0x23c [ 186.420425][ T7826] do_el0_svc+0x4c/0x5c [ 186.420436][ T7826] el0_svc+0x64/0x260 [ 186.420446][ T7826] el0t_64_sync_handler+0x44/0x104 [ 186.420456][ T7826] el0t_64_sync+0x198/0x19c [ 186.459948][ T7829] loop6: detected capacity change from 0 to 256 [ 186.464591][ T7829] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 186.552625][ T58] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 186.623294][ T7841] Failure starting scanning (-16) [ 186.791760][ T7855] loop6: detected capacity change from 0 to 8192 [ 186.798274][ T7855] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.436866][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.438321][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.938202][ T7885] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 188.121244][ T7895] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 188.452239][ T7900] input: syz0 as /devices/virtual/input/input6 [ 188.467295][ T7900] __nla_validate_parse: 4 callbacks suppressed [ 188.467341][ T7900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.792'. [ 188.467437][ T7900] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 189.129647][ T7924] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 189.652011][ T1190] kernel read not supported for file /dummy_udc (pid: 1190 comm: kworker/0:3) [ 189.659100][ T7953] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 189.666707][ T7953] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 189.685317][ T7952] 9pnet_fd: p9_fd_create_tcp (7952): problem connecting socket to 127.0.0.1 [ 189.718775][ T7955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.806'. [ 189.760398][ T7960] CUSE: unknown device info "" [ 189.760433][ T7960] CUSE: unknown device info "Ö" [ 189.760442][ T7960] CUSE: unknown device info "ÚË" [ 189.760449][ T7960] CUSE: unknown device info "" [ 189.760453][ T7960] CUSE: unknown device info "" [ 189.760457][ T7960] CUSE: unknown device info "" [ 189.760462][ T7960] CUSE: unknown device info "þ" [ 189.760465][ T7960] CUSE: unknown device info "" [ 189.760469][ T7960] CUSE: unknown device info "@" [ 189.760472][ T7960] CUSE: unknown device info "ÿ" [ 189.760476][ T7960] CUSE: unknown device info "" [ 189.760479][ T7960] CUSE: unknown device info "#Û" [ 189.760483][ T7960] CUSE: unknown device info "ÿÿÿÿ" [ 189.760487][ T7960] CUSE: unknown device info "" [ 189.760490][ T7960] CUSE: unknown device info "€" [ 189.760494][ T7960] CUSE: DEVNAME unspecified [ 189.862835][ T7955] set_capacity_and_notify: 1 callbacks suppressed [ 189.862938][ T7955] loop3: detected capacity change from 0 to 256 [ 189.865053][ T7955] FAT-fs (loop3): bogus sectors per cluster 255 [ 189.865069][ T7955] FAT-fs (loop3): Can't find a valid FAT filesystem [ 190.624441][ T8013] loop3: detected capacity change from 0 to 1024 [ 190.641738][ T8013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.678066][ T8013] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 190.702983][ T4718] EXT4-fs error (device loop3): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /174/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 190.710481][ T4718] EXT4-fs (loop3): Remounting filesystem read-only [ 190.715111][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.859103][ T8023] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 191.068151][ T8043] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 191.072638][ T8043] FAULT_INJECTION: forcing a failure. [ 191.072638][ T8043] name failslab, interval 1, probability 0, space 0, times 0 [ 191.072687][ T8043] CPU: 1 UID: 0 PID: 8043 Comm: syz.6.827 Tainted: G L syzkaller #0 PREEMPT [ 191.072709][ T8043] Tainted: [L]=SOFTLOCKUP [ 191.072713][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 191.072719][ T8043] Call trace: [ 191.072722][ T8043] show_stack+0x2c/0x3c (C) [ 191.072741][ T8043] __dump_stack+0x30/0x40 [ 191.072754][ T8043] dump_stack_lvl+0xd8/0x12c [ 191.072765][ T8043] dump_stack+0x1c/0x28 [ 191.072776][ T8043] should_fail_ex+0x41c/0x590 [ 191.072789][ T8043] should_failslab+0xc4/0x120 [ 191.072801][ T8043] __kmalloc_noprof+0x108/0x6c8 [ 191.072810][ T8043] tomoyo_encode2+0x10c/0x330 [ 191.072821][ T8043] tomoyo_encode+0x34/0x50 [ 191.072830][ T8043] tomoyo_realpath_from_path+0x488/0x4dc [ 191.072841][ T8043] tomoyo_mount_permission+0x3b4/0x7e4 [ 191.072851][ T8043] tomoyo_sb_mount+0x48/0x60 [ 191.072862][ T8043] security_sb_mount+0xfc/0x308 [ 191.072870][ T8043] path_mount+0xb8/0xa88 [ 191.072880][ T8043] do_mount+0xe8/0x148 [ 191.072890][ T8043] __arm64_sys_mount+0x33c/0x388 [ 191.072901][ T8043] invoke_syscall+0x98/0x244 [ 191.072913][ T8043] el0_svc_common+0xec/0x23c [ 191.072924][ T8043] do_el0_svc+0x4c/0x5c [ 191.072935][ T8043] el0_svc+0x64/0x260 [ 191.072946][ T8043] el0t_64_sync_handler+0x44/0x104 [ 191.072956][ T8043] el0t_64_sync+0x198/0x19c [ 191.072974][ T8043] ERROR: Out of memory at tomoyo_realpath_from_path. [ 191.099854][ T8033] loop4: detected capacity change from 0 to 263 [ 191.110001][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 191.245946][ T8047] FAULT_INJECTION: forcing a failure. [ 191.245946][ T8047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.245990][ T8047] CPU: 0 UID: 0 PID: 8047 Comm: syz.6.828 Tainted: G L syzkaller #0 PREEMPT [ 191.246005][ T8047] Tainted: [L]=SOFTLOCKUP [ 191.246009][ T8047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 191.246014][ T8047] Call trace: [ 191.246017][ T8047] show_stack+0x2c/0x3c (C) [ 191.246038][ T8047] __dump_stack+0x30/0x40 [ 191.246053][ T8047] dump_stack_lvl+0xd8/0x12c [ 191.246065][ T8047] dump_stack+0x1c/0x28 [ 191.246076][ T8047] should_fail_ex+0x41c/0x590 [ 191.246089][ T8047] should_fail+0x14/0x24 [ 191.246100][ T8047] should_fail_usercopy+0x20/0x30 [ 191.246112][ T8047] read_fpsimd_context+0xa4/0x344 [ 191.246124][ T8047] restore_fpsimd_context+0xb4/0x1d8 [ 191.246136][ T8047] __arm64_sys_rt_sigreturn+0x1b3c/0x27a8 [ 191.246149][ T8047] invoke_syscall+0x98/0x244 [ 191.246160][ T8047] el0_svc_common+0xec/0x23c [ 191.246172][ T8047] do_el0_svc+0x4c/0x5c [ 191.246184][ T8047] el0_svc+0x64/0x260 [ 191.246194][ T8047] el0t_64_sync_handler+0x44/0x104 [ 191.246205][ T8047] el0t_64_sync+0x198/0x19c [ 191.898168][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.833'. [ 191.900145][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.833'. [ 191.935908][ T8064] loop6: detected capacity change from 0 to 128 [ 191.963469][ T8064] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.079786][ T4722] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.087614][ T4722] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.088407][ T4722] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.088806][ T4722] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.089022][ T4722] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.341770][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.346317][ T8069] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.350290][ T8069] bridge_slave_0: entered allmulticast mode [ 192.352513][ T8069] bridge_slave_0: entered promiscuous mode [ 192.354671][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.355996][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.357443][ T8069] bridge_slave_1: entered allmulticast mode [ 192.359076][ T8069] bridge_slave_1: entered promiscuous mode [ 192.377388][ T8069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.378523][ T8069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.385807][ T8069] team0: Port device team_slave_0 added [ 192.387072][ T8069] team0: Port device team_slave_1 added [ 192.401684][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.401715][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.401729][ T8069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.402300][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.402307][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.402321][ T8069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.442642][ T8069] hsr_slave_0: entered promiscuous mode [ 192.447421][ T8069] hsr_slave_1: entered promiscuous mode [ 192.481789][ T8103] loop4: detected capacity change from 0 to 512 [ 192.514798][ T8103] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002] [ 192.514870][ T8103] System zones: 1-12 [ 192.515382][ T8103] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.841: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 192.515401][ T8103] loop4: lost filesystem error report for type 5 error -117 [ 192.515712][ T8103] EXT4-fs (loop4): 1 orphan inode deleted [ 192.516175][ T8103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.654413][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.068596][ T7993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.255691][ T6611] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.292174][ T8069] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 193.304120][ T8069] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 193.309620][ T8069] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 193.324461][ T8069] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.327628][ T8069] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 193.336109][ T8069] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.345514][ T8069] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 193.354704][ T8069] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.495463][ T8069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.500080][ T8131] loop6: detected capacity change from 0 to 128 [ 193.506876][ T8131] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.522175][ T8069] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.801354][ T8134] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 193.905294][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.905349][ T6219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.910285][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.910334][ T6216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.916754][ T8129] syzkaller0: entered promiscuous mode [ 193.916792][ T8129] syzkaller0: entered allmulticast mode [ 193.934329][ T8136] loop4: detected capacity change from 0 to 512 [ 193.948357][ T8136] EXT4-fs: journaled quota format not specified [ 194.062937][ T8140] netlink: 'syz.3.851': attribute type 2 has an invalid length. [ 194.063271][ T8140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.851'. [ 194.166529][ T4709] Bluetooth: hci5: command tx timeout [ 194.303310][ T8155] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.854' sets config #4 [ 194.421541][ T8069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.613820][ T8069] veth0_vlan: entered promiscuous mode [ 194.627435][ T8069] veth1_vlan: entered promiscuous mode [ 194.632751][ T8069] veth0_macvtap: entered promiscuous mode [ 194.635329][ T8069] veth1_macvtap: entered promiscuous mode [ 194.651942][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.663373][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.670022][ T5079] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.670202][ T5079] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.670266][ T5079] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.670325][ T5079] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.736343][ T5071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.736379][ T5071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.755380][ T6216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.755419][ T6216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.811879][ T24] hid-generic 0005:0C45:0002.0001: unknown main item tag 0x0 [ 194.819961][ T24] hid-generic 0005:0C45:0002.