last executing test programs: 1m5.716895152s ago: executing program 0 (id=981): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1c, &(0x7f0000000f80)={[{@nombcache}, {@dioread_lock}, {@quota}, {@nomblk_io_submit}, {@acl}, {@noblock_validity}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r1, 0x2000009) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) 1m4.549673696s ago: executing program 0 (id=983): r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100), 0x3, 0x532, &(0x7f00000004c0)="$eJzs3c9vHFcdAPDvjH/sJnXrFHoAVCCUQkBRdu1NG1W9UE4VQpUQPXDgkBp7bVleZ6PsutQmQsmROxKVOMGJvwCJA1JP3JE4wI1LOSAVFIFqBBJT7ew4Xv9YexWvd1Pv5yONdmbe7Hzfy2jeG303nhfAxLoaEQ8iYjYi3omI+WJ/UizxRnfpHPfxo/vLu4/uLyeRZW//M8nLO/ui5zsdzxTnLEfE99+M+FFyKOifIlrbOxtLjUb9XrGr2t68W21t79xY31xaq6/V79RqtxZvLbx289XasJr63yzLProUEb//3Rc//OODb/6kU625orC3HcPUbfrM4zgd0xHx3fMINgZTRXtmn+TLT/QlhimNiM9ExEv5/T8fU/nVPOjgZfrWCGsHAJyHLJuPbL53GwC46NI8B5aklSIXMBdpWql0c3gvxOW00Wy1r682t+6sdHNlV2ImXV1v1BeKXOGVmElW16fri/n63najXju0fTMino+In5cuJavrP4iIZmNlnA8+ADDBnjk0/v+71B3/AYALrry/WhpnPQCA0SmPuwIAwMgZ/wFg8hj/AWDyGP8BYPIY/wFg8hj/AWCifO+ttzpLtlu8/3rl3e2tjea7N1bqrY3K5tZyZbl5725lrdlca9Qry83N087XaDbvLr4SW+9V2/VWu9ra3rm92dy6076dv9f7dn1mJK0CAE7y/Jc/+EsSEQ9ev5Qv0fO+/1PH6hfPu3bAeUrHXQFgbKbGXQFgbI7O9gVMCvl4mFz/z7IseubujYiHj9d6Xgba978IvT9QmNS8ofD0ufb5M+T/gU81+X+YXE+W//csDxeB/D9MrixLzPkPABNGjh9ITinv/f1/IevZGOz3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiQ5vIlSSvFXOBzkaaVSsSzEXElZpLV9UZ9ISKei4g/l2ZKne3FiDBvEAB8mqV/T4r5v67Nvzx3uHS29J9S/hkRP/7l2794b6ndvrc4u18eEe33i/21EVcdABjI3jjdHcf393/86P7y3jLK+nz07e7kop24u8XSLZmO6fyznOcaLv8rKba7Os8rU0OI/+BhRHzuuPYneW7kSjHz6eH4ndjPDi/+bJwaPz0QP83Lup+df4vPDqEuMGk+6PQ/bxx3/6dxNf88/v4v5z3U2e31f7tH+r/0cf831af/uzpojFf+8J0jO7P5btnDiC9MR+zunbyn/9mLn/SJ//KA8f/64pde6leW/SriWhzX/uRArGp78261tb1zY31zaa2+Vr9Tq91avLXw2s1Xa9U8R13dy1Qf9Y/Xrz/XL36n/Zf7xC+f0v6vDdj+X//vnR9+5YT43/jq8df/hRPid8bErw8Yf+nyb8v9yjrxV/q0/7Trf33A+B/+bWdlwEMBgBFobe9sLDUa9XtnXymfeEw6jBAbS42pOPmYnxZPKcNr1wkrpd/87M3TDy6ddzXOuhL9iqaelhqOf6VU3DBnPE9pgGMuPRVNHmevBIzC/k0/7poAAAAAAAAAAAAAAAD9jOLPicbdRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6uTwIAAP//1vDQSg==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000010c0)={0x18, 0x1, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000001c0)={0x0, 0x39, "0135d495f9690de16e69ce93f348443879d49481f2d3b6ec8312dd434d68c98554f94e13d2876bedac6e69a36ca1abb41f663240551446cc57"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xc8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xaae, 0x3}}, './file1/file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) pipe2$9p(&(0x7f0000000040), 0x10800) 1m4.538024533s ago: executing program 0 (id=989): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() unshare(0x2c020400) r1 = semget(0x1, 0x1, 0x39c) semop(r1, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) unshare(0x40400) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40000000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x4000}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m4.536177264s ago: executing program 0 (id=991): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001400)={{r0}, 0x0, 0x4, @unused=[0x5, 0x8000000000000001, 0x6, 0x8], @name="0b3ff359569538fd4d7dab5da403cd1d06e6743f89dd4e8a3c92ca2dff935126429238ac16d4ff7da7a507c7ad54852a3eaa977ee3790bca99ce8442cbee32fb7bc36a1b69a14006aa565fadf89544f3489c402e680b582672e8ca4a7eba5592023aa6a220b8f1f59bb206bf399555c4bf3cdefb71c5d22f818ade0868ba0a1047485084404f592f0b1883e4154af258fcc37382ebfde0a1c930af303c4e98b56ce7f415530af6d43d9bfdde96793068707cc366255ccc796be5f65fec2ae19e754a03e1c32a3ff2c041de3316bb69cb098dd4f9bcf6fa6490be19e77a8aae98883c588aca0fc1efbc5b27f9dad453104b734510c7c31a618687b76baafe7383d0256f9537cb35003aa0f771f8d567f2d74425eca3aa1646b07e401fd04611dd63513d465a489918e3f4b1d1a5215ed03308a56647918efc9bf5dd554adfcf9a1d13ce818d84daa2decb9a938144201e1286f7f97586295de672140d5d15a3e10499358294cae403ac8ced48380cc9adf9761108c79bd4d8cfceb0cc99e2b98190ada0bff03e560ed54403d0251525fa211d2e551f63eca23014386e4b19d823e9c4418defefb8cae7ec8d8bf793b0893861cfa707f46a1f543f2c96896f1c1a8c785c969034e2bf4be373ecb66d131ffee2d20fd9c6fb489b3453a3c49e1a50fe5019b68aede80023c98537ef9a52254147d8fb075d1ce84883cc2f29bbb47e8e033e7f25bc1d3cde5249c2af8ac61726e660ff4103dce535770a47d7b6193d8138c92cf4136967e44c08b1b0130a229b3c113c8e3a1e927647b5d9b02cd27b32f6aca4b06b0a8e2f7b97585aa3f2dc3d6435898356bf2e29cb5585eed0df2c5d06e04d8fae8376db91cfb8102a32a9c778d9be60e254209677baecdb89330c3f322327ddc6187b7ed7955d201e0cf72c272c8338fb08efdc5986cfbf5811a1bd8c3897f65f6997f98fc230048f0c21bf29f3aa9948152bb2b1360c454d25b2c3de04f05ff8ea05d25afe662cde33db576a73ce5b6363634929ebdba7c07d5a674e66125e32f507611e1869eeb7f7161472d304b36a8fb231d2f9c1858850be0d365d2c05fe315984456162a8592325fb516a64dbf2368821d4b235ec90293b6229c7232981f59c2713aa2102418123ca55328522ef77fa26fd33833b5fab935ef3c7db4c4f2adbed9d408fad033d1eee78077367cbcc9016e6e74256ce27c301acf96d55b957facf213c4e5a56c2b77083f284f8a6f434f41bb1a0ff210896fb04bf3307f9fa38154849600d3a5a6614e5996ab96bc2b4715b2cdf3cf0b9290bfba9b907139de7bb76ed0814df762328b486ae1d20bc500a0d9d1f45a77111baf5ac87747e4cc1b7a0fa6e190ffb1f28d5e7cb8b34d1bad382279848e560c489f729630cb17139a74dfa11f1cdbb9f7896a486764bd5261b998c6482c6dbe0db55ffc2f36b35769ebf5df1553512881fdddd6420701e8598b1dbead2c574af9d58e7fa98bdb2826c95c169a200b0271e3439a1e924ca90d17ab76fc01c918074e30cbc720bf09bc3ab34231e8e84edda37eece386838725eb9cc694a6182cb212df72d308507abe360a996cd1ce64da962ac3b71329e8c71d9681404749344f03ab0e797610ed880fccd61b40943a3d20c414d6d268b707fcb21f98ddfb58d5dc18a49d5c3faf13008b487832fccf68d41852c10c741c7b211fcdbd8f30bd42a0802165ca19698e2d9c6ad4a7851388994b40c69c99ee238728cd6f84c1b3b524bfdc492a4b04f9169df47b754dd8cebb57b625e15a14e922e1cb969026e782bb12d9be5e0e2ceb6ddc990f48fe89b0ace00980b0996e828d5cca33e7ae8d66724cd3d5d0b75f0e0971707c906a1cb1a1026435dfc21fbab5871682a205b1876854797d3df2b2baee9e4a527b733a5f247e8bf2702be216dbc6dbaac6e4c91233863f4cd6ac2bdb8c01c75c26e867d1d8b91d31f670d288095959627f65849767085d6bc66cec69f1cfb6b5586985e9a22bfd2d60f5b35d5b48009c05f9ca2969ae78e9c9801790ebf5acefdcafda4056434f215a15411d8174a0a56aaf2cda387aedbe567c111e8ef5f57319bab7c571c8cfabc50d58ab3937ac5cf520e4c3d48c7bc056301b42b82d3991052b23020ebb6b630555821abbd481c38707ee988946f8275fcfc5dc57f363098e026972db25f4bbba230ecdc54fd0f3865a0a390b655751657ca4e882343e5b23a9a11ab4eef58712fc54973072f5fed29ca2ac3437433f5cf35c949a5696235e5bfd3af1b0bbde3a90647c43b4e666c03980efbf10adc2b5d785ce1cbadc3f0bef76b6e019d8464ecf05b6e93abef3b371d24d505862991d2e97abe41fe3896d81d767db0126ffb86f69f40578cbb87e7060c42a6df32dec6aa1ee10ad89e97454d77d9856820f6d50a6033db28a5307f951fd1fd9165771c4d377181ae17263df89b304fc21f0d84f333eb500363cbc5df9bb60803245bcb29568781f52ecf13f5e1587e9535e291d4817f4c7b6079c6df0ff1aa358b7a2a4788295f45cc4b04670b2a0dc1804ab7c3ae6ec15b0e24a4b4509f2fc8bbec513a12c6a2014788899d293744c2be3eb53a03c114f93c31ce75ec5da81281fc227e56b2534fe7b4cbb6b6e03ea6d348971dc7f7655fd365a35deb84dcb6f19ec577bc248ecc42f6559ea2dcfb8a16e5c245a132ad6eec3ed9945e8f3c3ffb8fdaddd0f2859b74f5dc023835fc48e325b2ce94d22fa92858f1f194fbc547e54e27b1a58925fdb472ba8df8542b6607349ce818db4ec5840ce3d770af3d79368bb992c2204f51eb14b7fdb3aa63d1b1cc8545cdcd0717d50d7f866f0cb5267e86db4a9350e6bc59e963247abe76dada33b700fe0a078ab68e6bb58c7b400c32cde40be341da1b782b776ae574269d4a2dcf3c1f9f736a9b763dd20b93d8e8a7e70cc9ab9ecd188ca9cf210c6d2c29850cc2dceea64168d19996d5da72ff01c822406a668594ae0a8ee3fe96d7135f42d655432a14fb6f875732b43f4b50c11bcf44f4e2472d96f7b38b3a8a9de4287293cfb25310229e04a796f82e593171a16eb010cdc475932127d8ea3fac7f94b12a552450d722e5899ebf07c67ba92f3db35b7b173a3b91de0e18c5a0b006832b8e556e76e0d78b69b70bc989ea5e079164adf9c9e38911b642044f46724dc1de237b140156cc3e8c2232dbd2b8318c6283b5ff030ecb40aead2bf5041f1e2521057d7b8beadca24341f07066209da8b8a0ded6e109e2a622fbdbe38f11e4610308d8443ebe6a804cf8c1963ce3058b14667a07aea14d8b90d96fd9025b55f8f62bda3fb4fca231e452896ad714715085503518646f9b6f37e48f782e590834e35af7c1eab301f427d06ef3ef410c9eda6d1ddd6d8a59c8ba8cbf3ede4d0cd00bd292f362a4a33bbb9c68dcdab966a014c4cee279f61269268d45c030731cf0af57a8b3d2e1beb1c4ef9cc447e8be0191d3a9acd7a3270999545576e704217d77d4d023737d990ff6816b044a7c67f821f106129305ac1982bf55ada5857574ed53a94f2b7752764f8fd762df82b14851b8004c0786f2403469256a11cf0015b215514ad132b7f4999f9fbff0c967047448b62205b0e79014fecee8c49186a5dd5588f7b130cf67b305d24c93cd8b1becbc9b9a658d0f559403f574419fb4b75899ab48d4b6b923980f5fdee5b881d47fd2766d8f9bb8fb1b487603284def4b843c5134226cfa51fea39a1cf46e653a01c865da02c4cf7a209f3b536716de56cca9a93d7de1f4f53ff85ecad1b736b3b7179b3e922fbc30e58abd754906e3ebacd6a0bc88ba5ee303bd631f332f74e513efc10f39668fc840a8ed329c5a4801d8e617d3c0d312ae61cc0894c138c53d4cbcc8b36aa01491c382bcf6a22ea5d98cf0a35a23b5a3b1c119b78407d7f616e29d647713a10a739d287a160e5e176272a7dc50242a6c7bdff370ebe6bbfe3ec80d9169850dc49502b1653f6ff74d9293c9b72d03dc3c51471fc758d32399180a8b4e52db3b4285a9b75518bee08f693e68d19cf131cc9c78c6dfc72c722c163a0d98af56a0f667d1c30563fd04dda2d9fc4d01586b3dfc3d0bb8dc24c6f6a8eb6312323e05121c4dd9862a2dd9cf6943d90da3986c451b72e13578366da1f2bd47b058dfca6c85ceaed2612526b02cde9256503b3460a1826ff59589ba57683ce2ee042c242a96c8933691783b63583f0ab1abc23b5bb799ae9cdd73a9f9226ef6c4845e1a9bcd3a210ae7e2cd08d010dfb02b570ddccf2e2b5e97b008ceb99d5ad21d51351fc93f06dae8f723c7a56e8b513658d252cf6239edc1ffcd60a8351b53b4f44b3405d0356958ef07387613983004e61f1cba176eb6afbcd6ef6e8399db4a32b0f6be109ccd6ddd4897866cb4da79ca2db192158019349a7028e1223eb4d923e47200059d31f0962d87df2b8c586ae10e958f077083f52d640851eb901f52b23ffc52fb0cf37c6eab6cd4fd745ac4630d6cc5221f251af7b9f4bc26de747231a8c2da1e67557717eb24fa8c698f850e98ee04942e8cb81aa7fa2ffe55ffe6ecf3307be9f8731ee27905dba48d1611712676283962af2a00de766520a5e4b37091b57b56d40203f35100c6cc183441655210dac699ecdb9f1880c0e7ac1d425a143ec15aeba0a89d94f37b903e175bd7b0192287a2260d176c08da952f9a8b9de89b9378506c891c48cf398f4cef148706fa96d1d9c92a90b5458433dc4c9ba4fab1df3dd46558dd61b07c5f27f4fe00d562b8d8c820d544d35f7a24d12bee1ad4a14eba8f972893b1d29a88fe8fd9038f6051f4758917ab956b4fedbcf6dd78a5a398416caff3ed7af69b1ba2bd232fee904372c364c6a007c4765f4bc636ffa593167d7738e4fa86223324f77a66a4fd443ba1fd2f81ea44015f082518e5260400bfc89a9189bcf849d42b4c56575229f06d87a1d597e5d921f13fb7bf54168342c301c08cdd03d048b93f2e497c20b5ac275c8c4c39719544bd0d7d70130cd1d7de8898fb12024f445f523efc5876bbb6c0314f802a62f5fc2f5d7f4344800246e1b6bd349f497ac448e446db5dc6f89f3442142de033166a3e2f53d14d2f22d435b7dcc0abf899855563e407a4a980cadf0b9b6b1561ac1b4ed6324445341f9fa1beb2b018f80b79cd06760883c16da40387a75197f6f35a08b6dcb38324379530875ecd791fe30c7ee81ec0ddfd9460bb06f71c6bcadde97a34f6edefd426ada1e04030410e388e312b3ac59063b037a99697abd25423674571d8d09d4a16fe4ad8d2edc6ae71242dec608ff9f3bb94082f4c90bfedc44934644b9f09974e7bec797a1e444352ae1f659a7c2362834964e327db8396f88c6e97b4a07a25e38fcb8fb2036424958fd0269c027facfad66c0d145016b9fd7e42b45224e84ca7379fb9a46e63a468d1a1bd7391b46af62a804465e7357ebfe0e5eec9fa4bef7c73f6094418203233dc36566395369f3ffc9bcfa4b85fc479596d02812662b8e74224caac4309aa5527ac8cee8e1cf54d422743e5c0c78401e60ffca101a56c5c011d54f4316ddfc62cea55a5f13a8a1fce670950895e2e64683f5a34ba65d8ae749d906c50facc7b5949a129f5edc536de8669011574156eb2b3025629e06504fef2392ec03e8427bdf04401b2d42daa68f2c062e9995b1ac111eae23e079f"}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3008409, 0x0, 0x4, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = eventfd2(0x0, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) 1m4.392950308s ago: executing program 0 (id=998): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040fe200011c04"], 0x7) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x80000004, 0xd, "00094a0400"}) r1 = syz_open_pts(r0, 0x80) r2 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smack_current(r2, &(0x7f0000000040)={'\'+}&9\'[&\\\xf9\x97*@('}, 0xf) ioctl$TCFLSH(r0, 0x540b, 0x0) r3 = dup3(r1, r0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x24000042) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 1m4.156941516s ago: executing program 0 (id=1006): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getpid() fsopen(0x0, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 1m4.137315096s ago: executing program 32 (id=1006): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getpid() fsopen(0x0, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 36.611442752s ago: executing program 3 (id=1312): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 36.536906308s ago: executing program 3 (id=1313): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000790000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 35.676773482s ago: executing program 3 (id=1322): unshare(0x22020600) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000540)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (fail_nth: 2) 35.568466719s ago: executing program 3 (id=1323): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) setresgid(0xee00, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@usefree}, {@uni_xlate}, {@rodir}, {@fat=@umask={'umask', 0x3d, 0x65f8f7fd}}, {@fat=@nfs_stale_rw}, {@fat=@showexec}, {@utf8}, {@fat=@errors_remount}, {@uni_xlateno}, {@utf8}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") preadv(0xffffffffffffffff, 0x0, 0x0, 0xab, 0x804) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr(r4, &(0x7f0000000400)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x3) close(r4) read$FUSE(r3, &(0x7f0000002c00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008818) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) mmap$usbmon(&(0x7f00004b0000/0x2000)=nil, 0x2000, 0x2000004, 0x13, r3, 0x0) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x31}, @empty, 0x0, "90fc37852a192ea1b376efee14a7aa1c3009929129c42d06f5e30377f2428d08", 0x2c0c, 0x8, 0x20081, 0x9}, 0x3c) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x48, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r3, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x17, 0x13, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x0, 0x3, 0x8, 0xb, 0x30, 0xfffffffffffffffc}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @ldst={0x1, 0x0, 0x6, 0x3, 0x8, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000640)='syzkaller\x00', 0x2, 0x77, &(0x7f0000000680)=""/119, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x2e, r3, 0x8, &(0x7f0000000700)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0xf4, 0x5, 0x7}, 0x10, r7, r3, 0x1, &(0x7f0000000b40)=[r8, r3, r3, r3], &(0x7f0000000b80)=[{0x3, 0x3, 0x2, 0x8}], 0x10, 0x4}, 0x94) prlimit64(r5, 0x4, &(0x7f00000003c0)={0x2, 0x7}, 0x0) ioctl$SIOCGETSGCNT_IN6(r6, 0x89e1, &(0x7f0000000200)={@empty, @private1={0xfc, 0x1, '\x00', 0x1}}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r2, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 35.276026107s ago: executing program 3 (id=1325): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x7c, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x5c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x9, 0x4, "40aa099ab7"}, @ETHTOOL_A_BITSET_MASK={0x41, 0x5, "30b4b54d37b30fb2a47d413be0067f779f8668a98d55fefc80f084d83f0d511681b905f44060e0d8b08bae06ffbb9ab3cf776f83d47898a54368bd9a4e"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x2, 0x10}, {0xfff1, 0xfff3}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc, 0x6}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x3, 0x0, 0x0, 0x0, 0x1f00, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x6, 0x0, r5, 0x1, '\x00', r4, r6, 0x3, 0x1}, 0x50) 35.204873781s ago: executing program 3 (id=1326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x168, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x149, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast}, 0x0, 0x0, @default, @void, @void, [{0xdd, 0x1d, "c31b43702fa96f4154103b962d080e8379a26048485327bef49a3967a2"}, {0xdd, 0xaa, "38b24082286ec160022d7a4f429af0ddd9e658caed45518e5ecbb01a26d2f63009b5e261dd2bd04a6e53de5fc8798451c82c5e58e88b481bade48f7c7279a279362373a7f7498b8e0f932162918d01b0c2f1ba3b36f3162b999218d803604ab9ed5d7e53bd0b9641baa3561c6f942b804efacf86d311b0d8ee24f127e0f30fe2004d9c4c8b1391508dbe942a2fa0bdafff1f6fd905c3a7bf87bf4dac323403f677a41d0d1ae7c5e0060b"}, {0xdd, 0x5a, "d4d5f0e30693d932b2e8b4f4ccc93a25bd375f2bf28dfde5b5a2d7d1c91e1bc5b605354eec9c01acff881870ba6daffbe0c053d3d64d587f30dac7997ac8f8252ec918a2dfe78043a26971591866fec928056827ba0adcad0e96"}]}}]}, 0x168}, 0x1, 0x0, 0x0, 0x40800}, 0x800) 34.621991917s ago: executing program 33 (id=1326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x168, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x149, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast}, 0x0, 0x0, @default, @void, @void, [{0xdd, 0x1d, "c31b43702fa96f4154103b962d080e8379a26048485327bef49a3967a2"}, {0xdd, 0xaa, "38b24082286ec160022d7a4f429af0ddd9e658caed45518e5ecbb01a26d2f63009b5e261dd2bd04a6e53de5fc8798451c82c5e58e88b481bade48f7c7279a279362373a7f7498b8e0f932162918d01b0c2f1ba3b36f3162b999218d803604ab9ed5d7e53bd0b9641baa3561c6f942b804efacf86d311b0d8ee24f127e0f30fe2004d9c4c8b1391508dbe942a2fa0bdafff1f6fd905c3a7bf87bf4dac323403f677a41d0d1ae7c5e0060b"}, {0xdd, 0x5a, "d4d5f0e30693d932b2e8b4f4ccc93a25bd375f2bf28dfde5b5a2d7d1c91e1bc5b605354eec9c01acff881870ba6daffbe0c053d3d64d587f30dac7997ac8f8252ec918a2dfe78043a26971591866fec928056827ba0adcad0e96"}]}}]}, 0x168}, 0x1, 0x0, 0x0, 0x40800}, 0x800) 14.296717918s ago: executing program 1 (id=1520): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000080000000000000000000071103f000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$alg(0x26, 0x5, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)={'mangle\x00', 0x0, [0x5, 0x8, 0x20000004, 0x3, 0x4]}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 12.183176203s ago: executing program 1 (id=1547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000010"], 0x48) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x1d, 0x2, 0x6) getsockname$llc(r5, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x2b, 0x2, 0x6, "b43d7000ffff00000002000000000000000000000000000000006700", 0x20363159}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x77d0, &(0x7f0000000080)={0x0, 0x8ea6, 0x1, 0x1, 0x3da}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a000d615000008009f000c000000080026000816"], 0x40}}, 0x200040b4) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a09040000000000000000020000040900010073797a30000000000900020073797a3200000000600004805c0001800c0001007061796c6f6164004c00028008000540000000000800024000096a000800034000000000080004", @ANYRES8=r0, @ANYRESHEX=r6], 0x84c}, 0x1, 0x0, 0x0, 0x4}, 0x24008000) 10.576188715s ago: executing program 1 (id=1555): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 10.40977859s ago: executing program 1 (id=1558): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000280)={[{@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0xaa}}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@bsdgroups}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x504e, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x59) r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback, 0x7ff}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000200)=0x20001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0xffffffff}, 0x1c) listen(r3, 0x7bb) listen(r4, 0x7) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) syz_emit_ethernet(0x8f2, &(0x7f0000000380)=ANY=[@ANYRES32=r3], 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000045}, 0x804) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0xa412, 0x0, 0x4, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x14020, &(0x7f0000000480)={[{@default_permissions, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x8c) 9.99511332s ago: executing program 1 (id=1574): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) open(&(0x7f00000000c0)='./file0\x00', 0x90400, 0xc) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x90400, 0xc) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000100)=0x40, 0x4) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000100)=0x40, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = gettid() syz_open_procfs$pagemap(r3, &(0x7f0000000080)) 9.868320898s ago: executing program 1 (id=1578): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) 9.838245688s ago: executing program 34 (id=1578): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) 3.984797238s ago: executing program 7 (id=1662): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000940020073797a3100000000050005000a00000011000300686173683a6970536089050912182500"], 0x4c}}, 0x2) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070084"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async, rerun: 64) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4a7, @loopback, 0x62a5}, {0xa, 0x4e24, 0x80, @empty, 0x8}, r3, 0x8}}, 0x48) (async) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x2}}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, 0x0, &(0x7f0000000380)) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000380)={r5, 0x0, 0x20000000, 0x2}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x15, &(0x7f00000001c0)={r5, 0x0, 0x20000000}, 0x841698d4d49964a6) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@newtaction={0x14c, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x138, 0x1, [@m_mirred={0x134, 0x1, 0x0, 0x0, {{0x47}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x0, 0x10000}, 0x3}}]}, {0xe6, 0xa, "8e8b8c864ede143191de943b25f60f15d74128fd40507a148753371e7b7bf2a44c4b5785f9906a4763398159cbd83ad7f3fd91e0878f7e0500bf8c2be9d353591435a949e5934266cbf7b7047a7f150eb7be1c40d18b1202a9d94b8f785a65a4bfda98531f2117bf3053388da53d6b493a715fda34e6365552127c7781fd2b0391bad046052321b7b84553a2f8169b451da3e7c4c7c7e45af58e8b2bcf29e1673abe4bcc848ad384ba2a5afda21cc8cc7f6fb04474ff3b1dc57fa7d3fde4bbafad188ce55cb877026d6c61e1f0d13a7359ca788160805a3e4e37090d70565b081867"}, {0xc}, {0xc}}}]}]}, 0x14c}}, 0x40) 3.98413864s ago: executing program 7 (id=1663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000010"], 0x48) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x1d, 0x2, 0x6) getsockname$llc(r5, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x2b, 0x2, 0x6, "b43d7000ffff00000002000000000000000000000000000000006700", 0x20363159}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = io_uring_setup(0x77d0, &(0x7f0000000080)={0x0, 0x8ea6, 0x1, 0x1, 0x3da}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a000d615000008009f000c000000080026000816"], 0x40}}, 0x200040b4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a09040000000000000000020000040900010073797a30000000000900020073797a3200000000600004805c0001800c0001007061796c6f6164004c00028008000540000000000800024000096a000800034000000000080004", @ANYRES8=r0, @ANYRESHEX=r6], 0x84c}, 0x1, 0x0, 0x0, 0x4}, 0x24008000) 3.29911389s ago: executing program 4 (id=1668): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r0, &(0x7f0000000b80)='2', 0x1, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x84, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @loopback, [], [], 'veth1\x00', 'wlan1\x00', {}, {0x1fe}}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4199fc6505f93cb13d0617f57700e5dba5afc775234fe52cca718b1ef125"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) fallocate(r1, 0x20, 0x4000, 0x3000000) 3.175350532s ago: executing program 4 (id=1672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setpriority(0x0, 0x0, 0x7f) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) read(r3, &(0x7f0000001400)=""/4046, 0xffd8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setparam(0x0, 0x0) setreuid(0x0, 0xee01) setrlimit(0x8, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x7cc74eb8cea42275, 0x8031, 0xffffffffffffffff, 0x8000000) mlockall(0x1) 2.81271965s ago: executing program 7 (id=1675): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000011d00)=@mmap={0x25c, 0xc, 0x4, 0x2000, 0x7ff, {}, {0x5, 0x2, 0x3, 0x10, 0x9, 0x1, "07024f4a"}, 0x2, 0x1, {}, 0x367}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100)={[{@usrjquota}, {@barrier}, {@nouid32}, {@barrier_val={'barrier', 0x3d, 0x6}}]}, 0xfe, 0x244, &(0x7f0000001240)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$EXT4_IOC_MIGRATE(r5, 