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 194.892188][ T8192] FAULT_INJECTION: forcing a failure. [ 194.892188][ T8192] name failslab, interval 1, probability 0, space 0, times 0 [ 194.892227][ T8192] CPU: 1 UID: 0 PID: 8192 Comm: syz.7.835 Tainted: G L syzkaller #0 PREEMPT [ 194.892245][ T8192] Tainted: [L]=SOFTLOCKUP [ 194.892250][ T8192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 194.892255][ T8192] Call trace: [ 194.892258][ T8192] show_stack+0x2c/0x3c (C) [ 194.892277][ T8192] __dump_stack+0x30/0x40 [ 194.892290][ T8192] dump_stack_lvl+0xd8/0x12c [ 194.892302][ T8192] dump_stack+0x1c/0x28 [ 194.892313][ T8192] should_fail_ex+0x41c/0x590 [ 194.892325][ T8192] should_failslab+0xc4/0x120 [ 194.892338][ T8192] kmem_cache_alloc_noprof+0x94/0x5d4 [ 194.892351][ T8192] vm_area_dup+0x34/0x5c8 [ 194.892361][ T8192] dup_mmap+0x720/0x1998 [ 194.892370][ T8192] copy_mm+0xe8/0x324 [ 194.892379][ T8192] copy_process+0x173c/0x332c [ 194.892387][ T8192] kernel_clone+0x234/0x9fc [ 194.892396][ T8192] __arm64_sys_clone+0x168/0x1d4 [ 194.892405][ T8192] invoke_syscall+0x98/0x244 [ 194.892417][ T8192] el0_svc_common+0xec/0x23c [ 194.892429][ T8192] do_el0_svc+0x4c/0x5c [ 194.892440][ T8192] el0_svc+0x64/0x260 [ 194.892451][ T8192] el0t_64_sync_handler+0x44/0x104 [ 194.892461][ T8192] el0t_64_sync+0x198/0x19c [ 194.991394][ T8192] loop7: detected capacity change from 0 to 512 [ 195.140356][ T8202] loop7: detected capacity change from 0 to 4096 [ 195.143774][ T8202] ext2: block size(16384) > page size(4096) not supported by filesystem [ 195.145359][ T8202] EXT4-fs (loop7): bad block size 16384 [ 195.499446][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 195.499480][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.868'. [ 195.625088][ T8230] netlink: 'syz.0.872': attribute type 1 has an invalid length. [ 195.639542][ T8230] bond2: entered promiscuous mode [ 195.639701][ T8230] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.653030][ T8224] netlink: 220 bytes leftover after parsing attributes in process `syz.6.870'. [ 195.687514][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 195.820956][ T8250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'. [ 195.842132][ T8250] veth3: entered promiscuous mode [ 195.989256][ T8266] FAULT_INJECTION: forcing a failure. [ 195.989256][ T8266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.989297][ T8266] CPU: 1 UID: 0 PID: 8266 Comm: syz.3.882 Tainted: G L syzkaller #0 PREEMPT [ 195.989312][ T8266] Tainted: [L]=SOFTLOCKUP [ 195.989317][ T8266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 195.989323][ T8266] Call trace: [ 195.989327][ T8266] show_stack+0x2c/0x3c (C) [ 195.989345][ T8266] __dump_stack+0x30/0x40 [ 195.989356][ T8266] dump_stack_lvl+0xd8/0x12c [ 195.989366][ T8266] dump_stack+0x1c/0x28 [ 195.989375][ T8266] should_fail_ex+0x41c/0x590 [ 195.989386][ T8266] should_fail+0x14/0x24 [ 195.989396][ T8266] should_fail_usercopy+0x20/0x30 [ 195.989406][ T8266] simple_read_from_buffer+0xc4/0x238 [ 195.989416][ T8266] proc_fail_nth_read+0x1a8/0x248 [ 195.989425][ T8266] vfs_read+0x230/0x8c8 [ 195.989436][ T8266] ksys_read+0x12c/0x228 [ 195.989445][ T8266] __arm64_sys_read+0x84/0x98 [ 195.989456][ T8266] invoke_syscall+0x98/0x244 [ 195.989466][ T8266] el0_svc_common+0xec/0x23c [ 195.989476][ T8266] do_el0_svc+0x4c/0x5c [ 195.989485][ T8266] el0_svc+0x64/0x260 [ 195.989494][ T8266] el0t_64_sync_handler+0x44/0x104 [ 195.989503][ T8266] el0t_64_sync+0x198/0x19c [ 196.084972][ T8269] loop6: detected capacity change from 0 to 8192 [ 196.099945][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 196.102022][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.884'. [ 196.323688][ T8285] loop6: detected capacity change from 0 to 256 [ 196.333867][ T8285] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.339424][ T8285] 9p: Bad value for 'msize' [ 196.342438][ T8284] 9p: Bad value for 'msize' [ 197.366556][ T4709] Bluetooth: hci5: command tx timeout [ 198.680651][ T8256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.759074][ T8316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.759284][ T8316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.765593][ T8316] loop6: detected capacity change from 0 to 512 [ 198.788461][ T8316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.816508][ T6216] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 198.817387][ T6216] Bluetooth: hci2: Frame reassembly failed (-84) [ 198.833571][ T8332] netlink: 48 bytes leftover after parsing attributes in process `syz.3.903'. [ 199.030186][ T8341] netlink: 28 bytes leftover after parsing attributes in process `syz.7.905'. [ 199.180233][ T8351] /dev/loop0: Can't open blockdev [ 199.740957][ T8387] 0x000000000000-0x000000010000 : "" [ 199.755183][ T8387] ftl_cs: FTL header not found. [ 199.827793][ T8390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.907'. [ 199.870591][ T8392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.909'. [ 200.000986][ T8396] ip_tables: iptables: counters copy to user failed while replacing table [ 200.004076][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.7.911'. [ 200.202101][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'. [ 200.262946][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 200.560137][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 200.844518][ T8442] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 200.886681][ T4709] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 201.121498][ T8446] Boot memory [48000000 50000000] offlining attempted [ 201.217226][ T8459] team0: Device xfrm0 is of different type [ 201.246729][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 201.246764][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'. [ 201.370895][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.942'. [ 201.390187][ T8478] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 201.390528][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'. [ 201.394791][ T8478] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 201.409905][ T8478] bond3 (unregistering): Released all slaves [ 201.874001][ T6611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.903812][ T8505] loop3: detected capacity change from 0 to 1024 [ 201.911017][ T8505] EXT4-fs (loop3): orphan cleanup on readonly fs [ 201.919964][ T8505] EXT4-fs (loop3): 1 truncate cleaned up [ 201.922783][ T8505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.954864][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.976892][ T8510] loop7: detected capacity change from 0 to 128 [ 201.989307][ T8510] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.028663][ T8518] loop3: detected capacity change from 0 to 512 [ 202.030752][ T8518] EXT4-fs (loop3): Test dummy encryption mode enabled [ 202.035061][ T8518] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.953: inode has both inline data and extents flags [ 202.039806][ T8518] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 202.040286][ T8518] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.953: couldn't read orphan inode 15 (err -117) [ 202.040466][ T8512] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[8516] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[8512] [ 202.047053][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 202.047067][ C1] EXT4-fs (loop3): initial error at time 202: ext4_orphan_get:1403: inode 15 [ 202.047087][ C1] EXT4-fs (loop3): last error at time 202: ext4_orphan_get:1403: inode 15 [ 202.053124][ T8518] loop3: lost filesystem error report for type 5 error -117 [ 202.054188][ T8518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.164232][ T8532] syzkaller0: entered promiscuous mode [ 202.165520][ T8532] syzkaller0: entered allmulticast mode [ 203.003984][ T8521] Process accounting paused [ 203.042208][ T8543] batadv_slave_1: entered promiscuous mode [ 203.046314][ T8541] batadv_slave_1: left promiscuous mode [ 203.239022][ T8069] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.283575][ T8537] fscrypt: AES-256-XTS using blk-crypto-fallback [ 203.490414][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.522891][ T8560] loop6: detected capacity change from 0 to 256 [ 203.524096][ T8560] vfat: Unknown parameter 'sho' [ 203.583388][ T8555] Boot memory [48000000 50000000] offlining attempted [ 203.584448][ T8560] tmpfs: Unknown parameter 'uni_xlate' [ 203.724906][ T8574] syzkaller0: entered promiscuous mode [ 203.724938][ T8574] syzkaller0: entered allmulticast mode [ 203.735123][ T8577] loop7: detected capacity change from 0 to 512 [ 203.754380][ T8577] EXT4-fs (loop7): Test dummy encryption mode enabled [ 203.767583][ T8577] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.972: iget: bad i_size value: 38620345925642 [ 203.767621][ T8577] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 203.767776][ T8577] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.972: couldn't read orphan inode 15 (err -117) [ 203.767790][ T8577] loop7: lost filesystem error report for type 5 error -117 [ 203.768346][ T8577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.769622][ T8577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.993950][ T8579] loop3: detected capacity change from 0 to 8192 [ 204.024376][ T8577] loop7: detected capacity change from 0 to 512 [ 204.049783][ T8577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.190980][ T8594] loop3: detected capacity change from 0 to 2048 [ 204.210365][ T8594] loop3: p1 p2 < > p3 < p5 p6 > p4 [ 204.210402][ T8594] loop3: partition table partially beyond EOD, truncated [ 204.210496][ T8594] loop3: p1 start 385023 is beyond EOD, truncated [ 204.210507][ T8594] loop3: p2 start 4278190080 is beyond EOD, truncated [ 204.211812][ T8594] loop3: p4 start 1979908096 is beyond EOD, truncated [ 204.211825][ T8594] loop3: p5 start 385023 is beyond EOD, truncated [ 204.211836][ T8594] loop3: p6 start 1979908096 is beyond EOD, truncated [ 204.672389][ T8069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.678719][ T8615] loop4: detected capacity change from 0 to 512 [ 204.679275][ T8615] EXT4-fs (loop4): Test dummy encryption mode enabled [ 204.693868][ T8615] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.982: inode has both inline data and extents flags [ 204.693916][ T8615] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.694037][ T8615] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.982: couldn't read orphan inode 15 (err -117) [ 204.694059][ T8615] loop4: lost filesystem error report for type 5 error -117 [ 204.694556][ T8615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.695459][ T8615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.755220][ T8625] loop6: detected capacity change from 0 to 512 [ 204.755560][ T8625] EXT4-fs: Ignoring removed bh option [ 204.784490][ T8625] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 204.785198][ T8625] EXT4-fs (loop6): 1 truncate cleaned up [ 204.785614][ T8625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.785989][ T8629] batadv_slave_0: entered promiscuous mode [ 204.858101][ T8626] batadv_slave_0: left promiscuous mode [ 204.871438][ T8649] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 204.873822][ T8649] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0023] [ 204.873902][ T8649] System zones: 0-5 [ 204.874670][ T8649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.007412][ T8628] __nla_validate_parse: 9 callbacks suppressed [ 205.007739][ T8628] netlink: 36 bytes leftover after parsing attributes in process `syz.7.986'. [ 205.007754][ T8628] nbd: couldn't find device at index 134217728 [ 205.029257][ T8628] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 205.126598][ T4722] Bluetooth: hci4: command 0x0406 tx timeout [ 205.288002][ T4455] block nbd0: Possible stuck request 00000000ac53efdb: control (read@0,1024B). Runtime 30 seconds [ 205.288453][ T4455] block nbd0: Possible stuck request 00000000845d0e14: control (read@1024,1024B). Runtime 30 seconds [ 205.288492][ T4455] block nbd0: Possible stuck request 000000009b15e5fb: control (read@2048,1024B). Runtime 30 seconds [ 205.288508][ T4455] block nbd0: Possible stuck request 00000000bebd49a8: control (read@3072,1024B). Runtime 30 seconds [ 205.428117][ T8719] tmpfs: Bad value for 'mpol' [ 205.438452][ T8719] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 205.438475][ T8719] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 205.441644][ T8719] vhci_hcd vhci_hcd.0: Device attached [ 205.677733][ T4801] usb 10-1: new high-speed USB device number 2 using vhci_hcd [ 205.918763][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.923498][ T8755] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.988888][ T6611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.094753][ T8773] cgroup: fork rejected by pids controller in /syz7 [ 206.638820][ T8772] ptrace attach of ""[8775] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[8772] [ 206.645664][ T8721] vhci_hcd: connection reset by peer [ 206.654056][ T58] vhci_hcd vhci_hcd.4: stop threads [ 206.654548][ T58] vhci_hcd vhci_hcd.4: release socket [ 206.671132][ T58] vhci_hcd vhci_hcd.4: disconnect device [ 207.019971][ T8823] FAULT_INJECTION: forcing a failure. [ 207.019971][ T8823] name failslab, interval 1, probability 0, space 0, times 0 [ 207.023931][ T8823] CPU: 1 UID: 0 PID: 8823 Comm: syz.0.999 Tainted: G L syzkaller #0 PREEMPT [ 207.023959][ T8823] Tainted: [L]=SOFTLOCKUP [ 207.023963][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 207.023969][ T8823] Call trace: [ 207.023972][ T8823] show_stack+0x2c/0x3c (C) [ 207.023996][ T8823] __dump_stack+0x30/0x40 [ 207.024014][ T8823] dump_stack_lvl+0xd8/0x12c [ 207.024028][ T8823] dump_stack+0x1c/0x28 [ 207.024039][ T8823] should_fail_ex+0x41c/0x590 [ 207.024052][ T8823] should_failslab+0xc4/0x120 [ 207.024065][ T8823] __kmalloc_noprof+0x108/0x6c8 [ 207.024074][ T8823] tomoyo_encode2+0x10c/0x330 [ 207.024085][ T8823] tomoyo_encode+0x34/0x50 [ 207.024095][ T8823] tomoyo_mount_permission+0x384/0x7e4 [ 207.024105][ T8823] tomoyo_sb_mount+0x48/0x60 [ 207.024116][ T8823] security_sb_mount+0xfc/0x308 [ 207.024124][ T8823] path_mount+0xb8/0xa88 [ 207.024135][ T8823] do_mount+0xe8/0x148 [ 207.024145][ T8823] __arm64_sys_mount+0x33c/0x388 [ 207.024155][ T8823] invoke_syscall+0x98/0x244 [ 207.024167][ T8823] el0_svc_common+0xec/0x23c [ 207.024179][ T8823] do_el0_svc+0x4c/0x5c [ 207.024190][ T8823] el0_svc+0x64/0x260 [ 207.024200][ T8823] el0t_64_sync_handler+0x44/0x104 [ 207.024210][ T8823] el0t_64_sync+0x198/0x19c [ 207.424064][ T8829] set_capacity_and_notify: 3 callbacks suppressed [ 207.424105][ T8829] loop6: detected capacity change from 0 to 512 [ 207.430529][ T8069] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.489647][ T8825] syzkaller0: entered promiscuous mode [ 207.489680][ T8825] syzkaller0: entered allmulticast mode [ 207.490304][ T8839] loop7: detected capacity change from 0 to 512 [ 207.517238][ T8839] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 207.524302][ T8839] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #15: comm syz.7.1001: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 8, max 0(0), depth 0(0) [ 207.560844][ T8839] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #15: comm syz.7.1001: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 8, max 0(0), depth 0(0) [ 207.973172][ T8069] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 208.148449][ T8883] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 208.424505][ T8898] input: syz0 as /devices/virtual/input/input8 [ 208.456265][ T8909] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.615442][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 208.615480][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1025'. [ 208.687949][ T8954] loop4: detected capacity change from 0 to 256 [ 208.692658][ T8954] ima: Unable to open file: / (-22) [ 208.789219][ T8953] ima: policy update failed [ 208.790143][ T30] audit: type=1802 audit(208.770:3): pid=8953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.4.1029" res=0 errno=0 [ 208.817174][ T8959] loop4: detected capacity change from 0 to 512 [ 208.819463][ T8959] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 208.823229][ T8957] Bluetooth: MGMT ver 1.23 [ 208.824286][ T8957] Bluetooth: hci0: unsupported parameter 5135 [ 208.825562][ T8957] Bluetooth: hci0: unsupported parameter 8192 [ 208.825601][ T8957] Bluetooth: hci0: unsupported parameter 5135 [ 208.825618][ T8957] Bluetooth: hci0: unsupported parameter 8192 [ 208.830865][ T8957] xt_l2tp: v2 doesn't support IP mode [ 208.844448][ T8959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.155856][ T8977] netlink: 'syz.0.1033': attribute type 4 has an invalid length. [ 209.265295][ T8985] loop3: detected capacity change from 0 to 2048 [ 209.279049][ T8985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.292347][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1038'. [ 209.292378][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1038'. [ 209.336409][ T8993] loop6: detected capacity change from 0 to 512 [ 209.344460][ T8993] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.350686][ T8993] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 209.353399][ T8993] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002] [ 209.353497][ T8993] System zones: 0-1, 15-15, 18-18, 34-34 [ 209.353653][ T8993] EXT4-fs (loop6): orphan cleanup on readonly fs [ 209.353690][ T8993] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 209.353733][ T8993] EXT4-fs warning (device loop6): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 209.353749][ T8993] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 209.365906][ T8993] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1041: bg 0: block 40: padding at end of block bitmap is not set [ 209.369266][ T8993] loop6: lost filesystem error report for type 5 error -117 [ 209.371675][ T8993] EXT4-fs (loop6): Remounting filesystem read-only [ 209.371834][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1043'. [ 209.376493][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 209.376515][ C1] EXT4-fs (loop6): initial error at time 209: ext4_validate_block_bitmap:445 [ 209.376540][ C1] EXT4-fs (loop6): last error at time 209: ext4_validate_block_bitmap:445 [ 209.378352][ T8993] EXT4-fs (loop6): 1 truncate cleaned up [ 209.378777][ T8993] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 209.702830][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.815890][ T9011] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 209.868100][ T7541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.895352][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'. [ 209.895387][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 209.992988][ T4709] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.995672][ T4709] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.998279][ T4709] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.000368][ T4709] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.002098][ T4709] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.004944][ T9036] loop4: detected capacity change from 0 to 1024 [ 210.019887][ T9036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.020665][ T9036] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 210.021089][ T9036] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 210.048215][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.090477][ T9037] overlayfs: d_ino too big (., ino=4611686018427387916, xinobits=3) [ 210.090800][ T9037] overlayfs: d_ino too big (.., ino=4611686018427387906, xinobits=3) [ 210.091089][ T9037] overlayfs: d_ino too big (245, ino=9223372036854777191, xinobits=3) [ 210.091269][ T9037] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 210.091350][ T9037] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 210.091437][ T9037] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 210.092689][ T9037] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 210.092776][ T9037] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 210.092878][ T9037] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 210.092891][ T9037] overlayfs: d_ino too big (file0, ino=4611686018427387917, xinobits=3) [ 210.094194][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1059'. [ 210.168739][ T9054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1062'. [ 210.224466][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.341726][ T9033] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.346665][ T9033] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.346771][ T9033] bridge_slave_0: entered allmulticast mode [ 210.347354][ T9033] bridge_slave_0: entered promiscuous mode [ 210.352686][ T9033] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.352724][ T9033] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.352841][ T9033] bridge_slave_1: entered allmulticast mode [ 210.353284][ T9033] bridge_slave_1: entered promiscuous mode [ 210.408618][ T9070] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 210.415014][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'. [ 210.416967][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1066'. [ 210.425158][ T9033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.428421][ T9033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.438872][ T9033] team0: Port device team_slave_0 added [ 210.441011][ T9033] team0: Port device team_slave_1 added [ 210.450938][ T9033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.452447][ T9033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.457947][ T9033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.460973][ T9033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.462617][ T9033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.467577][ T9033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.483157][ T9033] hsr_slave_0: entered promiscuous mode [ 210.484822][ T9033] hsr_slave_1: entered promiscuous mode [ 210.486383][ T9033] debugfs: 'hsr0' already exists in 'hsr' [ 210.488422][ T9033] Cannot create hsr debugfs directory [ 210.544157][ T9075] netlink: 'syz.7.1067': attribute type 1 has an invalid length. [ 210.570016][ T9075] bond1: entered promiscuous mode [ 210.570266][ T9075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.662137][ T9084] loop3: detected capacity change from 0 to 256 [ 210.847532][ T9087] loop7: detected capacity change from 0 to 256 [ 210.870384][ T9033] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 210.873984][ T9033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.878211][ T9033] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 210.880617][ T9033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.882893][ T9033] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 210.887867][ T9033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.888227][ T9033] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 210.891287][ T9033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.910632][ T9033] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.910686][ T9033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.910778][ T9033] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.910812][ T9033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.916598][ T4801] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 210.933610][ T9033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.941587][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.943355][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.955631][ T9033] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.962844][ T8934] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.962894][ T8934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.965978][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.966025][ T8934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.130880][ T9033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.212459][ T9033] veth0_vlan: entered promiscuous mode [ 211.216811][ T9033] veth1_vlan: entered promiscuous mode [ 211.228756][ T9033] veth0_macvtap: entered promiscuous mode [ 211.231685][ T9033] veth1_macvtap: entered promiscuous mode [ 211.241841][ T9033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.243229][ T9033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.283585][ T5073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.283614][ T5073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.306296][ T8934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.306387][ T8934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.319164][ T5084] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.319207][ T5084] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.319226][ T5084] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.319242][ T5084] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.464726][ T9129] FAULT_INJECTION: forcing a failure. [ 211.464726][ T9129] name failslab, interval 1, probability 0, space 0, times 0 [ 211.464764][ T9129] CPU: 0 UID: 0 PID: 9129 Comm: syz.8.1057 Tainted: G L syzkaller #0 PREEMPT [ 211.464784][ T9129] Tainted: [L]=SOFTLOCKUP [ 211.464789][ T9129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 211.464795][ T9129] Call trace: [ 211.464798][ T9129] show_stack+0x2c/0x3c (C) [ 211.464819][ T9129] __dump_stack+0x30/0x40 [ 211.464835][ T9129] dump_stack_lvl+0xd8/0x12c [ 211.464847][ T9129] dump_stack+0x1c/0x28 [ 211.464858][ T9129] should_fail_ex+0x41c/0x590 [ 211.464871][ T9129] should_failslab+0xc4/0x120 [ 211.464884][ T9129] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 211.464898][ T9129] alloc_inode+0x84/0x198 [ 211.464909][ T9129] path_from_stashed+0x1d8/0x4ec [ 211.464921][ T9129] open_namespace_file+0x9c/0x148 [ 211.464929][ T9129] open_new_namespace+0x728/0x7d8 [ 211.464941][ T9129] vfs_open_tree+0x300/0x348 [ 211.464953][ T9129] __arm64_sys_open_tree+0xa4/0x120 [ 211.464964][ T9129] invoke_syscall+0x98/0x244 [ 211.464976][ T9129] el0_svc_common+0xec/0x23c [ 211.464988][ T9129] do_el0_svc+0x4c/0x5c [ 211.464999][ T9129] el0_svc+0x64/0x260 [ 211.465010][ T9129] el0t_64_sync_handler+0x44/0x104 [ 211.465020][ T9129] el0t_64_sync+0x198/0x19c [ 211.592857][ T9140] loop7: detected capacity change from 0 to 1024 [ 211.614024][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1079'. [ 211.615820][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1079'. [ 211.666544][ T9149] evm: overlay not supported [ 211.669791][ T9149] Invalid ELF header magic: != ELF [ 211.716621][ T9140] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.730582][ T8069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.950382][ T9160] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 211.995785][ T9166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1088'. [ 212.086696][ T4722] Bluetooth: hci2: command tx timeout [ 212.566234][ T9188] ip_tables: iptables: counters copy to user failed while replacing table [ 212.621641][ T9195] FAULT_INJECTION: forcing a failure. [ 212.621641][ T9195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.621752][ T9195] CPU: 1 UID: 0 PID: 9195 Comm: syz.0.1098 Tainted: G L syzkaller #0 PREEMPT [ 212.621764][ T9195] Tainted: [L]=SOFTLOCKUP [ 212.621768][ T9195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 212.621772][ T9195] Call trace: [ 212.621775][ T9195] show_stack+0x2c/0x3c (C) [ 212.621793][ T9195] __dump_stack+0x30/0x40 [ 212.621805][ T9195] dump_stack_lvl+0xd8/0x12c [ 212.621815][ T9195] dump_stack+0x1c/0x28 [ 212.621824][ T9195] should_fail_ex+0x41c/0x590 [ 212.621836][ T9195] should_fail+0x14/0x24 [ 212.621846][ T9195] should_fail_usercopy+0x20/0x30 [ 212.621856][ T9195] _inline_copy_from_user+0x3c/0x174 [ 212.621866][ T9195] copy_msghdr_from_user+0xb8/0x194 [ 212.621875][ T9195] ___sys_sendmsg+0x14c/0x224 [ 212.621883][ T9195] __sys_sendmsg+0x158/0x204 [ 212.621891][ T9195] __arm64_sys_sendmsg+0x88/0x9c [ 212.621900][ T9195] invoke_syscall+0x98/0x244 [ 212.621910][ T9195] el0_svc_common+0xec/0x23c [ 212.621919][ T9195] do_el0_svc+0x4c/0x5c [ 212.621929][ T9195] el0_svc+0x64/0x260 [ 212.621938][ T9195] el0t_64_sync_handler+0x44/0x104 [ 212.621947][ T9195] el0t_64_sync+0x198/0x19c [ 212.661968][ T9199] input: syz0 as /devices/virtual/input/input9 [ 212.719718][ T9201] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20000 [ 213.004739][ T9209] bridge1: entered promiscuous mode [ 213.006104][ T9209] bridge1: entered allmulticast mode [ 213.043218][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1106'. [ 213.045769][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'. [ 213.067787][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1106'. [ 213.215019][ T9217] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 213.557980][ T9223] FAULT_INJECTION: forcing a failure. [ 213.557980][ T9223] name failslab, interval 1, probability 0, space 0, times 0 [ 213.560250][ T9223] CPU: 1 UID: 0 PID: 9223 Comm: syz.4.1110 Tainted: G L syzkaller #0 PREEMPT [ 213.560266][ T9223] Tainted: [L]=SOFTLOCKUP [ 213.560270][ T9223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 213.560275][ T9223] Call trace: [ 213.560278][ T9223] show_stack+0x2c/0x3c (C) [ 213.560296][ T9223] __dump_stack+0x30/0x40 [ 213.560308][ T9223] dump_stack_lvl+0xd8/0x12c [ 213.560318][ T9223] dump_stack+0x1c/0x28 [ 213.560328][ T9223] should_fail_ex+0x41c/0x590 [ 213.560339][ T9223] should_failslab+0xc4/0x120 [ 213.560351][ T9223] __kmalloc_noprof+0x108/0x6c8 [ 213.560359][ T9223] sock_kmalloc+0xec/0x1a0 [ 213.560371][ T9223] ____sys_sendmsg+0x1b4/0x6c8 [ 213.560379][ T9223] ___sys_sendmsg+0x198/0x224 [ 213.560388][ T9223] __sys_sendmsg+0x158/0x204 [ 213.560396][ T9223] __arm64_sys_sendmsg+0x88/0x9c [ 213.560405][ T9223] invoke_syscall+0x98/0x244 [ 213.560415][ T9223] el0_svc_common+0xec/0x23c [ 213.560425][ T9223] do_el0_svc+0x4c/0x5c [ 213.560434][ T9223] el0_svc+0x64/0x260 [ 213.560444][ T9223] el0t_64_sync_handler+0x44/0x104 [ 213.560453][ T9223] el0t_64_sync+0x198/0x19c [ 214.166572][ T4722] Bluetooth: hci2: command tx timeout [ 214.214764][ T9261] loop8: detected capacity change from 0 to 128 [ 214.216813][ T9261] Invalid source name [ 214.217693][ T9261] UBIFS error (pid: 9261): cannot open "/dev/loop8", error -22 [ 214.265329][ T9266] FAULT_INJECTION: forcing a failure. [ 214.265329][ T9266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.269845][ T9266] CPU: 1 UID: 0 PID: 9266 Comm: syz.8.1123 Tainted: G L syzkaller #0 PREEMPT [ 214.269880][ T9266] Tainted: [L]=SOFTLOCKUP [ 214.269885][ T9266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 214.269891][ T9266] Call trace: [ 214.269895][ T9266] show_stack+0x2c/0x3c (C) [ 214.269918][ T9266] __dump_stack+0x30/0x40 [ 214.269931][ T9266] dump_stack_lvl+0xd8/0x12c [ 214.269941][ T9266] dump_stack+0x1c/0x28 [ 214.269951][ T9266] should_fail_ex+0x41c/0x590 [ 214.269962][ T9266] should_fail+0x14/0x24 [ 214.269972][ T9266] should_fail_usercopy+0x20/0x30 [ 214.269982][ T9266] _inline_copy_from_user+0x3c/0x174 [ 214.269992][ T9266] ____sys_sendmsg+0x254/0x6c8 [ 214.270000][ T9266] ___sys_sendmsg+0x198/0x224 [ 214.270008][ T9266] __sys_sendmsg+0x158/0x204 [ 214.270017][ T9266] __arm64_sys_sendmsg+0x88/0x9c [ 214.270025][ T9266] invoke_syscall+0x98/0x244 [ 214.270035][ T9266] el0_svc_common+0xec/0x23c [ 214.270045][ T9266] do_el0_svc+0x4c/0x5c [ 214.270054][ T9266] el0_svc+0x64/0x260 [ 214.270064][ T9266] el0t_64_sync_handler+0x44/0x104 [ 214.270072][ T9266] el0t_64_sync+0x198/0x19c [ 214.312349][ T9264] loop7: detected capacity change from 0 to 2048 [ 214.441275][ T9264] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.456621][ T9264] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.1122: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 214.463543][ T9275] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 214.465994][ T9268] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.1122: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 214.492686][ T8069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.632244][ T9297] FAULT_INJECTION: forcing a failure. [ 214.632244][ T9297] name failslab, interval 1, probability 0, space 0, times 0 [ 214.632284][ T9297] CPU: 1 UID: 0 PID: 9297 Comm: syz.0.1134 Tainted: G L syzkaller #0 PREEMPT [ 214.632299][ T9297] Tainted: [L]=SOFTLOCKUP [ 214.632304][ T9297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 214.632310][ T9297] Call trace: [ 214.632313][ T9297] show_stack+0x2c/0x3c (C) [ 214.632332][ T9297] __dump_stack+0x30/0x40 [ 214.632343][ T9297] dump_stack_lvl+0xd8/0x12c [ 214.632354][ T9297] dump_stack+0x1c/0x28 [ 214.632363][ T9297] should_fail_ex+0x41c/0x590 [ 214.632374][ T9297] should_failslab+0xc4/0x120 [ 214.632385][ T9297] __kmalloc_cache_noprof+0x94/0x5fc [ 214.632393][ T9297] rxrpc_lookup_local+0x444/0x109c [ 214.632402][ T9297] rxrpc_sendmsg+0x278/0x520 [ 214.632411][ T9297] __sock_sendmsg+0xc8/0x17c [ 214.632419][ T9297] ____sys_sendmsg+0x3d0/0x6c8 [ 214.632427][ T9297] ___sys_sendmsg+0x198/0x224 [ 214.632436][ T9297] __sys_sendmsg+0x158/0x204 [ 214.632444][ T9297] __arm64_sys_sendmsg+0x88/0x9c [ 214.632452][ T9297] invoke_syscall+0x98/0x244 [ 214.632462][ T9297] el0_svc_common+0xec/0x23c [ 214.632472][ T9297] do_el0_svc+0x4c/0x5c [ 214.632481][ T9297] el0_svc+0x64/0x260 [ 214.632491][ T9297] el0t_64_sync_handler+0x44/0x104 [ 214.632499][ T9297] el0t_64_sync+0x198/0x19c [ 215.244322][ T9327] tipc: Trying to set illegal importance in message [ 215.352522][ T9330] syzkaller0: entered promiscuous mode [ 215.352565][ T9330] syzkaller0: entered allmulticast mode [ 215.744829][ T9357] loop4: detected capacity change from 0 to 256 [ 215.781756][ T9357] FAULT_INJECTION: forcing a failure. [ 215.781756][ T9357] name fail_futex, interval 1, probability 0, space 0, times 0 [ 215.785792][ T9358] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 215.789293][ T9357] CPU: 1 UID: 0 PID: 9357 Comm: syz.4.1158 Tainted: G L syzkaller #0 PREEMPT [ 215.789316][ T9357] Tainted: [L]=SOFTLOCKUP [ 215.789320][ T9357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 215.789325][ T9357] Call trace: [ 215.789329][ T9357] show_stack+0x2c/0x3c (C) [ 215.789347][ T9357] __dump_stack+0x30/0x40 [ 215.789360][ T9357] dump_stack_lvl+0xd8/0x12c [ 215.789371][ T9357] dump_stack+0x1c/0x28 [ 215.789382][ T9357] should_fail_ex+0x41c/0x590 [ 215.789395][ T9357] should_fail+0x14/0x24 [ 215.789406][ T9357] get_futex_key+0x1ec/0x12b0 [ 215.789416][ T9357] futex_wake+0x10c/0x594 [ 215.789427][ T9357] do_futex+0x2c4/0x378 [ 215.789437][ T9357] __arm64_sys_futex+0x2e4/0x418 [ 215.789448][ T9357] invoke_syscall+0x98/0x244 [ 215.789460][ T9357] el0_svc_common+0xec/0x23c [ 215.789471][ T9357] do_el0_svc+0x4c/0x5c [ 215.789482][ T9357] el0_svc+0x64/0x260 [ 215.789493][ T9357] el0t_64_sync_handler+0x44/0x104 [ 215.789503][ T9357] el0t_64_sync+0x198/0x19c [ 215.879895][ T4706] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 215.883975][ T4706] FAT-fs (loop4): Filesystem has been set read-only [ 215.884141][ T4706] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 216.256617][ T4722] Bluetooth: hci2: command tx timeout [ 216.326381][ T9365] overlayfs: failed lookup in lower (newroot/256, name='bus', err=-40): overlapping layers [ 216.336535][ T9365] overlayfs: failed lookup in lower (newroot/256, name='bus', err=-40): overlapping layers [ 216.477341][ T4709] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.479666][ T4709] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.481496][ T4709] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.484874][ T4709] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.488000][ T4709] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.564889][ T9399] xt_IDLETIMER: timeout value is zero [ 216.564970][ T9399] xt_IDLETIMER: timeout value is zero [ 216.565035][ T9399] xt_IDLETIMER: timeout value is zero [ 216.565083][ T9399] xt_IDLETIMER: timeout value is zero [ 216.565126][ T9399] xt_IDLETIMER: timeout value is zero [ 216.565170][ T9399] xt_IDLETIMER: timeout value is zero [ 216.565212][ T9399] xt_IDLETIMER: timeout value is zero [ 216.565261][ T9399] xt_IDLETIMER: timeout value is zero [ 216.565302][ T9399] xt_IDLETIMER: timeout value is zero [ 216.565344][ T9399] xt_IDLETIMER: timeout value is zero [ 216.611207][ T9404] loop8: detected capacity change from 0 to 512 [ 216.612571][ T9404] ext4: Unknown parameter 'euid<00000000000000060929' [ 216.622778][ T8934] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.681107][ T9404] loop8: detected capacity change from 0 to 1024 [ 216.681504][ T9404] EXT4-fs: Ignoring removed bh option [ 216.684335][ T9404] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 216.692262][ T9404] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.741053][ T9033] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.755613][ T8934] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.786145][ T9415] loop7: detected capacity change from 0 to 512 [ 216.802642][ T9415] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.1174: iget: bad i_size value: -1099511627766 [ 216.805297][ T9415] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 216.805737][ T9415] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.1174: couldn't read orphan inode 15 (err -117) [ 216.807632][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 216.807645][ C1] EXT4-fs (loop7): initial error at time 216: ext4_orphan_get:1403: inode 15 [ 216.807662][ C1] EXT4-fs (loop7): last error at time 216: ext4_orphan_get:1403: inode 15 [ 216.820112][ T9415] loop7: lost filesystem error report for type 5 error -117 [ 216.821002][ T9415] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.855239][ T8934] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.878600][ T9424] tipc: Started in network mode [ 216.878649][ T9424] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 216.878783][ T9424] tipc: Enabled bearer , priority 10 [ 216.894149][ T8069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.936421][ T9434] loop3: detected capacity change from 0 to 256 [ 216.983974][ T9436] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1178'. [ 217.011501][ T8934] bridge0: port 3(netdevsim0) entered disabled state [ 217.033417][ T8934] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 217.033461][ T8934] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 217.034202][ T8934] bridge0: port 3(netdevsim0) entered disabled state [ 217.048851][ T8934] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.054339][ T9437] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1178'. [ 217.185319][ T9455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1186'. [ 217.211255][ T8934] bridge_slave_1: left allmulticast mode [ 217.211291][ T8934] bridge_slave_1: left promiscuous mode [ 217.211427][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.220425][ T8934] bridge_slave_0: left allmulticast mode [ 217.220454][ T8934] bridge_slave_0: left promiscuous mode [ 217.220538][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.234658][ T9465] loop7: detected capacity change from 0 to 1024 [ 217.251193][ T9465] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.257270][ T9465] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 217.260470][ T9465] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.1189: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 217.293480][ T9465] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.1189: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 217.300472][ T9465] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.1189: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 217.305665][ T9465] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.1189: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 217.314472][ T9465] overlayfs: failed to look up (file0) for ino (-117) [ 217.353517][ T9473] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.1189: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 217.359713][ T9475] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.1189: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 217.365695][ T9479] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.1189: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 217.370756][ T9479] overlayfs: failed to look up (file0) for ino (-117) [ 217.419520][ T8069] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 217.424822][ T8069] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 217.490998][ T9485] loop8: detected capacity change from 0 to 512 [ 217.497615][ T9485] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 217.527126][ T9485] EXT4-fs (loop8): 1 truncate cleaned up [ 217.527837][ T9485] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.542733][ T284] IPVS: starting estimator thread 0... [ 217.562575][ T8934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.627050][ T8934] bond_slave_0: left promiscuous mode [ 217.632129][ T8934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.640614][ T9487] IPVS: using max 57 ests per chain, 136800 per kthread [ 217.688935][ T8934] bond_slave_1: left promiscuous mode [ 217.926247][ T8934] bond0 (unregistering): Released all slaves [ 217.936741][ T8934] bond1 (unregistering): Released all slaves [ 217.997536][ T26] tipc: Node number set to 10136234 [ 218.023395][ T9375] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.045100][ T9375] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.045229][ T9375] bridge_slave_0: entered allmulticast mode [ 218.045721][ T9375] bridge_slave_0: entered promiscuous mode [ 218.060533][ T9375] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.060587][ T9375] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.060686][ T9375] bridge_slave_1: entered allmulticast mode [ 218.061131][ T9375] bridge_slave_1: entered promiscuous mode [ 218.104145][ T9375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.150643][ T8069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.178291][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1200'. [ 218.178326][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'. [ 218.184624][ T9375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.248962][ T9375] team0: Port device team_slave_0 added [ 218.314988][ T9521] loop3: detected capacity change from 0 to 1024 [ 218.320760][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.321786][ T9521] /dev/loop3: Can't open blockdev [ 218.334079][ T9375] team0: Port device team_slave_1 added [ 218.338203][ T4722] Bluetooth: hci2: command tx timeout [ 218.351664][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.354660][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.358543][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.360248][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.385059][ T9033] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.435115][ T9521] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 218.501852][ T9375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.501881][ T9375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.501911][ T9375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.502572][ T9375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.502586][ T9375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.502607][ T9375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.551645][ T9375] hsr_slave_0: entered promiscuous mode [ 218.551926][ T9537] Soft offlining pfn 0x11e4be at process virtual address 0x20000000 [ 218.569306][ T4709] Bluetooth: hci1: command tx timeout [ 218.592028][ T9375] hsr_slave_1: entered promiscuous mode [ 218.592256][ T9375] debugfs: 'hsr0' already exists in 'hsr' [ 218.592266][ T9375] Cannot create hsr debugfs directory [ 218.593110][ T4395] 8021q: adding VLAN 0 to HW filter on device eth4 [ 218.711408][ T9537] Injecting memory failure for pfn 0x1635bd at process virtual address 0x20000000 [ 218.713666][ T9537] Memory failure: 0x1635bd: Sending SIGBUS to syz.3.1207:9537 due to hardware memory corruption [ 218.713743][ T9537] Memory failure: 0x1635bd: recovery action for dirty LRU page: Recovered [ 218.761107][ T8934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.761144][ T8934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.764330][ T8934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.764362][ T8934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.772259][ T8934] veth1_macvtap: left promiscuous mode [ 218.772308][ T8934] veth0_macvtap: left promiscuous mode [ 218.772367][ T8934] veth1_vlan: left promiscuous mode [ 218.785176][ T9558] fuse: Unknown parameter 'seclabel' [ 218.927384][ T284] smc: removing ib device syz2 [ 218.958826][ T9564] loop8: p1 < > p4 [ 218.960977][ T9564] loop8: p4 size 8388608 extends beyond EOD, truncated [ 219.118163][ T8934] team0 (unregistering): Port device team_slave_1 removed [ 219.130318][ T8934] team0 (unregistering): Port device team_slave_0 removed [ 219.272297][ T9561] syzkaller0: entered promiscuous mode [ 219.275568][ T9561] syzkaller0: entered allmulticast mode [ 219.685404][ T9590] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 219.685441][ T9590] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 219.707545][ T9590] PKCS7: Unsupported data type 106 [ 219.975478][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1218'. [ 219.975514][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1218'. [ 220.418331][ T4709] Bluetooth: hci3: command tx timeout [ 220.636345][ T4395] 8021q: adding VLAN 0 to HW filter on device eth5 [ 220.646591][ T4709] Bluetooth: hci1: command tx timeout [ 220.796407][ T9375] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 220.814844][ T9375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.815211][ T9375] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 220.820446][ T9375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.836555][ T9375] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 220.849205][ T9375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.850968][ T9375] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 220.863714][ T9375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.974809][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.976358][ T9523] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.978929][ T9523] bridge_slave_0: entered allmulticast mode [ 220.979666][ T9523] bridge_slave_0: entered promiscuous mode [ 220.982176][ T9523] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.982203][ T9523] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.982266][ T9523] bridge_slave_1: entered allmulticast mode [ 220.983071][ T9523] bridge_slave_1: entered promiscuous mode [ 220.991940][ T4395] 8021q: adding VLAN 0 to HW filter on device eth7 [ 221.013169][ T8934] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.024857][ T9523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.031610][ T9523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.041725][ T9523] team0: Port device team_slave_0 added [ 221.042591][ T9523] team0: Port device team_slave_1 added [ 221.058123][ T9523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.058150][ T9523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.058440][ T9523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.059329][ T9523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.059335][ T9523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.059346][ T9523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.067604][ T9375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.071607][ T9375] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.084627][ T5073] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.084670][ T5073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.085177][ T5073] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.085196][ T5073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.099865][ T9666] syzkaller0: entered promiscuous mode [ 221.099904][ T9666] syzkaller0: entered allmulticast mode [ 221.110800][ T9523] hsr_slave_0: entered promiscuous mode [ 221.111149][ T9523] hsr_slave_1: entered promiscuous mode [ 221.111351][ T9523] debugfs: 'hsr0' already exists in 'hsr' [ 221.111361][ T9523] Cannot create hsr debugfs directory [ 221.114677][ T9375] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.114689][ T9375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.150457][ T8934] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.285238][ T8934] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.293760][ T4395] 8021q: adding VLAN 0 to HW filter on device eth6 [ 221.345377][ T9689] set_capacity_and_notify: 2 callbacks suppressed [ 221.350292][ T9689] loop8: detected capacity change from 0 to 1024 [ 221.358846][ T9689] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 221.375557][ T9689] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #3: block 2: comm syz.8.1229: lblock 2 mapped to illegal pblock 2 (length 1) [ 221.375594][ T9689] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 221.378557][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 221.378576][ C1] EXT4-fs (loop8): initial error at time 221: ext4_map_blocks:790: inode 3: block 2 [ 221.378599][ C1] EXT4-fs (loop8): last error at time 221: ext4_map_blocks:790: inode 3: block 2 [ 221.389084][ T9689] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 221.389147][ T9689] EXT4-fs error (device loop8): __ext4_get_inode_loc:4916: comm syz.8.1229: Invalid inode table block 1 in block_group 0 [ 221.389174][ T9689] loop8: lost filesystem error report for type 5 error -117 [ 221.395215][ T8934] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.400710][ T9689] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 221.400748][ T9689] loop8: lost filesystem error report for type 5 error -117 [ 221.403593][ T9689] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #3: comm syz.8.1229: mark_inode_dirty error [ 221.403642][ T9689] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 221.403798][ T9689] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 221.403815][ T9689] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.1229: Failed to acquire dquot type 0 [ 221.403833][ T9689] loop8: lost filesystem error report for type 5 error -117 [ 221.403965][ T9689] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 221.403980][ T9689] loop8: lost filesystem error report for type 5 error -117 [ 221.404272][ T9689] EXT4-fs error (device loop8): ext4_evict_inode:269: inode #11: comm syz.8.1229: mark_inode_dirty error [ 221.404284][ T9689] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.404359][ T9689] EXT4-fs warning (device loop8): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 221.404408][ T9689] EXT4-fs (loop8): 1 orphan inode deleted [ 221.412700][ T9689] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.418198][ T284] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 221.421717][ T284] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 221.421738][ T284] EXT4-fs error (device loop8): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 0 [ 221.431948][ T9033] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.435166][ T9033] EXT4-fs error (device loop8): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 221.435190][ T9033] loop8: lost filesystem error report for type 5 error -117 [ 221.440062][ T9033] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 221.440098][ T9033] loop8: lost filesystem error report for type 5 error -117 [ 221.440302][ T9033] EXT4-fs error (device loop8): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 221.440320][ T9033] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 221.441050][ T9033] EXT4-fs error (device loop8): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 221.441070][ T9033] loop8: lost filesystem error report for type 5 error -117 [ 221.514142][ T9375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.623521][ T8934] bridge_slave_1: left allmulticast mode [ 221.624713][ T8934] bridge_slave_1: left promiscuous mode [ 221.625974][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.640092][ T8934] bridge_slave_0: left allmulticast mode [ 221.642316][ T8934] bridge_slave_0: left promiscuous mode [ 221.644941][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.718916][ T9724] vhci_hcd vhci_hcd.2: invalid port number 0 [ 221.757394][ T8934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.771658][ T8934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.807560][ T8934] bond0 (unregistering): Released all slaves [ 221.814367][ T8934] bond1 (unregistering): Released all slaves [ 221.822076][ T9736] loop3: detected capacity change from 0 to 256 [ 221.822997][ T9736] FAT-fs (loop3): Directory bread(block 