0xc0406618) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) process_vm_writev(r1, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/100, 0x64}, {&(0x7f0000000c40)=""/206, 0xce}, {&(0x7f0000000d40)=""/190, 0xbe}], 0x3, &(0x7f0000003300)=[{&(0x7f0000000e40)=""/139, 0x8b}, {&(0x7f0000000f00)=""/95, 0x5f}, {&(0x7f0000000f80)=""/143, 0x8f}, {&(0x7f00000010c0)=""/250, 0xfa}, {&(0x7f00000011c0)=""/113, 0x71}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/117, 0x75}], 0x7, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f0000000480)="3a37f30483eb52fca11054b99ff70a77782fa01f7653d9f9169c045750175f7d3ce616217b8cbf648a6dbc476b51e2a027852a59b091656d", 0x38}, {&(0x7f0000000240)="2f050000000200000036f0485e", 0xd}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4008050) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000c00)={&(0x7f0000000b00)=[{0xeef5, 0x6d, 0x4, 0xd, 0x7}, {0x5, 0x1000, 0x8000000000000000, 0x6, 0xed0d}, {0x8, 0x3, 0x6, 0x4, 0x9}, {0x8d, 0x2, 0x0, 0x9, 0x8}, {0x156, 0x0, 0x7fffffff, 0x6, 0x6}], 0x5, 0x28, 0x7}) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffbf83}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000200)={0xc, r8}) ftruncate(0xffffffffffffffff, 0xc17a) 2.372955337s ago: executing program 6 (id=1676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_ENDIAN(0x13, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a80000000001010400000000000000000a0000043c0001802c000180140003000000000000000000000000000000000014000400ff0100020000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000007aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000140005800e0001006616429b2f14789dd53c"], 0xa8}}, 0x0) 2.365648673s ago: executing program 5 (id=1677): ftruncate(0xffffffffffffffff, 0x9) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="100a06000408010014001a8010000480"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r3, &(0x7f0000000380)="1aa539311587018159e9a7fb57925cb0b94d06de94c0ece6b5c667616167e3b7b6a19b97830000000000008f6ab799360a234a43315b2e655809cd327c1415702a9e15a4d070c41a0bf92ab993266cef0760257046f96f9892fcd5cfc3a8d95cb010dda6d6bd46dc091fb64327521e242c37564865e5941e968722dab4bfbbb9285c6bf6be180dd0134f779dd42274c28538f6fd718a15aba1cb65042efda2ff4094a4081398c7"}, 0x20) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000000d14040825bd7000fcdbdf2508003d0001000000"], 0x18}, 0x1, 0x0, 0x0, 0x20044081}, 0x10002) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10208c0, &(0x7f0000000100)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@lazytime}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@nouser_xattr}, {@minixdf}], [{@appraise_type}, {@uid_gt}, {@euid_eq}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}, 0x3, 0x5a1, &(0x7f0000001080)="$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") r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r7) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000011c0)={0x38, r8, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x5d) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r10, r9, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup=r9, r10, 0x2f, 0x0, 0x4}, 0x20) setns(r6, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r11, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x1, '\x00', @p_u8=0x0}}) 2.34659682s ago: executing program 6 (id=1678): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x286, &(0x7f0000001300)="$eJzs3M1OE18Yx/Ef0P8fBKFVFAVjfKIb3UygXkFDIDE20SA1viQmg0y16dCSToOpMcLOrddBXLozMd4AG6/AhTs2LlkYxzAdoYUS0USGl+9nM2c4/Jozec5MnkWn6w/eLpSLgVN06+ruMqWkAW1IGXWrR01d8bE7Gv+vViu6MZz/cvnew0e3c/n81IzZdG72ZtbMhq58fPHq3dVP9YH774c+9Got82T9W/br2sja6PqP2eelwEqBVap1c22uWq27c75n86Wg7Jjd9T038KxUCbxa23zRry4uNsytzA/2L9a8IDC30rCy17B61eq1hrnP3FLFHMexwX7hdwqrMzNuLulV4N+q1XLupKSxXTOF1UQWBAAAEtWh/1/5m/4/FZ/T/x8l9P/HTnr3nzb7/8fx/duO/h8AAAAAAAAAAAAAAAAAAAAAgKNgIwzTYRimfx3/k6I3fML4/JSkfkkDkk5LGpQ0FL9mkJF0RtJZScOSzkk6L2lE0gVJFyWNtnxW0teK3faqfw/1PxH2ef/3ifofSzz/T7aWH+7pkxbeLBWWCs1jcz5XVEm+PI0rre9RLWPN8fSt/NS4RTK6tLAc55eXCj3t+QmlNzdMp/xEM2/t+d5o323ls0pvbrBO+WzHfJ+uX2vJO0rr81NV5Ws+2pPb+dcTZpN38jvyY9H/HXeObelYP8fZa76Z38f+CMc71ielsVSy1w4paLwsu77v1RgwOHyDkcOxjJM4SPrJhIOwXfSkVwIAAAAAAAAAAAAAAAAA+BMH8XXCpK8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdfgYAAP//ZlFc4g==") bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0xb, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @mcast1}}]}, 0x38}, 0x1, 0x7}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(r2, 0x1, 0x0) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r5, &(0x7f0000ff1000/0x3000)=nil, 0x400c) getsockopt$bt_BT_POWER(r1, 0x112, 0x4, 0x0, &(0x7f0000000200)=0x3e) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x970a40, 0x6ab858183a7ef6cb) truncate(&(0x7f0000000040)='./file2\x00', 0x10003) finit_module(r6, 0xfffffffffffffffe, 0x1) 1.881818151s ago: executing program 4 (id=1679): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x286, &(0x7f0000001300)="$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") bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0xb, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @mcast1}}]}, 0x38}, 0x1, 0x7}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(r2, 0x1, 0x0) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) getsockopt$bt_BT_POWER(r1, 0x112, 0x4, 0x0, &(0x7f0000000200)=0x3e) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x970a40, 0x6ab858183a7ef6cb) truncate(&(0x7f0000000040)='./file2\x00', 0x10003) finit_module(r5, 0xfffffffffffffffe, 0x1) 1.869151328s ago: executing program 7 (id=1680): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000080073019c000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@private, @in6=@local}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f00000007c0)=0xe8) r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@jqfmt_vfsv0}, {@nodioread_nolock}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nodioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@mb_optimize_scan}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r2, 0x18, 0x80000001006, 0x7c) pwrite64(r3, &(0x7f0000000140)="48e5", 0x2, 0x6) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000520001000000d2331a4a00000a00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x4) madvise(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x64) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000000c0)={0x9, 0x2, 0x8}) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) fcntl$getflags(r3, 0x1) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000e19000/0x1000)=nil, 0x0, 0x0, 0x0, 0x3, 0x20, 0x72, 0x0, 0x4c}) write$UHID_INPUT(r3, &(0x7f0000001440)={0x8, {"715b1a6a9fca300288d0d6f164694e9be52056879d4f7f9e17a2f387a1e887ad9fea8a741f3a85292a8ca98e1512418fbd5b5beafe58966442a9c6d52bdef586966362501755a16514ded809c856f4e58261695dbfb4d87cd5d13b78c6cf696afecb55cca3e7607479bc2ceded20d446347481aa05e3083992814f23f6ba955daa8c5988fcc3e1f4a1657a94b74a6161fb233fa5146129889ae615315f974fd1e2c6db572e40a4ec1325c81eff25243f2fbe74fc9cc389297c04d98213ca54c33fe33622c7ebe8f6e9712c07be77c43bddb575411faf61123d450d3c608e581d9d1fd5562abd932bbdf70ff573330754d8f2a3c38906aefc04f438f74482b6e4ec9501b6b43d08d910bda4fc230cfbdc06b2447775f53c6aa87b73a284167aee5e05fc8d867afd4b6b8c3ec81a23be5df245d8e21aa8a630de4b680f34fee2af9de02aeaf31aa7d15edbee78a2a7a621305217678c619a19d41e927e798df495ff28a6485e978bb29cf5f82e31ee8e142134e0845f5c1eaa9664c7dbbfcfcd9dc0567fd447f25de86bea1c28e8a9973e3d5f00e74d022f2b9a97ff08f404af3911f7f086643bfd9004c2500b1684e73c885374cb382bcb37fc82a31c79991b2547fbbba3c005b4d88825488599a8cf0cdaebb4d137232516c9f897d72d034a5b69d03be18c0a0958495e3c0f9b7b31f7684236be8772de10aef1446909f13fb49b4516d00f889efe72769585f4e1ffaa5fc9c0dbfa7b05efbaa14a3e240cf7603c6a487f4155f92bc22c262f496e2f30eef1b95cf28235c0273f295a136f122539ceccb412f7c08a019efb4c270a417db7deb6973a6d0370df72d12456b2d2187c4abdb632bc6323eaaa10f6e8c829d9b556b04498de35a355907c9a17b99b2effaca8ffbfe486493740f3dded005e8bf91b417e2cde579f9232c04807dd2f2da29faf183dee67430972a0c85ee9e9319a7b55b03b3db7d2623f3b16da80eee507de1f18b298a045f32970903d4ee04f99c8a6c086c93f465ad8493f3f2e0579993374b1941818c67c448c4e218e64467ea9755042b593a33f5f909ba7eb4c14be439964ff2c5ff2367710438f2d306e721042b39499b21b034cf9a95048a43e8d96eb88c7e372ee61e7a909b6e947d416b2ac672fa3683771cf6986bda28ccd50c448e31985adf2b836349d8e1ac3ea17dd9256bac1f3c47f39953fceddef2e12b9956ad44347142d836ef531528fd9cbc0c132ac6e270c9f5e4d950d62b788dfb1e337be9629a02f945897bdd5168d73d78ec3a7651465949f5027dcd0affb6b24063499d4afb57b80aa62efaefe607fb9073c79d7083c629bf11a56527fe85a41c3b347c7ef54c85a6e6d046994101ae7627e74d14337a9bb042f5f0aeca0a6199dedb3e4b1aa30760131e8d76d43d9991ac1b3c443b25d7c4c8153d1c7763e6f2fda8c404697668f6aa61f8e28d568320ed190ca635c74d9948adcaa53776a2db303b848723b414bd192511f557f2a426822acecfa3ce6f9bfd60c0144b1a55294387238fbb196addf0502ee9af4108682d056f8965ce4fca03d8ecdcf5f302eaea2de59bf663b15bf8a20ce874ff7d3958fe6da3301b678c2930129b3cb4413400388a59ae939c58d96043d93a57a980ed6b9f35751e059ef6c06cffa4f5c3f8ba1ba67f0160390ec77311e4e67d921bb40a29d448f274da50115c2c67baa3d6f39f9ddfaf3e67392d9e3802c353f0b855c927d6a45e445f58526a09793bcc2e72163fb1b7a779d99f230bd95e5bce797cacb0b8343dcf1be080f18040fe288b157b01b074d25fe44ab6b3c0362f1931f6b174412a8d6a2a645270e7430b3884ac16930105786e469d1d8bcf9ed4010ee3accf78ecc138a8b11c15798eeb29ef4fc3bc5b376807348e1647148c35a1aa3d7ed05dc3a11274887f04f035837a9ea81fcb5eaccd4f43f2f6bbf3c426f72e1423c9175c2b234be0fd3c40c15e5e35c5c7359c894e95f82797c48fdca7ef07a6fa6f0dd0bb9a24c4aa9050000000000005c67e60f8814f67d86caba122def954662ae2c6f4f99cfbb55214c61216e8c8f84e9b172129642d754a49c923c6c6f1ba820e99a513308a03c9a080be7224244f2bc1d99d93ddcb25a3d2e0a6b4b868f877760b019c8c475c3e0b90109c21c309e7bc0ffc48753aeb70e7884c8eac52b2fb8576ae917199bfeea255da4b54667320798db03440fabaebb1e8e181506bf93ac67ba128a14c9dcc45d9f07ddfea21e7da2bf4215bc73e82e9a7187cd5fa7c17f7710f2cdf59bb22ce786328af52f17349c42ca7bce681619246b8b467b7b4c60125ea5687e1cd9bf36a67023759a8baeccb60e84c7102f284436584d0508486d96af8ea8358f7ac1f9a21c1229eda8a1a273b999a74f39d3851b6aec92d120f2c4ca0b2852844b5529eb40db91749f221568850f23f089dd704434b6fe736ab7eb67ebd52943000770e0a57c6ff7c1420a225fdeca0cddcf4083a3f5f9fb37490dfdf2c8aae282558c8a4af6ec41f7788d6340053ff69311489323c403becde20ae84c6a8968717e8923c13723be082aab3edd7cf0fd1b2a1f64692911d9e49c4d7d20f8c9364c454fdb51ff376abbae26df57ab7d458772a919879ea7caada2c17fb0011ecc8ced3d7dfa39250fc3c8cc9d0f377860d8b58fd81952f50d732adc73e470c1f5778a49d7f3d507e5ab5cb798420f3a56d9d3ad76b75e5d41921a7ae04099968867c816f6d44c4a41cefbe31623d6899a00c28454bdc0ea17f284dcb39a0221989e3c2bbcc5556e8f870bbf98be4b57be438797995d221ecd0515e4c89c431ff7b595f35527911371cc324cd4c76d4ea68cfdd1eed120ec16e89e4ec4c5ac28039de8b3aa451e1e55631d599612e94630ad3d67ba79e03c4ff023e8ddfd10c09517df736a01af5488a87f551c7e8e41dd0d0d10c58f3053cbdef2c4fd72e51c2d9724360687ab6d0395023626bbfcab24737a50bb27d78ebfe11b5e40a71b2141254074b3dca3cf45456ea1860704b0d5da04710667bf6454c81b33b5b429d2764afd13338d60b928140c05e0b7f41c6fb19b911216ca2357d8171b3673b454b5017bbf34dabdf5fd0d7fb602399ec434f40bc0450cd6e418713c68b349b7deb3ef014b8ec7a62f686b37b1c3a8b60340d0bbf09a6965013c68317d7a2e07bcd3bcaa7cd2cbf34d64534e1ff9cb4ba32d9a5cde63e2da7dfdfcc86886a0ee01fa0d95b78a12085d6dfb62d622041e97d8f03f4727e865be656d9286d628a8950b55dc71058b6dec200049738824a8200023be3f93e740f2a8d241e57deeb642ff28140ee91424db3cf2fafdd8a7d9fc80a7a54da30029ef65df2e7900059ab1141985376e7f9f46e712b4536ed49778e0629d284f56eef0906d21536427333d8a7d6d7e74591031a526eea16a627c5d9f399ec4628a26d9812b68b501716b602564504ab8f16e76a19c608ac550fa52fb80af1e81b48abf13c9996cf47f34d8e943b7d48de31c0d5d794af157c16209d3c0632c2801ab17f05de2c2fb9b9b8c0a257c18a832ac743c9341042af1e56619154fc4f7b20c8de3edbb1636f0a098ed6f6858c27905b00798fd8bedda5eaeeb12ff19943dad0a7f069a9e01dfc9730568784a07c0a6b01623b11a1e6f86cab4d95bf256cd28b00c17b5df66dd4c393471f0f18c68aeae404f5f3fb66bbfd62f1511b35caddad004408fe3b182edf81ad50ac3a639121236968c6be1ba7f7bee6409a91f4c7caf077c2a94c6d8d547cc680a1d7e6cd57c328f6e21312ab76491565c5f4271cbf64ed2be12d770e927cba3cfa0fb89452285a69fe205bc9943eee4466ca8f9998997e2c1a1fe782c9e2241c51dc008bb8f6fe9a49edefae6f43d3e0cd207439745dfd4c347058a4ec3c3bbd56f3108b9a034600f78dc5c889621a6b78e2f7256034d53ae7877de459b6895d5849eb4a8099a62a4bd50d5b4d48cf82fae64985e1e22435fe5d5a4b9119eed5d8ee03a6d1675b7b75d47b8e20a44c05812b36cc2e31947a02c48262c5a875e562dbd4a1a8d045a37afabb28079d3904f53d466e5abab09b8e5e0a56dbae4c4cd9bc6640b47cc6616b2e7cf19c6e9591d32ab0cf87880c81d63948a508ad0cbd50e348d399daf51efb2b96ef9d56a8ba89d04bf5e7d4f7353f71d1a6cb78da6644574664d08e848cf97bab16d6acf70f0e8a06dad5c741cb5eb483f809c4c35307595f00d00bf6a1474aef94cfc913d08c612387172aabc802c17753c6ccd752eaa81e7eefd61c037f958e23bcb9c1510ea47bcaefa72f070809de9f79faede74c87231411b17b353382974bcd334cf983c85ad9e1844cdbd9181a5bb976c35b6a638ae8dd20119858f8c525d735779b2f8e244ed2fc0d900445fe1fe775b4bcb1d2e8d456fd6234ddfcad7fe7abf716d9f4b4a6ee83be812cdda17ec43a895a5c03e5359cce3de61d9736f8a4d66051891b1431f2e61a324f252bd0e9b32e23bd31a5405642bbd2cdc5d3e45b56530568f05a72d475a7d3505b26d9fcdaeb30a62ddf09bcd9e59c1f34e375149782b8019a7a9883fd93397acb338af428f1e015a671b5c11651d3c0168f747fdc6e1fb084bdcbd760adce881492b2bbb76c0a1327e76c9c7ce0afff2f80ec30f2be04d9f93a9b291cc01bcc03f7b67e16a7f1bcc838aab9240df99691a2781da614fdcecf5115382e1357460f4b8e3a577d3ae922379eadc2416d40028c785905bb43a41f5fb7189a8704b8e492c86bd82d0560f81796693e74f08739b632e5226d3c3a963caf5db455ac20288d472611e7dc243531fd66718e94daa2bf93a30a38e6a497a50f2472a72bf9c4689e54105c44cd074bb87e087735791b436d6553c5f2b61ff75dc64ba597b77f7ea42a0ec14dc08107e7bbe97ae519beb5e18a8859493afd097d4609a3a2025fe9603b85f2b1350336d92e15d0bdea3a42bb8775ff2b38babf2ec27e77452c93a05a798ec789a6a012047481ea8e1a8dfc77a9f0f6ddebb9f3503702b147f663f01f70cdfc29afe0cfd7823823fa2e139ea7d1a010a67bb3a31e620aff5cbe1a99ac3cd0f91c472dd021213edf5a9225941b575e27f99c0cb94eb9598a443ec7665335305895ebc28e3f8d34adf6aa37084f823d293ba9dcb2f73d88457d0a55c9202dd309a9b36daa4e50c8f9c93ec7644a7a730b6b947f0f2381a34d67bce50e790a7655a34a2f70723f360af014befa4fd3dbbb8bc2f1461eb48b987a8b772b3ad31a1077c59ef45e4b2870739454ef56402115ab427527e67b6a6a97b2bb3d7a2c13d2a55d1032a64b83efc13939589e46abd78bcc493529cf38581fe3160b2c6eb5a9ac6cee0b05618e51450af077fba0dc943089f112e67a2c654ad94157e95295219d0bbab3a02a2c9ec08ce9d904a703760dc41a7943d52561aeb5519e82d0d390365cfd796434c3decf733d8f09789af0b990f4f9b791cf0d677f34d85fc2b3583b21737955cbaa098963bfa39755f335329f265db75c5d406a0a91ed76563a3ed5f3d2877c2b4b81dc1eaccde6d642c0d8791482e27c64103fc87a55ae91e7adf49ddc1dace5c3108d6a496d678ec5ba09b2a9e6990cb63ac3e4b787661800d11c73da87bf5d297c1fb531aa105d30464b0e023e4212a0d4a0ac119c1568280d49d084729e680a0f453a725ed08454fa874cf22f5718e2afd995a1d7acbe92e0a49307f1b322367dc12b3673708024a85fcc643bd00", 0x1000}}, 0x1006) 1.801861948s ago: executing program 5 (id=1681): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") 1.801163879s ago: executing program 2 (id=1682): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) shutdown(r0, 0x1) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, 0xfffffffffffffffe) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x818}, 0x4000) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26, 0x1a}, 0x3}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/152}, {&(0x7f0000000300)=""/217}, {&(0x7f00000000c0)=""/29}], 0x0, &(0x7f0000000400)=""/104}, 0x7fff}], 0x32, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000280)=0xc) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, r6, &(0x7f00000002c0)={0x2, 0x69, 0x0, 0x5}) 1.724636778s ago: executing program 5 (id=1683): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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") (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_lsm={0x1d, 0x18, &(0x7f0000001240)=ANY=[@ANYBLOB="180000000900000000000000000200000fa10001fcffffff180000002e060000000000000600000018180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYRESOCT=r3], &(0x7f0000000dc0)='GPL\x00', 0x10, 0x50, &(0x7f0000000e00)=""/80, 0x41000, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000ec0)=[{0x5, 0x2, 0x6, 0x4}, {0x5, 0x3, 0xe, 0x7}, {0x0, 0x1, 0x10}, {0x5, 0x3, 0xb, 0x7}], 0x10, 0x7}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0/file0\x00'}) (async, rerun: 32) getgroups(0x9, &(0x7f0000001000)=[0xee01, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff]) (rerun: 32) getgid() (async) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x800) sendmmsg$unix(r5, &(0x7f0000001080)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000a40)="008d5448ec94e2092c92aef394c8150297ce29c0b9f7d6480907fe9d8d514f963056cefb337fa71cfd2cba85028a19665c4dadafe74dbb6ec99e2ff0713679ed1d8c9c0f8f3e8ea827df1f9b710178e3a6d59c876e28f9b888c0d3357abe3dda414dcd33061d0386d2b6ffc8f9cf02be2fb443bf34e471ce42239a992a095a28ae4abd29941a20aac1434fb3d73d62973b600bcc9da865d731ad67ddac32b0e410dbdf3346711f6399eba0e6c0215c9f02c0be8d1ad8dd39828ba3a73fbb2b6fed03830d8e3076fce91c3da2bf24f768389f3ac0b12d98c9a772822f", 0xdc}, {&(0x7f0000000b40)="8e67fdeff009d9fc3ba05c2e826fae72a3dd446ac89b6fe0037b2dcc584c31b0a0c7d1d3d39ba2bb69a1fb9b30dc471a7447a8966da3e2245939c472cbe2f22cd47f421e12042fed6311b426274d57b37c3792f2a064b4a72427c6d654eac1fe47c60f1c2d39be61beeed16a08f20ca32ebeb14aae564f2476203a91c3c24b0924cae31242727a9b5c127a654e1de8b9fe4ecb4ea95d3fb0948a451dad4e27321fa4d0b752723051ee6f5f0e20f99d2bb25de857a275a1fc0b3b52ceb6d311fc6907e3ec69e3501c059e60", 0xcb}, {&(0x7f00000010c0)="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", 0x159}], 0x1, &(0x7f0000000300)=[@rights={{0x38, 0x1, 0x1, [r7, r5, r5, r6, r6, r1, r0, 0xffffffffffffffff, r7, r0]}}, @rights={{0x0, 0x1, 0x1, [r2, r0]}}], 0x58, 0x40010}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x20880, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000002c0)=0x7e) (async) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000080)=0x1) (async) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000440)=0x91) (async) sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) (async) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) (async) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) (async) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f00008f6000/0x4000)=nil) 1.462260519s ago: executing program 5 (id=1684): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x12, [0x7, 0x4, 0xfff, 0x9, 0x2, 0xff], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000140)=""/18}, &(0x7f0000000280)=0x78) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x6, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x48804) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x300}}) (async) r3 = socket$netlink(0x10, 0x3, 0x10) (async) r4 = socket(0x1e, 0x5, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000400)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x8041) (async) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500400000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000304fcff", 0x58}], 0x1) 1.461141969s ago: executing program 2 (id=1685): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000010"], 0x48) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x1d, 0x2, 0x6) getsockname$llc(r5, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x2b, 0x2, 0x6, "b43d7000ffff00000002000000000000000000000000000000006700", 0x20363159}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = io_uring_setup(0x77d0, &(0x7f0000000080)={0x0, 0x8ea6, 0x1, 0x1, 0x3da}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a000d615000008009f000c000000080026000816"], 0x40}}, 0x200040b4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a09040000000000000000020000040900010073797a30000000000900020073797a3200000000600004805c0001800c0001007061796c6f6164004c00028008000540000000000800024000096a000800034000000000080004", @ANYRES8=r0, @ANYRESHEX=r6], 0x84c}, 0x1, 0x0, 0x0, 0x4}, 0x24008000) 1.39843745s ago: executing program 6 (id=1686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x3000000, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8004}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) 1.228850452s ago: executing program 5 (id=1687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x40400) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)="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", 0x2e0}], 0x1}, 0x8000) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)={0x2c, r8, 0x1, 0x0, 0x800000, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)={0x2c, r5, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x12, 0xc]}]}]}]}, 0x2c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000002060500000000006ebbcf8c0000000214000780080011400000000005001500fdff00000500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x40004) 1.008422187s ago: executing program 7 (id=1688): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000010"], 0x48) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1d, 0x2, 0x6) getsockname$llc(r3, 0x0, &(0x7f0000000040)) r4 = io_uring_setup(0x77d0, &(0x7f0000000080)={0x0, 0x8ea6, 0x1, 0x1, 0x3da}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800a000d615000008009f000c000000080026000816"], 0x40}}, 0x200040b4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) 993.260737ms ago: executing program 6 (id=1689): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x1a0402, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0xc400941b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) prctl$PR_SET_SECUREBITS(0x1c, 0x30) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) read$FUSE(r4, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d87539740f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x6, 0x0, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x8, 0x7800, 0x9, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071182b000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', r6, @cgroup_sock=0x22, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c000000100001042bbd7000000000000000ffff", @ANYRES16=r3, @ANYBLOB="00006800000000005800128009000100766c616e0000000048000280100003800c0001000000000007000000340004800cdf000006000000000000000c00010006f70000810000000c000100ffffff7f050000000c000100000000005b08000014000300766c616e30"], 0x8c}}, 0x0) 971.153049ms ago: executing program 4 (id=1690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="20000000120001000000000000000000e9f338557c230ceb243e046fb5000000b5a1c955fe4b2aa0cbeca848aa5a006521c7629624230ea606d588ffa9c5d12735fbf4ee08a687d34905dac4a2d96a51006de1fd869df562ad8b16240e58145483931459e47c85654c"], 0x20}], 0x1}, 0x4040000) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r6 = syz_pidfd_open(r5, 0x0) write$tun(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="00000017456800ed0065000001069078640101027f00000183132ce00000010a010100640101007f000001071bf4ffffffffac1414aaac1e0001ffffffffe00000010a01010186170000000307112fa951fa1e7da690de90865990aaac0083237c64010101e0000002ac1e0001e0000001ac1e0101e0000001ac141406ffffffff44548de300000000000000050a010102000000087f00000100000fffac14143500000007ac1e0001000000000000000000000005ac141428000000010a0101020000001d0a01010200000fff7f000001000000040000000000000000000000000000000000000300004e2000004e2400e6d09605587fdd8104f864b5455198d8cb6712f60a4597c7d797d25214fe2739a0d72941c6e94665bd7cddd9bcbda4bfa3c6c33532b77c300d2faf59148b93cf5374966d2080fb2d740f19dd1c5a51ac8ccc5bec8fab3e8d8f7f5db1ca3a9514acd305850762917f3508854b399f4a8f2ef8d0f0911526b69827dd00ad34b60db347fe8358d40ce12d54db39c7706c3e09cf8a4caeb7b58375a49245140de9de12ece55f23fb5d232b502930e71528e48a71b7cf903d709bea3d73583e4f5f4e3cd09a70379518f49ee9471e3d829e0b617ce51331666a4126c0d0b6394bbad32bea1a0be943694f855942512713ea81e72672c4ee83756ebf95aeed3183897db9cdd2bb36674fd4b30b87baeb5354ff65e303d6ae09341833744ebf39ec33b8be1501fa8369074c66d2967e990750"], 0xf1) pidfd_send_signal(r6, 0x2, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x8001, &(0x7f00000000c0)="a37639b8a115f0f0b39b2555ee6840cdac01ba851a4371ae6d87") sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddb06100a0000cdff0000000000000008000e00010100005685d5adb5f38c1e54b4d7fe6e"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) ptrace$peeksig(0x4209, r5, &(0x7f0000000000)={0x5, 0x0, 0x1}, &(0x7f0000000100)=[{}]) 527.905603ms ago: executing program 6 (id=1691): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=E']) mount$tmpfs(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@huge_advise}]}) 521.845763ms ago: executing program 2 (id=1692): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xffffff7a}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 481.113315ms ago: executing program 6 (id=1693): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x23, 0x5, 0x0) listen(r4, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x0) 480.732991ms ago: executing program 4 (id=1694): setrlimit(0xc, &(0x7f0000000000)={0x1, 0x1}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) ioctl$FIONCLEX(r1, 0x5450) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r6, 0x16, 0x0, @void}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e04f34020"], 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='pim6reg\x00', 0x10) 416.480812ms ago: executing program 2 (id=1695): ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x5, 0x2, 0x0, [{0x2, 0x80000001, 0x67, 0x1, 0x6b, 0x4, 0x5, '\x00', 0x3}, {0x1c3, 0x1000, 0x2, 0x2, 0xe, 0x1, 0x10, '\x00', 0x4}]}) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0) syz_open_pts(r0, 0x204000) (async) r1 = syz_open_pts(r0, 0x204000) r2 = epoll_create1(0x80000) socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x3, 0xd4, [0x9, 0x879, 0xbb5, 0x8, 0x0, 0x8000], 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000140)=""/212}, &(0x7f00000002c0)=0x78) (async) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x3, 0xd4, [0x9, 0x879, 0xbb5, 0x8, 0x0, 0x8000], 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000140)=""/212}, &(0x7f00000002c0)=0x78) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000300)={0x8, {{0x2, 0x4e24, @local}}}, 0x88) r5 = socket$inet6(0xa, 0x2, 0xff) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f00000003c0)={'icmp\x00'}, &(0x7f0000000400)=0x1e) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) (async) setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x9, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000580)={0x140, 0x378, 0x400, 0x384, 0x1000, 0x6b3, 0x8, 0x0, {0x9, 0x0, 0x1}, {0x5a, 0x100, 0x1}, {0xa7c, 0x1}, {0x833, 0x7f}, 0x0, 0x7632a6f3cde16384, 0x3, 0x1, 0x0, 0x2, 0x10f, 0xfffffff2, 0x5, 0x8, 0x2, 0x5, 0x4, 0x2, 0x2, 0x6}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000640)=r6, 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000640)=r6, 0x4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, r8, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x6c}}, 0x40) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, r8, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x6c}}, 0x40) connect$pptp(r6, &(0x7f0000000880)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x29}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x1c000}, 0x40) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, &(0x7f0000000a40)=""/96) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0xa4020254}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x101, 0xa}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8084) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0xa4020254}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x101, 0xa}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8084) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000bc0)="889908312113624608f11bc6f1b8aa2ba641448c46208355f4f0456cf20a3e4a888a404509fce5b9eb868bab95318fccdef1c7b54465bca82cdd02d8608f91d55eb73459166398105ae9b72198899110e38a4bd48df9e81595667a599bb842ea2467154024f72597b121e9fcd32932de7a9b2b38d759622ede097f5717030fab6e9c3d8eb28b13495dd8b767053e72ace1b02ceeac14010a6140b463b194178a9a6019a167876ec80a711db6d5f55648a74be263635e9596e644e363fad9") ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000cc0)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r12, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c0c1) (async) sendmsg$NFC_CMD_DEP_LINK_UP(r12, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c0c1) sendmmsg$unix(r6, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000dc0)="a9f7897f98f413d81ee45f6d357302e8b4cf4971c43ba5eacf400dd2b35e0dc16494a34b4e5bf0814795485f6de1f2ace06364daceed9bb8c4dcca7f5323782442a36bae4d41bceb3cb80994fce9f820fbaef62c9cd084ff1b9b2c2f9e652270f8c26e8a669e17484d03a2a78efce080", 0x70}, {&(0x7f0000000e40)="f7aaa000f9156f3fc5a882a8effb549aebbd630b1fa8deb39d1751f02a94d95df579d7ccade62e546b355914ac81d708cd39bc6452e8bc234b855ddfb99634dc596d059eeb9ab6d888e481357d0b1ada8b1498fcafbdebcffa0fcbe3ad19abd2527f0e15f02fcc12202d6791296112bce223b8d84c4a3e92c379fee48edc04dd99c0ba190d4295ab4a67e211bf2def45ec93a6e3a9ac1910a6879205475563e20f0a43894467ebc25135ebb868a45cfb26739d9c347ba49fc4070d74715975ef8c0370f47a125878d3", 0xc9}, {&(0x7f0000000f40)="eb95f6f9ca54278953fbae0132949448704ad9558c974a15e51e1b32a5c034c15182298c00acf3e7870fc70ac86d2d18ae83421f4742cea356baf9e453d37ca8f4826aea09ac0d519410a00aa0df49ea305dc45f0c0974380075f185ff807bb44ec02ac0a2d9dcd1a62249a14a9756", 0x6f}, {&(0x7f0000000fc0)="938782caf74d0103614ae05025e65a0757d5db9ac9b4a9d13e30525704d71ebd2e0c702d949d55debca395e7d76f0a3fb960ff719548b9367a934c98ddd36624941a55e6e76b468cb367e9d7e0b92edcd8e5564133443dbdfc820ebce1ddce7be647d80eb8989b6e1860e8265ad9ff7367464f67b71227f5866dd4ec9614fba4a33bde0d7ca31c3ea5156c8782", 0x8d}], 0x4, 0x0, 0x0, 0x8000}}, {{&(0x7f00000010c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000001140)="58dc17f54d2edf04f267d458ed80ab2233ca7d886719c21c7520cb9b513c51deb6c81c99be267aee7c42278d6ea2324feaeb03585235c6298857e645b8f747c61571db1f5dc3586e2cd3c872ad4dc56075b97f8582e9789baffcb6575c725ddcec414e7940afbac79c68fc1dee20e23f9b04a609d9dc30a547e3d04f7f7b9ac2ca191104d8d500f3d373571acad438b34633915abbe6", 0x96}, {&(0x7f0000001200)="e39caf", 0x3}], 0x2, &(0x7f0000001280)=[@rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r1, r7, r7]}}, @rights={{0x34, 0x1, 0x1, [r7, r6, r4, r1, r7, r2, r1, r1, r6]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x78, 0x24000880}}, {{&(0x7f0000001300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001380)="28550af763", 0x5}, {&(0x7f00000013c0)="eb2445b6aac91ed989b7035059e5ecb34c16e66ec7684bde88435fbcc338fa95e9f9dc56852427b2cdd9fb8dcd2fd36a23b1e321bf305097d264233f0c392937b991da369b26c22ea43e88b7a7e4657889d57d1f495417e7c6af2c4a5f4b3db44c914e122d11a1a73894cc1c0f89f01d23e8dc6c67101c17f5c69ff00e6046132ad4fb46231447ac0b452b5ba635debc", 0x90}, {&(0x7f0000001480)="780fe4e40a28b66c46022b55a1c2ba4170239aee3d1c79dc0fe10a2247763822c28d7e85ff405a8d90733b0b5bd2d5e4d7b9339ac29b9a4b1b4331e5108c60bb", 0x40}, {&(0x7f00000014c0)="ce640dfaff8b91f5c40071d4692353cd32490d1467e8e6f42b7dbd32744d7faded50c3856d8d76d977d9babf3b93f6fe308c5e15d5b5199775fc19533d07d31fe9e975daf3552f10ae084d0a3c615d44ab726cf6e6910cae23feee3b2ea37f0d7c0ef786d14253e2a0af8981753b8feb03190a7fb2e89f82f2a8bc3b7a52d24b23798500b0e5949426b3f1ca8437e7e6bd1404b5d00e89fb4fe3be266e7eb874f472f6b81067dfd9a20121fbbddc5f3a847431c09ad8a45494d86de5bad24927f8e35be51b6a9ed61d6aa24ffb", 0xcd}], 0x4, &(0x7f0000001700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x48, 0x2}}], 0x3, 0x4004001) (async) sendmmsg$unix(r6, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000dc0)="a9f7897f98f413d81ee45f6d357302e8b4cf4971c43ba5eacf400dd2b35e0dc16494a34b4e5bf0814795485f6de1f2ace06364daceed9bb8c4dcca7f5323782442a36bae4d41bceb3cb80994fce9f820fbaef62c9cd084ff1b9b2c2f9e652270f8c26e8a669e17484d03a2a78efce080", 0x70}, {&(0x7f0000000e40)="f7aaa000f9156f3fc5a882a8effb549aebbd630b1fa8deb39d1751f02a94d95df579d7ccade62e546b355914ac81d708cd39bc6452e8bc234b855ddfb99634dc596d059eeb9ab6d888e481357d0b1ada8b1498fcafbdebcffa0fcbe3ad19abd2527f0e15f02fcc12202d6791296112bce223b8d84c4a3e92c379fee48edc04dd99c0ba190d4295ab4a67e211bf2def45ec93a6e3a9ac1910a6879205475563e20f0a43894467ebc25135ebb868a45cfb26739d9c347ba49fc4070d74715975ef8c0370f47a125878d3", 0xc9}, {&(0x7f0000000f40)="eb95f6f9ca54278953fbae0132949448704ad9558c974a15e51e1b32a5c034c15182298c00acf3e7870fc70ac86d2d18ae83421f4742cea356baf9e453d37ca8f4826aea09ac0d519410a00aa0df49ea305dc45f0c0974380075f185ff807bb44ec02ac0a2d9dcd1a62249a14a9756", 0x6f}, {&(0x7f0000000fc0)="938782caf74d0103614ae05025e65a0757d5db9ac9b4a9d13e30525704d71ebd2e0c702d949d55debca395e7d76f0a3fb960ff719548b9367a934c98ddd36624941a55e6e76b468cb367e9d7e0b92edcd8e5564133443dbdfc820ebce1ddce7be647d80eb8989b6e1860e8265ad9ff7367464f67b71227f5866dd4ec9614fba4a33bde0d7ca31c3ea5156c8782", 0x8d}], 0x4, 0x0, 0x0, 0x8000}}, {{&(0x7f00000010c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000001140)="58dc17f54d2edf04f267d458ed80ab2233ca7d886719c21c7520cb9b513c51deb6c81c99be267aee7c42278d6ea2324feaeb03585235c6298857e645b8f747c61571db1f5dc3586e2cd3c872ad4dc56075b97f8582e9789baffcb6575c725ddcec414e7940afbac79c68fc1dee20e23f9b04a609d9dc30a547e3d04f7f7b9ac2ca191104d8d500f3d373571acad438b34633915abbe6", 0x96}, {&(0x7f0000001200)="e39caf", 0x3}], 0x2, &(0x7f0000001280)=[@rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r1, r7, r7]}}, @rights={{0x34, 0x1, 0x1, [r7, r6, r4, r1, r7, r2, r1, r1, r6]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x78, 0x24000880}}, {{&(0x7f0000001300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001380)="28550af763", 0x5}, {&(0x7f00000013c0)="eb2445b6aac91ed989b7035059e5ecb34c16e66ec7684bde88435fbcc338fa95e9f9dc56852427b2cdd9fb8dcd2fd36a23b1e321bf305097d264233f0c392937b991da369b26c22ea43e88b7a7e4657889d57d1f495417e7c6af2c4a5f4b3db44c914e122d11a1a73894cc1c0f89f01d23e8dc6c67101c17f5c69ff00e6046132ad4fb46231447ac0b452b5ba635debc", 0x90}, {&(0x7f0000001480)="780fe4e40a28b66c46022b55a1c2ba4170239aee3d1c79dc0fe10a2247763822c28d7e85ff405a8d90733b0b5bd2d5e4d7b9339ac29b9a4b1b4331e5108c60bb", 0x40}, {&(0x7f00000014c0)="ce640dfaff8b91f5c40071d4692353cd32490d1467e8e6f42b7dbd32744d7faded50c3856d8d76d977d9babf3b93f6fe308c5e15d5b5199775fc19533d07d31fe9e975daf3552f10ae084d0a3c615d44ab726cf6e6910cae23feee3b2ea37f0d7c0ef786d14253e2a0af8981753b8feb03190a7fb2e89f82f2a8bc3b7a52d24b23798500b0e5949426b3f1ca8437e7e6bd1404b5d00e89fb4fe3be266e7eb874f472f6b81067dfd9a20121fbbddc5f3a847431c09ad8a45494d86de5bad24927f8e35be51b6a9ed61d6aa24ffb", 0xcd}], 0x4, &(0x7f0000001700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x48, 0x2}}], 0x3, 0x4004001) 415.665951ms ago: executing program 4 (id=1696): migrate_pages(0x0, 0x3, &(0x7f0000000000)=0x2, &(0x7f00000000c0)=0x91e9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r1, &(0x7f0000004f40)={0x0, 0x0, 0x0}, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000600)=[{{&(0x7f0000000180)=@nfc, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)=""/148, 0x94}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000440)=""/208, 0xd0}], 0x3, &(0x7f0000000380)=""/100, 0x64}}], 0x1, 0x40002042, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x6d) listen(r5, 0xfffffffc) fcntl$lock(r2, 0x6, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) quotactl_fd$Q_SYNC(r7, 0xffffffff80000102, 0x0, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000940)={0x60, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x1}) 395.250757ms ago: executing program 2 (id=1697): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x50, 0x0, '.\x00'}}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0xfbff, 0x3}, 0x6) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r3}, 0x50) (async) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}, 0x1c) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x81}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) bind$netlink(r4, &(0x7f0000002200)={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc) (async) read$FUSE(r2, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f0000000340)=0x64, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) getsockopt$inet6_int(r6, 0x29, 0x48, 0x0, &(0x7f00007d0000)) (async) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r2, &(0x7f00000070c0)="48890fc6f3e08718b829b25e04e3d4dcae777bf5d6c09a026613ca5997f7e03e8a09e5d5ee7a6fc48c390792e5dad5ecf50f127eb61ed3f98d10391dd52de793a614b6483f76efd7f0fa1da311c16eb6c6b287d2e5e2c4ca0b518f442dded13bd12e5cbe73f4cbc9cc3b0b33c24fdc1edb940657e17416bbd60baff208a6e551cb6c9b9c75a39d8c0caec7f7d73c4f6bb806286d5d7412202aaeb4e89013880907b1f4e948dfbd78f4b32ff4f2b92b8da8d42b5155ec3134c27a58c2ec0161d98d2f36cc8b33f6699b033638173a6ad8dd146c85df96fd78222bfed6f9f1010529451b03f628b202504eaa9657daaeb5e536edb9536352cb13c3018f885ef6da41bdad23ee89e63a58b70cdd299aeaab8a9c24c2c27a43e9adb463e419131d5b4a3151eefef39380d729763a13c3048d43b8bae9b3be110a4f29189ceb30ba86dae6a159611192c6746deb2d768cda414e09bbd39152f0494c0d87acf04a7d4aadbcbac32eba70b86ce62c433c6782056b133d0af13edf37c649e030b913882ca0e34af96454f9da10ff628acc875ebfa8978b436ae690ea102ce4fd8ac7b63cdd21b9289f4cf28e2e42beb58c20b55ed1d77325c529c3192d305a76a1c5e596519938e893933392a3409a053a78f74df33c7b56df5cc1bb891d8da3dbf0966f34ef38e7632af59c27e00c614a608125583ec1146d0d41741e965feb3cbccd4c5fea460c072272f886ab87d2740d473c9281816a86beee7086ab965ab8e0aa5250edc56352812f57029f8f033bbd186fa3d3d14c0c42e1b6e6f904a9dbf63f1cd887e66625220a69254102e586089c0ba78384693a32d5f3763c6776d80f6a22ca5dd0afb3186ba873ff6c8b8fc4262bc128b29184c9bcd7cc363fc43b1da50d0e50e82c8460036b71cddbc60b8eff7e3cb2620017374d87eb491c37b7b31b05d35fdfcab959bd80e42dcff6bef87d7def64f49e0b6317fddfbd87eb945e5b878c2e95e71991f28f5438631cc67ee3c02b57f0195caa4e0a9d5332a3ac20cac3b98ed9f1fa7de8ce6a501464df2a5c4e755d5c965c754a1f4bdcc89d74d36a88d64d2809f42b8536274e8b52a5684976218b3b9bf839563573df6e74d3d5e7d46cc84e0d9e7c288973bde4ad9522b88766bd72a5f950f95182007588f53cc341b4bed6c775be443105918f5b8489ac2453c54139c977ed1d2d27d08b447de2ddc955a773f3216c2daa831a9111c2baf5beee20932af602185cd7e3859fad20715c1316b08417499300427153883faae9c5c9399cea966b5295896ac7f6c515da64dd0cc412a9fec1f4d77793c391f5690e8f32701ca9a30a8e6cdabf403c432b39a92823587b1c84e40c00c3521663c69aca388625f8c8b8d835691c304fab83a47550556d56855f0900ddff2a0adf725a44d243d78a67f9fa4e4d9e2b966739702e85fce24e037961099155bd2a313c604a72ed33b745b26682c42d178bfe9b0f5974cf2f2ccbfa750de4a8ecca23da10e81f2d695f38b1a60160bf9e2b91ed779fa4d6d0efec21318f62c0e976611b7f75d344d4b73362c7647dcc1852d50c0e99d1495c3c7074c9b4f945988bb9745f4bbf2d31e191f3d940ded371bb150be284527215594d04b7ebda1e43b71cc4452e5f22f265ce308c04ec4c4ac75c8270ab2f5fbef4ff9193986ef1cf92d0bc5ee94747f6e89c75fe5c4e4fa22eb4bfc7df3fe68987521709faf76a8467670553eb3badec1452e8bb23d13ce1f823711683f6bde729643986b4fb74ab30cde7360776688dbbdd70a8263795b34610b3d2390f8b9c950b4c27c9450c97a913579e65cd905ffa4be337e8f525b319b2be6bf5318c7e254699ebca9e8babfa4c29f20072d1797e36694ea7b091c8b78edc69ead919ab522da201bb6540eafa7a074ad435004b1a0e38fefa2cd79354ff3868a77fc7705aed5ab053b6223462c8f6984a35ca82b371e3533728cd1b8060263dad585daa596a05b0bdee73f52a437bc8552a4bc30faad0052c74cf5a07f8d0831bf5d5e13796d3c11c6070d5f7ecaf48b2e5f9d7ac122db96423b36eb16f9a12055c3a68621547f819ed5f125d2372aee77269dd8b9faeeeed809717a5d8c4186a9cbfc436a8532b2c77597b8be2e83b5020e053537bfac2f07bf13ac00a31c542cb89118b7dd24820bafb27a8af1f4304aa2c35409f99b801898548dad44c01c788250c7c7e2ff037ac483b17e04d88a37c578546dd1fce55e6cfda577ef19f4355e028ffdd40692ba6db9ba82ae8213b2db0a3124c28f14f5a91d65234ea36d0d0184e4e9470418f4fe901c5905f83db95b27eb50d54dc7580cdae33fdd74f0c1a65f64eaee6f138df15983e5a710e5cdac2bde20a1106117d8c9e8717ba1b6d2bfa3aaf30dc5f67ed5d46bc2278455660ca8c14995e383ee979c3ab03fb491afc41354721dbe2b2a9bc3e2826cee5d1328d1bfa56ef88d6ec5f1a276806f7005a88c32b90579ac80bc44e33691df2788d8f25936635581878c120d70e53946aafdfd553e40f9331e24b840b7d681b0c8ac171ae007b2e96705d29db6877fe82eb34b48757a993b06b0eecb0df28373c74753a5f643953c1748d415f89f7d17f616480ea8064d4caca9200a73eb4f816abe29b066f8666a1c15921ac5cfc2231c7ca45ae5f73f2365cf13beaa9d350036030129a32cb5937b50203b484fb55b56814d7c54ff91e7b002cc8fa5df0d7c2de94e32cb7fc8da2c9a8cc261bc45be8768515eb840ccd6c526886198f628f506d761549e72fd68b3e81b145f58b20c51dd024796f4ab1ee611edb8ba19b457fe47ff4a62a74130b80c43d9f4f647b3e2fdde786ff06ac764ae2895ea3305c214c1d976dfb95830f9866cb4704ec39e84d6fc6bb662751b8894eb80c8756057963868be7819d73b6e451fdf3a58f6e7846f22487f5f9951bf583ba4d4e165e71ecc8bf53364596144783b3c574f892d4fb39abe3b29065cb1aef192348c447f160b5b8fce5435550bb04530ad904f7c39fbd6e19d8b8a6219ce802d1cb9f01cd5dfd0ae54817747bbba5cc0f36aa9ad9286cac90ca22030680f11ae3010c9fd10ced5bb5e51d4e054bda8347ebfc342da30693c16c2028347e6551f60f3dff889919986114765b28fe29babb04c5325f69bcc5a9ba29be2575404642a47966b6779c8532ce4cbf32bc0f51d963f1a85fe5dbcda28c1badf321180398105dc05600edbff19806182a03e96aa119bf9d871b87ccc84a5afd716cde23edc04a4299b2da835f1a9f663b324cf9bc07d17102ba99ceacc363501d73237923c28b61a10562ed7b767dd0817a10ab22544517b8f9aff34fabd10ea2d895b61ce36770206321cc12180aa8de8c3bc72776dc2ef7d035099d0c7875379b400fd073f4108185106c6f95064e177ec6c46a48ca22ec011185628edbc7e089a855ab386ee70f4e63cb10ca1ee37794c150a3dad28b01368dd8db19b9e818974b81c2fce412e0103f0c0247d3c1e98ea011adf3316ec753dec8f7d406acb7193913648e54c8938f7b57f7751461742878f4cb3ef92ecfca4e61d52bedc7bf5f850aaeca3bb486f3c807849e1abe779bed3e1e5c6c4636dc16d944fd65736a928902f904a80f0bfe30d1b4f720e63cf21e231979e10f606ad753f3a9cc8dc7590dd79b584d515681af3ff821d66fd1e2b0c2c8883ec9917eece8ec8123f41a64046e4e53b06663d6911defe52fe0a708a3ddba081c4fbe8f29dc333a6ac3312c45474f7e7c55927d5c1c8a3b7f2f59889834b560e16c5774aa9861682a22439a39141281a73b0fb5c065bca825f00f633c6dcaa4cb42e349fa467ea12fe9fd67ade5986721c4ecb6ee89bd1e6e09a41cea565ac6f3a8b29d7e58e4bbeef55ed29071dc4df4feccc55dc4100f4982685ce6494a0f282df1003b0c211a781ae165425bf6d8ddcb3bbc250446f279f2139ae2cdf5abfe68578d868a74a5c64f3cdcece44e5c5cf4df507577edba598d71944d4406be370779c8c4da8bdeb6465c7c3960c892e09786fcf00a223f69fe4ad7aae73a8c00ad36314e52cc14cfc990e9e548d3264995ca7e3dde80f39a4ef703cea5870ef13782eba259674ae2a04d852c909d054bb602981289f7d2a0a5f57d25024f21ef7e102b4b09dfed8b9da27d02bcf640c28272b961250fdf38ab9d54455c6858985f35bea810108db7c7c8a51a59513115eba504150c5e89490e76392ed45b7595199521bf8b953693a6a4e42cbbc94fd7752ec309ededeb0906732596fbbaa670e000de4ac053ecd72a0c10b29281b8f6387c54cc4cd640fdf0afa3b6e536c963df01c895001dffdb928a5e1ba5c9dabede78969989d24867b0dedcee9ad77fcb2347be196d4cf36610a7aba7b2d35b86ca97f41fbc4fa03f2a6fd571049ec2c1af62d55dc5350f07295dd0e159b1754187a1ff39d3f0e7d246647d2804a53f6d8071e05781dbe66605e18105c7a9301dfd36b3bc575188301e926ba9450a7f14ac20daec0633c36068fe0354c05a9d7246ffc06b442bb65c5c805340cb44350953005fa24ea732d35310a1c294af18bffc35c7db98f63f6e5ed06b82d5626e81d37acfe04947c84d7b3abc807d52d8ca2897f13e49c61565ed2f3d18e11cabbb2eead95b6b56170d4da0ac39a97c61e27f96c144066978dce68e497e7c364cfbd981779a4bed0629fb575c884f4c588d5095f052531f8c097faf75b4766cbd82717cf7ee7e44c13dc6826e4dcbe7cc7e97e9a5822a7c9676cf6d8ef4f2c1fb8977cbd20141d6c7ba2190b23068dc7c8efc6c87d9a4b8af021ac3409dd705afde9814288aae79b7370e235162766001344cd0e758443c3474d8992ec60c86e03797c5fa8d483607cf8d9bcbcb72d8ea169aa810e40e469cc1ab3fa9eb8f4d5b4aa9774e123859fa7fec46669c13f28dcad3d13e3d22424281ca56de464aa2a15041e7d82143e2d9dfbbe4fcfc20daad24836c8d58d71ce76e43f860bed09f4257db54e3fb1e3752b3086b32fa0f21de2e2ee84cfe6a4a8fc3aaa1e508a20215c1183d3ed25494203fa48ba8a2d0ae4b37a1de9784f9d43715a0348531e4c4e2712271557be889b332ae63db317ec54333b03486e5db694ec7b1eb196a087257ac7f763366d51754c082e0202076aab83405cc971fd881d4b769c446986731405b90c40188f7a493418c79dee666b1c48e562faeb25cf6e06715eb11eb3af62c257c0bea54a438a3451c8441e199670dabce8be4b7dce876323e620ccf6a359999797006d61a1e4dc51f7b20039c048ee2eba9b12203202c41e36a6f6a41535f0d3cb329c01909a947624c5ca6f07ac09e87f5a33072cc13f772278e42069fee59455e59938b9b7c4f6c464d21186d1288569bbf2726d494af335cabfd3f442b312f8d8a9aa69d1ee2d34b647ab8bbc111f7df19d6c894037f10100d7e043e2f1fb170bee0cbc221b34f5cb50384bc8f0b0814b09e42feeea162eb7bbd4d2a81721d8990f13bf3779b675e25c3e76a55d64240ba3acf4ef33b4ecb5e9c57c3a692b57d67e20ddeabcf0ec64c95e5bfbe90f1801754a883ad12f0022e54522333350a4e1d2cf71d34a7ea8438dcd30675c40e218e14d13bae72b3aa7933a295f08576a18c268da4a397c2f09375ace7c396050049aa8ec92068886018f7084ce327f713335f9bba573b6435cde6cb4387acde240b6dfc4e7e81e09112682cd1b257648182ec677a9ba0933df3011bf0b68902564268d9275c288f1631dd6f74b8bb00a5adf881215381f599f8bfefcd0ffe036dcbaddce81ee938b292af1c5a0c03f9d0005db8a174bf630d0c2e58b262b28c3fc896fcb23064acaf1a86a2c6136a5feb10ced694b1f70c94e68adf2c58af5a6988fb3ccab6223d4d67c7c5fc2c6d1481120fcfef8e98c6f76d2f4aa3fb47704d0160b645f34b0494f73059c730e10146fcffde5bb65b75cc33ad1a9656e3699033f99645e4e59203ee414f2ab3f43a4288632b26fb3052d3cbefde5bc9f6510ec064a7615c0c5c0988faa6ec42535a0789414e210aade267467fa8ccda3956a5c590567c226c26762007dcf76803b7c978b0a69f939a062172abd0397d81e349385fd4ddacd902a00d5d36b58a2ff9082c5c8627ed7ca3af19cee2fe56a365b1c7b018ad6237ec65043a124fdb4cb22c2ee5b6863081359558832addf993f89c017329cc99e6e6f24f12cd470ca810e5d2533279029dabf9d133f3b44e6a061f1336a36a44e553b89125cf0a5e873de4042f985bac8a6ea2c72083860e234d2e58dba4d26e9ea8d476726d7ac2adb82f2dcc22d8f843a7ba977bede8d239f6b1e53efdcdfd1846f18a81d79b09746cf9826eed0ee14c44b8c6d5aba401f634f57c57b11f614afcb17022b384ed7f73b8f0ce4352316bd3a99e6db9657c34d3725c31c5fb33fbaf11bc99a3db02e48874d2bcad8b230cf05e53f30d51bb772545dd4aeb541147457f541440c1bef423706fc60477756fca9515b944f94b8f2f43b3ba25a68f76dcbca7221ac5254eb79911636b6fe8c76db94bd07d9afbb970be9a2a333407101247fe8455dd345d157b8868edc46c2c24d9f36b0383d10ffe534dac7a8ea191b3ddd740a7ac704e10b3179458f6ec3a7f4c7781f3df0961f50991e118b744e53c0151e47a8f8a07f44e8b117c1892d2abb502ce25d02c4eec80c62a7f533da4f3c2403a42015332240680bcd3afc409ad2d7c69ae304b64ddf5f5bf39a4301f99ab808cd2d711167747044b473fb827426ae0bbc5aecc5dcc7418a713379d35ffcbdaf835ea467e7ad0713a8d7b56a9c8e3bed730f9bf6b75bb6e69029271b610dfa0a21ec146f6b9ada90970e785641b106f337009b70f02e4d516286084d1785390bba6874da697b98402dc305372dd233b50eff5ff7cf47d2968df8ddc0e3d8dc128c8e69eb382e86e40cac7cf0e3284f3cebed25e17a64eda5d459a9e6ecd32372a208db2ca172ab0d3d3680b4441cdabb93efe4fd600d8643041bb2ed89f84868ad0ce2bbb8e23ee486748387a7a95857cc1732382a4f5c1b4dd16ff78c4fbc7d01632783d34bed3f8a382f0e89ec4f634ee906b5951373c2326179517c13e534b740cb78849e2248d1ae52e9ec161cb0312e0fb5f44d022a81eb5de61fcb8dc4d35885b848df9413b7f0b7b45f09747c7e108233c30600f6f078a949d9b52659672396d2c65f82a5b77e3deb56ed7b54b461fb77aeb35055b29d13181158c3222b75d882bc8f2b2186859cb577a17c14a2023bb2118f3eb49fd102c03839abdde2cf1da87f0c63ad7f3039acd6d9081cf79845dc4f960335a95dc0e148d8799338f7dc782871514ded4bb096904e2ec7c236b1de20dcbe5d57a63dee801e9efc67e644d076f123bd0a029829b92ea540424cc889b7a294e217d6f584bc2781ada59f5d038fe2d5daf7949432452b866ca54e7417691816a4e874513a4c675059ee05fdf7b0d69cc951a1351146338c0462b7d6ead91dbc33c455fcb6b9f134645939de7efadcfe29fc1b0888916ff87021d62d747055324c08fbcaf6e0830d189c8353a4842b11ce21fcc9441cb17bc13c6bd9e4b215ab763ffa7027861ef63872358362ec2f0814c9be1f974ebf547f8d184bb54a0e199c550068fcb23540ff63467a136f18a2e78c554b9f5e74171edd8eb5c4f435f2f3c6a65b9abac0d329f90c07a1772a36aa3411b402a25fdba093d478cc9665c2b3d3f598c82bc949d92047111b49c92cdc106cdd5bb0c3c39debb7de04185997a1b5e7c38c02953121debc37f0a84e86a18e84d7d8bcfb547d8adb80d7787d88aa34a18b810578ae2865807b159a141543eb6928a5571712f439d3035e05372990d5049ebf198eac390145639fcd07f232b847ed94500258f07b9b6208be46f84bfb5c1294c84ddcf9d3495a00b06d84bc84280a54e33fe64c01a348e8c7f7fd443fab4e355801e63311f7d46e72e45e8d2492e46c4da2cf276671fb77affe499a0027942f52cc8437d802c08484ee11c19d1cb4c7f626a1cf1ff58a3d29600f9360359f254484cd8e4274618c2486dbaa620481a2882625979bf473b664c77fe9375739d56b6571f7166c67255bb187594960ab107997edfbeb5bf922aa887dbcbd133d15956c91b65cf9505d108bf716e1ef84aa550aa228ca14987796bb743fff5f7610b1269e9d755743a958c9cb75f5e5382bdf3430606f275eabf248617cea1957b8b3f6138ada8ea37a4f28f423937d3e47ddbedefe85d9cf2b3251ea1a19addca9bbd1bffe9fd89ef1eb8421efe09f9e67c04eba82385750c318c7127d20d56246bc3389d441ffab09cf64b14ef564bc8478e40658eaf8d2bd8c2f1822e32149ae6d7207286134f0e654ae1835a518a0358f4b3cb61df57740d9b72a2abd6803954af33f3e4263aa0e683b2e31902979bbd6c055f9ea1c592391dffd0ba4e23c17b17e6e97dd2f575fd56cec39a756ee7894bfe50f1f6221a133655dec59b26d5d45ba875132557f584b4d600a01f8b28b89bc7b6f3512ce5483037fcdbd3d8a3f6b3834ab24d1c60f91cd55b841b35218608cc72261ee23da1f1b8d9f6b8ebd53f5290d60a7704298651f2471e9c775087c8783ff42b882bbc3e6daaa0b66f930ed0ee0adbabdda7769c8f378aee1868995105f3ada10a0176f643e66817c20a3d06e772012b37cfad73e1afde6597ac96ddf27c3a7454da030e8f596538423c613251d17ae4e88afb57e61d07ad0c599b0b67272b3d33daf3d4cea1391c7ad78836c451fff680627ae6e73be52c7cce6d5314f30e19b4c7206558f5ddcde6ed1cdccf367e1ce8adc07f06d21ae994e79ba80a5c519c8a7075e1ef6fc614b86414528f7bd01dfe6a69f4526eaf91e7a5383e7899746cc92a8c84ae0d04fa12df710473abde3a69ef2db5eade1d24ee0126590cfd0af98882ad701b69d1f7b88bd8de283ed9ec9137f9b9674d6f0169f26fbd314f8bca0a2ed20d2dbd18516ed0a750e4de0f893159337cafdbc9990015e4b9f37bab243256132edf8f2c8250237b033adc4821dc9f8d13aea245bc997ffd800ded647615f6f3338ab05073e023ebf815a02424acf8cd9351c991381cbf184e223a2f17d79cb01af987b8e477a717b60a5024b52c519336f3cdaa3303f7dc73dfe8d67503b1efeb0eba483b50e792a5f0591308c951bd6c7a474b29962d7b5d415de50c47c06fb20234042e847bbfbb1a9170a0aaefba56654ac050181159c81df05b28910c06dc96fe4530cb3c556c325dbfae0dafae3e67c70f9b96cf4b7664114da4cca30c2d86a52d40e56a180c4289cf006f85d87c34b5df3fdf41d7d62e1934fc07a46d4e972de896d73d4e17324574e3c08ee2a80ecddda37a266b6e07d7303c6f798a6b788aafa13df7c86704a5c8c7852c73e98a64aa62a4d62c477561fa2b5f7d9145eca45b3092d8d28e56186468a09b48e57ba84dc7c468ec64380accad4f69363a3df18001cc2b900758fde50cbe4d3940528375d04d11f91caab8f22fb6a348d71c5be46d3d40fdc3e5e1130d44b025d09aec20e0e8e7c585222ace67e3cd5f4dc6e07f8e65f760cd2fbb42ce97421856cf09e210881f8626e246cea47b9ec389f79f673b27a0471d191de7db8b0cf3ee177b2ac1ff38906a60407674762d1506344594f589b2ac1bace22d36518c221300a18fc1288012236993255a71e467c8ebfaca97a4f3936652ff3733667199c0bd47bed03b0f7cc7b1a6b13d0e4c1290b612c8ef83ec2bde1ae511992b9d2f754a95ae9da26350d5650e9e504a339c8e525b5c63ee7cb555864f4d8c625837f8935ca6c423019503dde2e26e9772a975a294fabb986bb8d0434793fd0783e5e615068b8116b0e4838203221863d27c19cf7f06c5f4c81433f9f2d9cecf44b6f77962187dec3ac10bb04a57280438e4af80eb600004d4dfdb25464f7a60b060b01757199c4d7e4582075ed2196a475d11dd87ed59b8a0d6917607fcfbf60fd4b656a2d26a3204142706f092ea8d7af701a860b77ba891de81c373493fc5339a904d806e2a23040fed7991ef75f6c13e244804cf133ce73b2db4d933d0492b3bcd12ac4be2a8fdbbb157ad28c83f6d4d30bf0277890d917bae247155bfedbc8b7a58c5ae5ebfcf628ff06889de3c38cab61a77d69408bb70935f340f0dd623afd144329b3ba5c653e46ebb4b5531d0a7cf257bf27d027219c74952c6a3fd791bb743803874e104dabfa87383037791ef5d71c5a8c878df18e8294bcba744d6bb067e7ae2aa9c21108a94f31e394c608aa39bd492ab55bfc8182315b3f8c44d1d5f57cdb32568f03818e5f2f49fe396eb9da29758e5c7de859d7fed6a9167a487b09553583a6ab2bd80496937b39f3ee6f1123a0f0faa30c7fa0819fdd79bb24b92eec840a0636e1700ab91da2c0c25806070cd0ed32284d23ea9bb5f86b80e170e2d2a155832c30e1e74837eaf6f0db4336c7ae77382f01bd5ce3e89b3d4335b65aceac476c29dfcdbef9ae6cbec02c2bfbfecbb37116beb0e721e9edb6a5f4bcb57a939fe141bdfd926858f80f23deb9bcc0ec93f2f392da5e4a5eeb2c6cb916516e44c2e8c7e39ca6efb90d4ef0f0ad1ca0c6fbc600ce3f5a5b90cafa0a6063af320624b2cc9b47df7c79c15dbe1640e61daded126517696d9e280819283591dff4299b6aceac2a5fa06844a6a6dc3c0f452894b9021c07b5f79effb22c87d01a42d186f96ab6208a1a205cd63e3be572f9b194c037ee5b673233806f755355f532bb7fc4a6c3c78446042020f7f62cc7d4fc9447443493c47fa0c3add6dd698b88a695c526706da9d7cd5cace1520f5951b83cef808548526707e74be43c40ad53fe41a77961821c56128162ecc3404c564666d08a01ebf4e38daabff8692103f2d17df3c215964a06193959da98493d027bc76e6504993b35a55d8ac2d0afe4717f0713ceaea84520c6e2e2014fb50688e6d59c0082d5d3cc3ba7d907a8a6297786b2f8bc39cd35d2f9849e76b5c21b1c9b46a079c5c14b206d572388ab2a840fd1583977936e5522538b25139537f98f1bf9b28c5b20cf8c1aa81c4862507402cc76a4f6be168eee37c668d1226eec64df6914fae948b536d4a49a31fea3cd21145b66d13087aaa915c846781f9d134e6d60cbb1284608ef858064f2cdfba9930743235ac5b2e2e3b99f0d1c80b7830106f313ad70586c7070d3d6f55c5b649ee56ee80b6889dee5d241db3a435d744e54f8f4b3f90203bc338c3c9795e23cd0504c9db20a1ca512965e7d180e703dd4d013a630e60032000e84ba4b5b7b2bee57fef39f56ebd163109c4e6606077782e8a736257bfb9c2dbc043617c79a73b2c0530f6bce41df8228fa77f533a494f53af7c9a77d20ef1fc0a02a93236b3cbebc8c885e67682994187c8b024267eb7093c44bcc41f1a8a40d8ff7de39f6963e5204c1a6290200788959991ce58f013b0e8287732608622fb921d0c944c190e2998225b042b8b53f083252a082d4c16b0e26c08e4aae25d2b12ee08c19e", 0x2000, &(0x7f0000006d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)={0x20, 0x0, 0x4, {0x80000000, 0x4, 0x4, 0x5}}, 0x0}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071121100000000009500000000000000410d5a538f0606ae05b9b78481dbf5f42f0f64ec6d31765d125c077b9005af5b3c7b1d0355d1db0e0786f3b61b90ed031cccae5b4ec4ec1e93dbb0d9a9c63cdba29fd41cee1fba5562e7367138c333ba61f1947ffca82396198b2a3bfb37ab085b9c094e99e7a174196dbefa6b2df853d464ea2a6962e95af269a6c64b2b8b4ca4acf21186ca07454e84bc05ea7807501a66e7719b27e15708bd16eb1c0c108b211532bca3b41f0118bf0a4523640a32d69b20636c5df2a2b8a706b28bd8ac3eb514b012"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) 354.052735ms ago: executing program 2 (id=1698): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200), 0x8}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x40d, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, 0x0, 0x12502}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0xc000) 19.758027ms ago: executing program 7 (id=1699): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES8=r1, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRES64=r1], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2002020, &(0x7f0000000580)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x600}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'syzkaller1\x00'}}, {@dont_measure}]}}, 0x1, 0x0, &(0x7f0000000680)="0847c6d3972b04b813b53a4c74c9b86e744e6d141326f2bb54c759b1b8b3fa0492992879ae95b97a6f0c14bcb86ca245633a15dc6ccc475a9b0a7c1abf13869a554f9059813419d55bdeb601a7596332ce5a3098c69a3667b90ec4e86a2639048963bf6d47048d09d32b3d4580744e8d91") move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000700)='./file0\x00', 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x2000c000) 0s ago: executing program 5 (id=1700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x24000000, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8004}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) 0s ago: executing program 5 (id=1701): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r3, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xdf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) (async) ftruncate(r1, 0xc17a) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000bb000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x94) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=[{0x11, '\x00', @data=0xb, 0x9}]}) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r6, 0xc038943b, &(0x7f0000000240)={0x4, 0x8, '\x00', 0x0, &(0x7f00000001c0)=[0x0]}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@mcast2, 0x4e23, 0x1000, 0x4e24, 0x2, 0x2, 0x0, 0x80, 0x11, 0x0, r8}, {0x7, 0x7, 0x7, 0x1, 0x1ff, 0x8b, 0xe9, 0xffffffffffffffff}, {0x81, 0x8, 0x64ad, 0x100000000}, 0x1, 0x6e6bb9, 0x3, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0xa, @in6=@mcast1, 0x3507, 0x1, 0x0, 0xf, 0x4e, 0x316e, 0x5}}, 0xe8) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="34010000150a010800000000000000000a000007dd000800cc6caf862279eb5f8a5c91c1558520be6422f46fa7586be69d9cdf857c742cdf24f86cb0a54451b3e4e90fede45e90b4afc4f49751803b492e84974036014f22e7f18969aa510bb877acc31f6e247bfd761497ebf2c2713473f1b1061f559d913591a55c5d85367c68f181377104b1e096649bfa4eb984980c11a1eecfb975c6b2274111bd8116a89949d387ef0d732927d7c22381f039b5e15ff4fc75af7bdf0cc00f963edf7cb716f66e4a3221907acb284c79175a572485763f845fb52882d6bc0893d861860c860aefbfaf52ab9fc1a291c4c2df03d99c00000008000340000000070c00064000000000000000051f000800ebc3fabddec1df7e824df715583cec47bbc3c4474cf6d456fd5b6e000c0006400000000000000002a02a710702025468dc3001555ddfe6457a924fe4690a3ac55e71c53eecdbd0e5fbe4d5c0cd0bb77a2292f70e66488882e535e36341507ab6378a1edea88608edf495aee7e0548d3290243a5269bdbc517a4972b967686508b7ea591e6308da50102a9e543d6323e65b3de84771db848da6250b5d277474f9ab65bad0a0c0113787205bc2444cd84c57c9fccd31451f41ecd0fd0f5ab49eae8023"], 0x134}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r9, 0x1, &(0x7f0000000180)=0x9) (async) mmap$usbmon(&(0x7f00006a2000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r1, 0x6) kernel console output (not intermixed with test programs): T7948] FAT-fs (loop1): Directory bread(block 68) failed [ 138.998818][ T7948] FAT-fs (loop1): Directory bread(block 69) failed [ 138.998848][ T7948] FAT-fs (loop1): Directory bread(block 70) failed [ 138.998864][ T7948] FAT-fs (loop1): Directory bread(block 71) failed [ 138.998891][ T7948] FAT-fs (loop1): Directory bread(block 72) failed [ 138.998906][ T7948] FAT-fs (loop1): Directory bread(block 73) failed [ 139.198473][ T7956] loop3: detected capacity change from 0 to 512 [ 139.201245][ T7956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.203065][ T7956] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.248805][ T7956] EXT4-fs (loop3): 1 truncate cleaned up [ 139.253869][ T7956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.302666][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.312716][ T7963] overlayfs: failed to resolve './file0fowner=00000000000000000000': -2 [ 139.734963][ T7990] loop3: detected capacity change from 0 to 512 [ 139.767046][ T7990] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 139.768916][ T7990] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 139.772248][ T7990] EXT4-fs (loop3): mount failed [ 139.793048][ T7994] loop4: detected capacity change from 0 to 1024 [ 139.793457][ T7994] EXT4-fs: Ignoring removed orlov option [ 139.829840][ T7994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.884027][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.093951][ T8016] vxcan0: tx address claim with dest, not broadcast [ 140.102646][ T8014] loop0: detected capacity change from 0 to 512 [ 140.104593][ T8014] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.120033][ T8014] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 140.127695][ T8014] EXT4-fs (loop0): 1 truncate cleaned up [ 140.128170][ T8014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.190825][ T4676] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.247122][ T8031] loop4: detected capacity change from 0 to 512 [ 140.256311][ T8031] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 140.263517][ T8031] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 140.290488][ T8023] loop1: detected capacity change from 0 to 512 [ 140.303203][ T8033] netlink: 92 bytes leftover after parsing attributes in process `syz.2.972'. [ 140.303228][ T8033] netlink: 92 bytes leftover after parsing attributes in process `syz.2.972'. [ 140.348407][ T8023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.666016][ T4668] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.737553][ T8051] netlink: 'syz.1.974': attribute type 27 has an invalid length. [ 140.739121][ T8051] netlink: 152 bytes leftover after parsing attributes in process `syz.1.974'. [ 140.741396][ T8051] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 140.889060][ T8058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.978'. [ 140.909832][ T8056] netlink: 'syz.1.977': attribute type 1 has an invalid length. [ 140.918316][ T8056] bond1: entered promiscuous mode [ 140.919739][ T8056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.930075][ T8056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.931625][ T8056] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 140.933825][ T8056] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 140.939471][ T8056] bond1: (slave wireguard0): making interface the new active one [ 140.941129][ T8056] wireguard0: entered promiscuous mode [ 140.943015][ T8056] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 140.948095][ T8056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.948123][ T8056] IPv6: NLM_F_CREATE should be set when creating new route [ 140.948145][ T8056] IPv6: NLM_F_CREATE should be set when creating new route [ 140.952716][ T8056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.045274][ T8071] loop0: detected capacity change from 0 to 512 [ 141.045703][ T8071] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.054653][ T8071] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.058539][ T8071] EXT4-fs (loop0): 1 truncate cleaned up [ 141.060165][ T8071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.118665][ T4676] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.129812][ T8075] fuse: blksize only supported for fuseblk [ 141.206967][ T8084] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.983: bad orphan inode 4194304000 [ 141.207002][ T8084] loop0: lost filesystem error report for type 5 error -117 [ 141.207933][ T8084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 141.254801][ T4676] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 141.315119][ T8094] netlink: 'syz.1.987': attribute type 1 has an invalid length. [ 141.342500][ T7998] Set syz1 is full, maxelem 65536 reached [ 141.364918][ T8097] syzkaller0: entered promiscuous mode [ 141.366028][ T8097] syzkaller0: entered allmulticast mode [ 142.269861][ T8106] EXT4-fs: Ignoring removed oldalloc option [ 142.271603][ T8106] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 142.276995][ T8106] EXT4-fs (loop0): 1 truncate cleaned up [ 142.280743][ T8106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.317391][ T8110] x_tables: duplicate underflow at hook 1 [ 142.320430][ T8113] loop3: p1 < > p3 p4 < > [ 142.320452][ T8113] loop3: partition table partially beyond EOD, truncated [ 142.320537][ T8113] loop3: p1 start 262144 is beyond EOD, truncated [ 142.320547][ T8113] loop3: p3 start 33554432 is beyond EOD, truncated [ 142.336965][ T8123] netlink: 'syz.3.997': attribute type 3 has an invalid length. [ 142.340353][ T8106] 9p: Bad value for 'rfdno' [ 142.358646][ T4676] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 142.371528][ T8110] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.995: inode has both inline data and extents flags [ 142.374080][ T8110] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.374682][ T8110] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.995: couldn't read orphan inode 15 (err -117) [ 142.376547][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 142.376567][ C0] EXT4-fs (loop4): initial error at time 398: ext4_orphan_get:1397: inode 15 [ 142.376583][ C0] EXT4-fs (loop4): last error at time 398: ext4_orphan_get:1397: inode 15 [ 142.384914][ T8110] loop4: lost filesystem error report for type 5 error -117 [ 142.387795][ T4301] loop3: p1 < > p3 p4 < > [ 142.387815][ T4301] loop3: partition table partially beyond EOD, truncated [ 142.387903][ T4301] loop3: p1 start 262144 is beyond EOD, truncated [ 142.387921][ T4301] loop3: p3 start 33554432 is beyond EOD, truncated [ 142.398522][ T8110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.410195][ T4301] loop3: p1 < > p3 p4 < > [ 142.410219][ T4301] loop3: partition table partially beyond EOD, truncated [ 142.410317][ T4301] loop3: p1 start 262144 is beyond EOD, truncated [ 142.410335][ T4301] loop3: p3 start 33554432 is beyond EOD, truncated [ 142.419195][ T8110] EXT4-fs warning (device loop4): ext4_empty_dir:3094: inode #2: comm syz.4.995: directory missing '.' [ 142.428852][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.444060][ T8130] EXT4-fs: Ignoring removed nobh option [ 142.445956][ T8130] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 142.451685][ T8130] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 142.464631][ T4301] loop3: p1 < > p3 p4 < > [ 142.464656][ T4301] loop3: partition table partially beyond EOD, truncated [ 142.464751][ T4301] loop3: p1 start 262144 is beyond EOD, truncated [ 142.464771][ T4301] loop3: p3 start 33554432 is beyond EOD, truncated [ 142.503093][ T4301] loop3: p1 < > p3 p4 < > [ 142.503944][ T4301] loop3: partition table partially beyond EOD, truncated [ 142.505484][ T4301] loop3: p1 start 262144 is beyond EOD, truncated [ 142.507299][ T4301] loop3: p3 start 33554432 is beyond EOD, truncated [ 142.526031][ T8145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.528975][ T8145] batadv_slave_0: entered promiscuous mode [ 142.530417][ T8145] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 142.532044][ T5046] udevd[5046]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 142.590821][ T4676] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.601261][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.601302][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.674239][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.674285][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.767872][ T8154] EXT4-fs: Ignoring removed orlov option [ 142.772563][ T8154] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 142.804352][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.807406][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.809103][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.810745][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.812344][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.817849][ T4673] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.819342][ T4673] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.820801][ T4673] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.823325][ T4673] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.825690][ T4673] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.842059][ T8154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.845860][ T8148] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #12: block 7: comm syz.4.1005: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 142.850897][ T8148] EXT4-fs (loop4): Remounting filesystem read-only [ 142.907895][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.907933][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.949986][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.950022][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.084041][ T8190] fuse: fd is not a fuse device [ 143.236377][ T39] bridge_slave_1: left allmulticast mode [ 143.236439][ T39] bridge_slave_1: left promiscuous mode [ 143.237433][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.240324][ T39] bridge_slave_0: left allmulticast mode [ 143.240354][ T39] bridge_slave_0: left promiscuous mode [ 143.240427][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.424890][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.453102][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.478831][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.519458][ T39] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 143.558216][ T39] bond0 (unregistering): Released all slaves [ 143.567190][ T39] bond1 (unregistering): Released all slaves [ 143.612466][ T8197] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 143.726036][ T8152] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.744630][ T8152] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.744746][ T8152] bridge_slave_0: entered allmulticast mode [ 143.745216][ T8152] bridge_slave_0: entered promiscuous mode [ 143.745942][ T8152] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.745978][ T8152] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.746046][ T8152] bridge_slave_1: entered allmulticast mode [ 143.773403][ T8152] bridge_slave_1: entered promiscuous mode [ 143.860317][ T8152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.861293][ T8152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.871156][ T8152] team0: Port device team_slave_0 added [ 143.871680][ T4359] 8021q: adding VLAN 0 to HW filter on device eth0 [ 143.882921][ T8152] team0: Port device team_slave_1 added [ 143.884566][ T8248] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1025'. [ 143.912675][ T8152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.913930][ T8152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.919066][ T8152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.932027][ T8152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.932055][ T8152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.932068][ T8152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.964322][ T8152] hsr_slave_0: entered promiscuous mode [ 144.003163][ T8152] hsr_slave_1: entered promiscuous mode [ 144.004418][ T8152] debugfs: 'hsr0' already exists in 'hsr' [ 144.005505][ T8152] Cannot create hsr debugfs directory [ 144.027359][ T8268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1030'. [ 144.365554][ T8268] bond0: entered promiscuous mode [ 144.366249][ T8268] bond_slave_0: entered promiscuous mode [ 144.366345][ T8268] bond_slave_1: entered promiscuous mode [ 144.367649][ T8268] bond0: left promiscuous mode [ 144.367663][ T8268] bond_slave_0: left promiscuous mode [ 144.367727][ T8268] bond_slave_1: left promiscuous mode [ 144.372068][ T4359] 8021q: adding VLAN 0 to HW filter on device eth1 [ 144.441129][ T39] hsr_slave_0: left promiscuous mode [ 144.444605][ T39] hsr_slave_1: left promiscuous mode [ 144.444980][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.444997][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.448982][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.449013][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.454896][ T39] macsec0: left allmulticast mode [ 144.455047][ T39] veth1_macvtap: left allmulticast mode [ 144.455144][ T39] veth1_macvtap: left promiscuous mode [ 144.455167][ T39] veth0_macvtap: left promiscuous mode [ 144.455201][ T39] veth1_vlan: left promiscuous mode [ 144.455239][ T39] veth0_vlan: left promiscuous mode [ 144.589799][ T39] team0 (unregistering): Port device removed [ 144.651667][ T39] team0 (unregistering): Port device team_slave_1 removed [ 144.657007][ T39] team0 (unregistering): Port device team_slave_0 removed [ 144.721615][ T4359] 8021q: adding VLAN 0 to HW filter on device eth2 [ 144.741477][ T8152] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.744739][ T8152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.747147][ T8152] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.750600][ T8152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.752480][ T8152] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.756658][ T8152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.758833][ T8152] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.773275][ T8309] fuse: fd is not a fuse device [ 144.784000][ T8152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 144.886410][ T4673] Bluetooth: hci3: command tx timeout [ 144.887676][ T8152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.893701][ T8152] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.904987][ T6019] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.905029][ T6019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.921835][ T8331] set_capacity_and_notify: 7 callbacks suppressed [ 144.923072][ T8331] loop4: detected capacity change from 0 to 512 [ 144.929779][ T8331] EXT4-fs (loop4): #clusters per group too big: 270336 [ 144.955908][ T8152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.957941][ T8152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.986964][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.987004][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.019966][ T4359] 8021q: adding VLAN 0 to HW filter on device eth3 [ 145.024533][ T8334] loop3: detected capacity change from 0 to 512 [ 145.802701][ T8334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.811938][ T8350] loop4: detected capacity change from 0 to 512 [ 145.888359][ T8350] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 145.888427][ T8350] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 145.893670][ T8350] EXT4-fs (loop4): mount failed [ 146.017966][ T8357] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1036: corrupted xattr block 33: invalid header [ 146.021549][ T8357] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1036: corrupted xattr block 33: invalid header [ 146.025192][ T8357] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1036: corrupted xattr block 33: invalid header [ 146.032022][ T8357] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1036: corrupted xattr block 33: invalid header [ 146.044665][ T8357] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1036: corrupted xattr block 33: invalid header [ 146.055867][ T8357] fscrypt (loop3, inode 15): Error -117 getting encryption context [ 146.192163][ T8360] netlink: 'syz.4.1041': attribute type 3 has an