1285) failed [ 221.823015][ T9736] FAT-fs (loop3): Directory bread(block 1286) failed [ 221.823026][ T9736] FAT-fs (loop3): Directory bread(block 1287) failed [ 221.823065][ T9736] FAT-fs (loop3): Directory bread(block 1288) failed [ 221.905375][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.905909][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.972456][ T9375] veth0_vlan: entered promiscuous mode [ 222.213703][ T9375] veth1_vlan: entered promiscuous mode [ 222.244004][ T9375] veth0_macvtap: entered promiscuous mode [ 222.295757][ T9375] veth1_macvtap: entered promiscuous mode [ 222.318911][ T9375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.338033][ T9375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.412046][ T5069] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.467067][ T9750] syzkaller0: entered promiscuous mode [ 222.467100][ T9750] syzkaller0: entered allmulticast mode [ 222.497063][ T4709] Bluetooth: hci3: command tx timeout [ 222.556110][ T5069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.556145][ T5069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.585493][ T9780] Invalid ELF header magic: != ELF [ 222.612017][ T8934] hsr_slave_0: left promiscuous mode [ 222.613490][ T8934] hsr_slave_1: left promiscuous mode [ 222.614870][ T8934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.614882][ T8934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.618062][ T8934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.619484][ T8934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.624373][ T8934] veth1_macvtap: left promiscuous mode [ 222.625633][ T8934] veth0_macvtap: left promiscuous mode [ 222.628613][ T8934] veth1_vlan: left promiscuous mode [ 222.629875][ T8934] veth0_vlan: left promiscuous mode [ 222.670977][ T9786] loop8: detected capacity change from 0 to 128 [ 222.737374][ T4709] Bluetooth: hci1: command tx timeout [ 222.793349][ T9790] loop3: detected capacity change from 0 to 512 [ 222.800809][ T9790] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.1245: inode has both inline data and extents flags [ 222.800844][ T9790] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 222.801362][ T9790] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1245: couldn't read orphan inode 15 (err -117) [ 222.801377][ T9790] loop3: lost filesystem error report for type 5 error -117 [ 222.802842][ T9790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.859603][ T8934] team0 (unregistering): Port device team_slave_1 removed [ 222.864936][ T8934] team0 (unregistering): Port device team_slave_0 removed [ 222.977458][ T5080] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.979839][ T284] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.979896][ T284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.979912][ T284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.980084][ T284] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.102838][ T9812] loop9: detected capacity change from 0 to 256 [ 223.118217][ T9812] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.161502][ T9523] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 223.188409][ T9523] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 223.188772][ T9523] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 223.201839][ T9819] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1248'. [ 223.201882][ T9819] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1248'. [ 223.203312][ T9523] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 223.203650][ T9523] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 223.223263][ T9523] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 223.224408][ T9523] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 223.236213][ T9523] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.251252][ T9829] loop9: detected capacity change from 0 to 128 [ 223.269030][ T9829] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.340145][ T4395] 8021q: adding VLAN 0 to HW filter on device eth3 [ 223.348840][ T9523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.370327][ T9523] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.374823][ T8934] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.374876][ T8934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.378539][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.378576][ T8934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.388471][ T9840] syzkaller0: entered promiscuous mode [ 223.389071][ T9840] syzkaller0: entered allmulticast mode [ 223.562154][ T4395] 8021q: adding VLAN 0 to HW filter on device eth8 [ 223.608763][ T9871] Invalid ELF header magic: != ELF [ 223.615061][ T9872] syzkaller0: entered promiscuous mode [ 223.615094][ T9872] syzkaller0: entered allmulticast mode [ 223.653156][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.672921][ T9881] Injecting memory failure for pfn 0x15fa3a at process virtual address 0x20ffe000 [ 223.679555][ T9881] Memory failure: 0x15fa3a: keeping poisoned page in swap cache [ 223.681319][ T9881] Memory failure: 0x15fa3a: recovery action for clean swapcache page: Recovered [ 223.683292][ T9881] Injecting memory failure for pfn 0x11ee21 at process virtual address 0x20fff000 [ 223.687431][ T9881] Memory failure: 0x11ee21: Sending SIGBUS to syz.3.1256:9881 due to hardware memory corruption [ 223.690257][ T9881] Memory failure: 0x11ee21: recovery action for dirty LRU page: Recovered [ 223.828405][ T4395] 8021q: adding VLAN 0 to HW filter on device eth10 [ 223.898675][ T9523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.911883][ T9910] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1259'. [ 223.911914][ T9910] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1259'. [ 223.911930][ T9910] netlink: 'syz.3.1259': attribute type 6 has an invalid length. [ 223.911939][ T9910] netlink: 'syz.3.1259': attribute type 5 has an invalid length. [ 223.911946][ T9910] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1259'. [ 223.912020][ T9911] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1259'. [ 223.912028][ T9911] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1259'. [ 223.912034][ T9911] netlink: 'syz.3.1259': attribute type 6 has an invalid length. [ 223.912040][ T9911] netlink: 'syz.3.1259': attribute type 5 has an invalid length. [ 223.912046][ T9911] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1259'. [ 223.925669][ T9910] gtp0: entered allmulticast mode [ 223.928215][ T9910] team0: Device gtp0 is of different type [ 223.966194][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1260'. [ 223.993139][ T9523] veth0_vlan: entered promiscuous mode [ 223.997207][ T9523] veth1_vlan: entered promiscuous mode [ 224.014090][ T9523] veth0_macvtap: entered promiscuous mode [ 224.015649][ T9523] veth1_macvtap: entered promiscuous mode [ 224.021735][ T12] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 224.031078][ T9921] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 224.035957][ T9523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.038611][ T9523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.042846][ T8924] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.042907][ T8924] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.042935][ T8924] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.097006][ T8924] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.118380][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.118418][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.134225][ T9926] loop8: detected capacity change from 0 to 4096 [ 224.161961][ T4395] 8021q: adding VLAN 0 to HW filter on device eth9 [ 224.163705][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.163734][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.181091][ T9926] EXT4-fs (loop8): Test dummy encryption mode enabled [ 224.185163][ T9926] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.248127][ T9921] nvme_fabrics: unknown parameter or missing value 'ctrl_loss_tmo=' in ctrl creation request [ 224.301696][ T9033] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.574419][ T9963] syzkaller0: entered promiscuous mode [ 224.574457][ T9963] syzkaller0: entered allmulticast mode [ 224.578607][ T4709] Bluetooth: hci3: command tx timeout [ 224.760623][ T9996] loop3: detected capacity change from 0 to 512 [ 224.770993][ T9855] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.063390][ T9996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.082040][ T8924] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.133122][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 225.154595][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.634541][ T8924] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.733892][ T8924] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.782711][ T8924] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.874858][ T8924] bridge_slave_1: left allmulticast mode [ 225.874892][ T8924] bridge_slave_1: left promiscuous mode [ 225.875000][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.885769][ T8924] bridge_slave_0: left allmulticast mode [ 225.885798][ T8924] bridge_slave_0: left promiscuous mode [ 225.885879][ T8924] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.977372][ T8924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.998528][ T8924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.037459][ T8924] bond0 (unregistering): Released all slaves [ 226.310707][ T8924] hsr_slave_0: left promiscuous mode [ 226.310996][ T8924] hsr_slave_1: left promiscuous mode [ 226.311575][ T8924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.311741][ T8924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.313213][ T8924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.313223][ T8924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.320274][ T8924] veth1_macvtap: left promiscuous mode [ 226.320298][ T8924] veth0_macvtap: left promiscuous mode [ 226.320352][ T8924] veth1_vlan: left promiscuous mode [ 226.320385][ T8924] veth0_vlan: left promiscuous mode [ 226.433332][ T8924] team0 (unregistering): Port device team_slave_1 removed [ 226.440881][ T8924] team0 (unregistering): Port device team_slave_0 removed [ 226.518960][ T4395] eql: remember to turn off Van-Jacobson compression on your slave devices [ 226.646688][ T4709] Bluetooth: hci3: command tx timeout [ 228.412153][ T4395] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 228.488764][ T4395] 8021q: adding VLAN 0 to HW filter on device eth0 [ 228.555360][ T4395] 8021q: adding VLAN 0 to HW filter on device eth1 [ 228.674429][ T4395] 8021q: adding VLAN 0 to HW filter on device eth2 [ 228.737559][ T4395] 8021q: adding VLAN 0 to HW filter on device