invalid length. [ 146.193685][ T8360] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1041'. [ 146.263662][ T8367] netlink: 'syz.2.1042': attribute type 4 has an invalid length. [ 146.285831][ T8367] netlink: 'syz.2.1042': attribute type 4 has an invalid length. [ 146.292866][ T8152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.451897][ T8152] veth0_vlan: entered promiscuous mode [ 146.463747][ T8152] veth1_vlan: entered promiscuous mode [ 146.493664][ T8152] veth0_macvtap: entered promiscuous mode [ 146.512496][ T8152] veth1_macvtap: entered promiscuous mode [ 146.535373][ T8152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.542190][ T8152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.547361][ T39] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.547410][ T39] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.547446][ T39] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.547468][ T39] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.610581][ T6019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.610606][ T6019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.628779][ T6019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.628802][ T6019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.978366][ T4673] Bluetooth: hci3: command tx timeout [ 146.985451][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.025854][ T8396] loop3: detected capacity change from 0 to 512 [ 147.092781][ T8396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.102701][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.225717][ T8410] overlayfs: missing 'workdir' [ 147.327798][ T8413] loop4: detected capacity change from 0 to 256 [ 147.401498][ T1227] Bluetooth: Error in BCSP hdr checksum [ 147.417732][ T8413] FAT-fs (loop4): Directory bread(block 64) failed [ 147.417761][ T8413] FAT-fs (loop4): Directory bread(block 65) failed [ 147.417816][ T8413] FAT-fs (loop4): Directory bread(block 66) failed [ 147.417873][ T8413] FAT-fs (loop4): Directory bread(block 67) failed [ 147.417994][ T8413] FAT-fs (loop4): Directory bread(block 68) failed [ 147.418061][ T8413] FAT-fs (loop4): Directory bread(block 69) failed [ 147.418219][ T8413] FAT-fs (loop4): Directory bread(block 70) failed [ 147.418280][ T8413] FAT-fs (loop4): Directory bread(block 71) failed [ 147.418399][ T8413] FAT-fs (loop4): Directory bread(block 72) failed [ 147.418453][ T8413] FAT-fs (loop4): Directory bread(block 73) failed [ 147.641477][ T6565] Bluetooth: Error in BCSP hdr checksum [ 148.303630][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 148.322789][ T8440] loop4: detected capacity change from 0 to 8192 [ 149.324189][ T4670] Bluetooth: hci3: command tx timeout [ 149.324210][ T4685] Bluetooth: hci5: command 0x1003 tx timeout [ 149.326296][ T4673] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 149.341367][ T8440] loop4: AHDI p2 [ 149.449362][ T8446] loop3: detected capacity change from 0 to 2048 [ 149.523869][ T8446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.031161][ T5916] udevd[5916]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 150.050998][ T8457] loop5: detected capacity change from 0 to 512 [ 150.056725][ T8457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.059522][ T8457] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 150.217284][ T8457] EXT4-fs (loop5): 1 truncate cleaned up [ 150.218478][ T8457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.349671][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.381846][ T8473] loop4: detected capacity change from 0 to 512 [ 150.465259][ T8152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.469261][ T8473] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 150.469329][ T8473] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 150.469672][ T8473] EXT4-fs (loop4): mount failed [ 150.767055][ T8488] loop4: detected capacity change from 0 to 512 [ 150.785269][ T8490] syzkaller0: entered promiscuous mode [ 150.787143][ T8490] syzkaller0: entered allmulticast mode [ 150.790095][ T8490] 0: reclassify loop, rule prio 0, protocol 800 [ 150.908288][ T8503] cgroup2: Unknown parameter 'net_cls' [ 151.380929][ T4673] Bluetooth: hci3: command 0x0419 tx timeout [ 151.391289][ T8525] loop1: detected capacity change from 0 to 512 [ 151.432240][ T8525] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 151.432328][ T8525] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 151.432702][ T8525] EXT4-fs (loop1): mount failed [ 151.748140][ T8534] netlink: 'syz.4.1087': attribute type 1 has an invalid length. [ 151.753609][ T8534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.779734][ T8534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.782218][ T8534] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 151.785059][ T8534] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 151.824729][ T8538] macvlan2: entered promiscuous mode [ 151.825915][ T8538] macvlan2: entered allmulticast mode [ 151.829636][ T8538] bond2: entered promiscuous mode [ 151.833871][ T8538] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 151.857849][ T8538] bond2: left promiscuous mode [ 151.954527][ T8546] loop5: detected capacity change from 0 to 512 [ 151.959052][ T8546] EXT4-fs: Ignoring removed nobh option [ 151.963332][ T8546] EXT4-fs (loop5): orphan cleanup on readonly fs [ 151.967664][ T8546] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #11: block 1: comm syz.5.1089: lblock 0 mapped to illegal pblock 1 (length 1) [ 151.967701][ T8546] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 151.970435][ T8546] EXT4-fs (loop5): Remounting filesystem read-only [ 151.972074][ T8546] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 151.972091][ T8546] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 151.972126][ T8546] EXT4-fs (loop5): 1 orphan inode deleted [ 151.972579][ T8546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 151.985733][ T8152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.300740][ T8561] binder: 8560:8561 ioctl c018620c 20000240 returned -1 [ 152.773030][ T8586] loop5: detected capacity change from 0 to 512 [ 152.775753][ T8586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.781898][ T8586] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 152.794923][ T8586] EXT4-fs (loop5): 1 truncate cleaned up [ 152.797280][ T8586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.876928][ T8152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.446533][ T50] Bluetooth: hci3: command 0x0419 tx timeout [ 153.575024][ T8614] 9p: Bad value for 'rfdno' [ 153.770839][ T8624] loop3: detected capacity change from 0 to 512 [ 153.775352][ T8624] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 0 [ 153.870119][ T8628] loop3: detected capacity change from 0 to 128 [ 153.947724][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'. [ 154.145873][ T8644] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1118'. [ 154.404319][ T8641] syz.3.1114: attempt to access beyond end of device [ 154.404319][ T8641] loop3: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 154.404614][ T8641] Buffer I/O error on dev loop3, logical block 157, lost async page write [ 154.404886][ T8641] syz.3.1114: attempt to access beyond end of device [ 154.404886][ T8641] loop3: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 154.405028][ T8641] Buffer I/O error on dev loop3, logical block 158, lost async page write [ 154.405321][ T8641] syz.3.1114: attempt to access beyond end of device [ 154.405321][ T8641] loop3: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 154.405414][ T8641] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 154.405657][ T8641] syz.3.1114: attempt to access beyond end of device [ 154.405657][ T8641] loop3: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 154.405726][ T8641] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 154.406086][ T8641] syz.3.1114: attempt to access beyond end of device [ 154.406086][ T8641] loop3: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 154.406296][ T8641] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 155.468572][ T8677] loop1: detected capacity change from 0 to 512 [ 155.468889][ T8677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.471163][ T8677] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.482376][ T8677] EXT4-fs (loop1): 1 truncate cleaned up [ 155.484253][ T8677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.500693][ T8686] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1128'. [ 155.501128][ T8686] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1128'. [ 155.626644][ T8677] FAULT_INJECTION: forcing a failure. [ 155.626644][ T8677] name failslab, interval 1, probability 0, space 0, times 0 [ 155.631487][ T8677] CPU: 1 UID: 0 PID: 8677 Comm: syz.1.1127 Tainted: G L syzkaller #0 PREEMPT [ 155.631507][ T8677] Tainted: [L]=SOFTLOCKUP [ 155.631511][ T8677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 155.631518][ T8677] Call trace: [ 155.631522][ T8677] show_stack+0x2c/0x3c (C) [ 155.631545][ T8677] __dump_stack+0x30/0x40 [ 155.631558][ T8677] dump_stack_lvl+0xd8/0x12c [ 155.631567][ T8677] dump_stack+0x1c/0x28 [ 155.631576][ T8677] should_fail_ex+0x414/0x588 [ 155.631587][ T8677] should_failslab+0xc4/0x124 [ 155.631597][ T8677] __kmalloc_noprof+0x100/0x638 [ 155.631607][ T8677] tomoyo_encode2+0x10c/0x33c [ 155.631616][ T8677] tomoyo_encode+0x34/0x50 [ 155.631623][ T8677] tomoyo_realpath_from_path+0x478/0x4cc [ 155.631631][ T8677] tomoyo_path_number_perm+0x1d8/0x4f0 [ 155.631641][ T8677] tomoyo_file_ioctl+0x2c/0x3c [ 155.631649][ T8677] security_file_ioctl+0xdc/0x2b0 [ 155.631659][ T8677] __arm64_sys_ioctl+0xa8/0x1c4 [ 155.631668][ T8677] invoke_syscall+0x98/0x244 [ 155.631678][ T8677] el0_svc_common+0xe8/0x23c [ 155.631689][ T8677] do_el0_svc+0x48/0x58 [ 155.631698][ T8677] el0_svc+0x60/0x25c [ 155.631707][ T8677] el0t_64_sync_handler+0x48/0x148 [ 155.631716][ T8677] el0t_64_sync+0x198/0x19c [ 155.642967][ T8702] overlayfs: failed to clone upperpath [ 155.643069][ T8677] ERROR: Out of memory at tomoyo_realpath_from_path. [ 155.663831][ T4668] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.788062][ T8708] loop3: detected capacity change from 0 to 512 [ 155.790814][ T8708] EXT4-fs: Ignoring removed bh option [ 155.790925][ T8708] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.899385][ T8708] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 155.901922][ T8708] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 155.902039][ T8708] EXT4-fs (loop3): orphan cleanup on readonly fs [ 155.902910][ T8708] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 155.902957][ T8708] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 155.903151][ T8708] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.1132: Failed to acquire dquot type 1 [ 155.903176][ T8708] loop3: lost filesystem error report for type 5 error -5 [ 155.906246][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 155.906259][ C0] EXT4-fs (loop3): last error at time 411: ext4_acquire_dquot:7034 [ 155.908288][ T8708] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1132: Invalid block bitmap block 0 in block_group 0 [ 155.908311][ T8708] loop3: lost filesystem error report for type 5 error -117 [ 155.913507][ T8708] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1132: Invalid block bitmap block 0 in block_group 0 [ 155.913530][ T8708] loop3: lost filesystem error report for type 5 error -117 [ 155.914916][ T8708] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1132: Invalid block bitmap block 0 in block_group 0 [ 155.914935][ T8708] loop3: lost filesystem error report for type 5 error -117 [ 155.915940][ T8708] Quota error (device loop3): write_blk: dquota write failed [ 155.915978][ T8708] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 155.915993][ T8708] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.1132: Failed to acquire dquot type 1 [ 155.916004][ T8708] loop3: lost filesystem error report for type 5 error -28 [ 155.917110][ T8708] Quota error (device loop3): write_blk: dquota write failed [ 155.917158][ T8708] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 155.917172][ T8708] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.1132: Failed to acquire dquot type 1 [ 155.917182][ T8708] loop3: lost filesystem error report for type 5 error -28 [ 155.918187][ T8708] EXT4-fs (loop3): 1 orphan inode deleted [ 155.931500][ T8708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.001507][ T8714] loop5: detected capacity change from 0 to 1024 [ 156.003904][ T8714] EXT4-fs (loop5): bad geometry: first data block is 0 with a 1k block and cluster size [ 156.031653][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1137'. [ 156.034488][ T8714] tipc: Started in network mode [ 156.034529][ T8714] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 156.034558][ T8714] tipc: Enabling of bearer rejected, failed to enable media [ 156.042201][ T8714] 9p: Bad value for 'rfdno' [ 156.102134][ T8717] loop9: detected capacity change from 0 to 7 [ 156.104331][ T8717] Dev loop9: unable to read RDB block 7 [ 156.105435][ T8717] loop9: unable to read partition table [ 156.106287][ T8717] loop9: partition table beyond EOD, truncated [ 156.106464][ T8717] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 156.113011][ T8717] batadv0: entered promiscuous mode [ 156.115088][ T8717] batadv0: left promiscuous mode [ 156.199793][ T8723] loop5: detected capacity change from 0 to 512 [ 156.200132][ T8723] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.201408][ T8723] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 156.215757][ T8723] EXT4-fs (loop5): 1 truncate cleaned up [ 156.217724][ T8723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.295830][ T8152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.321501][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.323896][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.326795][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.329034][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.331230][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.333320][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.336031][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.338694][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.441889][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.453548][ T8732] netlink: 'syz.4.1143': attribute type 11 has an invalid length. [ 156.472679][ T8734] loop3: detected capacity change from 0 to 512 [ 156.477429][ T8734] EXT4-fs warning (device loop3): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 156.481259][ T8736] loop4: detected capacity change from 0 to 512 [ 156.481569][ T8736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.482347][ T8736] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.490439][ T8736] EXT4-fs (loop4): 1 truncate cleaned up [ 156.492080][ T8736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.561746][ T8742] FAULT_INJECTION: forcing a failure. [ 156.561746][ T8742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.565595][ T8742] CPU: 1 UID: 0 PID: 8742 Comm: syz.4.1145 Tainted: G L syzkaller #0 PREEMPT [ 156.565617][ T8742] Tainted: [L]=SOFTLOCKUP [ 156.565621][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 156.565627][ T8742] Call trace: [ 156.565631][ T8742] show_stack+0x2c/0x3c (C) [ 156.565654][ T8742] __dump_stack+0x30/0x40 [ 156.565668][ T8742] dump_stack_lvl+0xd8/0x12c [ 156.565679][ T8742] dump_stack+0x1c/0x28 [ 156.565688][ T8742] should_fail_ex+0x414/0x588 [ 156.565699][ T8742] should_fail+0x14/0x24 [ 156.565708][ T8742] should_fail_usercopy+0x20/0x30 [ 156.565718][ T8742] _inline_copy_from_user+0x40/0x180 [ 156.565727][ T8742] ioctl_preallocate+0xcc/0x1dc [ 156.565736][ T8742] file_ioctl+0x204/0x484 [ 156.565745][ T8742] do_vfs_ioctl+0x9f4/0x1754 [ 156.565753][ T8742] __arm64_sys_ioctl+0xe4/0x1c4 [ 156.565762][ T8742] invoke_syscall+0x98/0x244 [ 156.565772][ T8742] el0_svc_common+0xe8/0x23c [ 156.565781][ T8742] do_el0_svc+0x48/0x58 [ 156.565789][ T8742] el0_svc+0x60/0x25c [ 156.565799][ T8742] el0t_64_sync_handler+0x48/0x148 [ 156.565807][ T8742] el0t_64_sync+0x198/0x19c [ 156.680437][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.016958][ T8767] loop3: detected capacity change from 0 to 512 [ 157.019589][ T8767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.022921][ T8767] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 157.031645][ T8767] EXT4-fs (loop3): 1 truncate cleaned up [ 157.035095][ T8767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.320768][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.417730][ T8811] loop4: detected capacity change from 0 to 512 [ 157.421476][ T8811] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.423417][ T8811] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 157.427173][ T8811] EXT4-fs (loop4): 1 truncate cleaned up [ 157.427658][ T8811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.452940][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.515562][ T8815] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1160'. [ 157.604719][ T8824] loop3: detected capacity change from 0 to 512 [ 157.865815][ T8824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.899866][ T8832] tipc: Started in network mode [ 157.899894][ T8832] tipc: Node identity 3af6cd065ad2, cluster identity 4711 [ 157.899941][ T8832] tipc: Enabled bearer , priority 10 [ 157.901079][ T8832] 9p: Bad value for 'rfdno' [ 157.901520][ T8832] fuse: Bad value for 'fd' [ 157.953147][ T8835] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.965404][ T8835] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.969678][ T8835] EXT4-fs (loop1): 1 truncate cleaned up [ 157.970144][ T8835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.979005][ T8838] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1168'. [ 157.981816][ T8838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1168'. [ 157.981853][ T8838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1168'. [ 157.997856][ T8824] fs-verity (loop3, inode 15): Unrecognized descriptor size: 0 bytes [ 158.064790][ T4668] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.613496][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.619800][ T8878] EXT4-fs: Ignoring removed nobh option [ 158.622185][ T8878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.658106][ T8878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.688959][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.835147][ T8895] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.877814][ T8895] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2048) [ 158.877840][ T8895] FAT-fs (loop4): Filesystem has been set read-only [ 158.898143][ T4775] tipc: Node number set to 1613024518 [ 158.948822][ T8899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.954298][ T8899] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 158.956990][ T8899] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 158.958656][ T8899] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 158.958672][ T8899] EXT4-fs (loop4): This should not happen!! Data will be lost [ 158.958672][ T8899] [ 158.958680][ T8899] EXT4-fs (loop4): Total free blocks count 0 [ 158.958687][ T8899] EXT4-fs (loop4): Free/Dirty block details [ 158.958695][ T8899] EXT4-fs (loop4): free_blocks=20480 [ 158.958703][ T8899] EXT4-fs (loop4): dirty_blocks=80 [ 158.959089][ T8899] EXT4-fs (loop4): Block reservation details [ 158.959103][ T8899] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 159.002600][ T1054] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 159.005453][ T4669] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 159.045181][ T8907] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1180'. [ 159.068835][ T8909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.077742][ T8909] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.121404][ T8909] EXT4-fs (loop4): 1 truncate cleaned up [ 159.123082][ T8909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.160515][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.183242][ T8917] binder: 8916:8917 ioctl 8080583a 20000240 returned -22 [ 159.248031][ T8926] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 159.248088][ T8926] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 159.248437][ T8926] EXT4-fs (loop4): mount failed [ 159.683215][ T8940] tipc: Enabled bearer , priority 10 [ 159.688130][ T8940] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1192'. [ 159.702797][ T8940] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 159.703043][ T8940] tipc: Enabled bearer , priority 10 [ 159.715596][ T8942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.726036][ T8943] could not allocate digest TFM handle digest_null-generic [ 159.737994][ T8950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.739540][ T8950] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 159.752215][ T8950] EXT4-fs (loop3): 1 truncate cleaned up [ 159.752695][ T8950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.791538][ T8152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.824208][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.877022][ T8959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.878476][ T8959] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 159.883986][ T8959] EXT4-fs (loop3): 1 truncate cleaned up [ 159.886736][ T8959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.902160][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1198'. [ 159.903234][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1198'. [ 159.965588][ T8966] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 159.965626][ T8966] EXT4-fs (loop5): group descriptors corrupted! [ 160.019366][ T8972] fuse: fd is not a fuse device [ 160.087047][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.215961][ T8982] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.217895][ T8982] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.221994][ T8982] EXT4-fs (loop4): 1 truncate cleaned up [ 160.223533][ T8982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.390211][ T8985] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 160.393269][ T8985] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 160.393304][ T8985] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.1207: Failed to acquire dquot type 1 [ 160.393321][ T8985] loop5: lost filesystem error report for type 5 error -117 [ 160.397271][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 160.397287][ C0] EXT4-fs (loop5): last error at time 416: ext4_acquire_dquot:7034 [ 160.401931][ T8985] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 160.403907][ T8985] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 160.406558][ T8985] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.1207: Failed to acquire dquot type 1 [ 160.408849][ T8985] loop5: lost filesystem error report for type 5 error -117 [ 160.409309][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.415416][ T8985] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1207: bg 0: block 248: padding at end of block bitmap is not set [ 160.415497][ T8985] loop5: lost filesystem error report for type 5 error -117 [ 160.420495][ T8985] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 160.420529][ T8985] loop5: lost filesystem error report for type 5 error -117 [ 160.424467][ T8985] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 160.424529][ T8985] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 160.424543][ T8985] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.1207: Failed to acquire dquot type 1 [ 160.426077][ T8985] EXT4-fs (loop5): 1 orphan inode deleted [ 160.431348][ T8985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.433645][ T8993] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 160.442568][ T8985] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 160.442624][ T8985] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 160.442639][ T8985] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.1207: Failed to acquire dquot type 1 [ 160.488163][ T8152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.540779][ T9004] set_capacity_and_notify: 13 callbacks suppressed [ 160.540815][ T9004] loop5: detected capacity change from 0 to 512 [ 160.541428][ T9004] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.541716][ T9004] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 160.543367][ T9004] EXT4-fs (loop5): 1 truncate cleaned up [ 160.544026][ T9004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.603631][ T8152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.695048][ T9013] binder: 9012:9013 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 160.695076][ T9013] binder: 9013 RLIMIT_NICE not set [ 160.707677][ T857] tipc: Node number set to 128879744 [ 161.445772][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'. [ 161.445807][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'. [ 161.502776][ T9031] loop1: detected capacity change from 0 to 512 [ 161.503105][ T9031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.518275][ T9031] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.532665][ T9031] EXT4-fs (loop1): 1 truncate cleaned up [ 161.540736][ T9031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.823614][ T9052] loop5: detected capacity change from 0 to 256 [ 161.953978][ T9052] FAT-fs (loop5): Directory bread(block 64) failed [ 161.954084][ T9052] FAT-fs (loop5): Directory bread(block 65) failed [ 161.954237][ T9052] FAT-fs (loop5): Directory bread(block 66) failed [ 161.954338][ T9052] FAT-fs (loop5): Directory bread(block 67) failed [ 161.954484][ T9052] FAT-fs (loop5): Directory bread(block 68) failed [ 161.954541][ T9052] FAT-fs (loop5): Directory bread(block 69) failed [ 161.954673][ T9052] FAT-fs (loop5): Directory bread(block 70) failed [ 161.954741][ T9052] FAT-fs (loop5): Directory bread(block 71) failed [ 161.954864][ T9052] FAT-fs (loop5): Directory bread(block 72) failed [ 161.954921][ T9052] FAT-fs (loop5): Directory bread(block 73) failed [ 162.660414][ T9055] loop3: detected capacity change from 0 to 512 [ 162.667753][ T9055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.682109][ T9055] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 162.704279][ T9055] EXT4-fs (loop3): 1 truncate cleaned up [ 162.706016][ T9055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.712793][ T4668] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.841960][ T9061] loop1: detected capacity change from 0 to 512 [ 162.842325][ T9061] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.862155][ T9061] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.887253][ T9061] EXT4-fs (loop1): 1 truncate cleaned up [ 162.887744][ T9061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.116537][ T4668] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.138507][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.172192][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1233'. [ 163.392069][ T9078] __vm_enough_memory: pid: 9078, comm: syz.1.1231, bytes: 4115879641088 not enough memory for the allocation [ 164.188536][ T9094] can0: slcan on ttyS3. [ 164.300422][ T9094] can0 (unregistered): slcan off ttyS3. [ 164.468628][ T9101] loop5: detected capacity change from 0 to 512 [ 164.518945][ T9101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.519785][ T9101] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 164.532137][ T9101] EXT4-fs (loop5): 1 truncate cleaned up [ 164.532627][ T9101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.991578][ T9114] loop3: detected capacity change from 0 to 512 [ 164.992695][ T9114] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.993931][ T9114] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.997850][ T9114] EXT4-fs (loop3): 1 truncate cleaned up [ 164.998373][ T9114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.018691][ T9117] fuse: Unknown parameter 'grid' [ 165.037802][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.325846][ T8152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.419146][ T9145] loop1: detected capacity change from 0 to 512 [ 165.420984][ T9145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.421521][ T9145] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.424736][ T9145] EXT4-fs (loop1): 1 truncate cleaned up [ 165.425527][ T9145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.486388][ T4668] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.159546][ T9156] netlink: 'syz.5.1257': attribute type 10 has an invalid length. [ 167.159578][ T9156] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1257'. [ 167.159680][ T9156] dummy0: entered promiscuous mode [ 167.159697][ T9156] dummy0: entered allmulticast mode [ 167.160718][ T9156] bridge0: port 3(dummy0) entered blocking state [ 167.160763][ T9156] bridge0: port 3(dummy0) entered disabled state [ 167.161622][ T9156] bridge0: port 3(dummy0) entered blocking state [ 167.161667][ T9156] bridge0: port 3(dummy0) entered forwarding state [ 167.315923][ T9171] loop1: detected capacity change from 0 to 256 [ 167.330524][ T9171] FAT-fs (loop1): Directory bread(block 64) failed [ 167.330555][ T9171] FAT-fs (loop1): Directory bread(block 65) failed [ 167.330590][ T9171] FAT-fs (loop1): Directory bread(block 66) failed [ 167.330607][ T9171] FAT-fs (loop1): Directory bread(block 67) failed [ 167.330633][ T9171] FAT-fs (loop1): Directory bread(block 68) failed [ 167.330648][ T9171] FAT-fs (loop1): Directory bread(block 69) failed [ 167.330673][ T9171] FAT-fs (loop1): Directory bread(block 70) failed [ 167.330687][ T9171] FAT-fs (loop1): Directory bread(block 71) failed [ 167.330712][ T9171] FAT-fs (loop1): Directory bread(block 72) failed [ 167.330726][ T9171] FAT-fs (loop1): Directory bread(block 73) failed [ 167.519609][ T9178] loop4: detected capacity change from 0 to 1024 [ 167.520086][ T9178] EXT4-fs: Ignoring removed oldalloc option [ 167.520113][ T9178] EXT4-fs: Ignoring removed nobh option [ 167.600241][ T9178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.896576][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.925062][ T9191] loop4: detected capacity change from 0 to 512 [ 167.925402][ T9191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.927568][ T9191] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.929776][ T9191] EXT4-fs (loop4): 1 truncate cleaned up [ 167.931193][ T9191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.951128][ T9188] loop3: detected capacity change from 0 to 1024 [ 167.974007][ T9191] FAULT_INJECTION: forcing a failure. [ 167.974007][ T9191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.977937][ T9191] CPU: 0 UID: 0 PID: 9191 Comm: syz.4.1269 Tainted: G L syzkaller #0 PREEMPT [ 167.977953][ T9191] Tainted: [L]=SOFTLOCKUP [ 167.977957][ T9191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.977963][ T9191] Call trace: [ 167.977967][ T9191] show_stack+0x2c/0x3c (C) [ 167.977988][ T9191] __dump_stack+0x30/0x40 [ 167.977998][ T9191] dump_stack_lvl+0xd8/0x12c [ 167.978007][ T9191] dump_stack+0x1c/0x28 [ 167.978016][ T9191] should_fail_ex+0x414/0x588 [ 167.978027][ T9191] should_fail+0x14/0x24 [ 167.978035][ T9191] should_fail_usercopy+0x20/0x30 [ 167.978045][ T9191] simple_read_from_buffer+0xc4/0x240 [ 167.978055][ T9191] proc_fail_nth_read+0x1a8/0x248 [ 167.978063][ T9191] vfs_read+0x230/0x8e4 [ 167.978073][ T9191] ksys_read+0x12c/0x224 [ 167.978081][ T9191] __arm64_sys_read+0x7c/0x90 [ 167.978090][ T9191] invoke_syscall+0x98/0x244 [ 167.978100][ T9191] el0_svc_common+0xe8/0x23c [ 167.978109][ T9191] do_el0_svc+0x48/0x58 [ 167.978118][ T9191] el0_svc+0x60/0x25c [ 167.978127][ T9191] el0t_64_sync_handler+0x48/0x148 [ 167.978136][ T9191] el0t_64_sync+0x198/0x19c [ 168.022774][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.053879][ T9194] loop4: detected capacity change from 0 to 128 [ 168.059403][ T9194] FAT-fs (loop4): bogus number of reserved sectors [ 168.059430][ T9194] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 168.059622][ T9194] FAT-fs (loop4): Can't find a valid FAT filesystem [ 168.099185][ T9194] loop4: detected capacity change from 0 to 128 [ 168.177704][ T9208] xt_hashlimit: size too large, truncated to 1048576 [ 168.189300][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1274'. [ 168.270931][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1275'. [ 168.273241][ T9217] loop4: detected capacity change from 0 to 512 [ 168.275152][ T9217] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 168.277579][ T9217] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 168.277754][ T9217] EXT4-fs (loop4): orphan cleanup on readonly fs [ 168.278786][ T9217] Quota error (device loop4): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 168.278868][ T9217] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 168.278880][ T9217] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 168.278990][ T9217] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #16: comm syz.4.1275: iget: immutable or append flags not allowed on symlinks [ 168.279001][ T9217] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 168.279517][ T9217] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1275: couldn't read orphan inode 16 (err -117) [ 168.279533][ T9217] fserror_report: 1 callbacks suppressed [ 168.279538][ T9217] loop4: lost filesystem error report for type 5 error -117 [ 168.280438][ T9217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.381443][ T9227] netlink: 774 bytes leftover after parsing attributes in process `syz.3.1280'. [ 168.489578][ T9229] loop5: detected capacity change from 0 to 4096 [ 168.510266][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.536666][ T9234] loop3: detected capacity change from 0 to 256 [ 168.550239][ T9229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.554239][ T9229] EXT4-fs (loop5): shut down requested (1) [ 168.554558][ T9234] FAT-fs (loop3): Directory bread(block 64) failed [ 168.554577][ T9234] FAT-fs (loop3): Directory bread(block 65) failed [ 168.554599][ T9234] FAT-fs (loop3): Directory bread(block 66) failed [ 168.554610][ T9234] FAT-fs (loop3): Directory bread(block 67) failed [ 168.554632][ T9234] FAT-fs (loop3): Directory bread(block 68) failed [ 168.554642][ T9234] FAT-fs (loop3): Directory bread(block 69) failed [ 168.554663][ T9234] FAT-fs (loop3): Directory bread(block 70) failed [ 168.554674][ T9234] FAT-fs (loop3): Directory bread(block 71) failed [ 168.554696][ T9234] FAT-fs (loop3): Directory bread(block 72) failed [ 168.554707][ T9234] FAT-fs (loop3): Directory bread(block 73) failed [ 168.571034][ T9229] netlink: 'syz.5.1279': attribute type 1 has an invalid length. [ 168.626108][ T9229] bond1: entered promiscuous mode [ 168.627510][ T9229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.655515][ T9229] vlan2: entered allmulticast mode [ 168.657516][ T9229] bond1: entered allmulticast mode [ 168.669700][ T9229] bond1: (slave bridge1): making interface the new active one [ 168.671206][ T9229] bridge1: entered promiscuous mode [ 168.672448][ T9229] bridge1: entered allmulticast mode [ 168.674439][ T9229] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 168.685794][ T8152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.709986][ T9243] Injecting memory failure for pfn 0x15fffe at process virtual address 0x20ffe000 [ 168.721041][ T9243] Memory failure: 0x15fffe: Sending SIGBUS to syz.1.1283:9243 due to hardware memory corruption [ 168.721185][ T9243] Memory failure: 0x15fffe: recovery action for dirty LRU page: Recovered [ 168.728953][ T9243] loop1: detected capacity change from 0 to 512 [ 168.731597][ T9243] EXT4-fs (loop1): Test dummy encryption mode enabled [ 168.731621][ T9243] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 168.746584][ T9243] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1283: bad orphan inode 131083 [ 168.746617][ T9243] loop1: lost filesystem error report for type 5 error -117 [ 168.747470][ T9243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.875002][ T9252] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1287'. [ 169.468844][ T4668] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.561040][ T9271] ip_vti0: entered promiscuous mode [ 169.566087][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'. [ 169.597461][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'. [ 169.734287][ T9282] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 169.734383][ T9282] EXT4-fs (loop1): group descriptors corrupted! [ 169.962070][ T9301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1307'. [ 170.198748][ T9319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.418523][ T30] audit: type=1326 audit(426.404:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9340 comm="syz.2.1317" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff81b789e8 code=0x0 [ 170.964155][ T9345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.040085][ T9347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.065981][ T9347] xt_TPROXY: Can be used only with -p tcp or -p udp [ 171.139797][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.143091][ T9355] FAULT_INJECTION: forcing a failure. [ 171.143091][ T9355] name failslab, interval 1, probability 0, space 0, times 0 [ 171.143620][ T9355] CPU: 0 UID: 0 PID: 9355 Comm: syz.3.1322 Tainted: G L syzkaller #0 PREEMPT [ 171.143645][ T9355] Tainted: [L]=SOFTLOCKUP [ 171.143650][ T9355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 171.143656][ T9355] Call trace: [ 171.143660][ T9355] show_stack+0x2c/0x3c (C) [ 171.143684][ T9355] __dump_stack+0x30/0x40 [ 171.143697][ T9355] dump_stack_lvl+0xd8/0x12c [ 171.143706][ T9355] dump_stack+0x1c/0x28 [ 171.143715][ T9355] should_fail_ex+0x414/0x588 [ 171.143726][ T9355] should_failslab+0xc4/0x124 [ 171.143736][ T9355] __kmalloc_noprof+0x100/0x638 [ 171.143747][ T9355] tomoyo_encode2+0x10c/0x33c [ 171.143755][ T9355] tomoyo_encode+0x34/0x50 [ 171.143762][ T9355] tomoyo_realpath_from_path+0x478/0x4cc [ 171.143770][ T9355] tomoyo_path_number_perm+0x1d8/0x4f0 [ 171.143780][ T9355] tomoyo_file_ioctl+0x2c/0x3c [ 171.143788][ T9355] security_file_ioctl+0xdc/0x2b0 [ 171.143798][ T9355] __arm64_sys_ioctl+0xa8/0x1c4 [ 171.143807][ T9355] invoke_syscall+0x98/0x244 [ 171.143817][ T9355] el0_svc_common+0xe8/0x23c [ 171.143825][ T9355] do_el0_svc+0x48/0x58 [ 171.143834][ T9355] el0_svc+0x60/0x25c [ 171.143844][ T9355] el0t_64_sync_handler+0x48/0x148 [ 171.143852][ T9355] el0t_64_sync+0x198/0x19c [ 171.150971][ T9355] ERROR: Out of memory at tomoyo_realpath_from_path. [ 171.262022][ T9358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1320'. [ 171.508344][ T9362] trusted_key: encrypted_key: insufficient parameters specified [ 171.512748][ T9362] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1324'. [ 171.523806][ T4682] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 171.525661][ T4682] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 172.197114][ T9369] tmpfs: Cannot retroactively limit inodes [ 172.201205][ T9369] fuse: fd is not a fuse device [ 172.351941][ T39] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.360630][ T4673] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.363122][ T4673] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.365098][ T4673] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.367028][ T4673] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.368503][ T4673] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.417049][ T39] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.433076][ T9372] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 172.433154][ T9372] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 172.438874][ T9372] EXT4-fs (loop5): mount failed [ 172.509312][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1332'. [ 172.520019][ T39] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.522789][ T9393] FAULT_INJECTION: forcing a failure. [ 172.522789][ T9393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.522824][ T9393] CPU: 0 UID: 0 PID: 9393 Comm: syz.5.1333 Tainted: G L syzkaller #0 PREEMPT [ 172.522839][ T9393] Tainted: [L]=SOFTLOCKUP [ 172.522843][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 172.522849][ T9393] Call trace: [ 172.522853][ T9393] show_stack+0x2c/0x3c (C) [ 172.522874][ T9393] __dump_stack+0x30/0x40 [ 172.522884][ T9393] dump_stack_lvl+0xd8/0x12c [ 172.522893][ T9393] dump_stack+0x1c/0x28 [ 172.522901][ T9393] should_fail_ex+0x414/0x588 [ 172.522912][ T9393] should_fail+0x14/0x24 [ 172.522921][ T9393] should_fail_usercopy+0x20/0x30 [ 172.522930][ T9393] _inline_copy_from_user+0x40/0x180 [ 172.522938][ T9393] userfaultfd_ioctl+0x790/0x3f20 [ 172.522949][ T9393] __arm64_sys_ioctl+0x14c/0x1c4 [ 172.522958][ T9393] invoke_syscall+0x98/0x244 [ 172.522968][ T9393] el0_svc_common+0xe8/0x23c [ 172.522977][ T9393] do_el0_svc+0x48/0x58 [ 172.522985][ T9393] el0_svc+0x60/0x25c [ 172.522995][ T9393] el0t_64_sync_handler+0x48/0x148 [ 172.523003][ T9393] el0t_64_sync+0x198/0x19c [ 172.612889][ T39] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.746754][ T9421] set_capacity_and_notify: 4 callbacks suppressed [ 172.748109][ T9421] loop5: detected capacity change from 0 to 512 [ 172.749631][ T9421] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.752118][ T9374] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.753603][ T9374] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.755290][ T9374] bridge_slave_0: entered allmulticast mode [ 172.765150][ T9374] bridge_slave_0: entered promiscuous mode [ 172.772929][ T9374] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.776707][ T9421] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 172.777185][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.777280][ T9374] bridge_slave_1: entered allmulticast mode [ 172.777728][ T9374] bridge_slave_1: entered promiscuous mode [ 172.784232][ T9421] EXT4-fs (loop5): 1 truncate cleaned up [ 172.785975][ T9421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.799456][ T9374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.804803][ T9374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.825709][ T9374] team0: Port device team_slave_0 added [ 172.828832][ T9374] team0: Port device team_slave_1 added [ 172.838975][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.840268][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.845423][ T9374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.848674][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.849967][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.854625][ T9374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.866964][ T9374] hsr_slave_0: entered promiscuous mode [ 172.868554][ T9374] hsr_slave_1: entered promiscuous mode [ 172.869706][ T9374] debugfs: 'hsr0' already exists in 'hsr' [ 172.870711][ T9374] Cannot create hsr debugfs directory [ 173.231554][ T8152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.486375][ T39] bridge_slave_1: left allmulticast mode [ 173.487671][ T39] bridge_slave_1: left promiscuous mode [ 173.489062][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.491970][ T39] bridge_slave_0: left allmulticast mode [ 173.493079][ T39] bridge_slave_0: left promiscuous mode [ 173.494437][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.500412][ T39] vlan0: left promiscuous mode [ 173.501397][ T39] veth1: left promiscuous mode [ 173.502706][ T39] bridge1: port 2(vlan0) entered disabled state [ 173.504858][ T39] veth3: left allmulticast mode [ 173.505847][ T39] veth3: left promiscuous mode [ 173.507270][ T39] bridge1: port 1(veth3) entered disabled state [ 173.841509][ T9442] loop5: detected capacity change from 0 to 512 [ 173.860398][ T9442] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 173.860458][ T9442] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 173.865283][ T9442] EXT4-fs (loop5): mount failed [ 173.893066][ T39] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 173.893878][ T9446] FAULT_INJECTION: forcing a failure. [ 173.893878][ T9446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.893896][ T9446] CPU: 1 UID: 0 PID: 9446 Comm: syz.5.1345 Tainted: G L syzkaller #0 PREEMPT [ 173.893907][ T9446] Tainted: [L]=SOFTLOCKUP [ 173.893911][ T9446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 173.893916][ T9446] Call trace: [ 173.893918][ T9446] show_stack+0x2c/0x3c (C) [ 173.893936][ T9446] __dump_stack+0x30/0x40 [ 173.893945][ T9446] dump_stack_lvl+0xd8/0x12c [ 173.893954][ T9446] dump_stack+0x1c/0x28 [ 173.893962][ T9446] should_fail_ex+0x414/0x588 [ 173.893973][ T9446] should_fail+0x14/0x24 [ 173.893982][ T9446] should_fail_usercopy+0x20/0x30 [ 173.893994][ T9446] simple_read_from_buffer+0xc4/0x240 [ 173.894004][ T9446] proc_fail_nth_read+0x1a8/0x248 [ 173.894012][ T9446] vfs_read+0x230/0x8e4 [ 173.894021][ T9446] ksys_read+0x12c/0x224 [ 173.894030][ T9446] __arm64_sys_read+0x7c/0x90 [ 173.894038][ T9446] invoke_syscall+0x98/0x244 [ 173.894048][ T9446] el0_svc_common+0xe8/0x23c [ 173.894057][ T9446] do_el0_svc+0x48/0x58 [ 173.894066][ T9446] el0_svc+0x60/0x25c [ 173.894075][ T9446] el0t_64_sync_handler+0x48/0x148 [ 173.894084][ T9446] el0t_64_sync+0x198/0x19c [ 173.906217][ T39] bridge2 (unregistering): left promiscuous mode [ 173.969704][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.987462][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.027593][ T39] bond0 (unregistering): (slave team0): Releasing backup interface [ 174.057295][ T39] bond0 (unregistering): Released all slaves [ 174.060798][ T39] bond1 (unregistering): Released all slaves [ 174.065412][ T39] bond2 (unregistering): Released all slaves [ 174.091087][ T9374] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 174.093409][ T9374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.095036][ T9374] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 174.098109][ T9374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.098430][ T9374] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 174.101722][ T9374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.103377][ T9374] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 174.105331][ T9374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.171146][ T39] tipc: Left network mode [ 174.194128][ T9456] bond2: peer notification delay (6) is not a multiple of miimon (9), value rounded to 0 ms [ 174.220614][ T9469] loop5: detected capacity change from 0 to 128 [ 174.228480][ T9469] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.345440][ T9483] loop1: detected capacity change from 0 to 8 [ 174.350459][ T9483] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 174.350489][ T9483] unable to read xattr id index table [ 174.352260][ T9483] SQUASHFS error: zlib decompression failed, data probably corrupt [ 174.352311][ T9483] SQUASHFS error: Failed to read block 0x9b: -5 [ 174.352329][ T9483] SQUASHFS error: Unable to read metadata cache entry [99] [ 174.352346][ T9483] SQUASHFS error: Unable to read inode 0x127 [ 174.473846][ T4673] Bluetooth: hci4: command tx timeout [ 174.532426][ T8152] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.856914][ T9509] loop5: detected capacity change from 0 to 256 [ 174.873740][ T9509] FAT-fs (loop5): Directory bread(block 64) failed [ 174.873771][ T9509] FAT-fs (loop5): Directory bread(block 65) failed [ 174.873808][ T9509] FAT-fs (loop5): Directory bread(block 66) failed [ 174.873825][ T9509] FAT-fs (loop5): Directory bread(block 67) failed [ 174.873852][ T9509] FAT-fs (loop5): Directory bread(block 68) failed [ 174.873868][ T9509] FAT-fs (loop5): Directory bread(block 69) failed [ 174.873895][ T9509] FAT-fs (loop5): Directory bread(block 70) failed [ 174.873909][ T9509] FAT-fs (loop5): Directory bread(block 71) failed [ 174.873935][ T9509] FAT-fs (loop5): Directory bread(block 72) failed [ 174.873949][ T9509] FAT-fs (loop5): Directory bread(block 73) failed [ 174.919301][ T4359] 8021q: adding VLAN 0 to HW filter on device eth4 [ 175.034229][ T9515] xt_hashlimit: size too large, truncated to 1048576 [ 175.067250][ T39] hsr_slave_0: left promiscuous mode [ 175.069677][ T39] hsr_slave_1: left promiscuous mode [ 175.073967][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.073998][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.085500][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.085526][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.111825][ T39] veth1_macvtap: left promiscuous mode [ 175.113998][ T39] veth0_macvtap: left promiscuous mode [ 175.619758][ T9538] loop5: detected capacity change from 0 to 128 [ 175.629582][ T39] team0 (unregistering): Port device team_slave_1 removed [ 175.633819][ T39] team0 (unregistering): Port device team_slave_0 removed [ 175.682194][ T9538] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.722794][ T9547] loop4: detected capacity change from 0 to 256 [ 175.724527][ T9547] vfat: Unknown parameter 'hortname' [ 175.754810][ T9548] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1362'. [ 175.853142][ T9374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.872465][ T9374] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.882780][ T4359] 8021q: adding VLAN 0 to HW filter on device eth5 [ 175.913625][ T8647] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.913669][ T8647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.938786][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.938827][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.989978][ T9553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1364'. [ 176.160867][ T9569] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1365'. [ 176.191027][ T8152] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.306540][ T4359] 8021q: adding VLAN 0 to HW filter on device eth6 [ 176.704607][ T4673] Bluetooth: hci4: command tx timeout [ 177.079289][ T9374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.247063][ T9640] fuse: Unknown parameter 'rotmode' [ 177.258741][ T4359] 8021q: adding VLAN 0 to HW filter on device eth7 [ 177.262218][ T9636] netlink: 'syz.5.1375': attribute type 13 has an invalid length. [ 177.262817][ T9638] netlink: 'syz.5.1375': attribute type 13 has an invalid length. [ 177.262831][ T9638] netlink: 'syz.5.1375': attribute type 17 has an invalid length. [ 177.265110][ T9636] netlink: 'syz.5.1375': attribute type 17 has an invalid length. [ 177.272499][ T9638] gretap0: refused to change device tx_queue_len [ 177.272698][ T9638] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 177.281578][ T9636] gretap0: refused to change device tx_queue_len [ 177.281777][ T9636] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 177.367070][ T9374] veth0_vlan: entered promiscuous mode [ 177.374335][ T9374] veth1_vlan: entered promiscuous mode [ 177.414239][ T9374] veth0_macvtap: entered promiscuous mode [ 177.417746][ T9374] veth1_macvtap: entered promiscuous mode [ 177.423771][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.439118][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.443745][ T6565] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.443855][ T6565] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.443883][ T6565] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.443900][ T6565] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.482576][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.482609][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.499633][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.499668][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.714697][ T9694] loop4: detected capacity change from 0 to 32768 [ 177.738526][ T9694] loop4: [POWERTEC] p1 p2 p3 p4 [ 177.739823][ T9694] loop4: p1 size 536870912 extends beyond EOD, truncated [ 177.742556][ T9694] loop4: p2 size 4244635648 extends beyond EOD, truncated [ 177.744367][ T9694] loop4: p3 start 83886848 is beyond EOD, truncated [ 177.964059][ T9716] IPv6: addrconf: prefix option has invalid lifetime [ 177.964087][ T9716] IPv6: addrconf: prefix option has invalid lifetime [ 178.069987][ T5046] udevd[5046]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 178.216871][ T5916] udevd[5916]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 178.777088][ T4673] Bluetooth: hci4: command tx timeout [ 178.929898][ T5915] udevd[5915]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 179.132003][ T9737] loop4: detected capacity change from 0 to 512 [ 179.133856][ T9737] EXT4-fs: Mount option(s) incompatible with ext3 [ 179.574692][ T9771] syz_tun: entered allmulticast mode [ 179.685548][ T9778] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1410'. [ 179.781640][ T9810] netlink: 'syz.5.1415': attribute type 1 has an invalid length. [ 179.795728][ T9810] gretap1: entered allmulticast mode [ 179.802188][ T9810] bond2: (slave gretap1): making interface the new active one [ 179.804152][ T9810] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 180.188871][ T9833] 9p: Bad value for 'rfdno' [ 180.251602][ T9836] bridge_slave_0: left allmulticast mode [ 180.251652][ T9836] bridge_slave_0: left promiscuous mode [ 180.251760][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.369000][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 180.835315][ T9850] loop5: detected capacity change from 0 to 512 [ 181.140936][ T9850] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 181.140968][ T9850] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 18944 [ 181.142002][ T4673] Bluetooth: hci4: command tx timeout [ 181.201282][ T9857] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1429'. [ 181.209130][ T9857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.239805][ T9857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.249301][ T9857] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 181.284677][ T9857] bond0 (unregistering): Released all slaves [ 182.276522][ T9887] fuse: Bad value for 'user_id' [ 182.276555][ T9887] fuse: Bad value for 'user_id' [ 182.669482][ T9900] loop6: detected capacity change from 0 to 256 [ 182.817379][ T9904] loop6: detected capacity change from 0 to 256 [ 182.899750][ T9904] FAT-fs (loop6): Directory bread(block 64) failed [ 182.899785][ T9904] FAT-fs (loop6): Directory bread(block 65) failed [ 182.899823][ T9904] FAT-fs (loop6): Directory bread(block 66) failed [ 182.899839][ T9904] FAT-fs (loop6): Directory bread(block 67) failed [ 182.899866][ T9904] FAT-fs (loop6): Directory bread(block 68) failed [ 182.899881][ T9904] FAT-fs (loop6): Directory bread(block 69) failed [ 182.899907][ T9904] FAT-fs (loop6): Directory bread(block 70) failed [ 182.899921][ T9904] FAT-fs (loop6): Directory bread(block 71) failed [ 182.899959][ T9904] FAT-fs (loop6): Directory bread(block 72) failed [ 182.899973][ T9904] FAT-fs (loop6): Directory bread(block 73) failed [ 183.121075][ T9906] loop1: detected capacity change from 0 to 512 [ 183.155279][ T9906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 183.332297][ T4668] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 183.349997][ T9930] loop4: detected capacity change from 0 to 128 [ 183.359308][ T9930] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.473281][ T9939] loop5: detected capacity change from 0 to 512 [ 183.508278][ T9939] EXT4-fs (loop5): 1 truncate cleaned up [ 183.561540][ T9948] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1453'. [ 183.627016][ T9945] bond0: option ad_select: invalid value (34) [ 183.629156][ T9945] bond0 (unregistering): Released all slaves [ 183.642944][ T9949] netlink: 'syz.5.1456': attribute type 2 has an invalid length. [ 183.646023][ T9957] dvmrp8: left allmulticast mode [ 183.875025][ T9963] loop4: detected capacity change from 0 to 512 [ 183.884029][ T9963] EXT4-fs (loop4): 1 truncate cleaned up [ 184.015211][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1460'. [ 184.105514][ T9983] loop1: detected capacity change from 0 to 256 [ 184.209124][ T9987] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1465'. [ 184.264980][ T9989] veth0: entered promiscuous mode [ 184.353395][ T9996] loop1: detected capacity change from 0 to 256 [ 184.447495][ T9998] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20004 [ 184.471104][ T9992] veth0: left promiscuous mode [ 184.542300][T10005] loop6: detected capacity change from 0 to 128 [ 185.010272][ T9996] FAT-fs (loop1): Directory bread(block 64) failed [ 185.010313][ T9996] FAT-fs (loop1): Directory bread(block 65) failed [ 185.010341][ T9996] FAT-fs (loop1): Directory bread(block 66) failed [ 185.010356][ T9996] FAT-fs (loop1): Directory bread(block 67) failed [ 185.010382][ T9996] FAT-fs (loop1): Directory bread(block 68) failed [ 185.010395][ T9996] FAT-fs (loop1): Directory bread(block 69) failed [ 185.010419][ T9996] FAT-fs (loop1): Directory bread(block 70) failed [ 185.010433][ T9996] FAT-fs (loop1): Directory bread(block 71) failed [ 185.010456][ T9996] FAT-fs (loop1): Directory bread(block 72) failed [ 185.010469][ T9996] FAT-fs (loop1): Directory bread(block 73) failed [ 185.018573][T10005] EXT4-fs (loop6): Test dummy encryption mode enabled [ 185.023230][T10005] EXT4-fs error (device loop6): __ext4_fill_super:5596: inode #2: comm syz.6.1471: iget: checksum invalid [ 185.023252][T10005] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 185.036177][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 185.036196][ C1] EXT4-fs (loop6): initial error at time 441: __ext4_fill_super:5596: inode 2 [ 185.036213][ C1] EXT4-fs (loop6): last error at time 441: __ext4_fill_super:5596: inode 2 [ 185.042206][T10005] EXT4-fs (loop6): get root inode failed [ 185.042220][T10005] EXT4-fs (loop6): mount failed [ 185.161593][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1472'. [ 185.352796][T10018] loop4: detected capacity change from 0 to 256 [ 185.356538][T10018] vfat: Unknown parameter '0xffffffffffffffffy>d}pQA`EmOȰ`>5401777777777777777777777' [ 185.689078][T10024] loop6: detected capacity change from 0 to 1024 [ 185.691070][T10024] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 185.693124][T10024] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 185.696530][T10024] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 185.698149][T10024] System zones: 0-1, 4-36, 102-102 [ 186.795812][T10037] loop5: detected capacity change from 0 to 8192 [ 186.852887][T10050] netlink: 'syz.1.1480': attribute type 13 has an invalid length. [ 186.898239][ T9374] EXT4-fs unmount: 6 callbacks suppressed [ 186.902905][ T9374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.961909][T10037] loop5: p1 p2 p3 [ 187.122514][T10056] Injecting memory failure for pfn 0x11f37c at process virtual address 0x20000000 [ 187.143226][T10056] Memory failure: 0x11f37c: Sending SIGBUS to syz.4.1481:10056 due to hardware memory corruption [ 187.145747][T10056] Memory failure: 0x11f37c: recovery action for dirty LRU page: Recovered [ 187.147662][T10056] Injecting memory failure for pfn 0x139f05 at process virtual address 0x20001000 [ 187.165917][T10050] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.166273][T10050] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.188111][T10056] Memory failure: 0x139f05: Sending SIGBUS to syz.4.1481:10056 due to hardware memory corruption [ 187.188160][T10056] Memory failure: 0x139f05: recovery action for dirty LRU page: Recovered [ 187.188173][T10056] Injecting memory failure for pfn 0x139f04 at process virtual address 0x20002000 [ 187.200680][T10056] Memory failure: 0x139f04: Sending SIGBUS to syz.4.1481:10056 due to hardware memory corruption [ 187.200727][T10056] Memory failure: 0x139f04: recovery action for dirty LRU page: Recovered [ 187.200748][T10056] Injecting memory failure for pfn 0x21d09f at process virtual address 0x20003000 [ 187.231797][T10056] Memory failure: 0x21d09f: unhandlable page. [ 187.231836][T10056] Memory failure: 0x21d09f: recovery action for get hwpoison page: Ignored [ 187.240782][T10065] loop6: detected capacity change from 0 to 256 [ 187.290327][T10065] FAT-fs (loop6): Directory bread(block 64) failed [ 187.290365][T10065] FAT-fs (loop6): Directory bread(block 65) failed [ 187.290423][T10065] FAT-fs (loop6): Directory bread(block 66) failed [ 187.290436][T10065] FAT-fs (loop6): Directory bread(block 67) failed [ 187.290459][T10065] FAT-fs (loop6): Directory bread(block 68) failed [ 187.290470][T10065] FAT-fs (loop6): Directory bread(block 69) failed [ 187.290493][T10065] FAT-fs (loop6): Directory bread(block 70) failed [ 187.290504][T10065] FAT-fs (loop6): Directory bread(block 71) failed [ 187.290526][T10065] FAT-fs (loop6): Directory bread(block 72) failed [ 187.290536][T10065] FAT-fs (loop6): Directory bread(block 73) failed [ 187.436512][ T1575] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.437805][ T1575] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.710220][T10071] netlink: 'syz.4.1485': attribute type 15 has an invalid length. [ 187.811563][T10073] loop5: detected capacity change from 0 to 1024 [ 188.035223][T10050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.061016][T10050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.721860][ T805] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.721903][ T805] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.721950][ T805] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.721961][ T805] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.721979][ T805] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.721989][ T805] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.722006][ T805] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.722015][ T805] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.774811][T10092] loop4: detected capacity change from 0 to 512 [ 188.833331][T10092] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 188.833407][T10092] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 188.833803][T10092] EXT4-fs (loop4): mount failed [ 188.948135][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 189.402305][T10134] loop2: detected capacity change from 0 to 7 [ 189.422612][T10134] Dev loop2: unable to read RDB block 7 [ 189.422747][T10134] loop2: AHDI p1 p2 [ 189.422815][T10134] loop2: partition table partially beyond EOD, truncated [ 189.423488][T10134] loop2: p1 start 1835360114 is beyond EOD, truncated [ 189.425706][T10133] loop5: detected capacity change from 0 to 512 [ 189.440218][T10133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.457861][T10131] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1493: bg 0: block 320: padding at end of block bitmap is not set [ 189.461660][T10131] EXT4-fs (loop5): Remounting filesystem read-only [ 189.908184][ T8152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.946885][ T1227] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 189.946922][ T1227] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 190.337058][T10146] loop2: detected capacity change from 0 to 7 [ 190.337788][T10146] Dev loop2: unable to read RDB block 7 [ 190.337803][T10146] loop2: AHDI p1 p2 p3 [ 190.337811][T10146] loop2: partition table partially beyond EOD, truncated [ 190.338028][T10146] loop2: p1 start 1818582900 is beyond EOD, truncated [ 190.338040][T10146] loop2: p3 start 335544320 is beyond EOD, truncated [ 190.514467][T10163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.514502][T10163] IPv6: NLM_F_CREATE should be set when creating new route [ 191.469539][T10173] loop5: detected capacity change from 0 to 256 [ 191.546374][T10173] FAT-fs (loop5): Directory bread(block 64) failed [ 191.547667][T10173] FAT-fs (loop5): Directory bread(block 65) failed [ 191.549091][T10173] FAT-fs (loop5): Directory bread(block 66) failed [ 191.550570][T10173] FAT-fs (loop5): Directory bread(block 67) failed [ 191.551994][T10173] FAT-fs (loop5): Directory bread(block 68) failed [ 191.553421][T10173] FAT-fs (loop5): Directory bread(block 69) failed [ 191.554758][T10173] FAT-fs (loop5): Directory bread(block 70) failed [ 191.556032][T10173] FAT-fs (loop5): Directory bread(block 71) failed [ 191.557391][T10173] FAT-fs (loop5): Directory bread(block 72) failed [ 191.558668][T10173] FAT-fs (loop5): Directory bread(block 73) failed [ 191.564408][T10179] loop4: detected capacity change from 0 to 128 [ 191.567898][T10179] EXT4-fs: Ignoring removed nobh option [ 191.604046][T10179] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.711488][ T4669] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.742775][T10199] batman_adv: batadv0: Adding interface: dummy0 [ 191.742804][T10199] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.743100][T10199] batman_adv: batadv0: Interface activated: dummy0 [ 191.908222][T10216] tc_dump_action: action bad kind [ 192.032177][T10221] loop4: detected capacity change from 0 to 512 [ 192.200412][T10221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.220699][T10213] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1510: bg 0: block 320: padding at end of block bitmap is not set [ 192.220973][T10213] EXT4-fs (loop4): Remounting filesystem read-only [ 192.334073][T10238] FAULT_INJECTION: forcing a failure. [ 192.334073][T10238] name failslab, interval 1, probability 0, space 0, times 0 [ 192.334116][T10238] CPU: 1 UID: 0 PID: 10238 Comm: syz.6.1517 Tainted: G L syzkaller #0 PREEMPT [ 192.334132][T10238] Tainted: [L]=SOFTLOCKUP [ 192.334136][T10238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 192.334143][T10238] Call trace: [ 192.334146][T10238] show_stack+0x2c/0x3c (C) [ 192.334166][T10238] __dump_stack+0x30/0x40 [ 192.334179][T10238] dump_stack_lvl+0xd8/0x12c [ 192.334188][T10238] dump_stack+0x1c/0x28 [ 192.334196][T10238] should_fail_ex+0x414/0x588 [ 192.334206][T10238] should_failslab+0xc4/0x124 [ 192.334217][T10238] kmem_cache_alloc_node_noprof+0x94/0x5d0 [ 192.334227][T10238] __alloc_skb+0x1e0/0x5e8 [ 192.334236][T10238] netlink_alloc_large_skb+0xd4/0x114 [ 192.334247][T10238] netlink_sendmsg+0x4bc/0x920 [ 192.334254][T10238] __sock_sendmsg+0xc8/0x138 [ 192.334267][T10238] ____sys_sendmsg+0x418/0x70c [ 192.334275][T10238] ___sys_sendmsg+0x198/0x224 [ 192.334283][T10238] __sys_sendmsg+0x160/0x214 [ 192.334292][T10238] __arm64_sys_sendmsg+0x80/0x94 [ 192.334300][T10238] invoke_syscall+0x98/0x244 [ 192.334309][T10238] el0_svc_common+0xe8/0x23c [ 192.334318][T10238] do_el0_svc+0x48/0x58 [ 192.334327][T10238] el0_svc+0x60/0x25c [ 192.334336][T10238] el0t_64_sync_handler+0x48/0x148 [ 192.334345][T10238] el0t_64_sync+0x198/0x19c [ 193.497645][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.518428][ T12] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 193.518465][ T12] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 193.576101][T10252] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1521'. [ 193.816704][T10259] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1524'. [ 193.859030][T10265] netlink: 272 bytes leftover after parsing attributes in process `syz.6.1525'. [ 194.043017][T10288] loop4: detected capacity change from 0 to 512 [ 194.044431][T10288] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 194.044524][T10288] EXT4-fs (loop4): orphan cleanup on readonly fs [ 194.044780][T10288] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 194.044789][T10288] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 194.044802][T10288] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1533: Failed to acquire dquot type 1 [ 194.044813][T10288] loop4: lost filesystem error report for type 5 error -5 [ 194.046563][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 194.046576][ C1] EXT4-fs (loop4): initial error at time 450: ext4_acquire_dquot:7034 [ 194.046592][ C1] EXT4-fs (loop4): last error at time 450: ext4_acquire_dquot:7034 [ 194.049313][T10288] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1533: bg 0: block 40: padding at end of block bitmap is not set [ 194.049331][T10288] loop4: lost filesystem error report for type 5 error -117 [ 194.049538][T10288] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 194.049549][T10288] loop4: lost filesystem error report for type 5 error -117 [ 194.049724][T10288] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz.4.1533: data will be lost [ 194.049943][T10288] EXT4-fs (loop4): 1 truncate cleaned up [ 194.053216][T10288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.055635][T10288] netlink: 'syz.4.1533': attribute type 1 has an invalid length. [ 194.055647][T10288] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1533'. [ 194.056000][T10288] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 194.062370][T10288] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #16: comm syz.4.1533: corrupted xattr block 31: invalid header [ 194.063424][T10288] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #16: comm syz.4.1533: corrupted xattr block 31: invalid header [ 194.063587][T10288] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #16: comm syz.4.1533: corrupted xattr block 31: invalid header [ 194.063942][T10288] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.1533: bad symlink. [ 194.114456][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.200246][T10294] dvmrp1: left allmulticast mode [ 194.250706][T10302] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.250909][T10302] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.252623][T10302] bridge0: entered allmulticast mode [ 194.264877][T10302] bridge_slave_1: left promiscuous mode [ 194.265963][T10302] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.298186][T10302] bridge_slave_0: left allmulticast mode [ 194.298222][T10302] bridge_slave_0: left promiscuous mode [ 194.298337][T10302] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.383348][T10304] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1538'. [ 194.481230][T10319] overlayfs: failed to clone upperpath [ 194.488948][T10314] tmpfs: Bad value for 'huge' [ 194.496546][T10319] overlayfs: failed to clone upperpath [ 194.599376][T10331] loop6: detected capacity change from 0 to 512 [ 194.661893][T10331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.781785][T10345] loop4: detected capacity change from 0 to 512 [ 195.036234][T10349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1547'. [ 195.076378][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1546'. [ 195.083462][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1546'. [ 195.083760][T10345] EXT4-fs (loop4): orphan cleanup on readonly fs [ 195.084494][T10345] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 195.085541][T10345] EXT4-fs (loop4): Remounting filesystem read-only [ 195.085624][T10345] EXT4-fs (loop4): 1 truncate cleaned up [ 195.086094][T10345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 195.099990][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.135638][ T9374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.159592][T10356] loop6: detected capacity change from 0 to 512 [ 195.162354][T10356] EXT4-fs (loop6): orphan cleanup on readonly fs [ 195.163129][T10356] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 195.164158][T10356] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 195.166193][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 195.166220][ C0] EXT4-fs (loop6): initial error at time 451: ext4_mb_generate_buddy:1317 [ 195.166232][ C0] EXT4-fs (loop6): last error at time 451: ext4_mb_generate_buddy:1317 [ 195.166850][T10356] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1551: attempt to clear invalid blocks 2 len 1 [ 195.166866][T10356] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 195.175187][T10356] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1551: invalid indirect mapped block 1819239214 (level 0) [ 195.175220][T10356] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 195.175376][T10356] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1551: invalid indirect mapped block 1819239214 (level 1) [ 195.175392][T10356] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 195.175670][T10356] EXT4-fs (loop6): 1 truncate cleaned up [ 195.176085][T10356] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.198569][ T9374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.250614][T10363] loop6: detected capacity change from 0 to 256 [ 195.263716][T10363] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 195.278389][T10361] loop4: detected capacity change from 0 to 8 [ 195.283362][T10361] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 195.283399][T10361] unable to read xattr id index table [ 195.289233][T10361] SQUASHFS error: zlib decompression failed, data probably corrupt [ 195.290672][T10361] SQUASHFS error: Failed to read block 0x9b: -5 [ 195.291827][T10361] SQUASHFS error: Unable to read metadata cache entry [99] [ 195.293205][T10361] SQUASHFS