eth11 [ 235.369206][ T4455] block nbd0: Possible stuck request 00000000ac53efdb: control (read@0,1024B). Runtime 60 seconds [ 235.369248][ T4455] block nbd0: Possible stuck request 00000000845d0e14: control (read@1024,1024B). Runtime 60 seconds [ 235.369282][ T4455] block nbd0: Possible stuck request 000000009b15e5fb: control (read@2048,1024B). Runtime 60 seconds [ 235.369298][ T4455] block nbd0: Possible stuck request 00000000bebd49a8: control (read@3072,1024B). Runtime 60 seconds [ 235.667404][ T4339] udevd[4339]: worker [6193] /devices/virtual/block/nbd0 is taking a long time [ 265.448807][ T4455] block nbd0: Possible stuck request 00000000ac53efdb: control (read@0,1024B). Runtime 90 seconds [ 265.448850][ T4455] block nbd0: Possible stuck request 00000000845d0e14: control (read@1024,1024B). Runtime 90 seconds [ 265.448866][ T4455] block nbd0: Possible stuck request 000000009b15e5fb: control (read@2048,1024B). Runtime 90 seconds [ 265.448878][ T4455] block nbd0: Possible stuck request 00000000bebd49a8: control (read@3072,1024B). Runtime 90 seconds [ 284.679320][ T8934] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.743721][ T8934] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.864670][ T8934] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.903184][ T8934] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.019837][ T8934] bridge_slave_1: left allmulticast mode [ 285.019874][ T8934] bridge_slave_1: left promiscuous mode [ 285.019986][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.023451][ T8934] bridge_slave_0: left allmulticast mode [ 285.023463][ T8934] bridge_slave_0: left promiscuous mode [ 285.023537][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.089352][ T8934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.127757][ T8934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.147361][ T8934] bond0 (unregistering): Released all slaves [ 285.212868][ T4395] 8021q: adding VLAN 0 to HW filter on device eth12 [ 285.288998][ T4395] 8021q: adding VLAN 0 to HW filter on device eth13 [ 285.396772][ T8934] hsr_slave_0: left promiscuous mode [ 285.397907][ T8934] hsr_slave_1: left promiscuous mode [ 285.398193][ T8934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.398204][ T8934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.402285][ T8934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.402304][ T8934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.406854][ T8934] veth1_macvtap: left promiscuous mode [ 285.406924][ T8934] veth1_vlan: left promiscuous mode [ 285.406958][ T8934] veth0_vlan: left promiscuous mode [ 285.506417][ T8934] team0 (unregistering): Port device team_slave_1 removed [ 285.511063][ T8934] team0 (unregistering): Port device team_slave_0 removed [ 285.559732][ T4395] 8021q: adding VLAN 0 to HW filter on device eth15 [ 285.648845][ T4395] 8021q: adding VLAN 0 to HW filter on device eth14 [ 295.526905][ T4455] block nbd0: Possible stuck request 00000000ac53efdb: control (read@0,1024B). Runtime 120 seconds [ 295.526945][ T4455] block nbd0: Possible stuck request 00000000845d0e14: control (read@1024,1024B). Runtime 120 seconds [ 295.526958][ T4455] block nbd0: Possible stuck request 000000009b15e5fb: control (read@2048,1024B). Runtime 120 seconds [ 295.526969][ T4455] block nbd0: Possible stuck request 00000000bebd49a8: control (read@3072,1024B). Runtime 120 seconds [ 325.609756][ T4455] block nbd0: Possible stuck request 00000000ac53efdb: control (read@0,1024B). Runtime 150 seconds [ 325.609804][ T4455] block nbd0: Possible stuck request 00000000845d0e14: control (read@1024,1024B). Runtime 150 seconds [ 325.609834][ T4455] block nbd0: Possible stuck request 000000009b15e5fb: control (read@2048,1024B). Runtime 150 seconds [ 325.609845][ T4455] block nbd0: Possible stuck request 00000000bebd49a8: control (read@3072,1024B). Runtime 150 seconds [ 332.806477][ T4722] Bluetooth: hci2: command 0x0406 tx timeout [ 343.056914][ T4722] Bluetooth: hci3: command 0x0406 tx timeout [ 355.103601][ T4339] udevd[4339]: worker [6193] /devices/virtual/block/nbd0 timeout; kill it [ 355.104784][ T4339] udevd[4339]: seq 12623 '/devices/virtual/block/nbd0' killed [ 355.696683][ T4455] block nbd0: Possible stuck request 00000000ac53efdb: control (read@0,1024B). Runtime 180 seconds [ 355.696718][ T4455] block nbd0: Possible stuck request 00000000845d0e14: control (read@1024,1024B). Runtime 180 seconds [ 355.696730][ T4455] block nbd0: Possible stuck request 000000009b15e5fb: control (read@2048,1024B). Runtime 180 seconds [ 355.696741][ T4455] block nbd0: Possible stuck request 00000000bebd49a8: control (read@3072,1024B). Runtime 180 seconds [ 385.767230][ T4455] block nbd0: Possible stuck request 00000000ac53efdb: control (read@0,1024B). Runtime 210 seconds [ 385.767279][ T4455] block nbd0: Possible stuck request 00000000845d0e14: control (read@1024,1024B). Runtime 210 seconds [ 385.767294][ T4455] block nbd0: Possible stuck request 000000009b15e5fb: control (read@2048,1024B). Runtime 210 seconds [ 385.767306][ T4455] block nbd0: Possible stuck request 00000000bebd49a8: control (read@3072,1024B). Runtime 210 seconds [ 415.847785][ T4455] block nbd0: Possible stuck request 00000000ac53efdb: control (read@0,1024B). Runtime 240 seconds [ 415.847830][ T4455] block nbd0: Possible stuck request 00000000845d0e14: control (read@1024,1024B). Runtime 240 seconds [ 415.847859][ T4455] block nbd0: Possible stuck request 000000009b15e5fb: control (read@2048,1024B). Runtime 240 seconds [ 415.847875][ T4455] block nbd0: Possible stuck request 00000000bebd49a8: control (read@3072,1024B). Runtime 240 seconds [ 445.936855][ T4455] block nbd0: Possible stuck request 00000000ac53efdb: control (read@0,1024B). Runtime 270 seconds [ 445.936897][ T4455] block nbd0: Possible stuck request 00000000845d0e14: control (read@1024,1024B). Runtime 270 seconds [ 445.936913][ T4455] block nbd0: Possible stuck request 000000009b15e5fb: control (read@2048,1024B). Runtime 270 seconds [ 445.936924][ T4455] block nbd0: Possible stuck request 00000000bebd49a8: control (read@3072,1024B). Runtime 270 seconds [ 476.017566][ T4455] block nbd0: Possible stuck request 00000000ac53efdb: control (read@0,1024B). Runtime 300 seconds [ 476.017609][ T4455] block nbd0: Possible stuck request 00000000845d0e14: control (read@1024,1024B). Runtime 300 seconds [ 476.017625][ T4455] block nbd0: Possible stuck request 000000009b15e5fb: control (read@2048,1024B). Runtime 300 seconds [ 476.017637][ T4455] block nbd0: Possible stuck request 00000000bebd49a8: control (read@3072,1024B). Runtime 300 seconds [ 506.096726][ T4455] block nbd0: Possible stuck request 00000000ac53efdb: control (read@0,1024B). Runtime 330 seconds [ 506.096764][ T4455] block nbd0: Possible stuck request 00000000845d0e14: control (read@1024,1024B). Runtime 330 seconds [ 506.096789][ T4455] block nbd0: Possible stuck request 000000009b15e5fb: control (read@2048,1024B). Runtime 330 seconds [ 506.096804][ T4455] block nbd0: Possible stuck request 00000000bebd49a8: control (read@3072,1024B). Runtime 330 seconds [ 513.136593][ T31] INFO: task udevd:6193 blocked in I/O wait for more than 143 seconds. [ 513.138282][ T31] Tainted: G L syzkaller #0 [ 513.139495][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.141139][ T31] task:udevd state:D stack:0 pid:6193 tgid:6193 ppid:4339 task_flags:0x400140 flags:0x00800011 [ 513.141183][ T31] Call trace: [ 513.141193][ T31] __switch_to+0x2b4/0x6e4 (T) [ 513.141214][ T31] __schedule+0x1370/0x2d80 [ 513.141228][ T31] schedule+0x13c/0x20c [ 513.141240][ T31] io_schedule+0x1c/0xe0 [ 513.141252][ T31] folio_wait_bit_common+0x6b8/0xa30 [ 513.141268][ T31] do_read_cache_folio+0x23c/0x5a8 [ 513.141282][ T31] read_cache_folio+0x68/0x88 [ 513.141297][ T31] read_part_sector+0xcc/0x708 [ 513.141310][ T31] adfspart_check_POWERTEC+0x94/0x5b8 [ 513.141323][ T31] bdev_disk_changed+0x6e4/0x1224 [ 513.141335][ T31] blkdev_get_whole+0x15c/0x240 [ 513.141350][ T31] bdev_open+0x2b4/0x880 [ 513.141365][ T31] blkdev_open+0x2d4/0x408 [ 513.141376][ T31] do_dentry_open+0x5c4/0xfc0 [ 513.141391][ T31] vfs_open+0x44/0x2dc [ 513.141404][ T31] path_openat+0x1084/0x18f4 [ 513.141418][ T31] do_file_open+0x1c8/0x2e8 [ 513.141431][ T31] do_sys_openat2+0x114/0x1e8 [ 513.141445][ T31] do_sys_open+0xb0/0xe0 [ 513.141458][ T31] __arm64_sys_openat+0xa8/0xc4 [ 513.141472][ T31] invoke_syscall+0x98/0x244 [ 513.141488][ T31] el0_svc_common+0xec/0x23c [ 513.141502][ T31] do_el0_svc+0x4c/0x5c [ 513.141519][ T31] el0_svc+0x64/0x260 [ 513.141532][ T31] el0t_64_sync_handler+0x44/0x104 [ 513.141545][ T31] el0t_64_sync+0x198/0x19c [ 513.141591][ T31] [ 513.141591][ T31] Showing all locks held in the system: [ 513.141601][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 513.141612][ T31] #0: ffff800088de2060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 513.141668][ T31] locks held by klogd/4328: 2, last CPU#1: [ 513.141678][ T31] #0: ffff800088f02b30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 513.141723][ T31] #1: ffff0000c00009d8 (&n->list_lock){-.-.}-{3:3}, at: __free_frozen_pages+0x5f8/0xc18 [ 513.141770][ T31] locks held by getty/4488: 2, on CPU#1: [ 513.141779][ T31] #0: ffff0000ccf780a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 513.141823][ T31] #1: ffff8000925de2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 [ 513.141870][ T31] locks held by udevd/6193: 1, on CPU#1: [ 513.141880][ T31] #0: ffff0000c736e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 513.141926][ T31] locks held by kworker/u8:31/8934: 2, last CPU#1: [ 513.141936][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 513.141980][ T31] #1: ffff800090fe7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 513.142026][ T31] [ 513.142032][ T31] ============================================= [ 513.142032][ T31] [ 513.142041][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 513.189199][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 513.190962][ T31] Tainted: [L]=SOFTLOCKUP [ 513.191728][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 513.193548][ T31] Call trace: [ 513.194100][ T31] show_stack+0x2c/0x3c (C) [ 513.194890][ T31] __dump_stack+0x30/0x40 [ 513.195646][ T31] dump_stack_lvl+0x30/0x12c [ 513.196435][ T31] dump_stack+0x1c/0x28 [ 513.197174][ T31] vpanic+0x594/0xaf8 [ 513.197880][ T31] vpanic+0x0/0xaf8 [ 513.198563][ T31] hung_task_panic+0x0/0x2c [ 513.199354][ T31] kthread+0x304/0x3d4 [ 513.200082][ T31] ret_from_fork+0x10/0x20 [ 513.200867][ T31] SMP: stopping secondary CPUs [ 513.201715][ T31] Kernel Offset: disabled [ 513.202450][ T31] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 513.203664][ T31] Memory Limit: none [ 513.589261][ T31] Rebooting in 86400 seconds..