error: Unable to read inode 0x127 [ 195.341887][T10367] loop6: detected capacity change from 0 to 512 [ 195.348045][T10367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.361003][T10367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.297369][T10378] tipc: Enabling of bearer rejected, already enabled [ 196.331479][T10383] loop4: detected capacity change from 0 to 256 [ 196.351576][T10383] FAT-fs (loop4): Directory bread(block 64) failed [ 196.352818][T10383] FAT-fs (loop4): Directory bread(block 65) failed [ 196.354279][T10383] FAT-fs (loop4): Directory bread(block 66) failed [ 196.355681][T10383] FAT-fs (loop4): Directory bread(block 67) failed [ 196.357191][T10383] FAT-fs (loop4): Directory bread(block 68) failed [ 196.358655][T10383] FAT-fs (loop4): Directory bread(block 69) failed [ 196.359997][T10383] FAT-fs (loop4): Directory bread(block 70) failed [ 196.360026][T10383] FAT-fs (loop4): Directory bread(block 71) failed [ 196.360062][T10383] FAT-fs (loop4): Directory bread(block 72) failed [ 196.360079][T10383] FAT-fs (loop4): Directory bread(block 73) failed [ 196.501028][ T9374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.541046][T10387] loop1: detected capacity change from 0 to 1024 [ 196.571415][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 196.571446][T10398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1563'. [ 196.596126][T10387] EXT4-fs: inline encryption not supported [ 196.611356][T10387] EXT4-fs (loop1): Test dummy encryption mode enabled [ 196.615521][T10396] vhci_hcd vhci_hcd.2: default hub control req: 010b v0000 i0000 l0 [ 196.625711][T10387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.761500][T10387] EXT4-fs error (device loop1): __ext4_remount:6837: comm syz.1.1558: Abort forced by user [ 196.764535][T10387] EXT4-fs (loop1): Remounting filesystem read-only [ 196.765808][T10387] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 196.792492][T10387] tracefs: Unknown parameter 'default_permissions:/' [ 196.834952][ T5375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.040314][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.043503][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.045109][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.048423][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.050039][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.097444][T10444] syzkaller0: entered promiscuous mode [ 197.097471][T10444] syzkaller0: entered allmulticast mode [ 197.199510][T10442] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.199550][T10442] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.199615][T10442] bridge_slave_0: entered allmulticast mode [ 197.200151][T10442] bridge_slave_0: entered promiscuous mode [ 197.201007][T10442] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.201117][T10442] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.201176][T10442] bridge_slave_1: entered allmulticast mode [ 197.201610][T10442] bridge_slave_1: entered promiscuous mode [ 197.214479][T10442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.215596][T10442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.222677][T10442] team0: Port device team_slave_0 added [ 197.223502][T10442] team0: Port device team_slave_1 added [ 197.231861][T10442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.231940][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.231953][T10442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.232527][T10442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.232534][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.232547][T10442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.248860][T10442] hsr_slave_0: entered promiscuous mode [ 197.249188][T10442] hsr_slave_1: entered promiscuous mode [ 197.249604][T10442] debugfs: 'hsr0' already exists in 'hsr' [ 197.249623][T10442] Cannot create hsr debugfs directory [ 197.304056][T10442] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 197.307487][T10442] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 197.307823][T10442] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 197.311379][T10442] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 197.312114][T10442] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 197.313592][T10442] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 197.313962][T10442] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 197.316062][T10442] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 197.324708][T10442] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.324745][T10442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.324815][T10442] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.324843][T10442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.342119][T10442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.345543][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.347566][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.351528][T10442] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.353935][ T805] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.353980][ T805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.359697][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.359746][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.490904][T10442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.687576][T10442] veth0_vlan: entered promiscuous mode [ 197.691333][T10442] veth1_vlan: entered promiscuous mode [ 197.701488][T10442] veth0_macvtap: entered promiscuous mode [ 197.702633][T10442] veth1_macvtap: entered promiscuous mode [ 197.712433][T10442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.718780][T10442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.722768][ T40] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.722812][ T40] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.722833][ T40] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.722849][ T40] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.741613][T10498] No buffer was provided with the request [ 197.763940][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.763970][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.787358][ T805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.787381][ T805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.828090][T10537] Bluetooth: MGMT ver 1.23 [ 198.864970][T10530] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.870026][T10530] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 198.891301][T10539] loop6: detected capacity change from 0 to 256 [ 198.920841][T10530] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 198.937750][T10539] FAT-fs (loop6): Directory bread(block 64) failed [ 198.938942][T10539] FAT-fs (loop6): Directory bread(block 65) failed [ 198.940366][T10539] FAT-fs (loop6): Directory bread(block 66) failed [ 198.941664][T10539] FAT-fs (loop6): Directory bread(block 67) failed [ 198.942932][T10539] FAT-fs (loop6): Directory bread(block 68) failed [ 198.944319][T10539] FAT-fs (loop6): Directory bread(block 69) failed [ 198.945765][T10539] FAT-fs (loop6): Directory bread(block 70) failed [ 198.949942][T10539] FAT-fs (loop6): Directory bread(block 71) failed [ 198.951312][T10539] FAT-fs (loop6): Directory bread(block 72) failed [ 198.956203][T10539] FAT-fs (loop6): Directory bread(block 73) failed [ 198.962846][T10530] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 198.963950][T10530] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 198.977584][T10530] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 198.980162][T10530] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.981557][T10530] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 198.990832][T10530] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 199.080847][T10544] loop5: detected capacity change from 0 to 128 [ 199.083247][T10544] vfat: Unknown parameter 'shortc0t.name' [ 199.142579][T10537] loop2: [ 199.142619][T10537] loop2: partition table partially beyond EOD, truncated [ 199.226138][T10549] EXT4-fs (loop7): Test dummy encryption mode enabled [ 199.254958][T10549] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.403403][T10563] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 199.403432][T10563] unable to read xattr id index table [ 199.404605][T10563] SQUASHFS error: zlib decompression failed, data probably corrupt [ 199.404620][T10563] SQUASHFS error: Failed to read block 0x9b: -5 [ 199.404628][T10563] SQUASHFS error: Unable to read metadata cache entry [99] [ 199.404634][T10563] SQUASHFS error: Unable to read inode 0x127 [ 199.427026][T10442] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.591263][T10582] EXT4-fs (loop4): Encoding requested by superblock is unknown [ 199.654964][T10591] tmpfs: Unknown parameter 'nr_ino' [ 199.846918][T10614] set_capacity_and_notify: 4 callbacks suppressed [ 199.848203][T10614] loop7: detected capacity change from 0 to 128 [ 199.860009][T10616] loop4: detected capacity change from 0 to 1024 [ 199.883765][T10618] netlink: 'syz.5.1617': attribute type 1 has an invalid length. [ 199.889880][T10616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 199.966312][T10618] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.976266][T10602] bridge0: port 3(dummy0) entered disabled state [ 199.979090][T10602] dummy0: left allmulticast mode [ 199.980225][T10602] dummy0: left promiscuous mode [ 199.981454][T10602] bridge0: port 3(dummy0) entered disabled state [ 199.987587][T10602] bond3: (slave dummy0): making interface the new active one [ 199.989803][T10602] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 199.995489][T10602] __nla_validate_parse: 1 callbacks suppressed [ 199.998771][T10602] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1617'. [ 200.002383][T10602] bond3: (slave dummy0): Releasing active interface [ 200.104650][T10623] syz.7.1621: attempt to access beyond end of device [ 200.104650][T10623] loop7: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 200.104730][T10623] Buffer I/O error on dev loop7, logical block 157, lost async page write [ 200.104893][T10623] syz.7.1621: attempt to access beyond end of device [ 200.104893][T10623] loop7: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 200.104940][T10623] Buffer I/O error on dev loop7, logical block 158, lost async page write [ 200.105085][T10623] syz.7.1621: attempt to access beyond end of device [ 200.105085][T10623] loop7: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 200.105120][T10623] Buffer I/O error on dev loop7, logical block 159, lost async page write [ 200.105255][T10623] syz.7.1621: attempt to access beyond end of device [ 200.105255][T10623] loop7: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 200.105291][T10623] Buffer I/O error on dev loop7, logical block 160, lost async page write [ 200.105422][T10623] syz.7.1621: attempt to access beyond end of device [ 200.105422][T10623] loop7: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 200.105457][T10623] Buffer I/O error on dev loop7, logical block 161, lost async page write [ 200.328633][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 200.424990][T10637] syzkaller0: entered promiscuous mode [ 200.426764][T10637] syzkaller0: entered allmulticast mode [ 200.861758][T10653] fuse: Unknown parameter ' d' [ 200.896317][ T4673] Bluetooth: hci3: command 0x0419 tx timeout [ 200.977717][ T4673] Bluetooth: hci4: command 0x0c1a tx timeout [ 201.047315][ T4673] Bluetooth: hci0: command 0x041b tx timeout [ 201.133052][T10681] loop5: detected capacity change from 0 to 128 [ 201.333122][T10683] syz.5.1641: attempt to access beyond end of device [ 201.333122][T10683] loop5: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 201.333207][T10683] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 201.333402][T10683] syz.5.1641: attempt to access beyond end of device [ 201.333402][T10683] loop5: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 201.333440][T10683] Buffer I/O error on dev loop5, logical block 158, lost async page write [ 201.333479][T10683] syz.5.1641: attempt to access beyond end of device [ 201.333479][T10683] loop5: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 201.333494][T10683] Buffer I/O error on dev loop5, logical block 159, lost async page write [ 201.333593][T10683] syz.5.1641: attempt to access beyond end of device [ 201.333593][T10683] loop5: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 201.333639][T10683] Buffer I/O error on dev loop5, logical block 160, lost async page write [ 201.333794][T10683] syz.5.1641: attempt to access beyond end of device [ 201.333794][T10683] loop5: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 201.333840][T10683] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 201.691125][T10694] loop6: detected capacity change from 0 to 512 [ 201.699059][T10694] vfat: Unknown parameter 'C-m?kAX͎c9ߐ' [ 201.813421][T10704] tmpfs: Bad value for 'nr_inodes' [ 202.024432][T10716] fuse: Unknown parameter '0x000000000000000300000000000000000003' [ 202.627709][T10735] dvmrp1: entered allmulticast mode [ 202.628776][T10738] tmpfs: Bad value for 'nr_inodes' [ 202.747337][T10745] netlink: 'syz.6.1661': attribute type 64 has an invalid length. [ 202.749870][T10747] sch_tbf: burst 9 is lower than device lo mtu (65550) ! [ 202.786640][T10751] netlink: 232 bytes leftover after parsing attributes in process `syz.7.1662'. [ 202.972978][T10761] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1663'. [ 202.973493][ T4673] Bluetooth: hci3: command 0x0419 tx timeout [ 203.046872][ T4673] Bluetooth: hci4: command 0x0c1a tx timeout [ 203.128003][ T4673] Bluetooth: hci0: command 0x041b tx timeout [ 203.178548][T10765] loop5: detected capacity change from 0 to 256 [ 203.198295][T10765] FAT-fs (loop5): Directory bread(block 64) failed [ 203.198333][T10765] FAT-fs (loop5): Directory bread(block 65) failed [ 203.198363][T10765] FAT-fs (loop5): Directory bread(block 66) failed [ 203.198376][T10765] FAT-fs (loop5): Directory bread(block 67) failed [ 203.198400][T10765] FAT-fs (loop5): Directory bread(block 68) failed [ 203.198412][T10765] FAT-fs (loop5): Directory bread(block 69) failed [ 203.198435][T10765] FAT-fs (loop5): Directory bread(block 70) failed [ 203.198446][T10765] FAT-fs (loop5): Directory bread(block 71) failed [ 203.198468][T10765] FAT-fs (loop5): Directory bread(block 72) failed [ 203.198479][T10765] FAT-fs (loop5): Directory bread(block 73) failed [ 203.323754][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1666'. [ 203.535215][T10776] loop4: detected capacity change from 0 to 512 [ 203.535572][T10776] EXT4-fs: Ignoring removed orlov option [ 203.583985][T10776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.628873][ T4669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.635270][T10786] tmpfs: Bad value for 'nr_inodes' [ 204.198920][T10800] loop7: detected capacity change from 0 to 128 [ 204.393525][T10800] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.462712][T10806] loop5: detected capacity change from 0 to 1024 [ 204.464618][T10808] loop6: detected capacity change from 0 to 128 [ 204.931649][T10814] loop4: detected capacity change from 0 to 128 [ 204.933743][T10442] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.046394][ T4673] Bluetooth: hci3: command 0x0419 tx timeout [ 205.166396][T10828] bio_check_eod: 5 callbacks suppressed [ 205.166457][T10828] syz.4.1679: attempt to access beyond end of device [ 205.166457][T10828] loop4: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 205.166499][T10828] buffer_io_error: 5 callbacks suppressed [ 205.166519][T10828] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 205.166696][T10828] syz.4.1679: attempt to access beyond end of device [ 205.166696][T10828] loop4: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 205.166733][T10828] Buffer I/O error on dev loop4, logical block 158, lost async page write [ 205.166859][T10828] syz.4.1679: attempt to access beyond end of device [ 205.166859][T10828] loop4: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 205.166906][T10828] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 205.167031][T10828] syz.4.1679: attempt to access beyond end of device [ 205.167031][T10828] loop4: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 205.167067][T10828] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 205.167180][T10828] syz.4.1679: attempt to access beyond end of device [ 205.167180][T10828] loop4: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 205.167215][T10828] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 205.171820][ T4673] Bluetooth: hci4: command 0x0c1a tx timeout [ 205.206213][ T4673] Bluetooth: hci0: command 0x041b tx timeout [ 205.329150][T10827] loop7: detected capacity change from 0 to 1024 [ 205.460161][T10827] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 205.474020][T10827] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm syz.7.1680: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.477914][T10827] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 205.480384][T10827] EXT4-fs (loop7): This should not happen!! Data will be lost [ 205.480384][T10827] [ 205.497373][T10827] Injecting memory failure for pfn 0x138f4b at process virtual address 0x20ff7000 [ 205.502810][T10827] Memory failure: 0x138f4b: Sending SIGBUS to syz.7.1680:10827 due to hardware memory corruption [ 205.504725][T10827] Memory failure: 0x138f4b: recovery action for dirty LRU page: Recovered [ 205.506917][T10827] Injecting memory failure for pfn 0x138f4c at process virtual address 0x20ff8000 [ 205.568325][T10840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1685'. [ 205.684889][T10827] Memory failure: 0x138f4c: Sending SIGBUS to syz.7.1680:10827 due to hardware memory corruption [ 205.692981][T10827] Memory failure: 0x138f4c: recovery action for dirty LRU page: Recovered [ 205.694314][T10827] Injecting memory failure for pfn 0x138f4d at process virtual address 0x20ff9000 [ 205.738395][T10827] Memory failure: 0x138f4d: Sending SIGBUS to syz.7.1680:10827 due to hardware memory corruption [ 205.750350][T10827] Memory failure: 0x138f4d: recovery action for dirty LRU page: Recovered [ 205.750368][T10827] Injecting memory failure for pfn 0x138f4e at process virtual address 0x20ffa000 [ 205.750851][T10827] Memory failure: 0x138f4e: Sending SIGBUS to syz.7.1680:10827 due to hardware memory corruption [ 205.750879][T10827] Memory failure: 0x138f4e: recovery action for dirty LRU page: Recovered [ 205.793979][T10442] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 205.943633][T10849] loop2: detected capacity change from 0 to 7 [ 205.945827][T10849] Dev loop2: unable to read RDB block 7 [ 205.947976][T10849] loop2: AHDI p1 p2 [ 205.948024][T10849] loop2: partition table partially beyond EOD, truncated [ 205.948132][T10849] loop2: p1 start 1835360114 is beyond EOD, truncated [ 205.953880][T10848] tipc: Enabled bearer , priority 10 [ 206.266754][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1690'. [ 206.327218][T10865] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1692'. [ 206.327257][T10865] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1692'. [ 206.411094][T10878] fuse: fd is not a fuse device [ 206.902508][T10892] netlink: 332 bytes leftover after parsing attributes in process `syz.7.1699'. [ 206.904369][T10892] netlink: 'syz.7.1699': attribute type 9 has an invalid length. [ 206.905811][T10892] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1699'. [ 206.907899][T10892] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1699'. [ 206.930079][T10897] ================================================================== [ 206.930091][T10897] BUG: KASAN: slab-out-of-bounds in try_module_get+0x50/0x114 [ 206.930117][T10897] Write of size 4 at addr ffff0000cc393ef0 by task syz.5.1701/10897 [ 206.930127][T10897] [ 206.930135][T10897] CPU: 1 UID: 0 PID: 10897 Comm: syz.5.1701 Tainted: G L syzkaller #0 PREEMPT [ 206.930147][T10897] Tainted: [L]=SOFTLOCKUP [ 206.930150][T10897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 206.930155][T10897] Call trace: [ 206.930158][T10897] show_stack+0x2c/0x3c (C) [ 206.930171][T10897] __dump_stack+0x30/0x40 [ 206.930180][T10897] dump_stack_lvl+0xd8/0x12c [ 206.930189][T10897] print_address_description+0xb0/0x238 [ 206.930199][T10897] print_report+0x68/0x84 [ 206.930208][T10897] kasan_report+0x8c/0xc4 [ 206.930216][T10897] kasan_check_range+0x17c/0x1ac [ 206.930224][T10897] __kasan_check_write+0x20/0x30 [ 206.930232][T10897] try_module_get+0x50/0x114 [ 206.930241][T10897] dvb_device_open+0xf4/0x250 [ 206.930252][T10897] chrdev_open+0x398/0x3e8 [ 206.930264][T10897] do_dentry_open+0x5c8/0x10dc [ 206.930273][T10897] vfs_open+0x44/0x2d4 [ 206.930280][T10897] path_openat+0x2234/0x2a6c [ 206.930288][T10897] do_file_open+0x1c4/0x2e4 [ 206.930294][T10897] do_sys_openat2+0x114/0x1e8 [ 206.930303][T10897] do_sys_open+0xac/0xdc [ 206.930310][T10897] __arm64_sys_openat+0x9c/0xb8 [ 206.930319][T10897] invoke_syscall+0x98/0x244 [ 206.930328][T10897] el0_svc_common+0xe8/0x23c [ 206.930337][T10897] do_el0_svc+0x48/0x58 [ 206.930346][T10897] el0_svc+0x60/0x25c [ 206.930355][T10897] el0t_64_sync_handler+0x48/0x148 [ 206.930363][T10897] el0t_64_sync+0x198/0x19c [ 206.930371][T10897] [ 206.930373][T10897] Allocated by task 1: [ 206.930377][T10897] kasan_save_track+0x40/0x78 [ 206.930387][T10897] kasan_save_alloc_info+0x44/0x54 [ 206.930393][T10897] __kasan_kmalloc+0x9c/0xb4 [ 206.930399][T10897] __kmalloc_cache_noprof+0x284/0x56c [ 206.930408][T10897] bus_add_driver+0x94/0x4fc [ 206.930418][T10897] driver_register+0x220/0x30c [ 206.930423][T10897] __platform_driver_register+0x6c/0x80 [ 206.930430][T10897] vidtv_bridge_init+0x34/0x5c [ 206.930439][T10897] do_one_initcall+0x274/0xc20 [ 206.930447][T10897] do_initcall_level+0x128/0x1c4 [ 206.930454][T10897] do_initcalls+0x70/0xd0 [ 206.930461][T10897] do_basic_setup+0x7c/0x90 [ 206.930467][T10897] kernel_init_freeable+0x268/0x3a8 [ 206.930474][T10897] kernel_init+0x24/0x1dc [ 206.930482][T10897] ret_from_fork+0x10/0x20 [ 206.930490][T10897] [ 206.930491][T10897] The buggy address belongs to the object at ffff0000cc393e00 [ 206.930491][T10897] which belongs to the cache kmalloc-256 of size 256 [ 206.930498][T10897] The buggy address is located 32 bytes to the right of [ 206.930498][T10897] allocated 208-byte region [ffff0000cc393e00, ffff0000cc393ed0) [ 206.930505][T10897] [ 206.930507][T10897] The buggy address belongs to the physical page: [ 206.930511][T10897] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10c392 [ 206.930518][T10897] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 206.930524][T10897] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 206.930532][T10897] page_type: f5(slab) [ 206.930539][T10897] raw: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122 [ 206.930544][T10897] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 206.930550][T10897] head: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122 [ 206.930555][T10897] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 206.930561][T10897] head: 05ffc00000000001 fffffdffc330e481 00000000ffffffff 00000000ffffffff [ 206.930566][T10897] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 206.930570][T10897] page dumped because: kasan: bad access detected [ 206.930573][T10897] [ 206.930574][T10897] Memory state around the buggy address: [ 206.930578][T10897] ffff0000cc393d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 206.930583][T10897] ffff0000cc393e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 206.930587][T10897] >ffff0000cc393e80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 206.930590][T10897] ^ [ 206.930594][T10897] ffff0000cc393f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 206.930598][T10897] ffff0000cc393f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 206.930601][T10897] ================================================================== [ 206.957113][ T9] tipc: Node number set to 4294246401 [ 207.009501][T10897] Disabling lock debugging due to kernel taint [ 207.286216][ T4673] Bluetooth: hci0: command 0x041b tx timeout [ 209.366234][ T4673] Bluetooth: hci0: command 0x041b tx timeout [ 211.446219][ T4673] Bluetooth: hci0: command 0x041b tx timeout